./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product55.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product55.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 685bdac90b32b89d64927338575dc6f79737e9f84bb9272d4bfb0c942aa4ae35 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 22:58:11,202 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 22:58:11,336 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 22:58:11,346 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 22:58:11,349 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 22:58:11,393 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 22:58:11,395 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 22:58:11,397 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 22:58:11,398 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 22:58:11,404 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 22:58:11,405 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 22:58:11,406 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 22:58:11,407 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 22:58:11,409 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 22:58:11,409 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 22:58:11,410 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 22:58:11,410 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 22:58:11,411 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 22:58:11,411 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 22:58:11,412 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 22:58:11,412 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 22:58:11,413 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 22:58:11,414 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 22:58:11,414 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 22:58:11,415 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 22:58:11,416 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 22:58:11,416 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 22:58:11,417 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 22:58:11,417 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:58:11,418 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 22:58:11,420 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 22:58:11,420 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 22:58:11,420 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 22:58:11,421 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 22:58:11,421 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 22:58:11,421 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 22:58:11,421 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 22:58:11,422 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 22:58:11,422 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 22:58:11,422 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 685bdac90b32b89d64927338575dc6f79737e9f84bb9272d4bfb0c942aa4ae35 [2023-11-06 22:58:11,798 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 22:58:11,834 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 22:58:11,837 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 22:58:11,839 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 22:58:11,840 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 22:58:11,841 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec2_product55.cil.c [2023-11-06 22:58:15,572 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 22:58:16,048 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 22:58:16,054 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/sv-benchmarks/c/product-lines/minepump_spec2_product55.cil.c [2023-11-06 22:58:16,081 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/data/d4fae5ed2/3e120da9bf7f41ccb180211169116144/FLAGa4cf1f36a [2023-11-06 22:58:16,103 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/data/d4fae5ed2/3e120da9bf7f41ccb180211169116144 [2023-11-06 22:58:16,112 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 22:58:16,114 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 22:58:16,119 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 22:58:16,119 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 22:58:16,126 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 22:58:16,127 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:58:16" (1/1) ... [2023-11-06 22:58:16,129 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@55f1c32c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:58:16, skipping insertion in model container [2023-11-06 22:58:16,129 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:58:16" (1/1) ... [2023-11-06 22:58:16,221 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 22:58:16,569 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/sv-benchmarks/c/product-lines/minepump_spec2_product55.cil.c[19412,19425] [2023-11-06 22:58:16,574 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:58:16,586 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 22:58:16,597 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] [2023-11-06 22:58:16,601 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [87] [2023-11-06 22:58:16,601 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [198] [2023-11-06 22:58:16,602 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [268] [2023-11-06 22:58:16,603 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [511] [2023-11-06 22:58:16,603 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [877] [2023-11-06 22:58:16,603 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [917] [2023-11-06 22:58:16,604 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [1014] [2023-11-06 22:58:16,695 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/sv-benchmarks/c/product-lines/minepump_spec2_product55.cil.c[19412,19425] [2023-11-06 22:58:16,701 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:58:16,722 INFO L206 MainTranslator]: Completed translation [2023-11-06 22:58:16,723 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:58:16 WrapperNode [2023-11-06 22:58:16,723 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 22:58:16,724 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 22:58:16,724 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 22:58:16,725 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 22:58:16,731 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:58:16" (1/1) ... [2023-11-06 22:58:16,747 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:58:16" (1/1) ... [2023-11-06 22:58:16,786 INFO L138 Inliner]: procedures = 58, calls = 105, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 229 [2023-11-06 22:58:16,786 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 22:58:16,787 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 22:58:16,788 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 22:58:16,788 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 22:58:16,800 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:58:16" (1/1) ... [2023-11-06 22:58:16,801 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:58:16" (1/1) ... [2023-11-06 22:58:16,804 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:58:16" (1/1) ... [2023-11-06 22:58:16,805 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:58:16" (1/1) ... [2023-11-06 22:58:16,813 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:58:16" (1/1) ... [2023-11-06 22:58:16,819 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:58:16" (1/1) ... [2023-11-06 22:58:16,821 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:58:16" (1/1) ... [2023-11-06 22:58:16,828 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:58:16" (1/1) ... [2023-11-06 22:58:16,832 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 22:58:16,835 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 22:58:16,836 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 22:58:16,836 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 22:58:16,852 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:58:16" (1/1) ... [2023-11-06 22:58:16,861 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:58:16,880 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:58:16,899 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 22:58:16,944 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 22:58:16,966 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 22:58:16,966 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 22:58:16,966 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 22:58:16,967 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 22:58:16,969 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 22:58:16,970 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 22:58:16,971 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 22:58:16,971 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-06 22:58:16,971 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-06 22:58:16,972 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:58:16,972 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:58:16,972 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 22:58:16,972 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 22:58:16,973 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-06 22:58:16,973 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-06 22:58:16,973 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-06 22:58:16,974 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-06 22:58:16,974 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 22:58:16,974 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 22:58:16,975 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 22:58:16,976 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 22:58:16,976 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 22:58:17,125 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 22:58:17,130 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 22:58:17,455 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 22:58:17,463 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 22:58:17,464 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 22:58:17,466 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:58:17 BoogieIcfgContainer [2023-11-06 22:58:17,466 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 22:58:17,493 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 22:58:17,494 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 22:58:17,498 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 22:58:17,498 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 10:58:16" (1/3) ... [2023-11-06 22:58:17,499 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@18ab130e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:58:17, skipping insertion in model container [2023-11-06 22:58:17,500 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:58:16" (2/3) ... [2023-11-06 22:58:17,502 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@18ab130e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:58:17, skipping insertion in model container [2023-11-06 22:58:17,503 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:58:17" (3/3) ... [2023-11-06 22:58:17,505 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product55.cil.c [2023-11-06 22:58:17,521 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 22:58:17,521 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 22:58:17,575 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 22:58:17,582 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@41a92b47, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 22:58:17,582 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 22:58:17,587 INFO L276 IsEmpty]: Start isEmpty. Operand has 106 states, 78 states have (on average 1.3846153846153846) internal successors, (108), 89 states have internal predecessors, (108), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2023-11-06 22:58:17,599 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-11-06 22:58:17,599 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:58:17,600 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:58:17,600 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:58:17,606 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:58:17,606 INFO L85 PathProgramCache]: Analyzing trace with hash -898586634, now seen corresponding path program 1 times [2023-11-06 22:58:17,616 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:58:17,617 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2092791423] [2023-11-06 22:58:17,617 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:58:17,617 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:58:17,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:17,791 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-06 22:58:17,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:17,799 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:58:17,800 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:58:17,800 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2092791423] [2023-11-06 22:58:17,801 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2092791423] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:58:17,801 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:58:17,802 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:58:17,803 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1262646199] [2023-11-06 22:58:17,804 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:58:17,809 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 22:58:17,809 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:58:17,851 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 22:58:17,852 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:58:17,857 INFO L87 Difference]: Start difference. First operand has 106 states, 78 states have (on average 1.3846153846153846) internal successors, (108), 89 states have internal predecessors, (108), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:58:17,950 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:58:17,952 INFO L93 Difference]: Finished difference Result 203 states and 278 transitions. [2023-11-06 22:58:17,953 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 22:58:17,954 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2023-11-06 22:58:17,955 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:58:17,971 INFO L225 Difference]: With dead ends: 203 [2023-11-06 22:58:17,972 INFO L226 Difference]: Without dead ends: 97 [2023-11-06 22:58:17,979 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:58:17,987 INFO L413 NwaCegarLoop]: 136 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 136 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:58:17,989 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 136 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:58:18,014 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2023-11-06 22:58:18,060 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 97. [2023-11-06 22:58:18,063 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 97 states, 71 states have (on average 1.323943661971831) internal successors, (94), 81 states have internal predecessors, (94), 17 states have call successors, (17), 9 states have call predecessors, (17), 8 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-06 22:58:18,065 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97 states to 97 states and 127 transitions. [2023-11-06 22:58:18,067 INFO L78 Accepts]: Start accepts. Automaton has 97 states and 127 transitions. Word has length 25 [2023-11-06 22:58:18,068 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:58:18,068 INFO L495 AbstractCegarLoop]: Abstraction has 97 states and 127 transitions. [2023-11-06 22:58:18,069 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:58:18,069 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 127 transitions. [2023-11-06 22:58:18,073 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-11-06 22:58:18,073 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:58:18,073 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:58:18,074 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 22:58:18,074 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:58:18,075 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:58:18,076 INFO L85 PathProgramCache]: Analyzing trace with hash 1844424780, now seen corresponding path program 1 times [2023-11-06 22:58:18,076 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:58:18,076 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1645976583] [2023-11-06 22:58:18,076 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:58:18,077 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:58:18,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:18,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-06 22:58:18,250 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:18,254 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:58:18,255 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:58:18,255 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1645976583] [2023-11-06 22:58:18,255 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1645976583] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:58:18,256 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:58:18,256 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:58:18,256 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [728810559] [2023-11-06 22:58:18,256 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:58:18,258 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:58:18,258 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:58:18,259 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:58:18,259 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:58:18,260 INFO L87 Difference]: Start difference. First operand 97 states and 127 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:58:18,290 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:58:18,291 INFO L93 Difference]: Finished difference Result 155 states and 203 transitions. [2023-11-06 22:58:18,291 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:58:18,292 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2023-11-06 22:58:18,292 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:58:18,294 INFO L225 Difference]: With dead ends: 155 [2023-11-06 22:58:18,294 INFO L226 Difference]: Without dead ends: 88 [2023-11-06 22:58:18,296 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:58:18,298 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 16 mSDsluCounter, 93 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 207 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:58:18,299 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 207 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:58:18,300 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88 states. [2023-11-06 22:58:18,313 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88 to 88. [2023-11-06 22:58:18,317 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 88 states, 65 states have (on average 1.3384615384615384) internal successors, (87), 75 states have internal predecessors, (87), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2023-11-06 22:58:18,319 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88 states to 88 states and 115 transitions. [2023-11-06 22:58:18,319 INFO L78 Accepts]: Start accepts. Automaton has 88 states and 115 transitions. Word has length 26 [2023-11-06 22:58:18,320 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:58:18,326 INFO L495 AbstractCegarLoop]: Abstraction has 88 states and 115 transitions. [2023-11-06 22:58:18,326 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:58:18,326 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 115 transitions. [2023-11-06 22:58:18,329 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2023-11-06 22:58:18,329 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:58:18,329 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:58:18,329 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 22:58:18,330 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:58:18,331 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:58:18,331 INFO L85 PathProgramCache]: Analyzing trace with hash 1100480442, now seen corresponding path program 1 times [2023-11-06 22:58:18,332 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:58:18,334 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1940188892] [2023-11-06 22:58:18,335 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:58:18,337 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:58:18,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:18,567 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:58:18,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:18,582 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:58:18,585 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:58:18,585 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1940188892] [2023-11-06 22:58:18,586 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1940188892] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:58:18,586 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:58:18,586 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:58:18,586 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [716185300] [2023-11-06 22:58:18,587 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:58:18,587 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:58:18,588 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:58:18,588 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:58:18,589 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:58:18,589 INFO L87 Difference]: Start difference. First operand 88 states and 115 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:58:18,661 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:58:18,661 INFO L93 Difference]: Finished difference Result 247 states and 329 transitions. [2023-11-06 22:58:18,662 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:58:18,662 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2023-11-06 22:58:18,662 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:58:18,666 INFO L225 Difference]: With dead ends: 247 [2023-11-06 22:58:18,666 INFO L226 Difference]: Without dead ends: 167 [2023-11-06 22:58:18,668 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:58:18,670 INFO L413 NwaCegarLoop]: 131 mSDtfsCounter, 94 mSDsluCounter, 104 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 94 SdHoareTripleChecker+Valid, 235 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:58:18,671 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [94 Valid, 235 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:58:18,672 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167 states. [2023-11-06 22:58:18,707 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167 to 164. [2023-11-06 22:58:18,708 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 164 states, 119 states have (on average 1.361344537815126) internal successors, (162), 138 states have internal predecessors, (162), 28 states have call successors, (28), 16 states have call predecessors, (28), 16 states have return successors, (28), 17 states have call predecessors, (28), 28 states have call successors, (28) [2023-11-06 22:58:18,710 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 164 states to 164 states and 218 transitions. [2023-11-06 22:58:18,710 INFO L78 Accepts]: Start accepts. Automaton has 164 states and 218 transitions. Word has length 30 [2023-11-06 22:58:18,711 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:58:18,711 INFO L495 AbstractCegarLoop]: Abstraction has 164 states and 218 transitions. [2023-11-06 22:58:18,711 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:58:18,712 INFO L276 IsEmpty]: Start isEmpty. Operand 164 states and 218 transitions. [2023-11-06 22:58:18,715 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2023-11-06 22:58:18,715 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:58:18,715 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:58:18,716 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 22:58:18,716 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:58:18,717 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:58:18,717 INFO L85 PathProgramCache]: Analyzing trace with hash -1086931004, now seen corresponding path program 1 times [2023-11-06 22:58:18,717 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:58:18,717 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [708554182] [2023-11-06 22:58:18,718 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:58:18,718 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:58:18,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:18,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 22:58:18,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:18,928 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:58:18,928 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:58:18,928 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [708554182] [2023-11-06 22:58:18,929 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [708554182] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:58:18,929 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:58:18,929 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:58:18,929 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1574077056] [2023-11-06 22:58:18,930 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:58:18,930 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:58:18,930 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:58:18,931 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:58:18,932 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:58:18,932 INFO L87 Difference]: Start difference. First operand 164 states and 218 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:58:19,071 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:58:19,071 INFO L93 Difference]: Finished difference Result 418 states and 571 transitions. [2023-11-06 22:58:19,072 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-06 22:58:19,072 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2023-11-06 22:58:19,073 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:58:19,077 INFO L225 Difference]: With dead ends: 418 [2023-11-06 22:58:19,077 INFO L226 Difference]: Without dead ends: 262 [2023-11-06 22:58:19,081 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:58:19,083 INFO L413 NwaCegarLoop]: 116 mSDtfsCounter, 60 mSDsluCounter, 305 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 421 SdHoareTripleChecker+Invalid, 45 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:58:19,084 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [60 Valid, 421 Invalid, 45 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:58:19,085 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 262 states. [2023-11-06 22:58:19,134 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 262 to 253. [2023-11-06 22:58:19,135 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 253 states, 186 states have (on average 1.3118279569892473) internal successors, (244), 203 states have internal predecessors, (244), 36 states have call successors, (36), 30 states have call predecessors, (36), 30 states have return successors, (48), 31 states have call predecessors, (48), 36 states have call successors, (48) [2023-11-06 22:58:19,148 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 253 states to 253 states and 328 transitions. [2023-11-06 22:58:19,149 INFO L78 Accepts]: Start accepts. Automaton has 253 states and 328 transitions. Word has length 34 [2023-11-06 22:58:19,150 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:58:19,150 INFO L495 AbstractCegarLoop]: Abstraction has 253 states and 328 transitions. [2023-11-06 22:58:19,151 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:58:19,152 INFO L276 IsEmpty]: Start isEmpty. Operand 253 states and 328 transitions. [2023-11-06 22:58:19,164 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2023-11-06 22:58:19,164 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:58:19,164 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:58:19,165 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 22:58:19,166 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:58:19,166 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:58:19,167 INFO L85 PathProgramCache]: Analyzing trace with hash -74683988, now seen corresponding path program 1 times [2023-11-06 22:58:19,167 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:58:19,167 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [425609] [2023-11-06 22:58:19,168 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:58:19,168 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:58:19,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:19,317 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:58:19,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:19,350 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:58:19,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:19,430 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2023-11-06 22:58:19,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:19,435 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:58:19,435 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:58:19,435 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [425609] [2023-11-06 22:58:19,436 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [425609] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:58:19,436 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:58:19,436 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:58:19,437 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [93149716] [2023-11-06 22:58:19,437 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:58:19,437 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:58:19,438 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:58:19,438 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:58:19,439 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:58:19,439 INFO L87 Difference]: Start difference. First operand 253 states and 328 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:58:19,705 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:58:19,705 INFO L93 Difference]: Finished difference Result 566 states and 745 transitions. [2023-11-06 22:58:19,706 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:58:19,706 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 49 [2023-11-06 22:58:19,706 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:58:19,710 INFO L225 Difference]: With dead ends: 566 [2023-11-06 22:58:19,710 INFO L226 Difference]: Without dead ends: 321 [2023-11-06 22:58:19,712 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=61, Unknown=0, NotChecked=0, Total=90 [2023-11-06 22:58:19,714 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 70 mSDsluCounter, 315 mSDsCounter, 0 mSdLazyCounter, 142 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 73 SdHoareTripleChecker+Valid, 410 SdHoareTripleChecker+Invalid, 167 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 142 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:58:19,715 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [73 Valid, 410 Invalid, 167 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 142 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:58:19,717 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 321 states. [2023-11-06 22:58:19,769 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 321 to 313. [2023-11-06 22:58:19,770 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 313 states, 232 states have (on average 1.2844827586206897) internal successors, (298), 249 states have internal predecessors, (298), 40 states have call successors, (40), 30 states have call predecessors, (40), 40 states have return successors, (62), 43 states have call predecessors, (62), 40 states have call successors, (62) [2023-11-06 22:58:19,781 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 313 states to 313 states and 400 transitions. [2023-11-06 22:58:19,781 INFO L78 Accepts]: Start accepts. Automaton has 313 states and 400 transitions. Word has length 49 [2023-11-06 22:58:19,782 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:58:19,782 INFO L495 AbstractCegarLoop]: Abstraction has 313 states and 400 transitions. [2023-11-06 22:58:19,782 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:58:19,782 INFO L276 IsEmpty]: Start isEmpty. Operand 313 states and 400 transitions. [2023-11-06 22:58:19,784 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2023-11-06 22:58:19,784 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:58:19,784 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:58:19,784 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-06 22:58:19,785 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:58:19,785 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:58:19,785 INFO L85 PathProgramCache]: Analyzing trace with hash 348017838, now seen corresponding path program 1 times [2023-11-06 22:58:19,786 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:58:19,786 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [325390316] [2023-11-06 22:58:19,786 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:58:19,786 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:58:19,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:19,984 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:58:19,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:20,026 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:58:20,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:20,090 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2023-11-06 22:58:20,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:20,099 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:58:20,099 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:58:20,100 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [325390316] [2023-11-06 22:58:20,100 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [325390316] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:58:20,100 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:58:20,101 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:58:20,101 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2003607300] [2023-11-06 22:58:20,101 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:58:20,102 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:58:20,103 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:58:20,104 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:58:20,105 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:58:20,105 INFO L87 Difference]: Start difference. First operand 313 states and 400 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:58:20,556 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:58:20,556 INFO L93 Difference]: Finished difference Result 642 states and 843 transitions. [2023-11-06 22:58:20,557 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-06 22:58:20,557 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 49 [2023-11-06 22:58:20,558 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:58:20,564 INFO L225 Difference]: With dead ends: 642 [2023-11-06 22:58:20,564 INFO L226 Difference]: Without dead ends: 337 [2023-11-06 22:58:20,567 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 17 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=54, Invalid=102, Unknown=0, NotChecked=0, Total=156 [2023-11-06 22:58:20,575 INFO L413 NwaCegarLoop]: 116 mSDtfsCounter, 220 mSDsluCounter, 345 mSDsCounter, 0 mSdLazyCounter, 177 mSolverCounterSat, 59 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 227 SdHoareTripleChecker+Valid, 461 SdHoareTripleChecker+Invalid, 236 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 59 IncrementalHoareTripleChecker+Valid, 177 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-06 22:58:20,579 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [227 Valid, 461 Invalid, 236 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [59 Valid, 177 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-06 22:58:20,584 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 337 states. [2023-11-06 22:58:20,647 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 337 to 317. [2023-11-06 22:58:20,648 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 317 states, 236 states have (on average 1.2796610169491525) internal successors, (302), 253 states have internal predecessors, (302), 40 states have call successors, (40), 30 states have call predecessors, (40), 40 states have return successors, (62), 43 states have call predecessors, (62), 40 states have call successors, (62) [2023-11-06 22:58:20,652 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 317 states to 317 states and 404 transitions. [2023-11-06 22:58:20,652 INFO L78 Accepts]: Start accepts. Automaton has 317 states and 404 transitions. Word has length 49 [2023-11-06 22:58:20,653 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:58:20,654 INFO L495 AbstractCegarLoop]: Abstraction has 317 states and 404 transitions. [2023-11-06 22:58:20,654 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:58:20,654 INFO L276 IsEmpty]: Start isEmpty. Operand 317 states and 404 transitions. [2023-11-06 22:58:20,656 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2023-11-06 22:58:20,657 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:58:20,657 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:58:20,658 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-06 22:58:20,658 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:58:20,658 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:58:20,659 INFO L85 PathProgramCache]: Analyzing trace with hash -1457420496, now seen corresponding path program 1 times [2023-11-06 22:58:20,659 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:58:20,659 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [135924177] [2023-11-06 22:58:20,659 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:58:20,660 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:58:20,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:20,829 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:58:20,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:20,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:58:20,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:20,909 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2023-11-06 22:58:20,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:20,913 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:58:20,913 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:58:20,913 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [135924177] [2023-11-06 22:58:20,914 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [135924177] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:58:20,914 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:58:20,914 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:58:20,915 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1741460575] [2023-11-06 22:58:20,915 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:58:20,915 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:58:20,916 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:58:20,916 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:58:20,917 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:58:20,917 INFO L87 Difference]: Start difference. First operand 317 states and 404 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-06 22:58:21,312 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:58:21,313 INFO L93 Difference]: Finished difference Result 894 states and 1183 transitions. [2023-11-06 22:58:21,313 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:58:21,314 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 49 [2023-11-06 22:58:21,316 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:58:21,323 INFO L225 Difference]: With dead ends: 894 [2023-11-06 22:58:21,323 INFO L226 Difference]: Without dead ends: 585 [2023-11-06 22:58:21,325 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:58:21,334 INFO L413 NwaCegarLoop]: 138 mSDtfsCounter, 234 mSDsluCounter, 198 mSDsCounter, 0 mSdLazyCounter, 155 mSolverCounterSat, 69 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 241 SdHoareTripleChecker+Valid, 336 SdHoareTripleChecker+Invalid, 224 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 69 IncrementalHoareTripleChecker+Valid, 155 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-06 22:58:21,335 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [241 Valid, 336 Invalid, 224 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [69 Valid, 155 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-06 22:58:21,338 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 585 states. [2023-11-06 22:58:21,419 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 585 to 578. [2023-11-06 22:58:21,422 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 578 states, 429 states have (on average 1.2447552447552448) internal successors, (534), 455 states have internal predecessors, (534), 75 states have call successors, (75), 67 states have call predecessors, (75), 73 states have return successors, (127), 76 states have call predecessors, (127), 75 states have call successors, (127) [2023-11-06 22:58:21,430 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 578 states to 578 states and 736 transitions. [2023-11-06 22:58:21,431 INFO L78 Accepts]: Start accepts. Automaton has 578 states and 736 transitions. Word has length 49 [2023-11-06 22:58:21,433 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:58:21,433 INFO L495 AbstractCegarLoop]: Abstraction has 578 states and 736 transitions. [2023-11-06 22:58:21,434 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-06 22:58:21,434 INFO L276 IsEmpty]: Start isEmpty. Operand 578 states and 736 transitions. [2023-11-06 22:58:21,436 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2023-11-06 22:58:21,437 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:58:21,437 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:58:21,437 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-06 22:58:21,438 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:58:21,438 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:58:21,439 INFO L85 PathProgramCache]: Analyzing trace with hash -1552259114, now seen corresponding path program 1 times [2023-11-06 22:58:21,439 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:58:21,439 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [934725191] [2023-11-06 22:58:21,439 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:58:21,440 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:58:21,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:21,545 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:58:21,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:21,555 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 22:58:21,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:21,571 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:58:21,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:21,578 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2023-11-06 22:58:21,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:21,585 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:58:21,585 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:58:21,585 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [934725191] [2023-11-06 22:58:21,585 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [934725191] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:58:21,587 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:58:21,588 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:58:21,588 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1318745035] [2023-11-06 22:58:21,588 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:58:21,590 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:58:21,590 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:58:21,591 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:58:21,591 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:58:21,592 INFO L87 Difference]: Start difference. First operand 578 states and 736 transitions. Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 3 states have internal predecessors, (44), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:58:22,315 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:58:22,316 INFO L93 Difference]: Finished difference Result 1191 states and 1618 transitions. [2023-11-06 22:58:22,316 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-06 22:58:22,317 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 3 states have internal predecessors, (44), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 53 [2023-11-06 22:58:22,317 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:58:22,328 INFO L225 Difference]: With dead ends: 1191 [2023-11-06 22:58:22,328 INFO L226 Difference]: Without dead ends: 1189 [2023-11-06 22:58:22,329 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2023-11-06 22:58:22,330 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 349 mSDsluCounter, 138 mSDsCounter, 0 mSdLazyCounter, 184 mSolverCounterSat, 154 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 354 SdHoareTripleChecker+Valid, 209 SdHoareTripleChecker+Invalid, 338 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 154 IncrementalHoareTripleChecker+Valid, 184 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-06 22:58:22,331 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [354 Valid, 209 Invalid, 338 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [154 Valid, 184 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-06 22:58:22,333 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1189 states. [2023-11-06 22:58:22,482 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1189 to 1067. [2023-11-06 22:58:22,485 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1067 states, 788 states have (on average 1.25253807106599) internal successors, (987), 847 states have internal predecessors, (987), 148 states have call successors, (148), 106 states have call predecessors, (148), 130 states have return successors, (325), 144 states have call predecessors, (325), 148 states have call successors, (325) [2023-11-06 22:58:22,496 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1067 states to 1067 states and 1460 transitions. [2023-11-06 22:58:22,497 INFO L78 Accepts]: Start accepts. Automaton has 1067 states and 1460 transitions. Word has length 53 [2023-11-06 22:58:22,497 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:58:22,498 INFO L495 AbstractCegarLoop]: Abstraction has 1067 states and 1460 transitions. [2023-11-06 22:58:22,498 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 3 states have internal predecessors, (44), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:58:22,498 INFO L276 IsEmpty]: Start isEmpty. Operand 1067 states and 1460 transitions. [2023-11-06 22:58:22,502 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2023-11-06 22:58:22,503 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:58:22,503 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:58:22,503 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-06 22:58:22,504 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:58:22,504 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:58:22,504 INFO L85 PathProgramCache]: Analyzing trace with hash 1201768369, now seen corresponding path program 1 times [2023-11-06 22:58:22,505 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:58:22,505 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1291096425] [2023-11-06 22:58:22,505 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:58:22,505 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:58:22,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:22,564 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:58:22,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:22,587 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 22:58:22,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:22,621 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:58:22,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:22,630 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:58:22,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:22,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-06 22:58:22,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:22,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2023-11-06 22:58:22,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:22,644 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:58:22,645 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:58:22,645 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1291096425] [2023-11-06 22:58:22,645 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1291096425] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:58:22,645 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:58:22,645 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-06 22:58:22,646 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [239866002] [2023-11-06 22:58:22,646 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:58:22,646 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-06 22:58:22,647 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:58:22,647 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-06 22:58:22,648 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:58:22,648 INFO L87 Difference]: Start difference. First operand 1067 states and 1460 transitions. Second operand has 7 states, 7 states have (on average 9.714285714285714) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2023-11-06 22:58:23,243 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:58:23,243 INFO L93 Difference]: Finished difference Result 1216 states and 1654 transitions. [2023-11-06 22:58:23,244 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-06 22:58:23,244 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 9.714285714285714) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) Word has length 83 [2023-11-06 22:58:23,244 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:58:23,249 INFO L225 Difference]: With dead ends: 1216 [2023-11-06 22:58:23,250 INFO L226 Difference]: Without dead ends: 537 [2023-11-06 22:58:23,253 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2023-11-06 22:58:23,254 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 359 mSDsluCounter, 189 mSDsCounter, 0 mSdLazyCounter, 247 mSolverCounterSat, 117 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 367 SdHoareTripleChecker+Valid, 289 SdHoareTripleChecker+Invalid, 364 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 117 IncrementalHoareTripleChecker+Valid, 247 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-06 22:58:23,255 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [367 Valid, 289 Invalid, 364 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [117 Valid, 247 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-06 22:58:23,256 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 537 states. [2023-11-06 22:58:23,335 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 537 to 521. [2023-11-06 22:58:23,337 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 521 states, 386 states have (on average 1.2202072538860103) internal successors, (471), 413 states have internal predecessors, (471), 70 states have call successors, (70), 51 states have call predecessors, (70), 64 states have return successors, (156), 70 states have call predecessors, (156), 70 states have call successors, (156) [2023-11-06 22:58:23,343 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 521 states to 521 states and 697 transitions. [2023-11-06 22:58:23,343 INFO L78 Accepts]: Start accepts. Automaton has 521 states and 697 transitions. Word has length 83 [2023-11-06 22:58:23,344 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:58:23,344 INFO L495 AbstractCegarLoop]: Abstraction has 521 states and 697 transitions. [2023-11-06 22:58:23,344 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 9.714285714285714) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2023-11-06 22:58:23,344 INFO L276 IsEmpty]: Start isEmpty. Operand 521 states and 697 transitions. [2023-11-06 22:58:23,347 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2023-11-06 22:58:23,348 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:58:23,348 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:58:23,348 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-06 22:58:23,348 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:58:23,349 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:58:23,349 INFO L85 PathProgramCache]: Analyzing trace with hash -646571958, now seen corresponding path program 1 times [2023-11-06 22:58:23,349 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:58:23,350 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2112512211] [2023-11-06 22:58:23,350 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:58:23,350 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:58:23,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:23,472 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:58:23,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:23,498 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:58:23,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:23,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:58:23,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:23,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:58:23,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:23,604 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-06 22:58:23,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:23,608 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2023-11-06 22:58:23,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:23,626 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:58:23,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:23,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2023-11-06 22:58:23,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:23,638 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 11 proven. 15 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2023-11-06 22:58:23,638 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:58:23,638 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2112512211] [2023-11-06 22:58:23,639 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2112512211] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:58:23,639 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1726453843] [2023-11-06 22:58:23,639 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:58:23,639 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:58:23,640 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:58:23,644 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:58:23,664 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-06 22:58:23,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:23,830 INFO L262 TraceCheckSpWp]: Trace formula consists of 334 conjuncts, 4 conjunts are in the unsatisfiable core [2023-11-06 22:58:23,844 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:58:23,967 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 40 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:58:23,968 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 22:58:23,968 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1726453843] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:58:23,969 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 22:58:23,969 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [8] total 8 [2023-11-06 22:58:23,969 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1019376526] [2023-11-06 22:58:23,969 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:58:23,970 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:58:23,970 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:58:23,971 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:58:23,971 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:58:23,972 INFO L87 Difference]: Start difference. First operand 521 states and 697 transitions. Second operand has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2023-11-06 22:58:24,123 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:58:24,123 INFO L93 Difference]: Finished difference Result 886 states and 1215 transitions. [2023-11-06 22:58:24,124 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:58:24,124 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 96 [2023-11-06 22:58:24,125 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:58:24,129 INFO L225 Difference]: With dead ends: 886 [2023-11-06 22:58:24,129 INFO L226 Difference]: Without dead ends: 426 [2023-11-06 22:58:24,133 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 118 GetRequests, 112 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:58:24,134 INFO L413 NwaCegarLoop]: 148 mSDtfsCounter, 50 mSDsluCounter, 68 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 50 SdHoareTripleChecker+Valid, 216 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:58:24,135 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [50 Valid, 216 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:58:24,136 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 426 states. [2023-11-06 22:58:24,222 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 426 to 426. [2023-11-06 22:58:24,224 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 426 states, 315 states have (on average 1.1936507936507936) internal successors, (376), 338 states have internal predecessors, (376), 58 states have call successors, (58), 44 states have call predecessors, (58), 52 states have return successors, (90), 57 states have call predecessors, (90), 58 states have call successors, (90) [2023-11-06 22:58:24,228 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 426 states to 426 states and 524 transitions. [2023-11-06 22:58:24,229 INFO L78 Accepts]: Start accepts. Automaton has 426 states and 524 transitions. Word has length 96 [2023-11-06 22:58:24,229 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:58:24,230 INFO L495 AbstractCegarLoop]: Abstraction has 426 states and 524 transitions. [2023-11-06 22:58:24,230 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2023-11-06 22:58:24,230 INFO L276 IsEmpty]: Start isEmpty. Operand 426 states and 524 transitions. [2023-11-06 22:58:24,233 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2023-11-06 22:58:24,233 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:58:24,234 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:58:24,244 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-06 22:58:24,444 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-06 22:58:24,445 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:58:24,445 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:58:24,445 INFO L85 PathProgramCache]: Analyzing trace with hash 401592588, now seen corresponding path program 1 times [2023-11-06 22:58:24,445 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:58:24,446 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1023586886] [2023-11-06 22:58:24,446 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:58:24,446 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:58:24,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:24,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:58:24,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:24,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:58:24,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:24,750 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:58:24,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:24,756 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:58:24,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:24,772 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-06 22:58:24,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:24,805 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2023-11-06 22:58:24,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:24,814 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2023-11-06 22:58:24,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:24,821 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-06 22:58:24,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:24,825 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:58:24,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:24,831 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 96 [2023-11-06 22:58:24,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:24,835 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 19 proven. 5 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2023-11-06 22:58:24,835 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:58:24,835 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1023586886] [2023-11-06 22:58:24,836 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1023586886] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:58:24,836 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2005495015] [2023-11-06 22:58:24,836 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:58:24,836 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:58:24,837 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:58:24,838 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:58:24,852 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-06 22:58:24,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:24,993 INFO L262 TraceCheckSpWp]: Trace formula consists of 357 conjuncts, 11 conjunts are in the unsatisfiable core [2023-11-06 22:58:24,999 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:58:25,282 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 7 proven. 2 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2023-11-06 22:58:25,282 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-06 22:58:25,482 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2023-11-06 22:58:25,482 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2005495015] provided 1 perfect and 1 imperfect interpolant sequences [2023-11-06 22:58:25,483 INFO L185 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2023-11-06 22:58:25,483 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [12, 5] total 17 [2023-11-06 22:58:25,483 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1417429498] [2023-11-06 22:58:25,483 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:58:25,485 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:58:25,485 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:58:25,486 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:58:25,486 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=42, Invalid=230, Unknown=0, NotChecked=0, Total=272 [2023-11-06 22:58:25,487 INFO L87 Difference]: Start difference. First operand 426 states and 524 transitions. Second operand has 6 states, 6 states have (on average 12.0) internal successors, (72), 5 states have internal predecessors, (72), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 3 states have call predecessors, (10), 2 states have call successors, (10) [2023-11-06 22:58:25,721 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:58:25,721 INFO L93 Difference]: Finished difference Result 1210 states and 1521 transitions. [2023-11-06 22:58:25,722 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-06 22:58:25,722 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.0) internal successors, (72), 5 states have internal predecessors, (72), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 3 states have call predecessors, (10), 2 states have call successors, (10) Word has length 106 [2023-11-06 22:58:25,722 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:58:25,729 INFO L225 Difference]: With dead ends: 1210 [2023-11-06 22:58:25,729 INFO L226 Difference]: Without dead ends: 792 [2023-11-06 22:58:25,732 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 243 GetRequests, 225 SyntacticMatches, 1 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 44 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=52, Invalid=290, Unknown=0, NotChecked=0, Total=342 [2023-11-06 22:58:25,733 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 67 mSDsluCounter, 371 mSDsCounter, 0 mSdLazyCounter, 53 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 476 SdHoareTripleChecker+Invalid, 58 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 53 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:58:25,733 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 476 Invalid, 58 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 53 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:58:25,735 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 792 states. [2023-11-06 22:58:25,834 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 792 to 718. [2023-11-06 22:58:25,837 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 718 states, 525 states have (on average 1.1638095238095238) internal successors, (611), 564 states have internal predecessors, (611), 99 states have call successors, (99), 77 states have call predecessors, (99), 93 states have return successors, (155), 99 states have call predecessors, (155), 99 states have call successors, (155) [2023-11-06 22:58:25,843 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 718 states to 718 states and 865 transitions. [2023-11-06 22:58:25,843 INFO L78 Accepts]: Start accepts. Automaton has 718 states and 865 transitions. Word has length 106 [2023-11-06 22:58:25,844 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:58:25,844 INFO L495 AbstractCegarLoop]: Abstraction has 718 states and 865 transitions. [2023-11-06 22:58:25,844 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 12.0) internal successors, (72), 5 states have internal predecessors, (72), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 3 states have call predecessors, (10), 2 states have call successors, (10) [2023-11-06 22:58:25,845 INFO L276 IsEmpty]: Start isEmpty. Operand 718 states and 865 transitions. [2023-11-06 22:58:25,848 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2023-11-06 22:58:25,849 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:58:25,849 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:58:25,862 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-06 22:58:26,056 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2023-11-06 22:58:26,056 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:58:26,057 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:58:26,057 INFO L85 PathProgramCache]: Analyzing trace with hash 2017248584, now seen corresponding path program 1 times [2023-11-06 22:58:26,057 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:58:26,057 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2077881055] [2023-11-06 22:58:26,057 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:58:26,058 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:58:26,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:26,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:58:26,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:26,280 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-06 22:58:26,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:26,316 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 22:58:26,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:26,397 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:58:26,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:26,418 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:58:26,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:26,423 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-06 22:58:26,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:26,450 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2023-11-06 22:58:26,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:26,459 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2023-11-06 22:58:26,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:26,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-06 22:58:26,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:26,472 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:58:26,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:26,475 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2023-11-06 22:58:26,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:26,478 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 10 proven. 14 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2023-11-06 22:58:26,478 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:58:26,478 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2077881055] [2023-11-06 22:58:26,479 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2077881055] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:58:26,479 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1569417587] [2023-11-06 22:58:26,479 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:58:26,479 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:58:26,480 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:58:26,481 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:58:26,508 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-06 22:58:26,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:58:26,631 INFO L262 TraceCheckSpWp]: Trace formula consists of 367 conjuncts, 8 conjunts are in the unsatisfiable core [2023-11-06 22:58:26,636 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:58:26,862 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2023-11-06 22:58:26,862 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 22:58:26,863 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1569417587] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:58:26,863 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 22:58:26,863 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [16] total 21 [2023-11-06 22:58:26,863 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [774182363] [2023-11-06 22:58:26,864 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:58:26,864 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-06 22:58:26,864 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:58:26,865 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-06 22:58:26,866 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=57, Invalid=363, Unknown=0, NotChecked=0, Total=420 [2023-11-06 22:58:26,866 INFO L87 Difference]: Start difference. First operand 718 states and 865 transitions. Second operand has 7 states, 7 states have (on average 12.0) internal successors, (84), 6 states have internal predecessors, (84), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2023-11-06 22:58:27,108 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:58:27,108 INFO L93 Difference]: Finished difference Result 1292 states and 1550 transitions. [2023-11-06 22:58:27,109 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:58:27,109 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.0) internal successors, (84), 6 states have internal predecessors, (84), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) Word has length 110 [2023-11-06 22:58:27,110 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:58:27,110 INFO L225 Difference]: With dead ends: 1292 [2023-11-06 22:58:27,111 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 22:58:27,115 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 144 GetRequests, 122 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 66 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=84, Invalid=468, Unknown=0, NotChecked=0, Total=552 [2023-11-06 22:58:27,116 INFO L413 NwaCegarLoop]: 181 mSDtfsCounter, 37 mSDsluCounter, 771 mSDsCounter, 0 mSdLazyCounter, 67 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 952 SdHoareTripleChecker+Invalid, 72 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 67 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:58:27,117 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 952 Invalid, 72 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 67 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:58:27,117 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 22:58:27,118 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 22:58:27,118 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:58:27,118 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 22:58:27,119 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 110 [2023-11-06 22:58:27,119 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:58:27,119 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 22:58:27,119 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.0) internal successors, (84), 6 states have internal predecessors, (84), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2023-11-06 22:58:27,120 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 22:58:27,120 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 22:58:27,123 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 22:58:27,137 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2023-11-06 22:58:27,331 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:58:27,333 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 22:58:35,316 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 394 401) no Hoare annotation was computed. [2023-11-06 22:58:35,317 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 394 401) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 (< ~waterLevel~0 2) (= 0 ~systemActive~0)) (or .cse0 (not (= 1 ~systemActive~0))))) [2023-11-06 22:58:35,317 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 394 401) no Hoare annotation was computed. [2023-11-06 22:58:35,318 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 301 307) no Hoare annotation was computed. [2023-11-06 22:58:35,318 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 301 307) the Hoare annotation is: true [2023-11-06 22:58:35,318 INFO L899 garLoopResultBuilder]: For program point L126-1(lines 122 133) no Hoare annotation was computed. [2023-11-06 22:58:35,321 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 122 133) the Hoare annotation is: (let ((.cse0 (< ~pumpRunning~0 1)) (.cse4 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (not (= ~pumpRunning~0 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (< |old(~methaneLevelCritical~0)| 1)) (.cse7 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (< ~waterLevel~0 2)) (or .cse4 .cse5 .cse6 .cse2 .cse7) (or .cse0 .cse4 .cse6 .cse2 .cse7) (or .cse1 .cse5 .cse2 .cse3 .cse7))) [2023-11-06 22:58:35,321 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 122 133) no Hoare annotation was computed. [2023-11-06 22:58:35,322 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 919 948) no Hoare annotation was computed. [2023-11-06 22:58:35,322 INFO L902 garLoopResultBuilder]: At program point L929-2(lines 929 943) the Hoare annotation is: true [2023-11-06 22:58:35,322 INFO L902 garLoopResultBuilder]: At program point L925(line 925) the Hoare annotation is: true [2023-11-06 22:58:35,322 INFO L899 garLoopResultBuilder]: For program point L925-1(line 925) no Hoare annotation was computed. [2023-11-06 22:58:35,323 INFO L902 garLoopResultBuilder]: At program point L944(lines 919 948) the Hoare annotation is: true [2023-11-06 22:58:35,323 INFO L899 garLoopResultBuilder]: For program point L940(line 940) no Hoare annotation was computed. [2023-11-06 22:58:35,323 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 919 948) the Hoare annotation is: true [2023-11-06 22:58:35,323 INFO L899 garLoopResultBuilder]: For program point L933(lines 933 937) no Hoare annotation was computed. [2023-11-06 22:58:35,324 INFO L902 garLoopResultBuilder]: At program point L933-1(lines 933 937) the Hoare annotation is: true [2023-11-06 22:58:35,324 INFO L899 garLoopResultBuilder]: For program point L930(line 930) no Hoare annotation was computed. [2023-11-06 22:58:35,326 INFO L895 garLoopResultBuilder]: At program point L894(line 894) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (= ~pumpRunning~0 0)) (.cse13 (= 1 ~systemActive~0))) (let ((.cse0 (and .cse8 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse13)) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not .cse13)) (.cse6 (and (<= 1 ~pumpRunning~0) (= ~methAndRunningLastTime~0 0) (<= 2 ~waterLevel~0) .cse9)) (.cse7 (and .cse11 .cse9 .cse10)) (.cse12 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 (< |old(~waterLevel~0)| 2) .cse2 .cse3) (or .cse4 .cse5 .cse1 .cse6 .cse7 .cse3) (or .cse4 (and .cse8 .cse9 .cse10) (not (= 0 ~systemActive~0))) (or .cse0 .cse5 .cse1 .cse2 .cse3) (or .cse11 .cse1 .cse12 .cse2 (and .cse8 .cse13)) (or .cse4 .cse5 .cse1 .cse6 .cse7 .cse12)))) [2023-11-06 22:58:35,327 INFO L899 garLoopResultBuilder]: For program point L894-1(line 894) no Hoare annotation was computed. [2023-11-06 22:58:35,327 INFO L895 garLoopResultBuilder]: At program point L407(line 407) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (< ~methaneLevelCritical~0 1)) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (< |old(~waterLevel~0)| 2) .cse3 .cse4) (or .cse5 .cse6 .cse1 .cse2) (or .cse6 .cse1 (and .cse0 (= ~methAndRunningLastTime~0 0)) .cse3 .cse4) (or .cse5 .cse6 .cse1 .cse4) (or .cse5 (not (= 0 ~systemActive~0))))) [2023-11-06 22:58:35,328 INFO L899 garLoopResultBuilder]: For program point L407-1(line 407) no Hoare annotation was computed. [2023-11-06 22:58:35,328 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 277 300) no Hoare annotation was computed. [2023-11-06 22:58:35,328 INFO L899 garLoopResultBuilder]: For program point L102(lines 102 106) no Hoare annotation was computed. [2023-11-06 22:58:35,328 INFO L895 garLoopResultBuilder]: At program point L102-2(lines 98 109) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (< ~methaneLevelCritical~0 1)) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (< |old(~waterLevel~0)| 2) .cse3 .cse4) (or .cse5 .cse6 .cse1 .cse2) (or .cse6 .cse1 (and .cse0 (= ~methAndRunningLastTime~0 0)) .cse3 .cse4) (or .cse5 .cse6 .cse1 .cse4) (or .cse5 (not (= 0 ~systemActive~0))))) [2023-11-06 22:58:35,329 INFO L899 garLoopResultBuilder]: For program point L288-1(lines 288 294) no Hoare annotation was computed. [2023-11-06 22:58:35,329 INFO L899 garLoopResultBuilder]: For program point L1019(line 1019) no Hoare annotation was computed. [2023-11-06 22:58:35,330 INFO L895 garLoopResultBuilder]: At program point L375(line 375) the Hoare annotation is: (let ((.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse4 .cse2) (or .cse5 .cse0 .cse1 .cse4) (or .cse1 (< |old(~waterLevel~0)| 2) .cse2 .cse3) (or .cse5 .cse0 .cse1 .cse3) (or .cse5 (not (= 0 ~systemActive~0))))) [2023-11-06 22:58:35,330 INFO L895 garLoopResultBuilder]: At program point L371(line 371) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse5 (<= 1 |timeShift_processEnvironment_~tmp~3#1|)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse8 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (< ~methaneLevelCritical~0 1)) (.cse7 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 (< |old(~waterLevel~0)| 2) (and .cse0 .cse4 .cse5) .cse3 .cse6) (or .cse7 .cse8 .cse1 .cse2) (or (and .cse0 (= ~methAndRunningLastTime~0 0) .cse4 .cse5) .cse8 .cse1 .cse3 .cse6) (or .cse7 .cse8 .cse1 .cse6) (or .cse7 (not (= 0 ~systemActive~0))))) [2023-11-06 22:58:35,331 INFO L899 garLoopResultBuilder]: For program point L900(lines 900 910) no Hoare annotation was computed. [2023-11-06 22:58:35,331 INFO L899 garLoopResultBuilder]: For program point L896(lines 896 913) no Hoare annotation was computed. [2023-11-06 22:58:35,331 INFO L895 garLoopResultBuilder]: At program point L896-1(lines 888 916) the Hoare annotation is: (let ((.cse8 (= 1 ~systemActive~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse14 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse5 (and .cse6 .cse7 .cse14)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse12 (<= 1 ~pumpRunning~0)) (.cse13 (<= 2 ~waterLevel~0)) (.cse10 (not (= ~methaneLevelCritical~0 0))) (.cse9 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1| 0)) (.cse11 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (and .cse6 .cse7 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse8)) (.cse1 (not .cse8)) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse3 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 (< |old(~waterLevel~0)| 2) .cse2 .cse3) (or .cse4 .cse5 (not (= 0 ~systemActive~0))) (or (and .cse6 .cse7 .cse8 .cse9) .cse1 .cse10 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7 .cse9) .cse2) (or .cse4 .cse11 .cse1 .cse5 (and .cse12 .cse13 .cse14) .cse3) (or .cse4 .cse11 .cse1 (and .cse12 .cse7 .cse13 .cse9 .cse14) .cse10 (and .cse6 .cse7 .cse9 .cse14)) (or .cse11 .cse0 .cse1 .cse2 .cse3)))) [2023-11-06 22:58:35,332 INFO L895 garLoopResultBuilder]: At program point L380(line 380) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse2) (or .cse5 .cse0 .cse1 .cse6 .cse3) (or .cse5 .cse0 .cse1 .cse6 .cse4) (or .cse1 (< |old(~waterLevel~0)| 2) .cse2 .cse3) (or .cse5 (not (= 0 ~systemActive~0))))) [2023-11-06 22:58:35,332 INFO L895 garLoopResultBuilder]: At program point L380-1(lines 361 385) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse10 (= ~pumpRunning~0 0)) (.cse11 (= 1 ~systemActive~0))) (let ((.cse6 (and .cse10 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~3#1|) .cse11)) (.cse5 (< ~methaneLevelCritical~0 1)) (.cse7 (< |old(~pumpRunning~0)| 1)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not .cse11)) (.cse3 (and (<= 1 ~pumpRunning~0) (= ~methAndRunningLastTime~0 0) (<= 2 ~waterLevel~0) .cse12)) (.cse4 (and .cse8 .cse12 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (.cse9 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse2 (< |old(~waterLevel~0)| 2) .cse7 .cse5) (or .cse1 .cse6 .cse2 .cse7 .cse5) (or .cse8 .cse2 .cse9 .cse7 (and .cse10 .cse11)) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse9) (or .cse0 (not (= 0 ~systemActive~0)))))) [2023-11-06 22:58:35,333 INFO L899 garLoopResultBuilder]: For program point L281-1(lines 280 299) no Hoare annotation was computed. [2023-11-06 22:58:35,333 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 1015 1022) the Hoare annotation is: (let ((.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse2) (or .cse5 .cse0 .cse1 .cse4) (or .cse1 (< |old(~waterLevel~0)| 2) .cse2 .cse3) (or .cse5 .cse0 .cse1 .cse3) (or .cse5 (not (= 0 ~systemActive~0))))) [2023-11-06 22:58:35,334 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 277 300) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (let ((.cse10 (and .cse0 .cse2 .cse9)) (.cse5 (< |old(~pumpRunning~0)| 1)) (.cse6 (< ~methaneLevelCritical~0 1)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (not (= 1 ~systemActive~0))) (.cse12 (and .cse8 .cse1 .cse2)) (.cse11 (not (= ~methaneLevelCritical~0 0)))) (and (or (and .cse0 .cse1 .cse2) .cse3 .cse4 .cse5 .cse6) (or .cse7 (and .cse8 .cse2 .cse9) (not (= 0 ~systemActive~0))) (or .cse4 .cse10 .cse11 .cse5) (or .cse4 (< |old(~waterLevel~0)| 2) .cse10 .cse5 .cse6) (or .cse7 .cse3 .cse4 .cse12 .cse6) (or .cse7 .cse3 .cse4 .cse12 .cse11)))) [2023-11-06 22:58:35,334 INFO L899 garLoopResultBuilder]: For program point L901(lines 901 907) no Hoare annotation was computed. [2023-11-06 22:58:35,334 INFO L899 garLoopResultBuilder]: For program point L369(lines 369 377) no Hoare annotation was computed. [2023-11-06 22:58:35,334 INFO L899 garLoopResultBuilder]: For program point L365(lines 365 382) no Hoare annotation was computed. [2023-11-06 22:58:35,335 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 277 300) no Hoare annotation was computed. [2023-11-06 22:58:35,335 INFO L895 garLoopResultBuilder]: At program point isMethaneAlarm_returnLabel#1(lines 402 412) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (< ~methaneLevelCritical~0 1)) (.cse7 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 (and .cse0 (= ~methAndRunningLastTime~0 0) .cse5) .cse3 .cse6) (or .cse7 .cse4 .cse1 .cse2) (or .cse1 (< |old(~waterLevel~0)| 2) (and .cse0 .cse5) .cse3 .cse6) (or .cse7 .cse4 .cse1 .cse6) (or .cse7 (not (= 0 ~systemActive~0))))) [2023-11-06 22:58:35,336 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 413 421) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |timeShift_isPumpRunning_#res#1| 0))) (let ((.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= 1 ~systemActive~0))) (.cse8 (< |old(~pumpRunning~0)| 1)) (.cse9 (and .cse1 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse2)) (.cse7 (< ~methaneLevelCritical~0 1))) (and (or .cse0 (and .cse1 .cse2 .cse3 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (not (= 0 ~systemActive~0))) (let ((.cse5 (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse4 (and .cse1 .cse5 .cse2 .cse3) .cse6 (and (<= 1 ~pumpRunning~0) .cse5 (<= 2 ~waterLevel~0) .cse3) .cse7)) (or .cse6 (< |old(~waterLevel~0)| 2) .cse8 .cse9 .cse7) (or .cse6 .cse10 .cse8) (or .cse0 .cse4 .cse6 .cse10) (or .cse4 .cse6 .cse8 .cse9 .cse7)))) [2023-11-06 22:58:35,336 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1019) no Hoare annotation was computed. [2023-11-06 22:58:35,337 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 134 142) the Hoare annotation is: true [2023-11-06 22:58:35,337 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 134 142) no Hoare annotation was computed. [2023-11-06 22:58:35,337 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 134 142) no Hoare annotation was computed. [2023-11-06 22:58:35,337 INFO L895 garLoopResultBuilder]: At program point L502(line 502) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 1 ~systemActive~0) .cse0) (and (<= 2 ~waterLevel~0) .cse0 (not (= 0 ~systemActive~0))))) [2023-11-06 22:58:35,338 INFO L899 garLoopResultBuilder]: For program point L213(lines 212 259) no Hoare annotation was computed. [2023-11-06 22:58:35,338 INFO L899 garLoopResultBuilder]: For program point L242(lines 242 255) no Hoare annotation was computed. [2023-11-06 22:58:35,338 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 980 990) the Hoare annotation is: true [2023-11-06 22:58:35,338 INFO L895 garLoopResultBuilder]: At program point L234(line 234) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse3 (= 0 ~systemActive~0)))) [2023-11-06 22:58:35,339 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 64 70) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:58:35,339 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 991 1013) the Hoare annotation is: true [2023-11-06 22:58:35,339 INFO L902 garLoopResultBuilder]: At program point L263(lines 202 267) the Hoare annotation is: true [2023-11-06 22:58:35,339 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 22:58:35,340 INFO L899 garLoopResultBuilder]: For program point L222(lines 222 228) no Hoare annotation was computed. [2023-11-06 22:58:35,340 INFO L899 garLoopResultBuilder]: For program point L222-1(lines 222 228) no Hoare annotation was computed. [2023-11-06 22:58:35,340 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 22:58:35,340 INFO L899 garLoopResultBuilder]: For program point L214(lines 214 218) no Hoare annotation was computed. [2023-11-06 22:58:35,340 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 973 979) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:58:35,341 INFO L895 garLoopResultBuilder]: At program point L260(lines 211 261) the Hoare annotation is: false [2023-11-06 22:58:35,341 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 22:58:35,341 INFO L899 garLoopResultBuilder]: For program point L248(lines 248 254) no Hoare annotation was computed. [2023-11-06 22:58:35,342 INFO L895 garLoopResultBuilder]: At program point L248-2(lines 242 255) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse1 .cse2 .cse3) (and .cse5 .cse4 .cse1 .cse2 .cse3) (and .cse5 .cse4 .cse6 .cse2 .cse3) (and .cse5 .cse3 (= 0 ~systemActive~0)) (and .cse0 .cse6 .cse2 .cse3))) [2023-11-06 22:58:35,344 INFO L899 garLoopResultBuilder]: For program point L500(lines 500 506) no Hoare annotation was computed. [2023-11-06 22:58:35,344 INFO L899 garLoopResultBuilder]: For program point L500-1(lines 500 506) no Hoare annotation was computed. [2023-11-06 22:58:35,344 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 22:58:35,345 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 71 77) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:58:35,345 INFO L899 garLoopResultBuilder]: For program point L232(lines 232 238) no Hoare annotation was computed. [2023-11-06 22:58:35,345 INFO L899 garLoopResultBuilder]: For program point L232-1(lines 232 238) no Hoare annotation was computed. [2023-11-06 22:58:35,346 INFO L895 garLoopResultBuilder]: At program point L257(lines 212 259) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse3 (= 0 ~systemActive~0)))) [2023-11-06 22:58:35,346 INFO L895 garLoopResultBuilder]: At program point L224(line 224) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse3 (= 0 ~systemActive~0)))) [2023-11-06 22:58:35,347 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification2_spec__1_returnLabel#1(lines 880 887) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:58:35,347 INFO L895 garLoopResultBuilder]: At program point stopSystem_returnLabel#1(lines 496 510) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= 0 ~systemActive~0)) [2023-11-06 22:58:35,347 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 78 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:58:35,348 INFO L899 garLoopResultBuilder]: For program point L1001(lines 1001 1008) no Hoare annotation was computed. [2023-11-06 22:58:35,349 INFO L899 garLoopResultBuilder]: For program point L1001-2(lines 1001 1008) no Hoare annotation was computed. [2023-11-06 22:58:35,349 INFO L895 garLoopResultBuilder]: At program point activatePump_returnLabel#1(lines 386 393) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse3 .cse0 .cse4 (< ~methaneLevelCritical~0 1)) (or .cse2 .cse3 .cse0 .cse1 .cse4))) [2023-11-06 22:58:35,350 INFO L899 garLoopResultBuilder]: For program point L467(lines 467 471) no Hoare annotation was computed. [2023-11-06 22:58:35,350 INFO L899 garLoopResultBuilder]: For program point L467-2(lines 467 471) no Hoare annotation was computed. [2023-11-06 22:58:35,350 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 309 333) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse3 .cse0 .cse1 .cse4) (or .cse2 .cse3 .cse0 .cse4 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:58:35,350 INFO L895 garLoopResultBuilder]: At program point L323(line 323) the Hoare annotation is: (let ((.cse5 (= 1 ~systemActive~0)) (.cse6 (= |old(~pumpRunning~0)| 0))) (let ((.cse2 (not .cse6)) (.cse0 (not .cse5)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (and (= ~pumpRunning~0 0) .cse5 .cse6 (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse0 .cse3 .cse4 (< ~methaneLevelCritical~0 1)) (or .cse2 .cse0 .cse1 .cse3 .cse4)))) [2023-11-06 22:58:35,351 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 175 188) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0))) (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (and .cse6 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)))) (.cse4 (and .cse6 (<= 2 ~waterLevel~0))) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse0 .cse3 .cse1 .cse4 .cse5) (or .cse2 .cse0 .cse3 .cse4 .cse5 (< ~methaneLevelCritical~0 1))))) [2023-11-06 22:58:35,351 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 458 476) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse7 (= 1 ~systemActive~0)) (.cse8 (= |old(~pumpRunning~0)| 0))) (let ((.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not .cse8)) (.cse1 (and .cse6 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) .cse7 .cse8 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0))) (.cse2 (not .cse7)) (.cse4 (and .cse6 (<= 2 ~waterLevel~0))) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse2 .cse3 (< |old(~pumpRunning~0)| 1)) (or .cse0 .cse1 .cse2 .cse4 .cse5 (< ~methaneLevelCritical~0 1))))) [2023-11-06 22:58:35,352 INFO L899 garLoopResultBuilder]: For program point L317(lines 317 325) no Hoare annotation was computed. [2023-11-06 22:58:35,352 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 309 333) no Hoare annotation was computed. [2023-11-06 22:58:35,352 INFO L899 garLoopResultBuilder]: For program point L313(lines 313 330) no Hoare annotation was computed. [2023-11-06 22:58:35,352 INFO L899 garLoopResultBuilder]: For program point L179(lines 179 185) no Hoare annotation was computed. [2023-11-06 22:58:35,353 INFO L895 garLoopResultBuilder]: At program point L328(line 328) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse0 .cse1 .cse3) (or .cse2 .cse0 .cse3 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:58:35,353 INFO L899 garLoopResultBuilder]: For program point L328-1(lines 309 333) no Hoare annotation was computed. [2023-11-06 22:58:35,353 INFO L899 garLoopResultBuilder]: For program point L114-1(lines 110 121) no Hoare annotation was computed. [2023-11-06 22:58:35,354 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 110 121) no Hoare annotation was computed. [2023-11-06 22:58:35,354 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 110 121) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse6 (< ~pumpRunning~0 1)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse2 .cse3 (not (= 0 ~systemActive~0))) (or .cse0 .cse1 .cse5 .cse2 .cse3) (or .cse6 .cse1 .cse5 .cse2 .cse3) (or .cse6 .cse1 (< |old(~waterLevel~0)| 2) .cse2 .cse4))) [2023-11-06 22:58:35,355 INFO L895 garLoopResultBuilder]: At program point L349(line 349) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse0 .cse1 .cse3) (or .cse2 .cse0 .cse3 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:58:35,355 INFO L895 garLoopResultBuilder]: At program point L345(line 345) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse0 .cse1 .cse3) (or .cse2 .cse0 .cse3 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:58:35,355 INFO L899 garLoopResultBuilder]: For program point L343(lines 343 351) no Hoare annotation was computed. [2023-11-06 22:58:35,356 INFO L899 garLoopResultBuilder]: For program point L339(lines 339 356) no Hoare annotation was computed. [2023-11-06 22:58:35,356 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 189 197) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse0 .cse1 .cse3) (or .cse2 .cse0 .cse3 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:58:35,356 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 335 359) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse3 .cse0 .cse1 .cse4) (or .cse2 .cse3 .cse0 .cse4 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:58:35,356 INFO L899 garLoopResultBuilder]: For program point L486(lines 486 490) no Hoare annotation was computed. [2023-11-06 22:58:35,357 INFO L899 garLoopResultBuilder]: For program point L486-2(lines 486 490) no Hoare annotation was computed. [2023-11-06 22:58:35,357 INFO L895 garLoopResultBuilder]: At program point L354(line 354) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse3 .cse0 .cse1 .cse4) (or .cse2 .cse3 .cse0 .cse4 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:58:35,357 INFO L899 garLoopResultBuilder]: For program point L354-1(lines 335 359) no Hoare annotation was computed. [2023-11-06 22:58:35,357 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 477 495) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse0 .cse1 .cse3) (or .cse2 .cse0 .cse3 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:58:35,358 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 335 359) no Hoare annotation was computed. [2023-11-06 22:58:35,361 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:58:35,364 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 22:58:35,464 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 10:58:35 BoogieIcfgContainer [2023-11-06 22:58:35,475 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 22:58:35,476 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 22:58:35,476 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 22:58:35,476 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 22:58:35,477 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:58:17" (3/4) ... [2023-11-06 22:58:35,480 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 22:58:35,485 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-06 22:58:35,486 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 22:58:35,486 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 22:58:35,486 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 22:58:35,486 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 22:58:35,486 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-06 22:58:35,487 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:58:35,487 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 22:58:35,487 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2023-11-06 22:58:35,507 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 18 nodes and edges [2023-11-06 22:58:35,508 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 22:58:35,509 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 22:58:35,510 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:58:35,511 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:58:35,559 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || ((pumpRunning == \old(pumpRunning)) && (methAndRunningLastTime == 0))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (!((\old(pumpRunning) == 0)) || !((0 == systemActive)))) [2023-11-06 22:58:35,560 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) || (methaneLevelCritical < 1)) && ((((((((pumpRunning == 0) && (1 <= \result)) && (1 <= tmp)) && (1 == systemActive)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && ((((!((\old(methAndRunningLastTime) == 0)) || ((((pumpRunning == 0) && (1 <= \result)) && (1 <= tmp)) && (1 == systemActive))) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || ((pumpRunning == 0) && (1 == systemActive)))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) || !((methaneLevelCritical == 0)))) && (!((\old(pumpRunning) == 0)) || !((0 == systemActive)))) [2023-11-06 22:58:35,563 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 <= \result)) && (1 == systemActive)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1)) && ((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\old(waterLevel) == waterLevel))) || !((0 == systemActive)))) && ((((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 == systemActive)) && (tmp == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (((pumpRunning == \old(pumpRunning)) && (methAndRunningLastTime == 0)) && (tmp == 0))) || (\old(pumpRunning) < 1))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\old(waterLevel) == waterLevel))) || (((1 <= pumpRunning) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (tmp == 0)) && (\old(waterLevel) == waterLevel))) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (tmp == 0)) && (\old(waterLevel) == waterLevel)))) && ((((!((\old(methAndRunningLastTime) == 0)) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 <= \result)) && (1 == systemActive))) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) [2023-11-06 22:58:35,564 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (((pumpRunning == \old(pumpRunning)) && (methAndRunningLastTime == 0)) && (1 <= \result))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((1 == systemActive)) || (\old(waterLevel) < 2)) || ((pumpRunning == \old(pumpRunning)) && (1 <= \result))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (!((\old(pumpRunning) == 0)) || !((0 == systemActive)))) [2023-11-06 22:58:35,565 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) || !((0 == systemActive))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) && ((((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (((pumpRunning == 0) && (1 <= \result)) && (\result == 0))) || (methaneLevelCritical < 1))) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (((pumpRunning == 0) && (1 <= \result)) && (\result == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:58:35,565 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || !((methAndRunningLastTime == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:58:35,566 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && !((\result == 0)))) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0)))) && (((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && !((\result == 0)))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:58:35,571 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1)) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && (((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (!((\old(pumpRunning) == 0)) || !((0 == systemActive)))) [2023-11-06 22:58:35,571 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || !((methAndRunningLastTime == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:58:35,572 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((\old(pumpRunning) == 0)) || ((((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && !((tmp == 0))) && (\result == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0))) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((((!((\old(pumpRunning) == 0)) || ((((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && !((tmp == 0))) && (\result == 0))) || !((1 == systemActive))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:58:35,575 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((!((\old(pumpRunning) == 0)) || ((1 <= pumpRunning) && (2 <= waterLevel))) || !((1 == systemActive))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) && ((((!((\old(pumpRunning) == 0)) || ((1 <= pumpRunning) && (2 <= waterLevel))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || !((methAndRunningLastTime == 0)))) [2023-11-06 22:58:35,648 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || ((pumpRunning == \old(pumpRunning)) && (methAndRunningLastTime == 0))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (!((\old(pumpRunning) == 0)) || !((0 == systemActive)))) [2023-11-06 22:58:35,648 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) || (methaneLevelCritical < 1)) && ((((((((pumpRunning == 0) && (1 <= \result)) && (1 <= tmp)) && (1 == systemActive)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && ((((!((\old(methAndRunningLastTime) == 0)) || ((((pumpRunning == 0) && (1 <= \result)) && (1 <= tmp)) && (1 == systemActive))) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || ((pumpRunning == 0) && (1 == systemActive)))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) || !((methaneLevelCritical == 0)))) && (!((\old(pumpRunning) == 0)) || !((0 == systemActive)))) [2023-11-06 22:58:35,649 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 <= \result)) && (1 == systemActive)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1)) && ((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\old(waterLevel) == waterLevel))) || !((0 == systemActive)))) && ((((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 == systemActive)) && (tmp == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (((pumpRunning == \old(pumpRunning)) && (methAndRunningLastTime == 0)) && (tmp == 0))) || (\old(pumpRunning) < 1))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\old(waterLevel) == waterLevel))) || (((1 <= pumpRunning) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (tmp == 0)) && (\old(waterLevel) == waterLevel))) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (tmp == 0)) && (\old(waterLevel) == waterLevel)))) && ((((!((\old(methAndRunningLastTime) == 0)) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 <= \result)) && (1 == systemActive))) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) [2023-11-06 22:58:35,650 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (((pumpRunning == \old(pumpRunning)) && (methAndRunningLastTime == 0)) && (1 <= \result))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((1 == systemActive)) || (\old(waterLevel) < 2)) || ((pumpRunning == \old(pumpRunning)) && (1 <= \result))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (!((\old(pumpRunning) == 0)) || !((0 == systemActive)))) [2023-11-06 22:58:35,650 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) || !((0 == systemActive))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) && ((((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (((pumpRunning == 0) && (1 <= \result)) && (\result == 0))) || (methaneLevelCritical < 1))) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (((pumpRunning == 0) && (1 <= \result)) && (\result == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:58:35,651 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || !((methAndRunningLastTime == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:58:35,651 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && !((\result == 0)))) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0)))) && (((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && !((\result == 0)))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:58:35,652 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1)) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && (((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (!((\old(pumpRunning) == 0)) || !((0 == systemActive)))) [2023-11-06 22:58:35,654 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || !((methAndRunningLastTime == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:58:35,655 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((\old(pumpRunning) == 0)) || ((((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && !((tmp == 0))) && (\result == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0))) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((((!((\old(pumpRunning) == 0)) || ((((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && !((tmp == 0))) && (\result == 0))) || !((1 == systemActive))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:58:35,655 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((!((\old(pumpRunning) == 0)) || ((1 <= pumpRunning) && (2 <= waterLevel))) || !((1 == systemActive))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) && ((((!((\old(pumpRunning) == 0)) || ((1 <= pumpRunning) && (2 <= waterLevel))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || !((methAndRunningLastTime == 0)))) [2023-11-06 22:58:35,702 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 22:58:35,703 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 22:58:35,703 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 22:58:35,704 INFO L158 Benchmark]: Toolchain (without parser) took 19590.39ms. Allocated memory was 153.1MB in the beginning and 268.4MB in the end (delta: 115.3MB). Free memory was 110.4MB in the beginning and 179.3MB in the end (delta: -68.9MB). Peak memory consumption was 48.6MB. Max. memory is 16.1GB. [2023-11-06 22:58:35,705 INFO L158 Benchmark]: CDTParser took 0.37ms. Allocated memory is still 111.1MB. Free memory was 61.3MB in the beginning and 61.1MB in the end (delta: 160.9kB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:58:35,705 INFO L158 Benchmark]: CACSL2BoogieTranslator took 605.07ms. Allocated memory is still 153.1MB. Free memory was 109.9MB in the beginning and 90.5MB in the end (delta: 19.5MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-06 22:58:35,706 INFO L158 Benchmark]: Boogie Procedure Inliner took 62.37ms. Allocated memory is still 153.1MB. Free memory was 90.5MB in the beginning and 88.0MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:58:35,707 INFO L158 Benchmark]: Boogie Preprocessor took 44.84ms. Allocated memory is still 153.1MB. Free memory was 88.0MB in the beginning and 86.4MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:58:35,707 INFO L158 Benchmark]: RCFGBuilder took 631.07ms. Allocated memory is still 153.1MB. Free memory was 86.4MB in the beginning and 68.6MB in the end (delta: 17.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2023-11-06 22:58:35,708 INFO L158 Benchmark]: TraceAbstraction took 17982.23ms. Allocated memory was 153.1MB in the beginning and 268.4MB in the end (delta: 115.3MB). Free memory was 122.8MB in the beginning and 187.7MB in the end (delta: -64.9MB). Peak memory consumption was 160.4MB. Max. memory is 16.1GB. [2023-11-06 22:58:35,708 INFO L158 Benchmark]: Witness Printer took 227.44ms. Allocated memory is still 268.4MB. Free memory was 187.7MB in the beginning and 179.3MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-06 22:58:35,713 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.37ms. Allocated memory is still 111.1MB. Free memory was 61.3MB in the beginning and 61.1MB in the end (delta: 160.9kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 605.07ms. Allocated memory is still 153.1MB. Free memory was 109.9MB in the beginning and 90.5MB in the end (delta: 19.5MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 62.37ms. Allocated memory is still 153.1MB. Free memory was 90.5MB in the beginning and 88.0MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 44.84ms. Allocated memory is still 153.1MB. Free memory was 88.0MB in the beginning and 86.4MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 631.07ms. Allocated memory is still 153.1MB. Free memory was 86.4MB in the beginning and 68.6MB in the end (delta: 17.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 17982.23ms. Allocated memory was 153.1MB in the beginning and 268.4MB in the end (delta: 115.3MB). Free memory was 122.8MB in the beginning and 187.7MB in the end (delta: -64.9MB). Peak memory consumption was 160.4MB. Max. memory is 16.1GB. * Witness Printer took 227.44ms. Allocated memory is still 268.4MB. Free memory was 187.7MB in the beginning and 179.3MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] - GenericResultAtLocation [Line: 87]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [87] - GenericResultAtLocation [Line: 198]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [198] - GenericResultAtLocation [Line: 268]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [268] - GenericResultAtLocation [Line: 511]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [511] - GenericResultAtLocation [Line: 877]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [877] - GenericResultAtLocation [Line: 917]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [917] - GenericResultAtLocation [Line: 1014]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [1014] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1019]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 106 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 17.8s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 3.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 8.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1592 SdHoareTripleChecker+Valid, 1.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1556 mSDsluCounter, 4348 SdHoareTripleChecker+Invalid, 1.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2897 mSDsCounter, 449 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1075 IncrementalHoareTripleChecker+Invalid, 1524 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 449 mSolverCounterUnsat, 1451 mSDtfsCounter, 1075 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 627 GetRequests, 530 SyntacticMatches, 2 SemanticMatches, 95 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 165 ImplicationChecksByTransitivity, 1.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1067occurred in iteration=8, InterpolantAutomatonStates: 77, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.9s AutomataMinimizationTime, 12 MinimizatonAttempts, 259 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 49 LocationsWithAnnotation, 2003 PreInvPairs, 2229 NumberOfFragments, 2842 HoareAnnotationTreeSize, 2003 FomulaSimplifications, 2544 FormulaSimplificationTreeSizeReduction, 0.6s HoareSimplificationTime, 49 FomulaSimplificationsInter, 13976 FormulaSimplificationTreeSizeReductionInter, 7.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 3.5s InterpolantComputationTime, 1022 NumberOfCodeBlocks, 1022 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 1112 ConstructedInterpolants, 0 QuantifiedInterpolants, 2313 SizeOfPredicates, 7 NumberOfNonLiveVariables, 1058 ConjunctsInSsa, 23 ConjunctsInUnsatCore, 16 InterpolantComputations, 12 PerfectInterpolantSequences, 250/286 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 496]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (splverifierCounter == 0)) && (0 == systemActive)) - InvariantResult [Line: 973]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 189]: Loop Invariant Derived loop invariant: ((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || !((methAndRunningLastTime == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 477]: Loop Invariant Derived loop invariant: ((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || !((methAndRunningLastTime == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 880]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 1015]: Loop Invariant Derived loop invariant: ((((((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1)) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && (((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (!((\old(pumpRunning) == 0)) || !((0 == systemActive)))) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 386]: Loop Invariant Derived loop invariant: ((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((!((\old(pumpRunning) == 0)) || ((1 <= pumpRunning) && (2 <= waterLevel))) || !((1 == systemActive))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) && ((((!((\old(pumpRunning) == 0)) || ((1 <= pumpRunning) && (2 <= waterLevel))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || !((methAndRunningLastTime == 0)))) - InvariantResult [Line: 888]: Loop Invariant Derived loop invariant: (((((((((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 <= \result)) && (1 == systemActive)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1)) && ((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\old(waterLevel) == waterLevel))) || !((0 == systemActive)))) && ((((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 == systemActive)) && (tmp == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (((pumpRunning == \old(pumpRunning)) && (methAndRunningLastTime == 0)) && (tmp == 0))) || (\old(pumpRunning) < 1))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\old(waterLevel) == waterLevel))) || (((1 <= pumpRunning) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (tmp == 0)) && (\old(waterLevel) == waterLevel))) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (tmp == 0)) && (\old(waterLevel) == waterLevel)))) && ((((!((\old(methAndRunningLastTime) == 0)) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 <= \result)) && (1 == systemActive))) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) - InvariantResult [Line: 78]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (((pumpRunning == \old(pumpRunning)) && (methAndRunningLastTime == 0)) && (1 <= \result))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((1 == systemActive)) || (\old(waterLevel) < 2)) || ((pumpRunning == \old(pumpRunning)) && (1 <= \result))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (!((\old(pumpRunning) == 0)) || !((0 == systemActive)))) - InvariantResult [Line: 919]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 212]: Loop Invariant Derived loop invariant: (((((((((1 <= pumpRunning) && (1 <= methaneLevelCritical)) && (2 <= waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0)) || (((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0))) || (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 <= methaneLevelCritical)) && (1 == systemActive)) && (splverifierCounter == 0))) || (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0))) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (splverifierCounter == 0)) && (0 == systemActive))) - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 361]: Loop Invariant Derived loop invariant: ((((((((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) || (methaneLevelCritical < 1)) && ((((((((pumpRunning == 0) && (1 <= \result)) && (1 <= tmp)) && (1 == systemActive)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && ((((!((\old(methAndRunningLastTime) == 0)) || ((((pumpRunning == 0) && (1 <= \result)) && (1 <= tmp)) && (1 == systemActive))) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || ((pumpRunning == 0) && (1 == systemActive)))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) || !((methaneLevelCritical == 0)))) && (!((\old(pumpRunning) == 0)) || !((0 == systemActive)))) - InvariantResult [Line: 202]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 991]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 413]: Loop Invariant Derived loop invariant: (((((((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) || !((0 == systemActive))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) && ((((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (((pumpRunning == 0) && (1 <= \result)) && (\result == 0))) || (methaneLevelCritical < 1))) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (((pumpRunning == 0) && (1 <= \result)) && (\result == 0))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 98]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || ((pumpRunning == \old(pumpRunning)) && (methAndRunningLastTime == 0))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (!((\old(pumpRunning) == 0)) || !((0 == systemActive)))) - InvariantResult [Line: 175]: Loop Invariant Derived loop invariant: ((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && !((\result == 0)))) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0)))) && (((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && !((\result == 0)))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 458]: Loop Invariant Derived loop invariant: (((((((!((\old(pumpRunning) == 0)) || ((((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && !((tmp == 0))) && (\result == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0))) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((((!((\old(pumpRunning) == 0)) || ((((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && !((tmp == 0))) && (\result == 0))) || !((1 == systemActive))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 211]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 929]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 980]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-06 22:58:35,789 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f8cd54e4-ead2-4e0d-ae92-9765b2e950e3/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE