./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product56.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product56.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash fa0eab3945757815cbe114f72b31b9c97b3f41e20a7d5f245c817ae82afdf9aa --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 22:51:04,068 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 22:51:04,198 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 22:51:04,204 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 22:51:04,206 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 22:51:04,250 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 22:51:04,252 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 22:51:04,253 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 22:51:04,255 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 22:51:04,260 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 22:51:04,261 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 22:51:04,262 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 22:51:04,263 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 22:51:04,265 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 22:51:04,265 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 22:51:04,266 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 22:51:04,266 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 22:51:04,267 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 22:51:04,267 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 22:51:04,268 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 22:51:04,269 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 22:51:04,269 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 22:51:04,270 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 22:51:04,270 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 22:51:04,271 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 22:51:04,272 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 22:51:04,273 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 22:51:04,273 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 22:51:04,274 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:51:04,275 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 22:51:04,276 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 22:51:04,276 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 22:51:04,277 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 22:51:04,277 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 22:51:04,278 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 22:51:04,278 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 22:51:04,278 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 22:51:04,279 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 22:51:04,279 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 22:51:04,279 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> fa0eab3945757815cbe114f72b31b9c97b3f41e20a7d5f245c817ae82afdf9aa [2023-11-06 22:51:04,638 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 22:51:04,671 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 22:51:04,674 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 22:51:04,676 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 22:51:04,676 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 22:51:04,678 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec2_product56.cil.c [2023-11-06 22:51:07,887 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 22:51:08,258 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 22:51:08,259 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/sv-benchmarks/c/product-lines/minepump_spec2_product56.cil.c [2023-11-06 22:51:08,285 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/data/e4b456e00/fb64b370c36540379636c158387a3baf/FLAGeb6ab1635 [2023-11-06 22:51:08,306 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/data/e4b456e00/fb64b370c36540379636c158387a3baf [2023-11-06 22:51:08,313 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 22:51:08,315 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 22:51:08,321 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 22:51:08,322 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 22:51:08,328 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 22:51:08,329 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:51:08" (1/1) ... [2023-11-06 22:51:08,330 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@72c4e8f5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:08, skipping insertion in model container [2023-11-06 22:51:08,330 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:51:08" (1/1) ... [2023-11-06 22:51:08,414 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 22:51:08,685 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/sv-benchmarks/c/product-lines/minepump_spec2_product56.cil.c[11292,11305] [2023-11-06 22:51:08,775 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:51:08,806 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 22:51:08,820 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] [2023-11-06 22:51:08,822 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [415] [2023-11-06 22:51:08,823 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [424] [2023-11-06 22:51:08,823 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [535] [2023-11-06 22:51:08,823 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [575] [2023-11-06 22:51:08,824 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [827] [2023-11-06 22:51:08,825 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [897] [2023-11-06 22:51:08,825 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [935] [2023-11-06 22:51:08,949 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/sv-benchmarks/c/product-lines/minepump_spec2_product56.cil.c[11292,11305] [2023-11-06 22:51:08,982 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:51:09,005 INFO L206 MainTranslator]: Completed translation [2023-11-06 22:51:09,005 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:09 WrapperNode [2023-11-06 22:51:09,005 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 22:51:09,007 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 22:51:09,007 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 22:51:09,007 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 22:51:09,017 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:09" (1/1) ... [2023-11-06 22:51:09,035 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:09" (1/1) ... [2023-11-06 22:51:09,071 INFO L138 Inliner]: procedures = 59, calls = 106, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 232 [2023-11-06 22:51:09,072 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 22:51:09,073 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 22:51:09,073 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 22:51:09,073 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 22:51:09,085 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:09" (1/1) ... [2023-11-06 22:51:09,085 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:09" (1/1) ... [2023-11-06 22:51:09,089 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:09" (1/1) ... [2023-11-06 22:51:09,090 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:09" (1/1) ... [2023-11-06 22:51:09,097 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:09" (1/1) ... [2023-11-06 22:51:09,102 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:09" (1/1) ... [2023-11-06 22:51:09,105 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:09" (1/1) ... [2023-11-06 22:51:09,107 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:09" (1/1) ... [2023-11-06 22:51:09,111 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 22:51:09,112 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 22:51:09,112 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 22:51:09,113 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 22:51:09,114 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:09" (1/1) ... [2023-11-06 22:51:09,122 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:51:09,140 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:51:09,178 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 22:51:09,181 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 22:51:09,217 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 22:51:09,218 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 22:51:09,218 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 22:51:09,218 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 22:51:09,218 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 22:51:09,219 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 22:51:09,219 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 22:51:09,219 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-06 22:51:09,220 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-06 22:51:09,220 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:51:09,220 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:51:09,220 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 22:51:09,221 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 22:51:09,221 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-06 22:51:09,221 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-06 22:51:09,221 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-06 22:51:09,222 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-06 22:51:09,222 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 22:51:09,222 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 22:51:09,222 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 22:51:09,223 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 22:51:09,223 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 22:51:09,329 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 22:51:09,332 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 22:51:09,718 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 22:51:09,727 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 22:51:09,728 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 22:51:09,731 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:51:09 BoogieIcfgContainer [2023-11-06 22:51:09,731 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 22:51:09,735 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 22:51:09,735 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 22:51:09,739 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 22:51:09,740 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 10:51:08" (1/3) ... [2023-11-06 22:51:09,741 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6c28afcb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:51:09, skipping insertion in model container [2023-11-06 22:51:09,741 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:51:09" (2/3) ... [2023-11-06 22:51:09,741 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6c28afcb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:51:09, skipping insertion in model container [2023-11-06 22:51:09,742 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:51:09" (3/3) ... [2023-11-06 22:51:09,744 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product56.cil.c [2023-11-06 22:51:09,771 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 22:51:09,774 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 22:51:09,853 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 22:51:09,864 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@45eee471, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 22:51:09,865 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 22:51:09,871 INFO L276 IsEmpty]: Start isEmpty. Operand has 107 states, 79 states have (on average 1.379746835443038) internal successors, (109), 90 states have internal predecessors, (109), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2023-11-06 22:51:09,889 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-11-06 22:51:09,889 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:51:09,890 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:09,892 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:51:09,900 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:09,901 INFO L85 PathProgramCache]: Analyzing trace with hash -1548791886, now seen corresponding path program 1 times [2023-11-06 22:51:09,913 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:09,914 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [316024694] [2023-11-06 22:51:09,914 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:09,915 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:10,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:10,223 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-06 22:51:10,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:10,243 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:10,253 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:10,253 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [316024694] [2023-11-06 22:51:10,254 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [316024694] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:10,254 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:51:10,254 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:51:10,256 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [595570237] [2023-11-06 22:51:10,256 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:10,260 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 22:51:10,260 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:10,287 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 22:51:10,287 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:51:10,290 INFO L87 Difference]: Start difference. First operand has 107 states, 79 states have (on average 1.379746835443038) internal successors, (109), 90 states have internal predecessors, (109), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:51:10,372 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:10,373 INFO L93 Difference]: Finished difference Result 205 states and 280 transitions. [2023-11-06 22:51:10,374 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 22:51:10,376 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2023-11-06 22:51:10,376 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:51:10,386 INFO L225 Difference]: With dead ends: 205 [2023-11-06 22:51:10,387 INFO L226 Difference]: Without dead ends: 98 [2023-11-06 22:51:10,390 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:51:10,394 INFO L413 NwaCegarLoop]: 137 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 137 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:51:10,395 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 137 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:51:10,410 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 98 states. [2023-11-06 22:51:10,451 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 98 to 98. [2023-11-06 22:51:10,453 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 98 states, 72 states have (on average 1.3194444444444444) internal successors, (95), 82 states have internal predecessors, (95), 17 states have call successors, (17), 9 states have call predecessors, (17), 8 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-06 22:51:10,456 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 98 states to 98 states and 128 transitions. [2023-11-06 22:51:10,461 INFO L78 Accepts]: Start accepts. Automaton has 98 states and 128 transitions. Word has length 25 [2023-11-06 22:51:10,462 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:51:10,462 INFO L495 AbstractCegarLoop]: Abstraction has 98 states and 128 transitions. [2023-11-06 22:51:10,462 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:51:10,463 INFO L276 IsEmpty]: Start isEmpty. Operand 98 states and 128 transitions. [2023-11-06 22:51:10,465 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-11-06 22:51:10,466 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:51:10,466 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:10,466 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 22:51:10,466 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:51:10,467 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:10,467 INFO L85 PathProgramCache]: Analyzing trace with hash 1194219528, now seen corresponding path program 1 times [2023-11-06 22:51:10,468 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:10,468 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [494716745] [2023-11-06 22:51:10,468 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:10,469 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:10,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:10,609 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-06 22:51:10,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:10,615 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:10,615 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:10,616 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [494716745] [2023-11-06 22:51:10,616 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [494716745] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:10,616 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:51:10,616 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:51:10,617 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [777431696] [2023-11-06 22:51:10,617 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:10,660 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:51:10,661 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:10,661 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:51:10,662 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:51:10,662 INFO L87 Difference]: Start difference. First operand 98 states and 128 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:51:10,727 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:10,727 INFO L93 Difference]: Finished difference Result 156 states and 204 transitions. [2023-11-06 22:51:10,728 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:51:10,728 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2023-11-06 22:51:10,729 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:51:10,730 INFO L225 Difference]: With dead ends: 156 [2023-11-06 22:51:10,731 INFO L226 Difference]: Without dead ends: 89 [2023-11-06 22:51:10,732 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:51:10,733 INFO L413 NwaCegarLoop]: 115 mSDtfsCounter, 17 mSDsluCounter, 93 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 208 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:51:10,734 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 208 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:51:10,735 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89 states. [2023-11-06 22:51:10,766 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89 to 89. [2023-11-06 22:51:10,766 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 89 states, 66 states have (on average 1.3333333333333333) internal successors, (88), 76 states have internal predecessors, (88), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2023-11-06 22:51:10,768 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89 states to 89 states and 116 transitions. [2023-11-06 22:51:10,769 INFO L78 Accepts]: Start accepts. Automaton has 89 states and 116 transitions. Word has length 26 [2023-11-06 22:51:10,769 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:51:10,769 INFO L495 AbstractCegarLoop]: Abstraction has 89 states and 116 transitions. [2023-11-06 22:51:10,769 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:51:10,772 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 116 transitions. [2023-11-06 22:51:10,779 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2023-11-06 22:51:10,782 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:51:10,782 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:10,783 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 22:51:10,783 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:51:10,784 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:10,786 INFO L85 PathProgramCache]: Analyzing trace with hash -72231615, now seen corresponding path program 1 times [2023-11-06 22:51:10,786 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:10,787 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [618450609] [2023-11-06 22:51:10,788 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:10,789 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:10,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:10,930 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:51:10,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:10,934 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:10,934 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:10,935 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [618450609] [2023-11-06 22:51:10,935 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [618450609] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:10,935 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:51:10,936 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:51:10,936 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [608686645] [2023-11-06 22:51:10,936 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:10,937 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:51:10,937 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:10,937 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:51:10,938 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:51:10,938 INFO L87 Difference]: Start difference. First operand 89 states and 116 transitions. Second operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:51:10,983 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:10,984 INFO L93 Difference]: Finished difference Result 249 states and 331 transitions. [2023-11-06 22:51:10,984 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:51:10,984 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2023-11-06 22:51:10,985 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:51:10,988 INFO L225 Difference]: With dead ends: 249 [2023-11-06 22:51:10,988 INFO L226 Difference]: Without dead ends: 168 [2023-11-06 22:51:10,990 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:51:10,992 INFO L413 NwaCegarLoop]: 132 mSDtfsCounter, 108 mSDsluCounter, 103 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 108 SdHoareTripleChecker+Valid, 235 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:51:10,992 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [108 Valid, 235 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:51:11,002 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 168 states. [2023-11-06 22:51:11,037 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 168 to 165. [2023-11-06 22:51:11,038 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 165 states, 120 states have (on average 1.3583333333333334) internal successors, (163), 139 states have internal predecessors, (163), 28 states have call successors, (28), 16 states have call predecessors, (28), 16 states have return successors, (28), 17 states have call predecessors, (28), 28 states have call successors, (28) [2023-11-06 22:51:11,041 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 165 states to 165 states and 219 transitions. [2023-11-06 22:51:11,041 INFO L78 Accepts]: Start accepts. Automaton has 165 states and 219 transitions. Word has length 31 [2023-11-06 22:51:11,041 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:51:11,042 INFO L495 AbstractCegarLoop]: Abstraction has 165 states and 219 transitions. [2023-11-06 22:51:11,042 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:51:11,042 INFO L276 IsEmpty]: Start isEmpty. Operand 165 states and 219 transitions. [2023-11-06 22:51:11,044 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2023-11-06 22:51:11,044 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:51:11,045 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:11,045 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 22:51:11,045 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:51:11,046 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:11,046 INFO L85 PathProgramCache]: Analyzing trace with hash 301498308, now seen corresponding path program 1 times [2023-11-06 22:51:11,046 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:11,046 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2030214170] [2023-11-06 22:51:11,047 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:11,047 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:11,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:11,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 22:51:11,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:11,254 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:11,267 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:11,267 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2030214170] [2023-11-06 22:51:11,268 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2030214170] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:11,268 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:51:11,268 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:51:11,269 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1229460013] [2023-11-06 22:51:11,269 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:11,269 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:51:11,270 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:11,270 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:51:11,271 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:51:11,271 INFO L87 Difference]: Start difference. First operand 165 states and 219 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:51:11,395 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:11,395 INFO L93 Difference]: Finished difference Result 421 states and 574 transitions. [2023-11-06 22:51:11,395 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-06 22:51:11,396 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2023-11-06 22:51:11,396 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:51:11,400 INFO L225 Difference]: With dead ends: 421 [2023-11-06 22:51:11,400 INFO L226 Difference]: Without dead ends: 264 [2023-11-06 22:51:11,403 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:51:11,405 INFO L413 NwaCegarLoop]: 117 mSDtfsCounter, 61 mSDsluCounter, 308 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 61 SdHoareTripleChecker+Valid, 425 SdHoareTripleChecker+Invalid, 45 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:51:11,406 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [61 Valid, 425 Invalid, 45 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:51:11,407 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 264 states. [2023-11-06 22:51:11,470 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 264 to 255. [2023-11-06 22:51:11,474 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 255 states, 188 states have (on average 1.3085106382978724) internal successors, (246), 205 states have internal predecessors, (246), 36 states have call successors, (36), 30 states have call predecessors, (36), 30 states have return successors, (48), 31 states have call predecessors, (48), 36 states have call successors, (48) [2023-11-06 22:51:11,478 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 255 states to 255 states and 330 transitions. [2023-11-06 22:51:11,479 INFO L78 Accepts]: Start accepts. Automaton has 255 states and 330 transitions. Word has length 34 [2023-11-06 22:51:11,479 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:51:11,480 INFO L495 AbstractCegarLoop]: Abstraction has 255 states and 330 transitions. [2023-11-06 22:51:11,481 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:51:11,481 INFO L276 IsEmpty]: Start isEmpty. Operand 255 states and 330 transitions. [2023-11-06 22:51:11,485 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2023-11-06 22:51:11,486 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:51:11,486 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:11,486 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 22:51:11,486 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:51:11,487 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:11,487 INFO L85 PathProgramCache]: Analyzing trace with hash -857967289, now seen corresponding path program 1 times [2023-11-06 22:51:11,487 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:11,488 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [329512538] [2023-11-06 22:51:11,488 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:11,488 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:11,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:11,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:51:11,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:11,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:51:11,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:11,730 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2023-11-06 22:51:11,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:11,735 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:11,735 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:11,735 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [329512538] [2023-11-06 22:51:11,735 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [329512538] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:11,736 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:51:11,736 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:51:11,737 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1602888403] [2023-11-06 22:51:11,738 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:11,738 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:51:11,738 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:11,739 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:51:11,739 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:51:11,740 INFO L87 Difference]: Start difference. First operand 255 states and 330 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:51:12,030 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:12,031 INFO L93 Difference]: Finished difference Result 570 states and 749 transitions. [2023-11-06 22:51:12,031 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:51:12,032 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 50 [2023-11-06 22:51:12,033 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:51:12,040 INFO L225 Difference]: With dead ends: 570 [2023-11-06 22:51:12,040 INFO L226 Difference]: Without dead ends: 323 [2023-11-06 22:51:12,042 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=29, Invalid=61, Unknown=0, NotChecked=0, Total=90 [2023-11-06 22:51:12,049 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 70 mSDsluCounter, 319 mSDsCounter, 0 mSdLazyCounter, 142 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 73 SdHoareTripleChecker+Valid, 415 SdHoareTripleChecker+Invalid, 167 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 142 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:51:12,050 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [73 Valid, 415 Invalid, 167 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 142 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:51:12,054 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 323 states. [2023-11-06 22:51:12,117 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 323 to 315. [2023-11-06 22:51:12,118 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 315 states, 234 states have (on average 1.2820512820512822) internal successors, (300), 251 states have internal predecessors, (300), 40 states have call successors, (40), 30 states have call predecessors, (40), 40 states have return successors, (62), 43 states have call predecessors, (62), 40 states have call successors, (62) [2023-11-06 22:51:12,123 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 315 states to 315 states and 402 transitions. [2023-11-06 22:51:12,124 INFO L78 Accepts]: Start accepts. Automaton has 315 states and 402 transitions. Word has length 50 [2023-11-06 22:51:12,129 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:51:12,129 INFO L495 AbstractCegarLoop]: Abstraction has 315 states and 402 transitions. [2023-11-06 22:51:12,130 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:51:12,130 INFO L276 IsEmpty]: Start isEmpty. Operand 315 states and 402 transitions. [2023-11-06 22:51:12,131 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2023-11-06 22:51:12,131 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:51:12,132 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:12,133 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-06 22:51:12,133 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:51:12,138 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:12,138 INFO L85 PathProgramCache]: Analyzing trace with hash -435265463, now seen corresponding path program 1 times [2023-11-06 22:51:12,139 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:12,139 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [674917813] [2023-11-06 22:51:12,139 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:12,140 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:12,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:12,253 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:51:12,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:12,271 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:51:12,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:12,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2023-11-06 22:51:12,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:12,303 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:12,303 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:12,304 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [674917813] [2023-11-06 22:51:12,304 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [674917813] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:12,304 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:51:12,304 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:51:12,305 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [286977045] [2023-11-06 22:51:12,305 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:12,305 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:51:12,306 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:12,306 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:51:12,307 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:51:12,307 INFO L87 Difference]: Start difference. First operand 315 states and 402 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:51:12,486 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:12,486 INFO L93 Difference]: Finished difference Result 640 states and 843 transitions. [2023-11-06 22:51:12,487 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 22:51:12,487 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 50 [2023-11-06 22:51:12,488 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:51:12,491 INFO L225 Difference]: With dead ends: 640 [2023-11-06 22:51:12,491 INFO L226 Difference]: Without dead ends: 333 [2023-11-06 22:51:12,492 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:51:12,494 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 72 mSDsluCounter, 227 mSDsCounter, 0 mSdLazyCounter, 109 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 324 SdHoareTripleChecker+Invalid, 130 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 109 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:51:12,494 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [76 Valid, 324 Invalid, 130 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 109 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:51:12,495 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 333 states. [2023-11-06 22:51:12,528 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 333 to 319. [2023-11-06 22:51:12,529 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 319 states, 238 states have (on average 1.2773109243697478) internal successors, (304), 255 states have internal predecessors, (304), 40 states have call successors, (40), 30 states have call predecessors, (40), 40 states have return successors, (62), 43 states have call predecessors, (62), 40 states have call successors, (62) [2023-11-06 22:51:12,532 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 319 states to 319 states and 406 transitions. [2023-11-06 22:51:12,532 INFO L78 Accepts]: Start accepts. Automaton has 319 states and 406 transitions. Word has length 50 [2023-11-06 22:51:12,533 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:51:12,533 INFO L495 AbstractCegarLoop]: Abstraction has 319 states and 406 transitions. [2023-11-06 22:51:12,533 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:51:12,533 INFO L276 IsEmpty]: Start isEmpty. Operand 319 states and 406 transitions. [2023-11-06 22:51:12,534 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2023-11-06 22:51:12,535 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:51:12,535 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:12,535 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-06 22:51:12,536 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:51:12,536 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:12,536 INFO L85 PathProgramCache]: Analyzing trace with hash 2054263499, now seen corresponding path program 1 times [2023-11-06 22:51:12,537 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:12,537 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [325202006] [2023-11-06 22:51:12,537 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:12,537 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:12,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:12,607 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:51:12,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:12,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:51:12,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:12,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2023-11-06 22:51:12,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:12,641 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:12,641 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:12,641 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [325202006] [2023-11-06 22:51:12,641 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [325202006] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:12,642 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:51:12,642 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:51:12,642 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [637541146] [2023-11-06 22:51:12,642 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:12,643 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:51:12,643 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:12,644 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:51:12,644 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:51:12,644 INFO L87 Difference]: Start difference. First operand 319 states and 406 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-06 22:51:12,978 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:12,978 INFO L93 Difference]: Finished difference Result 901 states and 1190 transitions. [2023-11-06 22:51:12,979 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:51:12,979 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 50 [2023-11-06 22:51:12,980 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:51:12,985 INFO L225 Difference]: With dead ends: 901 [2023-11-06 22:51:12,985 INFO L226 Difference]: Without dead ends: 590 [2023-11-06 22:51:12,987 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:51:12,991 INFO L413 NwaCegarLoop]: 140 mSDtfsCounter, 235 mSDsluCounter, 202 mSDsCounter, 0 mSdLazyCounter, 155 mSolverCounterSat, 69 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 242 SdHoareTripleChecker+Valid, 342 SdHoareTripleChecker+Invalid, 224 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 69 IncrementalHoareTripleChecker+Valid, 155 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:51:12,991 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [242 Valid, 342 Invalid, 224 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [69 Valid, 155 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:51:12,993 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 590 states. [2023-11-06 22:51:13,063 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 590 to 583. [2023-11-06 22:51:13,066 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 583 states, 434 states have (on average 1.2419354838709677) internal successors, (539), 460 states have internal predecessors, (539), 75 states have call successors, (75), 67 states have call predecessors, (75), 73 states have return successors, (127), 76 states have call predecessors, (127), 75 states have call successors, (127) [2023-11-06 22:51:13,073 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 583 states to 583 states and 741 transitions. [2023-11-06 22:51:13,074 INFO L78 Accepts]: Start accepts. Automaton has 583 states and 741 transitions. Word has length 50 [2023-11-06 22:51:13,074 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:51:13,074 INFO L495 AbstractCegarLoop]: Abstraction has 583 states and 741 transitions. [2023-11-06 22:51:13,074 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-06 22:51:13,075 INFO L276 IsEmpty]: Start isEmpty. Operand 583 states and 741 transitions. [2023-11-06 22:51:13,076 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2023-11-06 22:51:13,077 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:51:13,077 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:13,077 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-06 22:51:13,077 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:51:13,078 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:13,078 INFO L85 PathProgramCache]: Analyzing trace with hash 863852389, now seen corresponding path program 1 times [2023-11-06 22:51:13,078 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:13,079 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1598801772] [2023-11-06 22:51:13,079 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:13,079 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:13,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:13,184 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:51:13,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:13,193 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-06 22:51:13,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:13,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:51:13,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:13,211 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2023-11-06 22:51:13,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:13,215 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:13,216 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:13,216 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1598801772] [2023-11-06 22:51:13,219 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1598801772] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:13,219 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:51:13,219 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:51:13,219 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [254738856] [2023-11-06 22:51:13,219 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:13,220 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:51:13,220 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:13,221 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:51:13,221 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:51:13,222 INFO L87 Difference]: Start difference. First operand 583 states and 741 transitions. Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 3 states have internal predecessors, (45), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:51:13,760 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:13,760 INFO L93 Difference]: Finished difference Result 1198 states and 1625 transitions. [2023-11-06 22:51:13,761 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-06 22:51:13,761 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 3 states have internal predecessors, (45), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 54 [2023-11-06 22:51:13,763 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:51:13,774 INFO L225 Difference]: With dead ends: 1198 [2023-11-06 22:51:13,774 INFO L226 Difference]: Without dead ends: 1196 [2023-11-06 22:51:13,775 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2023-11-06 22:51:13,777 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 349 mSDsluCounter, 141 mSDsCounter, 0 mSdLazyCounter, 184 mSolverCounterSat, 154 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 354 SdHoareTripleChecker+Valid, 213 SdHoareTripleChecker+Invalid, 338 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 154 IncrementalHoareTripleChecker+Valid, 184 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-06 22:51:13,780 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [354 Valid, 213 Invalid, 338 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [154 Valid, 184 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-06 22:51:13,784 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1196 states. [2023-11-06 22:51:13,971 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1196 to 1074. [2023-11-06 22:51:13,974 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1074 states, 795 states have (on average 1.250314465408805) internal successors, (994), 854 states have internal predecessors, (994), 148 states have call successors, (148), 106 states have call predecessors, (148), 130 states have return successors, (325), 144 states have call predecessors, (325), 148 states have call successors, (325) [2023-11-06 22:51:13,985 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1074 states to 1074 states and 1467 transitions. [2023-11-06 22:51:13,986 INFO L78 Accepts]: Start accepts. Automaton has 1074 states and 1467 transitions. Word has length 54 [2023-11-06 22:51:13,986 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:51:13,987 INFO L495 AbstractCegarLoop]: Abstraction has 1074 states and 1467 transitions. [2023-11-06 22:51:13,987 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 3 states have internal predecessors, (45), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:51:13,987 INFO L276 IsEmpty]: Start isEmpty. Operand 1074 states and 1467 transitions. [2023-11-06 22:51:13,991 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2023-11-06 22:51:13,991 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:51:13,992 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:13,992 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-06 22:51:13,992 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:51:13,993 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:13,993 INFO L85 PathProgramCache]: Analyzing trace with hash 1050157257, now seen corresponding path program 1 times [2023-11-06 22:51:13,993 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:13,994 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1031131701] [2023-11-06 22:51:13,994 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:13,994 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:14,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:14,056 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:51:14,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:14,074 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 22:51:14,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:14,114 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:51:14,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:14,126 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:51:14,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:14,132 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-06 22:51:14,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:14,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2023-11-06 22:51:14,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:14,142 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:51:14,143 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:14,143 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1031131701] [2023-11-06 22:51:14,143 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1031131701] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:14,143 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:51:14,144 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-06 22:51:14,144 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [42870220] [2023-11-06 22:51:14,144 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:14,145 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-06 22:51:14,145 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:14,146 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-06 22:51:14,147 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:51:14,147 INFO L87 Difference]: Start difference. First operand 1074 states and 1467 transitions. Second operand has 7 states, 7 states have (on average 9.857142857142858) internal successors, (69), 4 states have internal predecessors, (69), 4 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2023-11-06 22:51:14,748 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:14,748 INFO L93 Difference]: Finished difference Result 1745 states and 2371 transitions. [2023-11-06 22:51:14,748 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-06 22:51:14,749 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 9.857142857142858) internal successors, (69), 4 states have internal predecessors, (69), 4 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) Word has length 84 [2023-11-06 22:51:14,750 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:51:14,756 INFO L225 Difference]: With dead ends: 1745 [2023-11-06 22:51:14,757 INFO L226 Difference]: Without dead ends: 679 [2023-11-06 22:51:14,762 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2023-11-06 22:51:14,765 INFO L413 NwaCegarLoop]: 101 mSDtfsCounter, 306 mSDsluCounter, 196 mSDsCounter, 0 mSdLazyCounter, 263 mSolverCounterSat, 96 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 314 SdHoareTripleChecker+Valid, 297 SdHoareTripleChecker+Invalid, 359 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 96 IncrementalHoareTripleChecker+Valid, 263 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-06 22:51:14,765 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [314 Valid, 297 Invalid, 359 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [96 Valid, 263 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-06 22:51:14,768 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 679 states. [2023-11-06 22:51:14,888 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 679 to 642. [2023-11-06 22:51:14,890 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 642 states, 479 states have (on average 1.2379958246346556) internal successors, (593), 515 states have internal predecessors, (593), 85 states have call successors, (85), 64 states have call predecessors, (85), 77 states have return successors, (172), 83 states have call predecessors, (172), 85 states have call successors, (172) [2023-11-06 22:51:14,924 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 642 states to 642 states and 850 transitions. [2023-11-06 22:51:14,925 INFO L78 Accepts]: Start accepts. Automaton has 642 states and 850 transitions. Word has length 84 [2023-11-06 22:51:14,925 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:51:14,925 INFO L495 AbstractCegarLoop]: Abstraction has 642 states and 850 transitions. [2023-11-06 22:51:14,926 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 9.857142857142858) internal successors, (69), 4 states have internal predecessors, (69), 4 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2023-11-06 22:51:14,926 INFO L276 IsEmpty]: Start isEmpty. Operand 642 states and 850 transitions. [2023-11-06 22:51:14,931 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2023-11-06 22:51:14,931 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:51:14,932 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:14,932 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-06 22:51:14,932 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:51:14,933 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:14,933 INFO L85 PathProgramCache]: Analyzing trace with hash -1449715838, now seen corresponding path program 1 times [2023-11-06 22:51:14,933 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:14,934 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [825376644] [2023-11-06 22:51:14,934 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:14,934 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:14,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:15,078 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:51:15,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:15,104 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:51:15,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:15,175 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:51:15,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:15,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:51:15,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:15,209 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-06 22:51:15,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:15,217 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2023-11-06 22:51:15,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:15,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:51:15,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:15,236 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2023-11-06 22:51:15,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:15,240 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 19 proven. 8 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2023-11-06 22:51:15,240 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:15,241 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [825376644] [2023-11-06 22:51:15,241 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [825376644] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:51:15,241 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [323472501] [2023-11-06 22:51:15,241 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:15,242 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:51:15,242 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:51:15,247 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:51:15,269 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-06 22:51:15,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:15,453 INFO L262 TraceCheckSpWp]: Trace formula consists of 340 conjuncts, 4 conjunts are in the unsatisfiable core [2023-11-06 22:51:15,471 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:51:15,585 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:51:15,586 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 22:51:15,586 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [323472501] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:15,586 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 22:51:15,587 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [8] total 8 [2023-11-06 22:51:15,587 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1556648720] [2023-11-06 22:51:15,587 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:15,588 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:51:15,588 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:15,589 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:51:15,589 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:51:15,589 INFO L87 Difference]: Start difference. First operand 642 states and 850 transitions. Second operand has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2023-11-06 22:51:15,706 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:15,706 INFO L93 Difference]: Finished difference Result 1092 states and 1478 transitions. [2023-11-06 22:51:15,707 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:51:15,707 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 98 [2023-11-06 22:51:15,708 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:51:15,712 INFO L225 Difference]: With dead ends: 1092 [2023-11-06 22:51:15,712 INFO L226 Difference]: Without dead ends: 547 [2023-11-06 22:51:15,716 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 121 GetRequests, 115 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:51:15,717 INFO L413 NwaCegarLoop]: 159 mSDtfsCounter, 53 mSDsluCounter, 74 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 233 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:51:15,718 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [53 Valid, 233 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:51:15,720 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 547 states. [2023-11-06 22:51:15,792 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 547 to 547. [2023-11-06 22:51:15,794 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 547 states, 408 states have (on average 1.213235294117647) internal successors, (495), 440 states have internal predecessors, (495), 73 states have call successors, (73), 57 states have call predecessors, (73), 65 states have return successors, (106), 70 states have call predecessors, (106), 73 states have call successors, (106) [2023-11-06 22:51:15,798 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 547 states to 547 states and 674 transitions. [2023-11-06 22:51:15,799 INFO L78 Accepts]: Start accepts. Automaton has 547 states and 674 transitions. Word has length 98 [2023-11-06 22:51:15,799 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:51:15,799 INFO L495 AbstractCegarLoop]: Abstraction has 547 states and 674 transitions. [2023-11-06 22:51:15,800 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2023-11-06 22:51:15,800 INFO L276 IsEmpty]: Start isEmpty. Operand 547 states and 674 transitions. [2023-11-06 22:51:15,802 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2023-11-06 22:51:15,802 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:51:15,803 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:15,811 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-06 22:51:16,010 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-06 22:51:16,010 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:51:16,011 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:16,011 INFO L85 PathProgramCache]: Analyzing trace with hash -1963313404, now seen corresponding path program 1 times [2023-11-06 22:51:16,011 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:16,011 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1067643217] [2023-11-06 22:51:16,012 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:16,012 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:16,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:16,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:51:16,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:16,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:51:16,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:16,253 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:51:16,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:16,260 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:51:16,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:16,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-06 22:51:16,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:16,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2023-11-06 22:51:16,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:16,289 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2023-11-06 22:51:16,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:16,298 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-06 22:51:16,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:16,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:51:16,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:16,305 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2023-11-06 22:51:16,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:16,309 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 21 proven. 4 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2023-11-06 22:51:16,309 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:16,309 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1067643217] [2023-11-06 22:51:16,310 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1067643217] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:51:16,310 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [348036343] [2023-11-06 22:51:16,310 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:16,311 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:51:16,311 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:51:16,312 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:51:16,319 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-06 22:51:16,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:16,469 INFO L262 TraceCheckSpWp]: Trace formula consists of 363 conjuncts, 11 conjunts are in the unsatisfiable core [2023-11-06 22:51:16,478 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:51:16,768 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 7 proven. 2 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2023-11-06 22:51:16,768 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-06 22:51:16,978 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2023-11-06 22:51:16,978 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [348036343] provided 1 perfect and 1 imperfect interpolant sequences [2023-11-06 22:51:16,979 INFO L185 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2023-11-06 22:51:16,979 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10, 5] total 14 [2023-11-06 22:51:16,979 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1310184037] [2023-11-06 22:51:16,980 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:16,980 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:51:16,980 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:16,981 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:51:16,981 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=150, Unknown=0, NotChecked=0, Total=182 [2023-11-06 22:51:16,982 INFO L87 Difference]: Start difference. First operand 547 states and 674 transitions. Second operand has 6 states, 6 states have (on average 12.166666666666666) internal successors, (73), 5 states have internal predecessors, (73), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 3 states have call predecessors, (10), 2 states have call successors, (10) [2023-11-06 22:51:17,258 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:17,258 INFO L93 Difference]: Finished difference Result 1570 states and 1977 transitions. [2023-11-06 22:51:17,259 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-06 22:51:17,259 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.166666666666666) internal successors, (73), 5 states have internal predecessors, (73), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 3 states have call predecessors, (10), 2 states have call successors, (10) Word has length 108 [2023-11-06 22:51:17,260 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:51:17,269 INFO L225 Difference]: With dead ends: 1570 [2023-11-06 22:51:17,269 INFO L226 Difference]: Without dead ends: 1031 [2023-11-06 22:51:17,273 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 243 GetRequests, 228 SyntacticMatches, 1 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=42, Invalid=198, Unknown=0, NotChecked=0, Total=240 [2023-11-06 22:51:17,274 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 75 mSDsluCounter, 405 mSDsCounter, 0 mSdLazyCounter, 55 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 519 SdHoareTripleChecker+Invalid, 60 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 55 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:51:17,275 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [76 Valid, 519 Invalid, 60 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 55 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:51:17,277 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1031 states. [2023-11-06 22:51:17,417 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1031 to 950. [2023-11-06 22:51:17,420 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 950 states, 702 states have (on average 1.1851851851851851) internal successors, (832), 758 states have internal predecessors, (832), 128 states have call successors, (128), 103 states have call predecessors, (128), 119 states have return successors, (189), 125 states have call predecessors, (189), 128 states have call successors, (189) [2023-11-06 22:51:17,427 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 950 states to 950 states and 1149 transitions. [2023-11-06 22:51:17,428 INFO L78 Accepts]: Start accepts. Automaton has 950 states and 1149 transitions. Word has length 108 [2023-11-06 22:51:17,428 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:51:17,429 INFO L495 AbstractCegarLoop]: Abstraction has 950 states and 1149 transitions. [2023-11-06 22:51:17,429 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 12.166666666666666) internal successors, (73), 5 states have internal predecessors, (73), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 3 states have call predecessors, (10), 2 states have call successors, (10) [2023-11-06 22:51:17,429 INFO L276 IsEmpty]: Start isEmpty. Operand 950 states and 1149 transitions. [2023-11-06 22:51:17,433 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 113 [2023-11-06 22:51:17,433 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:51:17,433 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:17,441 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-06 22:51:17,641 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2023-11-06 22:51:17,641 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:51:17,642 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:51:17,642 INFO L85 PathProgramCache]: Analyzing trace with hash 1470383360, now seen corresponding path program 1 times [2023-11-06 22:51:17,642 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:51:17,642 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [871366153] [2023-11-06 22:51:17,642 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:17,643 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:51:17,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:17,825 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:51:17,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:17,839 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-06 22:51:17,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:17,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-06 22:51:17,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:17,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:51:17,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:17,892 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:51:17,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:17,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-06 22:51:17,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:17,902 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2023-11-06 22:51:17,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:17,924 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2023-11-06 22:51:17,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:17,933 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-06 22:51:17,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:17,936 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:51:17,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:17,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2023-11-06 22:51:17,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:17,941 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2023-11-06 22:51:17,941 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:51:17,941 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [871366153] [2023-11-06 22:51:17,942 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [871366153] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:51:17,942 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1507515847] [2023-11-06 22:51:17,942 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:51:17,942 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:51:17,943 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:51:17,944 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:51:17,967 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-06 22:51:18,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:51:18,086 INFO L262 TraceCheckSpWp]: Trace formula consists of 373 conjuncts, 8 conjunts are in the unsatisfiable core [2023-11-06 22:51:18,098 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:51:18,289 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2023-11-06 22:51:18,290 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 22:51:18,290 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1507515847] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:51:18,290 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 22:51:18,290 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [11] total 16 [2023-11-06 22:51:18,291 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1689523557] [2023-11-06 22:51:18,291 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:51:18,291 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-06 22:51:18,292 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:51:18,292 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-06 22:51:18,293 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=204, Unknown=0, NotChecked=0, Total=240 [2023-11-06 22:51:18,293 INFO L87 Difference]: Start difference. First operand 950 states and 1149 transitions. Second operand has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2023-11-06 22:51:18,564 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:51:18,565 INFO L93 Difference]: Finished difference Result 1753 states and 2113 transitions. [2023-11-06 22:51:18,565 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:51:18,566 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) Word has length 112 [2023-11-06 22:51:18,566 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:51:18,567 INFO L225 Difference]: With dead ends: 1753 [2023-11-06 22:51:18,568 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 22:51:18,573 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 142 GetRequests, 125 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=50, Invalid=292, Unknown=0, NotChecked=0, Total=342 [2023-11-06 22:51:18,574 INFO L413 NwaCegarLoop]: 199 mSDtfsCounter, 45 mSDsluCounter, 746 mSDsCounter, 0 mSdLazyCounter, 66 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 46 SdHoareTripleChecker+Valid, 945 SdHoareTripleChecker+Invalid, 71 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 66 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:51:18,574 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [46 Valid, 945 Invalid, 71 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 66 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:51:18,575 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 22:51:18,575 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 22:51:18,576 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:51:18,576 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 22:51:18,576 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 112 [2023-11-06 22:51:18,577 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:51:18,577 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 22:51:18,577 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2023-11-06 22:51:18,577 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 22:51:18,578 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 22:51:18,581 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 22:51:18,595 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2023-11-06 22:51:18,789 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2023-11-06 22:51:18,792 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 22:51:28,144 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 702 709) no Hoare annotation was computed. [2023-11-06 22:51:28,145 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 702 709) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= 0 ~systemActive~0))) (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (and .cse0 (<= 2 ~waterLevel~0) (not .cse7))) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse6 (< ~waterLevel~0 2)) (.cse4 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse3 .cse4) (or .cse2 .cse5 .cse3 .cse6 .cse7) (or .cse5 .cse3 .cse6 .cse7 .cse4)))) [2023-11-06 22:51:28,145 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 702 709) no Hoare annotation was computed. [2023-11-06 22:51:28,145 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 609 615) no Hoare annotation was computed. [2023-11-06 22:51:28,145 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 609 615) the Hoare annotation is: true [2023-11-06 22:51:28,146 INFO L899 garLoopResultBuilder]: For program point L463-1(lines 459 470) no Hoare annotation was computed. [2023-11-06 22:51:28,146 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 459 470) the Hoare annotation is: (let ((.cse0 (< ~pumpRunning~0 1)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (< |old(~methaneLevelCritical~0)| 1)) (.cse4 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse7 (not (= ~methAndRunningLastTime~0 0))) (.cse8 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 (< ~waterLevel~0 2)) (or .cse4 .cse5 .cse6 .cse2 .cse7) (or .cse0 .cse4 .cse6 .cse2 .cse7) (or .cse1 .cse5 .cse3 .cse7 .cse8) (or .cse1 .cse5 .cse2 .cse3 .cse7) (or .cse4 .cse5 .cse6 .cse7 .cse8))) [2023-11-06 22:51:28,146 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 459 470) no Hoare annotation was computed. [2023-11-06 22:51:28,146 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 937 966) no Hoare annotation was computed. [2023-11-06 22:51:28,146 INFO L899 garLoopResultBuilder]: For program point L958(line 958) no Hoare annotation was computed. [2023-11-06 22:51:28,147 INFO L899 garLoopResultBuilder]: For program point L951(lines 951 955) no Hoare annotation was computed. [2023-11-06 22:51:28,147 INFO L902 garLoopResultBuilder]: At program point L951-1(lines 951 955) the Hoare annotation is: true [2023-11-06 22:51:28,147 INFO L899 garLoopResultBuilder]: For program point L948(line 948) no Hoare annotation was computed. [2023-11-06 22:51:28,147 INFO L902 garLoopResultBuilder]: At program point L947-2(lines 947 961) the Hoare annotation is: true [2023-11-06 22:51:28,147 INFO L902 garLoopResultBuilder]: At program point L943(line 943) the Hoare annotation is: true [2023-11-06 22:51:28,147 INFO L899 garLoopResultBuilder]: For program point L943-1(line 943) no Hoare annotation was computed. [2023-11-06 22:51:28,147 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 937 966) the Hoare annotation is: true [2023-11-06 22:51:28,147 INFO L902 garLoopResultBuilder]: At program point L962(lines 937 966) the Hoare annotation is: true [2023-11-06 22:51:28,148 INFO L895 garLoopResultBuilder]: At program point L688(line 688) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= 0 ~systemActive~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse3 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse2) (or .cse5 .cse4 .cse6) (or .cse5 .cse0 .cse1 .cse7 .cse3) (or .cse5 .cse0 .cse1 .cse7 .cse4) (or .cse5 .cse3 .cse6) (or .cse1 (< |old(~waterLevel~0)| 2) .cse2 .cse3))) [2023-11-06 22:51:28,148 INFO L895 garLoopResultBuilder]: At program point L688-1(lines 669 693) the Hoare annotation is: (let ((.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse11 (= ~pumpRunning~0 0)) (.cse12 (= 1 ~systemActive~0))) (let ((.cse1 (and .cse11 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) .cse12)) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse9 (not (= 0 ~systemActive~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not .cse12)) (.cse6 (and (<= 1 ~pumpRunning~0) (= ~methAndRunningLastTime~0 0) (<= 2 ~waterLevel~0) .cse13)) (.cse7 (and .cse10 .cse13 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (.cse8 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 (< |old(~waterLevel~0)| 2) .cse2 .cse3) (or .cse4 .cse5 .cse0 .cse6 .cse7 .cse3) (or .cse4 .cse8 .cse9) (or .cse5 .cse0 .cse1 .cse2 .cse3) (or .cse10 .cse0 .cse8 .cse2 (and .cse11 .cse12)) (or .cse4 .cse3 .cse9) (or .cse4 .cse5 .cse0 .cse6 .cse7 .cse8)))) [2023-11-06 22:51:28,149 INFO L899 garLoopResultBuilder]: For program point L589-1(lines 588 607) no Hoare annotation was computed. [2023-11-06 22:51:28,149 INFO L895 garLoopResultBuilder]: At program point L552(line 552) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse16 (= |old(~pumpRunning~0)| 0)) (.cse14 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse15 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse12 (= ~pumpRunning~0 0)) (.cse13 (= 1 ~systemActive~0))) (let ((.cse4 (and .cse12 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse13)) (.cse2 (and .cse12 .cse16 .cse14 .cse15)) (.cse7 (< ~methaneLevelCritical~0 1)) (.cse3 (not (= 0 ~systemActive~0))) (.cse6 (< |old(~pumpRunning~0)| 1)) (.cse0 (not .cse16)) (.cse8 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not .cse13)) (.cse9 (and (<= 1 ~pumpRunning~0) (= ~methAndRunningLastTime~0 0) (<= 2 ~waterLevel~0) .cse14)) (.cse10 (and .cse11 .cse14 .cse15)) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 (< |old(~waterLevel~0)| 2) .cse6 .cse7) (or .cse0 .cse8 .cse5 .cse9 .cse10 .cse7) (or .cse4 .cse8 .cse5 .cse6 .cse7) (or .cse0 .cse2 .cse7 .cse3) (or .cse11 .cse5 .cse1 .cse6 (and .cse12 .cse13)) (or .cse0 .cse8 .cse5 .cse9 .cse10 .cse1)))) [2023-11-06 22:51:28,149 INFO L899 garLoopResultBuilder]: For program point L552-1(line 552) no Hoare annotation was computed. [2023-11-06 22:51:28,149 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 585 608) no Hoare annotation was computed. [2023-11-06 22:51:28,149 INFO L899 garLoopResultBuilder]: For program point L420(line 420) no Hoare annotation was computed. [2023-11-06 22:51:28,150 INFO L899 garLoopResultBuilder]: For program point L677(lines 677 685) no Hoare annotation was computed. [2023-11-06 22:51:28,150 INFO L899 garLoopResultBuilder]: For program point L673(lines 673 690) no Hoare annotation was computed. [2023-11-06 22:51:28,150 INFO L899 garLoopResultBuilder]: For program point L558(lines 558 568) no Hoare annotation was computed. [2023-11-06 22:51:28,150 INFO L895 garLoopResultBuilder]: At program point L715(line 715) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse6 (not (= 0 ~systemActive~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (< |old(~waterLevel~0)| 2) .cse3 .cse4) (or .cse5 .cse2 .cse6) (or .cse5 .cse7 .cse1 .cse2) (or .cse7 .cse1 (and .cse0 (= ~methAndRunningLastTime~0 0)) .cse3 .cse4) (or .cse5 .cse4 .cse6) (or .cse5 .cse7 .cse1 .cse4))) [2023-11-06 22:51:28,150 INFO L899 garLoopResultBuilder]: For program point L715-1(line 715) no Hoare annotation was computed. [2023-11-06 22:51:28,150 INFO L899 garLoopResultBuilder]: For program point L554(lines 554 571) no Hoare annotation was computed. [2023-11-06 22:51:28,151 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 416 423) the Hoare annotation is: (let ((.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (= 0 ~systemActive~0))) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse2) (or .cse5 .cse4 .cse6) (or .cse5 .cse0 .cse1 .cse4) (or .cse5 .cse3 .cse6) (or .cse1 (< |old(~waterLevel~0)| 2) .cse2 .cse3) (or .cse5 .cse0 .cse1 .cse3))) [2023-11-06 22:51:28,151 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 585 608) the Hoare annotation is: (let ((.cse6 (= ~methAndRunningLastTime~0 0)) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse13 (= ~pumpRunning~0 0)) (.cse14 (= |old(~pumpRunning~0)| 0)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse15 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse16 (= 0 ~systemActive~0))) (let ((.cse2 (and .cse13 .cse14 .cse7 .cse15 .cse16)) (.cse3 (not .cse16)) (.cse11 (and .cse5 .cse7 .cse15)) (.cse10 (< |old(~pumpRunning~0)| 1)) (.cse4 (< ~methaneLevelCritical~0 1)) (.cse0 (not .cse14)) (.cse8 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse9 (not (= 1 ~systemActive~0))) (.cse12 (and .cse13 .cse6 .cse7)) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse2 .cse4 .cse3) (or (and .cse5 .cse6 .cse7) .cse8 .cse9 .cse10 .cse4) (or .cse9 .cse11 .cse1 .cse10) (or .cse9 (< |old(~waterLevel~0)| 2) .cse11 .cse10 .cse4) (or .cse0 .cse8 .cse9 .cse12 .cse4) (or .cse0 .cse8 .cse9 .cse12 .cse1)))) [2023-11-06 22:51:28,152 INFO L895 garLoopResultBuilder]: At program point L554-1(lines 546 574) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse12 (= 1 ~systemActive~0))) (let ((.cse10 (not (= 0 ~systemActive~0))) (.cse9 (not (= ~methaneLevelCritical~0 0))) (.cse6 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~3#1| 0)) (.cse0 (and .cse5 .cse7 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse12)) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not .cse12)) (.cse13 (<= 1 ~pumpRunning~0)) (.cse14 (<= 2 ~waterLevel~0)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 (< |old(~waterLevel~0)| 2) .cse2 .cse3) (or .cse4 (and .cse5 .cse6 .cse7 .cse8) .cse9 .cse10) (or .cse4 (and .cse5 .cse7 .cse8) .cse3 .cse10) (or .cse4 .cse11 .cse1 .cse9 (and .cse5 .cse6 .cse7 .cse12 .cse8) (and .cse13 .cse6 .cse7 .cse14 .cse8)) (or .cse1 .cse9 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse7) (and .cse5 .cse6 .cse7 .cse12) .cse2) (or .cse11 .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse11 .cse1 (and .cse13 .cse14 .cse8) (and .cse5 .cse7 .cse12 .cse8) .cse3)))) [2023-11-06 22:51:28,152 INFO L899 garLoopResultBuilder]: For program point L439(lines 439 443) no Hoare annotation was computed. [2023-11-06 22:51:28,152 INFO L895 garLoopResultBuilder]: At program point L439-2(lines 435 446) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse6 (not (= 0 ~systemActive~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (< |old(~waterLevel~0)| 2) .cse3 .cse4) (or .cse5 .cse2 .cse6) (or .cse5 .cse7 .cse1 .cse2) (or .cse7 .cse1 (and .cse0 (= ~methAndRunningLastTime~0 0)) .cse3 .cse4) (or .cse5 .cse4 .cse6) (or .cse5 .cse7 .cse1 .cse4))) [2023-11-06 22:51:28,152 INFO L899 garLoopResultBuilder]: For program point L596-1(lines 596 602) no Hoare annotation was computed. [2023-11-06 22:51:28,152 INFO L899 garLoopResultBuilder]: For program point L559(lines 559 565) no Hoare annotation was computed. [2023-11-06 22:51:28,153 INFO L895 garLoopResultBuilder]: At program point L683(line 683) the Hoare annotation is: (let ((.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (= 0 ~systemActive~0))) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse4 .cse2) (or .cse5 .cse4 .cse6) (or .cse5 .cse0 .cse1 .cse4) (or .cse5 .cse3 .cse6) (or .cse1 (< |old(~waterLevel~0)| 2) .cse2 .cse3) (or .cse5 .cse0 .cse1 .cse3))) [2023-11-06 22:51:28,153 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 585 608) no Hoare annotation was computed. [2023-11-06 22:51:28,153 INFO L895 garLoopResultBuilder]: At program point isMethaneAlarm_returnLabel#1(lines 710 720) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse8 (not (= 0 ~systemActive~0))) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 (and .cse0 (= ~methAndRunningLastTime~0 0) .cse5) .cse3 .cse6) (or .cse7 .cse2 .cse8) (or .cse7 .cse4 .cse1 .cse2) (or .cse1 (< |old(~waterLevel~0)| 2) (and .cse0 .cse5) .cse3 .cse6) (or .cse7 .cse6 .cse8) (or .cse7 .cse4 .cse1 .cse6))) [2023-11-06 22:51:28,153 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 721 729) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse4 (= |timeShift_isPumpRunning_#res#1| 0))) (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse11 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= 1 ~systemActive~0))) (.cse8 (< |old(~pumpRunning~0)| 1)) (.cse9 (and .cse2 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse4)) (.cse7 (< ~methaneLevelCritical~0 1))) (and (let ((.cse3 (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5) .cse6 (and (<= 1 ~pumpRunning~0) .cse3 (<= 2 ~waterLevel~0) .cse5) .cse7)) (or .cse6 (< |old(~waterLevel~0)| 2) .cse8 .cse9 .cse7) (or .cse6 .cse10 .cse8) (or .cse0 (and .cse2 .cse4 .cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) .cse7 .cse11) (or .cse0 .cse10 .cse11) (or .cse0 .cse1 .cse6 .cse10) (or .cse1 .cse6 .cse8 .cse9 .cse7)))) [2023-11-06 22:51:28,154 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 420) no Hoare annotation was computed. [2023-11-06 22:51:28,154 INFO L895 garLoopResultBuilder]: At program point L679(line 679) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse5 (<= 1 |timeShift_processEnvironment_~tmp~6#1|)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse8 (not (= 0 ~systemActive~0))) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 (< |old(~waterLevel~0)| 2) .cse3 (and .cse0 .cse4 .cse5) .cse6) (or .cse7 .cse2 .cse8) (or .cse7 .cse9 .cse1 .cse2) (or .cse9 .cse1 (and .cse0 (= ~methAndRunningLastTime~0 0) .cse4 .cse5) .cse3 .cse6) (or .cse7 .cse6 .cse8) (or .cse7 .cse9 .cse1 .cse6))) [2023-11-06 22:51:28,154 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 471 479) the Hoare annotation is: true [2023-11-06 22:51:28,154 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 471 479) no Hoare annotation was computed. [2023-11-06 22:51:28,154 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 471 479) no Hoare annotation was computed. [2023-11-06 22:51:28,155 INFO L895 garLoopResultBuilder]: At program point L861(line 861) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= 1 ~systemActive~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse7 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse3 .cse7) (and .cse6 .cse4 .cse1 .cse3 .cse7))) [2023-11-06 22:51:28,156 INFO L895 garLoopResultBuilder]: At program point startSystem_returnLabel#1(lines 819 826) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse1 .cse2 .cse3) (and .cse5 .cse4 .cse1 .cse2 .cse3) (and .cse5 .cse4 .cse6 .cse2 .cse3) (and .cse0 .cse6 .cse2 .cse3))) [2023-11-06 22:51:28,157 INFO L895 garLoopResultBuilder]: At program point L886(lines 839 888) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= 1 ~systemActive~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse7 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse3 .cse7) (and .cse6 .cse4 .cse1 .cse3 .cse7))) [2023-11-06 22:51:28,157 INFO L899 garLoopResultBuilder]: For program point L849(lines 849 855) no Hoare annotation was computed. [2023-11-06 22:51:28,157 INFO L899 garLoopResultBuilder]: For program point L849-1(lines 849 855) no Hoare annotation was computed. [2023-11-06 22:51:28,157 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 998 1008) the Hoare annotation is: true [2023-11-06 22:51:28,158 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 912 918) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:51:28,158 INFO L899 garLoopResultBuilder]: For program point L841(lines 841 845) no Hoare annotation was computed. [2023-11-06 22:51:28,158 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 1009 1031) the Hoare annotation is: true [2023-11-06 22:51:28,158 INFO L899 garLoopResultBuilder]: For program point L808(lines 808 814) no Hoare annotation was computed. [2023-11-06 22:51:28,158 INFO L899 garLoopResultBuilder]: For program point L808-1(lines 808 814) no Hoare annotation was computed. [2023-11-06 22:51:28,158 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 22:51:28,159 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 22:51:28,159 INFO L899 garLoopResultBuilder]: For program point L1019(lines 1019 1026) no Hoare annotation was computed. [2023-11-06 22:51:28,159 INFO L899 garLoopResultBuilder]: For program point L1019-2(lines 1019 1026) no Hoare annotation was computed. [2023-11-06 22:51:28,159 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 991 997) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:51:28,159 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 22:51:28,160 INFO L902 garLoopResultBuilder]: At program point L892(lines 829 896) the Hoare annotation is: true [2023-11-06 22:51:28,160 INFO L899 garLoopResultBuilder]: For program point L859(lines 859 865) no Hoare annotation was computed. [2023-11-06 22:51:28,160 INFO L899 garLoopResultBuilder]: For program point L859-1(lines 859 865) no Hoare annotation was computed. [2023-11-06 22:51:28,160 INFO L895 garLoopResultBuilder]: At program point L851(line 851) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= 1 ~systemActive~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse7 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse3 .cse7) (and .cse6 .cse4 .cse1 .cse3 .cse7))) [2023-11-06 22:51:28,161 INFO L895 garLoopResultBuilder]: At program point L810(line 810) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (<= 2 ~waterLevel~0)) (.cse6 (not (= 0 ~systemActive~0))) (.cse0 (<= 1 ~pumpRunning~0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= ~methAndRunningLastTime~0 0) .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse3 .cse6) (and .cse0 .cse1 .cse5 .cse3 .cse6) (and .cse0 .cse4 .cse2 .cse3))) [2023-11-06 22:51:28,161 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 22:51:28,161 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 919 925) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:51:28,161 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification2_spec__1_returnLabel#1(lines 538 545) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:51:28,162 INFO L895 garLoopResultBuilder]: At program point L889(lines 838 890) the Hoare annotation is: false [2023-11-06 22:51:28,162 INFO L895 garLoopResultBuilder]: At program point stopSystem_returnLabel#1(lines 804 818) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= 0 ~systemActive~0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2) (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2))) [2023-11-06 22:51:28,162 INFO L899 garLoopResultBuilder]: For program point L877(lines 877 883) no Hoare annotation was computed. [2023-11-06 22:51:28,162 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 926 934) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:51:28,163 INFO L895 garLoopResultBuilder]: At program point L877-2(lines 869 884) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (= 0 ~systemActive~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse1 .cse2 .cse3) (and .cse5 .cse1 .cse3 .cse6) (and .cse5 .cse4 .cse1 .cse2 .cse3) (and .cse5 .cse4 .cse7 .cse2 .cse3) (and .cse5 .cse7 .cse3 .cse6) (and .cse0 .cse7 .cse2 .cse3))) [2023-11-06 22:51:28,163 INFO L899 garLoopResultBuilder]: For program point L840(lines 839 888) no Hoare annotation was computed. [2023-11-06 22:51:28,163 INFO L899 garLoopResultBuilder]: For program point L869(lines 869 884) no Hoare annotation was computed. [2023-11-06 22:51:28,163 INFO L895 garLoopResultBuilder]: At program point L636(line 636) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse0 .cse1 .cse3) (or .cse2 .cse0 .cse3 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:51:28,164 INFO L899 garLoopResultBuilder]: For program point L636-1(lines 617 641) no Hoare annotation was computed. [2023-11-06 22:51:28,164 INFO L895 garLoopResultBuilder]: At program point activatePump_returnLabel#1(lines 694 701) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse3 .cse0 .cse4 (< ~methaneLevelCritical~0 1)) (or .cse2 .cse3 .cse0 .cse1 .cse4))) [2023-11-06 22:51:28,164 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 617 641) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse3 .cse0 .cse1 .cse4) (or .cse2 .cse3 .cse0 .cse4 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:51:28,164 INFO L899 garLoopResultBuilder]: For program point L775(lines 775 779) no Hoare annotation was computed. [2023-11-06 22:51:28,165 INFO L899 garLoopResultBuilder]: For program point L775-2(lines 775 779) no Hoare annotation was computed. [2023-11-06 22:51:28,165 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 512 525) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0))) (let ((.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (and .cse6 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1))) (.cse4 (and .cse6 (<= 2 ~waterLevel~0))) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse3 (< |old(~pumpRunning~0)| 1)) (or .cse0 .cse1 .cse2 .cse4 .cse5 (< ~methaneLevelCritical~0 1))))) [2023-11-06 22:51:28,165 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 766 784) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse7 (= 1 ~systemActive~0)) (.cse8 (= |old(~pumpRunning~0)| 0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not .cse8)) (.cse1 (not .cse7)) (.cse3 (and .cse6 (<= 2 ~waterLevel~0))) (.cse4 (and .cse6 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) .cse7 .cse8 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0))) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse2 (< |old(~pumpRunning~0)| 1)) (or .cse0 .cse1 .cse3 .cse4 .cse5 (< ~methaneLevelCritical~0 1))))) [2023-11-06 22:51:28,165 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 617 641) no Hoare annotation was computed. [2023-11-06 22:51:28,166 INFO L895 garLoopResultBuilder]: At program point L631(line 631) the Hoare annotation is: (let ((.cse5 (= 1 ~systemActive~0)) (.cse6 (= |old(~pumpRunning~0)| 0))) (let ((.cse2 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| 0) .cse5 .cse6)) (.cse3 (not .cse6)) (.cse0 (not .cse5)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse3 .cse0 .cse4 (< ~methaneLevelCritical~0 1)) (or .cse2 .cse3 .cse0 .cse1 .cse4)))) [2023-11-06 22:51:28,166 INFO L899 garLoopResultBuilder]: For program point L625(lines 625 633) no Hoare annotation was computed. [2023-11-06 22:51:28,166 INFO L899 garLoopResultBuilder]: For program point L621(lines 621 638) no Hoare annotation was computed. [2023-11-06 22:51:28,166 INFO L899 garLoopResultBuilder]: For program point L516(lines 516 522) no Hoare annotation was computed. [2023-11-06 22:51:28,167 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 447 458) no Hoare annotation was computed. [2023-11-06 22:51:28,167 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 447 458) the Hoare annotation is: (let ((.cse4 (not (= 0 ~systemActive~0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse7 (< ~pumpRunning~0 1)) (.cse5 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse2 .cse3 .cse6) (or .cse0 .cse2 .cse3 .cse6 .cse4) (or .cse0 .cse5 .cse1 .cse2 .cse3) (or .cse7 .cse5 .cse1 .cse2 .cse3) (or .cse7 .cse5 (< |old(~waterLevel~0)| 2) .cse2 .cse6))) [2023-11-06 22:51:28,167 INFO L899 garLoopResultBuilder]: For program point L451-1(lines 447 458) no Hoare annotation was computed. [2023-11-06 22:51:28,167 INFO L895 garLoopResultBuilder]: At program point L657(line 657) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse0 .cse1 .cse3) (or .cse2 .cse0 .cse3 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:51:28,168 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 526 534) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse0 .cse1 .cse3) (or .cse2 .cse0 .cse3 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:51:28,168 INFO L895 garLoopResultBuilder]: At program point L653(line 653) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse0 .cse1 .cse3) (or .cse2 .cse0 .cse3 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:51:28,168 INFO L899 garLoopResultBuilder]: For program point L651(lines 651 659) no Hoare annotation was computed. [2023-11-06 22:51:28,168 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 643 667) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse3 .cse0 .cse1 .cse4) (or .cse2 .cse3 .cse0 .cse4 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:51:28,169 INFO L899 garLoopResultBuilder]: For program point L647(lines 647 664) no Hoare annotation was computed. [2023-11-06 22:51:28,169 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 785 803) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse0 .cse1 .cse3) (or .cse2 .cse0 .cse3 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:51:28,169 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 643 667) no Hoare annotation was computed. [2023-11-06 22:51:28,169 INFO L899 garLoopResultBuilder]: For program point L794(lines 794 798) no Hoare annotation was computed. [2023-11-06 22:51:28,170 INFO L899 garLoopResultBuilder]: For program point L794-2(lines 794 798) no Hoare annotation was computed. [2023-11-06 22:51:28,170 INFO L895 garLoopResultBuilder]: At program point L662(line 662) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse3 .cse0 .cse1 .cse4) (or .cse2 .cse3 .cse0 .cse4 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:51:28,170 INFO L899 garLoopResultBuilder]: For program point L662-1(lines 643 667) no Hoare annotation was computed. [2023-11-06 22:51:28,173 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:51:28,176 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 22:51:28,230 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 10:51:28 BoogieIcfgContainer [2023-11-06 22:51:28,231 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 22:51:28,231 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 22:51:28,232 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 22:51:28,232 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 22:51:28,232 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:51:09" (3/4) ... [2023-11-06 22:51:28,235 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 22:51:28,240 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-06 22:51:28,240 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 22:51:28,240 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 22:51:28,240 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 22:51:28,240 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 22:51:28,241 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-06 22:51:28,241 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:51:28,241 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 22:51:28,241 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2023-11-06 22:51:28,252 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 18 nodes and edges [2023-11-06 22:51:28,253 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 22:51:28,254 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 22:51:28,254 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:51:28,255 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:51:28,289 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || ((pumpRunning == \old(pumpRunning)) && (methAndRunningLastTime == 0))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) [2023-11-06 22:51:28,290 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!((1 == systemActive)) || ((((pumpRunning == 0) && (1 <= \result)) && (1 <= tmp)) && (1 == systemActive))) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1)) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || ((((pumpRunning == 0) && (1 <= \result)) && (1 <= tmp)) && (1 == systemActive))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || ((pumpRunning == 0) && (1 == systemActive)))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) || !((methaneLevelCritical == 0)))) [2023-11-06 22:51:28,291 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 <= \result)) && (1 == systemActive)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1)) && (((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && (tmp == 0)) && (methAndRunningLastTime == 0)) && (\old(waterLevel) == waterLevel))) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (((((pumpRunning == 0) && (tmp == 0)) && (methAndRunningLastTime == 0)) && (1 == systemActive)) && (\old(waterLevel) == waterLevel))) || (((((1 <= pumpRunning) && (tmp == 0)) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel)))) && ((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (((pumpRunning == \old(pumpRunning)) && (tmp == 0)) && (methAndRunningLastTime == 0))) || ((((pumpRunning == 0) && (tmp == 0)) && (methAndRunningLastTime == 0)) && (1 == systemActive))) || (\old(pumpRunning) < 1))) && ((((!((\old(methAndRunningLastTime) == 0)) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 <= \result)) && (1 == systemActive))) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (((1 <= pumpRunning) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 == systemActive)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) [2023-11-06 22:51:28,292 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (((pumpRunning == \old(pumpRunning)) && (methAndRunningLastTime == 0)) && (1 <= \result))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((1 == systemActive)) || (\old(waterLevel) < 2)) || ((pumpRunning == \old(pumpRunning)) && (1 <= \result))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) [2023-11-06 22:51:28,292 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1)) && ((((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (((pumpRunning == 0) && (1 <= \result)) && (\result == 0))) || (methaneLevelCritical < 1))) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (((pumpRunning == 0) && (1 <= \result)) && (\result == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:51:28,293 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || !((methAndRunningLastTime == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:51:28,293 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 1))) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0))) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 1))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:51:28,294 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1)) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && (((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) [2023-11-06 22:51:28,294 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || !((methAndRunningLastTime == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:51:28,294 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || (((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0))) || !((methAndRunningLastTime == 0))) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && (2 <= waterLevel))) || (((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:51:28,295 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((!((\old(pumpRunning) == 0)) || ((1 <= pumpRunning) && (2 <= waterLevel))) || !((1 == systemActive))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) && ((((!((\old(pumpRunning) == 0)) || ((1 <= pumpRunning) && (2 <= waterLevel))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || !((methAndRunningLastTime == 0)))) [2023-11-06 22:51:28,334 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || ((pumpRunning == \old(pumpRunning)) && (methAndRunningLastTime == 0))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) [2023-11-06 22:51:28,334 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!((1 == systemActive)) || ((((pumpRunning == 0) && (1 <= \result)) && (1 <= tmp)) && (1 == systemActive))) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1)) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || ((((pumpRunning == 0) && (1 <= \result)) && (1 <= tmp)) && (1 == systemActive))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || ((pumpRunning == 0) && (1 == systemActive)))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) || !((methaneLevelCritical == 0)))) [2023-11-06 22:51:28,335 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 <= \result)) && (1 == systemActive)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1)) && (((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && (tmp == 0)) && (methAndRunningLastTime == 0)) && (\old(waterLevel) == waterLevel))) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (((((pumpRunning == 0) && (tmp == 0)) && (methAndRunningLastTime == 0)) && (1 == systemActive)) && (\old(waterLevel) == waterLevel))) || (((((1 <= pumpRunning) && (tmp == 0)) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel)))) && ((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (((pumpRunning == \old(pumpRunning)) && (tmp == 0)) && (methAndRunningLastTime == 0))) || ((((pumpRunning == 0) && (tmp == 0)) && (methAndRunningLastTime == 0)) && (1 == systemActive))) || (\old(pumpRunning) < 1))) && ((((!((\old(methAndRunningLastTime) == 0)) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 <= \result)) && (1 == systemActive))) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (((1 <= pumpRunning) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 == systemActive)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) [2023-11-06 22:51:28,335 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (((pumpRunning == \old(pumpRunning)) && (methAndRunningLastTime == 0)) && (1 <= \result))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((1 == systemActive)) || (\old(waterLevel) < 2)) || ((pumpRunning == \old(pumpRunning)) && (1 <= \result))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) [2023-11-06 22:51:28,335 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1)) && ((((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (((pumpRunning == 0) && (1 <= \result)) && (\result == 0))) || (methaneLevelCritical < 1))) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (((pumpRunning == 0) && (1 <= \result)) && (\result == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:51:28,336 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || !((methAndRunningLastTime == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:51:28,336 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 1))) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0))) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 1))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:51:28,337 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1)) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && (((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) [2023-11-06 22:51:28,337 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || !((methAndRunningLastTime == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:51:28,337 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || (((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0))) || !((methAndRunningLastTime == 0))) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && (2 <= waterLevel))) || (((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:51:28,337 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((!((\old(pumpRunning) == 0)) || ((1 <= pumpRunning) && (2 <= waterLevel))) || !((1 == systemActive))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) && ((((!((\old(pumpRunning) == 0)) || ((1 <= pumpRunning) && (2 <= waterLevel))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || !((methAndRunningLastTime == 0)))) [2023-11-06 22:51:28,361 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 22:51:28,362 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 22:51:28,362 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 22:51:28,363 INFO L158 Benchmark]: Toolchain (without parser) took 20047.93ms. Allocated memory was 138.4MB in the beginning and 323.0MB in the end (delta: 184.5MB). Free memory was 84.9MB in the beginning and 160.8MB in the end (delta: -75.8MB). Peak memory consumption was 111.6MB. Max. memory is 16.1GB. [2023-11-06 22:51:28,363 INFO L158 Benchmark]: CDTParser took 0.36ms. Allocated memory is still 138.4MB. Free memory is still 77.3MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:51:28,364 INFO L158 Benchmark]: CACSL2BoogieTranslator took 684.50ms. Allocated memory was 138.4MB in the beginning and 184.5MB in the end (delta: 46.1MB). Free memory was 84.9MB in the beginning and 151.4MB in the end (delta: -66.5MB). Peak memory consumption was 26.8MB. Max. memory is 16.1GB. [2023-11-06 22:51:28,364 INFO L158 Benchmark]: Boogie Procedure Inliner took 65.71ms. Allocated memory is still 184.5MB. Free memory was 151.4MB in the beginning and 149.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:51:28,365 INFO L158 Benchmark]: Boogie Preprocessor took 38.32ms. Allocated memory is still 184.5MB. Free memory was 149.3MB in the beginning and 147.2MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:51:28,365 INFO L158 Benchmark]: RCFGBuilder took 619.19ms. Allocated memory is still 184.5MB. Free memory was 147.2MB in the beginning and 129.1MB in the end (delta: 18.1MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2023-11-06 22:51:28,365 INFO L158 Benchmark]: TraceAbstraction took 18495.91ms. Allocated memory was 184.5MB in the beginning and 323.0MB in the end (delta: 138.4MB). Free memory was 128.3MB in the beginning and 169.2MB in the end (delta: -40.8MB). Peak memory consumption was 136.4MB. Max. memory is 16.1GB. [2023-11-06 22:51:28,366 INFO L158 Benchmark]: Witness Printer took 130.72ms. Allocated memory is still 323.0MB. Free memory was 169.2MB in the beginning and 160.8MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-06 22:51:28,368 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.36ms. Allocated memory is still 138.4MB. Free memory is still 77.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 684.50ms. Allocated memory was 138.4MB in the beginning and 184.5MB in the end (delta: 46.1MB). Free memory was 84.9MB in the beginning and 151.4MB in the end (delta: -66.5MB). Peak memory consumption was 26.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 65.71ms. Allocated memory is still 184.5MB. Free memory was 151.4MB in the beginning and 149.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 38.32ms. Allocated memory is still 184.5MB. Free memory was 149.3MB in the beginning and 147.2MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 619.19ms. Allocated memory is still 184.5MB. Free memory was 147.2MB in the beginning and 129.1MB in the end (delta: 18.1MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 18495.91ms. Allocated memory was 184.5MB in the beginning and 323.0MB in the end (delta: 138.4MB). Free memory was 128.3MB in the beginning and 169.2MB in the end (delta: -40.8MB). Peak memory consumption was 136.4MB. Max. memory is 16.1GB. * Witness Printer took 130.72ms. Allocated memory is still 323.0MB. Free memory was 169.2MB in the beginning and 160.8MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] - GenericResultAtLocation [Line: 415]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [415] - GenericResultAtLocation [Line: 424]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [424] - GenericResultAtLocation [Line: 535]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [535] - GenericResultAtLocation [Line: 575]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [575] - GenericResultAtLocation [Line: 827]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [827] - GenericResultAtLocation [Line: 897]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [897] - GenericResultAtLocation [Line: 935]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [935] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 420]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 107 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 18.3s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 3.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 9.4s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1424 SdHoareTripleChecker+Valid, 1.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1391 mSDsluCounter, 4293 SdHoareTripleChecker+Invalid, 1.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2814 mSDsCounter, 392 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1026 IncrementalHoareTripleChecker+Invalid, 1418 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 392 mSolverCounterUnsat, 1479 mSDtfsCounter, 1026 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 622 GetRequests, 539 SyntacticMatches, 2 SemanticMatches, 81 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 90 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1074occurred in iteration=8, InterpolantAutomatonStates: 71, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.0s AutomataMinimizationTime, 12 MinimizatonAttempts, 281 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 50 LocationsWithAnnotation, 2440 PreInvPairs, 2688 NumberOfFragments, 3416 HoareAnnotationTreeSize, 2440 FomulaSimplifications, 1899 FormulaSimplificationTreeSizeReduction, 0.8s HoareSimplificationTime, 50 FomulaSimplificationsInter, 16412 FormulaSimplificationTreeSizeReductionInter, 8.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 2.9s InterpolantComputationTime, 1040 NumberOfCodeBlocks, 1040 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 1132 ConstructedInterpolants, 0 QuantifiedInterpolants, 2146 SizeOfPredicates, 7 NumberOfNonLiveVariables, 1076 ConjunctsInSsa, 23 ConjunctsInUnsatCore, 16 InterpolantComputations, 12 PerfectInterpolantSequences, 277/294 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 991]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 526]: Loop Invariant Derived loop invariant: ((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || !((methAndRunningLastTime == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 538]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 912]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 694]: Loop Invariant Derived loop invariant: ((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((!((\old(pumpRunning) == 0)) || ((1 <= pumpRunning) && (2 <= waterLevel))) || !((1 == systemActive))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) && ((((!((\old(pumpRunning) == 0)) || ((1 <= pumpRunning) && (2 <= waterLevel))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || !((methAndRunningLastTime == 0)))) - InvariantResult [Line: 947]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 710]: Loop Invariant Derived loop invariant: ((((((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (((pumpRunning == \old(pumpRunning)) && (methAndRunningLastTime == 0)) && (1 <= \result))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((1 == systemActive)) || (\old(waterLevel) < 2)) || ((pumpRunning == \old(pumpRunning)) && (1 <= \result))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 838]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 669]: Loop Invariant Derived loop invariant: ((((((((((!((1 == systemActive)) || ((((pumpRunning == 0) && (1 <= \result)) && (1 <= tmp)) && (1 == systemActive))) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1)) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || ((((pumpRunning == 0) && (1 <= \result)) && (1 <= tmp)) && (1 == systemActive))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || ((pumpRunning == 0) && (1 == systemActive)))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) || !((methaneLevelCritical == 0)))) - InvariantResult [Line: 721]: Loop Invariant Derived loop invariant: (((((((((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1)) && ((((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (((pumpRunning == 0) && (1 <= \result)) && (\result == 0))) || (methaneLevelCritical < 1))) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel)) && (\old(methAndRunningLastTime) == methAndRunningLastTime))) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (((pumpRunning == 0) && (1 <= \result)) && (\result == 0))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 435]: Loop Invariant Derived loop invariant: ((((((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || ((pumpRunning == \old(pumpRunning)) && (methAndRunningLastTime == 0))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 512]: Loop Invariant Derived loop invariant: (((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 1))) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0))) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 1))) || ((pumpRunning == 0) && (2 <= waterLevel))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 766]: Loop Invariant Derived loop invariant: (((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || (((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0))) || !((methAndRunningLastTime == 0))) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && (2 <= waterLevel))) || (((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 829]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 998]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 804]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (splverifierCounter == 0)) && (0 == systemActive)) || ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (splverifierCounter == 0)) && (0 == systemActive))) - InvariantResult [Line: 785]: Loop Invariant Derived loop invariant: ((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || !((methAndRunningLastTime == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methAndRunningLastTime == 0))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 819]: Loop Invariant Derived loop invariant: (((((((((1 <= pumpRunning) && (1 <= methaneLevelCritical)) && (2 <= waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0)) || (((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (1 <= methaneLevelCritical)) && (1 == systemActive)) && (splverifierCounter == 0))) || (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 <= methaneLevelCritical)) && (1 == systemActive)) && (splverifierCounter == 0))) || (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0))) || ((((1 <= pumpRunning) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0))) - InvariantResult [Line: 416]: Loop Invariant Derived loop invariant: (((((((((!((\old(methAndRunningLastTime) == 0)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1)) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && (((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 546]: Loop Invariant Derived loop invariant: ((((((((((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 <= \result)) && (1 == systemActive)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1)) && (((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && (tmp == 0)) && (methAndRunningLastTime == 0)) && (\old(waterLevel) == waterLevel))) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (((((pumpRunning == 0) && (tmp == 0)) && (methAndRunningLastTime == 0)) && (1 == systemActive)) && (\old(waterLevel) == waterLevel))) || (((((1 <= pumpRunning) && (tmp == 0)) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel)))) && ((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (((pumpRunning == \old(pumpRunning)) && (tmp == 0)) && (methAndRunningLastTime == 0))) || ((((pumpRunning == 0) && (tmp == 0)) && (methAndRunningLastTime == 0)) && (1 == systemActive))) || (\old(pumpRunning) < 1))) && ((((!((\old(methAndRunningLastTime) == 0)) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 <= \result)) && (1 == systemActive))) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((1 == systemActive))) || (((1 <= pumpRunning) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 == systemActive)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 926]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 919]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 1009]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 839]: Loop Invariant Derived loop invariant: ((((((((((1 <= pumpRunning) && (1 <= methaneLevelCritical)) && (2 <= waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0)) || (((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0))) || (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 <= methaneLevelCritical)) && (1 == systemActive)) && (splverifierCounter == 0))) || (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0))) || (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (methaneLevelCritical == 0)) && (splverifierCounter == 0)) && (0 == systemActive))) || (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (1 <= methaneLevelCritical)) && (splverifierCounter == 0)) && (0 == systemActive))) - InvariantResult [Line: 937]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-06 22:51:28,415 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_22f584f8-59b9-469f-9839-76fa45e1af30/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE