./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product57.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product57.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 3cfb2febd3006e73b0e8309478193e665e2e7ddd381dfad7d5652117e74962c4 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 23:10:12,709 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 23:10:12,775 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 23:10:12,781 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 23:10:12,781 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 23:10:12,824 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 23:10:12,825 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 23:10:12,825 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 23:10:12,826 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 23:10:12,827 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 23:10:12,828 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 23:10:12,828 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 23:10:12,829 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 23:10:12,829 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 23:10:12,830 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 23:10:12,831 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 23:10:12,831 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 23:10:12,832 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 23:10:12,833 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 23:10:12,833 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 23:10:12,834 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 23:10:12,839 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 23:10:12,839 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 23:10:12,840 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 23:10:12,840 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 23:10:12,851 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 23:10:12,852 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 23:10:12,852 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 23:10:12,853 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 23:10:12,853 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 23:10:12,854 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 23:10:12,854 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 23:10:12,854 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 23:10:12,855 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 23:10:12,855 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 23:10:12,856 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 23:10:12,856 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 23:10:12,857 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 23:10:12,857 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 23:10:12,858 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 3cfb2febd3006e73b0e8309478193e665e2e7ddd381dfad7d5652117e74962c4 [2023-11-06 23:10:13,192 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 23:10:13,225 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 23:10:13,228 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 23:10:13,231 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 23:10:13,232 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 23:10:13,233 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec3_product57.cil.c [2023-11-06 23:10:16,451 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 23:10:16,720 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 23:10:16,721 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/sv-benchmarks/c/product-lines/minepump_spec3_product57.cil.c [2023-11-06 23:10:16,737 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/bin/uautomizer-verify-WvqO1wxjHP/data/f6cb0670e/1d53ae5171d8495cb4faf8f9d984cbdf/FLAG69d77f495 [2023-11-06 23:10:16,764 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/bin/uautomizer-verify-WvqO1wxjHP/data/f6cb0670e/1d53ae5171d8495cb4faf8f9d984cbdf [2023-11-06 23:10:16,767 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 23:10:16,769 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 23:10:16,770 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 23:10:16,770 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 23:10:16,779 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 23:10:16,780 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 11:10:16" (1/1) ... [2023-11-06 23:10:16,781 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6e722daf and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:10:16, skipping insertion in model container [2023-11-06 23:10:16,781 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 11:10:16" (1/1) ... [2023-11-06 23:10:16,860 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 23:10:17,119 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/sv-benchmarks/c/product-lines/minepump_spec3_product57.cil.c[13989,14002] [2023-11-06 23:10:17,172 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 23:10:17,191 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 23:10:17,201 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] [2023-11-06 23:10:17,203 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [415] [2023-11-06 23:10:17,203 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [526] [2023-11-06 23:10:17,203 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [564] [2023-11-06 23:10:17,204 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [600] [2023-11-06 23:10:17,204 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [609] [2023-11-06 23:10:17,204 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [828] [2023-11-06 23:10:17,204 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [894] [2023-11-06 23:10:17,251 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/sv-benchmarks/c/product-lines/minepump_spec3_product57.cil.c[13989,14002] [2023-11-06 23:10:17,265 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 23:10:17,286 INFO L206 MainTranslator]: Completed translation [2023-11-06 23:10:17,287 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:10:17 WrapperNode [2023-11-06 23:10:17,287 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 23:10:17,288 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 23:10:17,288 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 23:10:17,288 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 23:10:17,296 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:10:17" (1/1) ... [2023-11-06 23:10:17,312 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:10:17" (1/1) ... [2023-11-06 23:10:17,342 INFO L138 Inliner]: procedures = 56, calls = 101, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 227 [2023-11-06 23:10:17,343 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 23:10:17,343 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 23:10:17,344 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 23:10:17,344 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 23:10:17,355 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:10:17" (1/1) ... [2023-11-06 23:10:17,356 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:10:17" (1/1) ... [2023-11-06 23:10:17,371 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:10:17" (1/1) ... [2023-11-06 23:10:17,371 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:10:17" (1/1) ... [2023-11-06 23:10:17,379 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:10:17" (1/1) ... [2023-11-06 23:10:17,384 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:10:17" (1/1) ... [2023-11-06 23:10:17,387 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:10:17" (1/1) ... [2023-11-06 23:10:17,388 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:10:17" (1/1) ... [2023-11-06 23:10:17,392 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 23:10:17,393 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 23:10:17,393 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 23:10:17,393 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 23:10:17,394 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:10:17" (1/1) ... [2023-11-06 23:10:17,415 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 23:10:17,431 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 23:10:17,461 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 23:10:17,494 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 23:10:17,513 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 23:10:17,513 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 23:10:17,514 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 23:10:17,514 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 23:10:17,516 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 23:10:17,516 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 23:10:17,517 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 23:10:17,517 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-06 23:10:17,518 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-06 23:10:17,518 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 23:10:17,518 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 23:10:17,518 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 23:10:17,518 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 23:10:17,518 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 23:10:17,519 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 23:10:17,520 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 23:10:17,520 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 23:10:17,520 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 23:10:17,632 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 23:10:17,634 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 23:10:17,958 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 23:10:17,966 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 23:10:17,966 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 23:10:17,969 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 11:10:17 BoogieIcfgContainer [2023-11-06 23:10:17,969 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 23:10:17,973 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 23:10:17,973 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 23:10:17,976 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 23:10:17,977 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 11:10:16" (1/3) ... [2023-11-06 23:10:17,978 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@71777434 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 11:10:17, skipping insertion in model container [2023-11-06 23:10:17,978 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:10:17" (2/3) ... [2023-11-06 23:10:17,979 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@71777434 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 11:10:17, skipping insertion in model container [2023-11-06 23:10:17,979 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 11:10:17" (3/3) ... [2023-11-06 23:10:17,980 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product57.cil.c [2023-11-06 23:10:18,000 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 23:10:18,000 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 23:10:18,055 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 23:10:18,064 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@70f5a38b, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 23:10:18,064 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 23:10:18,069 INFO L276 IsEmpty]: Start isEmpty. Operand has 93 states, 72 states have (on average 1.3888888888888888) internal successors, (100), 80 states have internal predecessors, (100), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2023-11-06 23:10:18,083 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-11-06 23:10:18,084 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:10:18,085 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:10:18,086 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:10:18,094 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:10:18,094 INFO L85 PathProgramCache]: Analyzing trace with hash 358613796, now seen corresponding path program 1 times [2023-11-06 23:10:18,104 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:10:18,105 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [170922070] [2023-11-06 23:10:18,105 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:10:18,106 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:10:18,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:18,308 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-06 23:10:18,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:18,317 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 23:10:18,317 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:10:18,318 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [170922070] [2023-11-06 23:10:18,318 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [170922070] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:10:18,319 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:10:18,319 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 23:10:18,320 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1862798585] [2023-11-06 23:10:18,321 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:10:18,326 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 23:10:18,326 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:10:18,360 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 23:10:18,361 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 23:10:18,364 INFO L87 Difference]: Start difference. First operand has 93 states, 72 states have (on average 1.3888888888888888) internal successors, (100), 80 states have internal predecessors, (100), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 23:10:18,416 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:10:18,417 INFO L93 Difference]: Finished difference Result 178 states and 243 transitions. [2023-11-06 23:10:18,418 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 23:10:18,420 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2023-11-06 23:10:18,420 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:10:18,430 INFO L225 Difference]: With dead ends: 178 [2023-11-06 23:10:18,430 INFO L226 Difference]: Without dead ends: 84 [2023-11-06 23:10:18,435 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 23:10:18,439 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 118 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 23:10:18,440 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 118 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 23:10:18,460 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2023-11-06 23:10:18,486 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 84. [2023-11-06 23:10:18,488 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84 states, 65 states have (on average 1.323076923076923) internal successors, (86), 72 states have internal predecessors, (86), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-06 23:10:18,491 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 109 transitions. [2023-11-06 23:10:18,493 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 109 transitions. Word has length 25 [2023-11-06 23:10:18,493 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:10:18,493 INFO L495 AbstractCegarLoop]: Abstraction has 84 states and 109 transitions. [2023-11-06 23:10:18,494 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 23:10:18,494 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 109 transitions. [2023-11-06 23:10:18,497 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-11-06 23:10:18,497 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:10:18,498 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:10:18,498 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 23:10:18,499 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:10:18,499 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:10:18,500 INFO L85 PathProgramCache]: Analyzing trace with hash 1691145883, now seen corresponding path program 1 times [2023-11-06 23:10:18,500 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:10:18,500 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [586496164] [2023-11-06 23:10:18,501 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:10:18,501 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:10:18,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:18,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-06 23:10:18,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:18,683 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 23:10:18,683 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:10:18,683 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [586496164] [2023-11-06 23:10:18,684 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [586496164] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:10:18,684 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:10:18,684 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 23:10:18,684 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1512699744] [2023-11-06 23:10:18,685 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:10:18,686 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 23:10:18,686 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:10:18,687 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 23:10:18,688 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 23:10:18,688 INFO L87 Difference]: Start difference. First operand 84 states and 109 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 23:10:18,710 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:10:18,710 INFO L93 Difference]: Finished difference Result 134 states and 174 transitions. [2023-11-06 23:10:18,711 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 23:10:18,711 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2023-11-06 23:10:18,711 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:10:18,713 INFO L225 Difference]: With dead ends: 134 [2023-11-06 23:10:18,713 INFO L226 Difference]: Without dead ends: 75 [2023-11-06 23:10:18,715 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 23:10:18,716 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 12 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 176 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 23:10:18,717 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 176 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 23:10:18,718 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2023-11-06 23:10:18,730 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2023-11-06 23:10:18,730 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 59 states have (on average 1.3389830508474576) internal successors, (79), 66 states have internal predecessors, (79), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2023-11-06 23:10:18,732 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 97 transitions. [2023-11-06 23:10:18,732 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 97 transitions. Word has length 26 [2023-11-06 23:10:18,733 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:10:18,733 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 97 transitions. [2023-11-06 23:10:18,733 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 23:10:18,734 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 97 transitions. [2023-11-06 23:10:18,735 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2023-11-06 23:10:18,735 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:10:18,736 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:10:18,736 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 23:10:18,736 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:10:18,737 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:10:18,737 INFO L85 PathProgramCache]: Analyzing trace with hash 1032855392, now seen corresponding path program 1 times [2023-11-06 23:10:18,737 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:10:18,738 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1866147364] [2023-11-06 23:10:18,738 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:10:18,738 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:10:18,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:18,915 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 23:10:18,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:18,920 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 23:10:18,920 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:10:18,921 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1866147364] [2023-11-06 23:10:18,921 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1866147364] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:10:18,921 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:10:18,921 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 23:10:18,921 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [892183758] [2023-11-06 23:10:18,922 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:10:18,922 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 23:10:18,922 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:10:18,923 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 23:10:18,923 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2023-11-06 23:10:18,924 INFO L87 Difference]: Start difference. First operand 75 states and 97 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 23:10:19,088 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:10:19,089 INFO L93 Difference]: Finished difference Result 143 states and 188 transitions. [2023-11-06 23:10:19,089 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 23:10:19,090 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2023-11-06 23:10:19,090 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:10:19,092 INFO L225 Difference]: With dead ends: 143 [2023-11-06 23:10:19,092 INFO L226 Difference]: Without dead ends: 75 [2023-11-06 23:10:19,093 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-11-06 23:10:19,095 INFO L413 NwaCegarLoop]: 90 mSDtfsCounter, 121 mSDsluCounter, 118 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 121 SdHoareTripleChecker+Valid, 208 SdHoareTripleChecker+Invalid, 50 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 23:10:19,096 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [121 Valid, 208 Invalid, 50 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 23:10:19,097 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2023-11-06 23:10:19,115 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2023-11-06 23:10:19,115 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 59 states have (on average 1.3220338983050848) internal successors, (78), 66 states have internal predecessors, (78), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2023-11-06 23:10:19,117 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 96 transitions. [2023-11-06 23:10:19,117 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 96 transitions. Word has length 30 [2023-11-06 23:10:19,118 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:10:19,118 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 96 transitions. [2023-11-06 23:10:19,118 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 23:10:19,118 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 96 transitions. [2023-11-06 23:10:19,120 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2023-11-06 23:10:19,120 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:10:19,120 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:10:19,121 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 23:10:19,121 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:10:19,122 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:10:19,122 INFO L85 PathProgramCache]: Analyzing trace with hash 1487539860, now seen corresponding path program 1 times [2023-11-06 23:10:19,122 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:10:19,122 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [840081881] [2023-11-06 23:10:19,122 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:10:19,123 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:10:19,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:19,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2023-11-06 23:10:19,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:19,236 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 23:10:19,236 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:10:19,237 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [840081881] [2023-11-06 23:10:19,237 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [840081881] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:10:19,237 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:10:19,237 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 23:10:19,238 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [329200668] [2023-11-06 23:10:19,238 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:10:19,238 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 23:10:19,239 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:10:19,251 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 23:10:19,252 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 23:10:19,252 INFO L87 Difference]: Start difference. First operand 75 states and 96 transitions. Second operand has 3 states, 3 states have (on average 11.666666666666666) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 23:10:19,314 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:10:19,314 INFO L93 Difference]: Finished difference Result 188 states and 246 transitions. [2023-11-06 23:10:19,315 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 23:10:19,315 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.666666666666666) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 38 [2023-11-06 23:10:19,315 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:10:19,317 INFO L225 Difference]: With dead ends: 188 [2023-11-06 23:10:19,318 INFO L226 Difference]: Without dead ends: 120 [2023-11-06 23:10:19,319 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 23:10:19,321 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 75 mSDsluCounter, 62 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 75 SdHoareTripleChecker+Valid, 170 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 23:10:19,321 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [75 Valid, 170 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 23:10:19,323 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 120 states. [2023-11-06 23:10:19,359 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 120 to 118. [2023-11-06 23:10:19,362 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 118 states, 92 states have (on average 1.3043478260869565) internal successors, (120), 100 states have internal predecessors, (120), 13 states have call successors, (13), 12 states have call predecessors, (13), 12 states have return successors, (17), 13 states have call predecessors, (17), 13 states have call successors, (17) [2023-11-06 23:10:19,371 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 118 states to 118 states and 150 transitions. [2023-11-06 23:10:19,371 INFO L78 Accepts]: Start accepts. Automaton has 118 states and 150 transitions. Word has length 38 [2023-11-06 23:10:19,371 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:10:19,372 INFO L495 AbstractCegarLoop]: Abstraction has 118 states and 150 transitions. [2023-11-06 23:10:19,372 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 11.666666666666666) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 23:10:19,372 INFO L276 IsEmpty]: Start isEmpty. Operand 118 states and 150 transitions. [2023-11-06 23:10:19,377 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2023-11-06 23:10:19,377 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:10:19,378 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:10:19,378 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 23:10:19,379 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:10:19,379 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:10:19,379 INFO L85 PathProgramCache]: Analyzing trace with hash -703403747, now seen corresponding path program 1 times [2023-11-06 23:10:19,380 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:10:19,380 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [691233774] [2023-11-06 23:10:19,380 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:10:19,380 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:10:19,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:19,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 23:10:19,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:19,576 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 23:10:19,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:19,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2023-11-06 23:10:19,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:19,585 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 23:10:19,585 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:10:19,586 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [691233774] [2023-11-06 23:10:19,586 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [691233774] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:10:19,586 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:10:19,587 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 23:10:19,588 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1656133531] [2023-11-06 23:10:19,588 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:10:19,589 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 23:10:19,590 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:10:19,590 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 23:10:19,591 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 23:10:19,591 INFO L87 Difference]: Start difference. First operand 118 states and 150 transitions. Second operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 23:10:19,924 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:10:19,925 INFO L93 Difference]: Finished difference Result 349 states and 461 transitions. [2023-11-06 23:10:19,925 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-06 23:10:19,925 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2023-11-06 23:10:19,927 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:10:19,934 INFO L225 Difference]: With dead ends: 349 [2023-11-06 23:10:19,934 INFO L226 Difference]: Without dead ends: 238 [2023-11-06 23:10:19,939 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2023-11-06 23:10:19,941 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 136 mSDsluCounter, 269 mSDsCounter, 0 mSdLazyCounter, 145 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 141 SdHoareTripleChecker+Valid, 355 SdHoareTripleChecker+Invalid, 177 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 145 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 23:10:19,942 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [141 Valid, 355 Invalid, 177 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 145 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 23:10:19,944 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 238 states. [2023-11-06 23:10:19,983 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 238 to 230. [2023-11-06 23:10:19,984 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 230 states, 179 states have (on average 1.2793296089385475) internal successors, (229), 190 states have internal predecessors, (229), 26 states have call successors, (26), 22 states have call predecessors, (26), 24 states have return successors, (40), 26 states have call predecessors, (40), 26 states have call successors, (40) [2023-11-06 23:10:19,986 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 230 states to 230 states and 295 transitions. [2023-11-06 23:10:19,986 INFO L78 Accepts]: Start accepts. Automaton has 230 states and 295 transitions. Word has length 46 [2023-11-06 23:10:19,987 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:10:19,987 INFO L495 AbstractCegarLoop]: Abstraction has 230 states and 295 transitions. [2023-11-06 23:10:19,987 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 23:10:19,988 INFO L276 IsEmpty]: Start isEmpty. Operand 230 states and 295 transitions. [2023-11-06 23:10:19,989 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2023-11-06 23:10:19,989 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:10:19,990 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:10:19,990 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-06 23:10:19,990 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:10:19,990 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:10:19,991 INFO L85 PathProgramCache]: Analyzing trace with hash 1237679491, now seen corresponding path program 1 times [2023-11-06 23:10:19,991 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:10:19,991 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1671946641] [2023-11-06 23:10:19,991 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:10:19,991 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:10:20,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:20,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 23:10:20,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:20,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 23:10:20,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:20,150 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 23:10:20,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:20,153 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2023-11-06 23:10:20,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:20,160 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 23:10:20,160 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:10:20,161 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1671946641] [2023-11-06 23:10:20,161 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1671946641] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:10:20,162 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:10:20,162 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-06 23:10:20,162 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [530500694] [2023-11-06 23:10:20,162 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:10:20,163 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-06 23:10:20,163 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:10:20,164 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-06 23:10:20,165 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2023-11-06 23:10:20,165 INFO L87 Difference]: Start difference. First operand 230 states and 295 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 23:10:20,738 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:10:20,739 INFO L93 Difference]: Finished difference Result 606 states and 833 transitions. [2023-11-06 23:10:20,739 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2023-11-06 23:10:20,739 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 50 [2023-11-06 23:10:20,740 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:10:20,744 INFO L225 Difference]: With dead ends: 606 [2023-11-06 23:10:20,744 INFO L226 Difference]: Without dead ends: 469 [2023-11-06 23:10:20,746 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 55 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=106, Invalid=236, Unknown=0, NotChecked=0, Total=342 [2023-11-06 23:10:20,747 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 311 mSDsluCounter, 267 mSDsCounter, 0 mSdLazyCounter, 285 mSolverCounterSat, 95 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 314 SdHoareTripleChecker+Valid, 338 SdHoareTripleChecker+Invalid, 380 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 95 IncrementalHoareTripleChecker+Valid, 285 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-06 23:10:20,748 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [314 Valid, 338 Invalid, 380 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [95 Valid, 285 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-06 23:10:20,750 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 469 states. [2023-11-06 23:10:20,823 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 469 to 405. [2023-11-06 23:10:20,824 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 405 states, 315 states have (on average 1.253968253968254) internal successors, (395), 337 states have internal predecessors, (395), 46 states have call successors, (46), 32 states have call predecessors, (46), 43 states have return successors, (91), 48 states have call predecessors, (91), 46 states have call successors, (91) [2023-11-06 23:10:20,831 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 405 states to 405 states and 532 transitions. [2023-11-06 23:10:20,831 INFO L78 Accepts]: Start accepts. Automaton has 405 states and 532 transitions. Word has length 50 [2023-11-06 23:10:20,832 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:10:20,832 INFO L495 AbstractCegarLoop]: Abstraction has 405 states and 532 transitions. [2023-11-06 23:10:20,832 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 23:10:20,833 INFO L276 IsEmpty]: Start isEmpty. Operand 405 states and 532 transitions. [2023-11-06 23:10:20,834 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2023-11-06 23:10:20,834 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:10:20,835 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:10:20,835 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-06 23:10:20,835 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:10:20,836 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:10:20,836 INFO L85 PathProgramCache]: Analyzing trace with hash 1103665985, now seen corresponding path program 1 times [2023-11-06 23:10:20,836 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:10:20,836 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [621929780] [2023-11-06 23:10:20,836 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:10:20,837 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:10:20,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:20,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 23:10:20,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:20,941 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 23:10:20,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:20,967 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 23:10:20,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:20,969 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2023-11-06 23:10:20,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:20,972 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 23:10:20,972 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:10:20,972 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [621929780] [2023-11-06 23:10:20,972 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [621929780] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:10:20,972 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:10:20,973 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 23:10:20,973 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [990610063] [2023-11-06 23:10:20,973 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:10:20,973 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 23:10:20,973 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:10:20,974 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 23:10:20,974 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 23:10:20,974 INFO L87 Difference]: Start difference. First operand 405 states and 532 transitions. Second operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 23:10:21,355 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:10:21,356 INFO L93 Difference]: Finished difference Result 755 states and 1003 transitions. [2023-11-06 23:10:21,356 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-06 23:10:21,356 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 50 [2023-11-06 23:10:21,357 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:10:21,361 INFO L225 Difference]: With dead ends: 755 [2023-11-06 23:10:21,361 INFO L226 Difference]: Without dead ends: 439 [2023-11-06 23:10:21,363 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2023-11-06 23:10:21,367 INFO L413 NwaCegarLoop]: 74 mSDtfsCounter, 146 mSDsluCounter, 230 mSDsCounter, 0 mSdLazyCounter, 241 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 148 SdHoareTripleChecker+Valid, 304 SdHoareTripleChecker+Invalid, 279 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 241 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 23:10:21,367 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [148 Valid, 304 Invalid, 279 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 241 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 23:10:21,370 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 439 states. [2023-11-06 23:10:21,440 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 439 to 405. [2023-11-06 23:10:21,442 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 405 states, 315 states have (on average 1.2507936507936508) internal successors, (394), 337 states have internal predecessors, (394), 46 states have call successors, (46), 32 states have call predecessors, (46), 43 states have return successors, (91), 48 states have call predecessors, (91), 46 states have call successors, (91) [2023-11-06 23:10:21,446 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 405 states to 405 states and 531 transitions. [2023-11-06 23:10:21,446 INFO L78 Accepts]: Start accepts. Automaton has 405 states and 531 transitions. Word has length 50 [2023-11-06 23:10:21,447 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:10:21,447 INFO L495 AbstractCegarLoop]: Abstraction has 405 states and 531 transitions. [2023-11-06 23:10:21,447 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 23:10:21,447 INFO L276 IsEmpty]: Start isEmpty. Operand 405 states and 531 transitions. [2023-11-06 23:10:21,448 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2023-11-06 23:10:21,449 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:10:21,449 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:10:21,449 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-06 23:10:21,450 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:10:21,450 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:10:21,450 INFO L85 PathProgramCache]: Analyzing trace with hash 1322520703, now seen corresponding path program 1 times [2023-11-06 23:10:21,450 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:10:21,451 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [745700341] [2023-11-06 23:10:21,451 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:10:21,451 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:10:21,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:21,519 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 23:10:21,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:21,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 23:10:21,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:21,564 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 23:10:21,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:21,565 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2023-11-06 23:10:21,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:21,568 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 23:10:21,568 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:10:21,568 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [745700341] [2023-11-06 23:10:21,569 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [745700341] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:10:21,569 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:10:21,569 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-06 23:10:21,569 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1440505823] [2023-11-06 23:10:21,569 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:10:21,570 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-06 23:10:21,570 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:10:21,570 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-06 23:10:21,570 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2023-11-06 23:10:21,571 INFO L87 Difference]: Start difference. First operand 405 states and 531 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 23:10:21,916 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:10:21,916 INFO L93 Difference]: Finished difference Result 858 states and 1156 transitions. [2023-11-06 23:10:21,916 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-06 23:10:21,917 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 50 [2023-11-06 23:10:21,917 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:10:21,921 INFO L225 Difference]: With dead ends: 858 [2023-11-06 23:10:21,921 INFO L226 Difference]: Without dead ends: 460 [2023-11-06 23:10:21,923 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=42, Invalid=90, Unknown=0, NotChecked=0, Total=132 [2023-11-06 23:10:21,924 INFO L413 NwaCegarLoop]: 74 mSDtfsCounter, 164 mSDsluCounter, 301 mSDsCounter, 0 mSdLazyCounter, 271 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 166 SdHoareTripleChecker+Valid, 375 SdHoareTripleChecker+Invalid, 311 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 271 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 23:10:21,924 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [166 Valid, 375 Invalid, 311 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 271 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 23:10:21,925 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 460 states. [2023-11-06 23:10:21,975 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 460 to 408. [2023-11-06 23:10:21,976 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 408 states, 320 states have (on average 1.24375) internal successors, (398), 341 states have internal predecessors, (398), 45 states have call successors, (45), 31 states have call predecessors, (45), 42 states have return successors, (90), 47 states have call predecessors, (90), 45 states have call successors, (90) [2023-11-06 23:10:21,980 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 408 states to 408 states and 533 transitions. [2023-11-06 23:10:21,980 INFO L78 Accepts]: Start accepts. Automaton has 408 states and 533 transitions. Word has length 50 [2023-11-06 23:10:21,980 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:10:21,981 INFO L495 AbstractCegarLoop]: Abstraction has 408 states and 533 transitions. [2023-11-06 23:10:21,981 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 23:10:21,981 INFO L276 IsEmpty]: Start isEmpty. Operand 408 states and 533 transitions. [2023-11-06 23:10:21,982 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2023-11-06 23:10:21,982 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:10:21,982 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:10:21,983 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-06 23:10:21,983 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:10:21,983 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:10:21,983 INFO L85 PathProgramCache]: Analyzing trace with hash -782958681, now seen corresponding path program 1 times [2023-11-06 23:10:21,984 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:10:21,984 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [300856904] [2023-11-06 23:10:21,984 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:10:21,984 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:10:21,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:22,084 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 23:10:22,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:22,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 23:10:22,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:22,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 23:10:22,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:22,188 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2023-11-06 23:10:22,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:22,190 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-06 23:10:22,191 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:10:22,191 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [300856904] [2023-11-06 23:10:22,191 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [300856904] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 23:10:22,191 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1564995311] [2023-11-06 23:10:22,191 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:10:22,191 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 23:10:22,191 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 23:10:22,197 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 23:10:22,227 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-06 23:10:22,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:22,307 INFO L262 TraceCheckSpWp]: Trace formula consists of 231 conjuncts, 15 conjunts are in the unsatisfiable core [2023-11-06 23:10:22,313 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 23:10:22,499 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 23:10:22,499 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 23:10:22,500 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1564995311] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:10:22,500 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 23:10:22,500 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 14 [2023-11-06 23:10:22,500 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [46953270] [2023-11-06 23:10:22,500 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:10:22,501 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-06 23:10:22,501 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:10:22,501 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-06 23:10:22,502 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=147, Unknown=0, NotChecked=0, Total=182 [2023-11-06 23:10:22,502 INFO L87 Difference]: Start difference. First operand 408 states and 533 transitions. Second operand has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 23:10:22,733 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:10:22,733 INFO L93 Difference]: Finished difference Result 1193 states and 1596 transitions. [2023-11-06 23:10:22,734 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 23:10:22,734 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2023-11-06 23:10:22,734 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:10:22,741 INFO L225 Difference]: With dead ends: 1193 [2023-11-06 23:10:22,741 INFO L226 Difference]: Without dead ends: 792 [2023-11-06 23:10:22,743 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 69 GetRequests, 56 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=42, Invalid=168, Unknown=0, NotChecked=0, Total=210 [2023-11-06 23:10:22,744 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 61 mSDsluCounter, 361 mSDsCounter, 0 mSdLazyCounter, 108 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 457 SdHoareTripleChecker+Invalid, 110 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 108 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 23:10:22,745 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [62 Valid, 457 Invalid, 110 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 108 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 23:10:22,746 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 792 states. [2023-11-06 23:10:22,839 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 792 to 790. [2023-11-06 23:10:22,841 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 790 states, 618 states have (on average 1.233009708737864) internal successors, (762), 656 states have internal predecessors, (762), 89 states have call successors, (89), 62 states have call predecessors, (89), 82 states have return successors, (180), 91 states have call predecessors, (180), 89 states have call successors, (180) [2023-11-06 23:10:22,848 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 790 states to 790 states and 1031 transitions. [2023-11-06 23:10:22,848 INFO L78 Accepts]: Start accepts. Automaton has 790 states and 1031 transitions. Word has length 55 [2023-11-06 23:10:22,848 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:10:22,849 INFO L495 AbstractCegarLoop]: Abstraction has 790 states and 1031 transitions. [2023-11-06 23:10:22,849 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 23:10:22,849 INFO L276 IsEmpty]: Start isEmpty. Operand 790 states and 1031 transitions. [2023-11-06 23:10:22,850 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2023-11-06 23:10:22,851 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:10:22,851 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:10:22,867 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-06 23:10:23,056 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2023-11-06 23:10:23,057 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:10:23,057 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:10:23,057 INFO L85 PathProgramCache]: Analyzing trace with hash 844263809, now seen corresponding path program 1 times [2023-11-06 23:10:23,057 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:10:23,057 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1662423759] [2023-11-06 23:10:23,058 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:10:23,058 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:10:23,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:23,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 23:10:23,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:23,174 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 23:10:23,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:23,196 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 23:10:23,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:23,198 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2023-11-06 23:10:23,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:23,201 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 23:10:23,202 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:10:23,202 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1662423759] [2023-11-06 23:10:23,202 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1662423759] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:10:23,202 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:10:23,202 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2023-11-06 23:10:23,202 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [530030715] [2023-11-06 23:10:23,202 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:10:23,203 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2023-11-06 23:10:23,203 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:10:23,203 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2023-11-06 23:10:23,203 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2023-11-06 23:10:23,204 INFO L87 Difference]: Start difference. First operand 790 states and 1031 transitions. Second operand has 10 states, 10 states have (on average 4.5) internal successors, (45), 8 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 23:10:23,820 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:10:23,820 INFO L93 Difference]: Finished difference Result 1546 states and 2015 transitions. [2023-11-06 23:10:23,821 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2023-11-06 23:10:23,822 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.5) internal successors, (45), 8 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2023-11-06 23:10:23,822 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:10:23,828 INFO L225 Difference]: With dead ends: 1546 [2023-11-06 23:10:23,828 INFO L226 Difference]: Without dead ends: 763 [2023-11-06 23:10:23,834 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 48 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=90, Invalid=330, Unknown=0, NotChecked=0, Total=420 [2023-11-06 23:10:23,836 INFO L413 NwaCegarLoop]: 115 mSDtfsCounter, 301 mSDsluCounter, 521 mSDsCounter, 0 mSdLazyCounter, 495 mSolverCounterSat, 80 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 302 SdHoareTripleChecker+Valid, 636 SdHoareTripleChecker+Invalid, 575 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 80 IncrementalHoareTripleChecker+Valid, 495 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-06 23:10:23,837 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [302 Valid, 636 Invalid, 575 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [80 Valid, 495 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-06 23:10:23,838 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 763 states. [2023-11-06 23:10:23,915 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 763 to 746. [2023-11-06 23:10:23,917 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 746 states, 586 states have (on average 1.204778156996587) internal successors, (706), 620 states have internal predecessors, (706), 81 states have call successors, (81), 62 states have call predecessors, (81), 78 states have return successors, (123), 82 states have call predecessors, (123), 81 states have call successors, (123) [2023-11-06 23:10:23,922 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 746 states to 746 states and 910 transitions. [2023-11-06 23:10:23,922 INFO L78 Accepts]: Start accepts. Automaton has 746 states and 910 transitions. Word has length 56 [2023-11-06 23:10:23,924 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:10:23,924 INFO L495 AbstractCegarLoop]: Abstraction has 746 states and 910 transitions. [2023-11-06 23:10:23,924 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.5) internal successors, (45), 8 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 23:10:23,924 INFO L276 IsEmpty]: Start isEmpty. Operand 746 states and 910 transitions. [2023-11-06 23:10:23,926 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2023-11-06 23:10:23,927 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:10:23,927 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:10:23,927 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2023-11-06 23:10:23,927 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:10:23,928 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:10:23,928 INFO L85 PathProgramCache]: Analyzing trace with hash 605332931, now seen corresponding path program 1 times [2023-11-06 23:10:23,928 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:10:23,928 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [986531694] [2023-11-06 23:10:23,928 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:10:23,928 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:10:23,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:24,075 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 23:10:24,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:24,086 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-06 23:10:24,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:24,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2023-11-06 23:10:24,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:24,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 23:10:24,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:24,124 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2023-11-06 23:10:24,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:24,144 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-06 23:10:24,145 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:10:24,145 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [986531694] [2023-11-06 23:10:24,145 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [986531694] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:10:24,145 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:10:24,145 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2023-11-06 23:10:24,145 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [685580526] [2023-11-06 23:10:24,145 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:10:24,146 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2023-11-06 23:10:24,147 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:10:24,148 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2023-11-06 23:10:24,148 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=110, Unknown=0, NotChecked=0, Total=132 [2023-11-06 23:10:24,148 INFO L87 Difference]: Start difference. First operand 746 states and 910 transitions. Second operand has 12 states, 12 states have (on average 4.0) internal successors, (48), 8 states have internal predecessors, (48), 2 states have call successors, (6), 5 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 23:10:25,410 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:10:25,410 INFO L93 Difference]: Finished difference Result 1464 states and 1804 transitions. [2023-11-06 23:10:25,411 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2023-11-06 23:10:25,411 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 4.0) internal successors, (48), 8 states have internal predecessors, (48), 2 states have call successors, (6), 5 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) Word has length 59 [2023-11-06 23:10:25,411 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:10:25,416 INFO L225 Difference]: With dead ends: 1464 [2023-11-06 23:10:25,416 INFO L226 Difference]: Without dead ends: 725 [2023-11-06 23:10:25,419 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 51 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 287 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=262, Invalid=1070, Unknown=0, NotChecked=0, Total=1332 [2023-11-06 23:10:25,420 INFO L413 NwaCegarLoop]: 43 mSDtfsCounter, 359 mSDsluCounter, 235 mSDsCounter, 0 mSdLazyCounter, 1309 mSolverCounterSat, 106 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 360 SdHoareTripleChecker+Valid, 278 SdHoareTripleChecker+Invalid, 1415 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 106 IncrementalHoareTripleChecker+Valid, 1309 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2023-11-06 23:10:25,420 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [360 Valid, 278 Invalid, 1415 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [106 Valid, 1309 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2023-11-06 23:10:25,422 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 725 states. [2023-11-06 23:10:25,509 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 725 to 714. [2023-11-06 23:10:25,511 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 714 states, 554 states have (on average 1.1732851985559567) internal successors, (650), 588 states have internal predecessors, (650), 81 states have call successors, (81), 62 states have call predecessors, (81), 78 states have return successors, (117), 82 states have call predecessors, (117), 81 states have call successors, (117) [2023-11-06 23:10:25,516 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 714 states to 714 states and 848 transitions. [2023-11-06 23:10:25,516 INFO L78 Accepts]: Start accepts. Automaton has 714 states and 848 transitions. Word has length 59 [2023-11-06 23:10:25,516 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:10:25,517 INFO L495 AbstractCegarLoop]: Abstraction has 714 states and 848 transitions. [2023-11-06 23:10:25,517 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 4.0) internal successors, (48), 8 states have internal predecessors, (48), 2 states have call successors, (6), 5 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 23:10:25,517 INFO L276 IsEmpty]: Start isEmpty. Operand 714 states and 848 transitions. [2023-11-06 23:10:25,520 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2023-11-06 23:10:25,520 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:10:25,521 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:10:25,521 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2023-11-06 23:10:25,521 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:10:25,521 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:10:25,522 INFO L85 PathProgramCache]: Analyzing trace with hash 486604430, now seen corresponding path program 1 times [2023-11-06 23:10:25,522 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:10:25,522 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1076752574] [2023-11-06 23:10:25,522 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:10:25,522 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:10:25,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:25,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 23:10:25,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:25,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 23:10:25,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:25,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 23:10:25,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:25,642 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 23:10:25,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:25,644 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-06 23:10:25,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:25,646 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2023-11-06 23:10:25,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:25,648 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 5 proven. 1 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2023-11-06 23:10:25,648 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:10:25,648 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1076752574] [2023-11-06 23:10:25,649 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1076752574] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 23:10:25,649 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1304331196] [2023-11-06 23:10:25,649 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:10:25,649 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 23:10:25,649 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 23:10:25,650 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 23:10:25,655 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-06 23:10:25,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:10:25,757 INFO L262 TraceCheckSpWp]: Trace formula consists of 313 conjuncts, 13 conjunts are in the unsatisfiable core [2023-11-06 23:10:25,766 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 23:10:25,949 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 6 proven. 12 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2023-11-06 23:10:25,950 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-06 23:10:26,243 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 8 proven. 4 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2023-11-06 23:10:26,243 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1304331196] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-06 23:10:26,243 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-06 23:10:26,243 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8, 9] total 17 [2023-11-06 23:10:26,244 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [938468572] [2023-11-06 23:10:26,244 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-06 23:10:26,246 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2023-11-06 23:10:26,246 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:10:26,247 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2023-11-06 23:10:26,247 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=56, Invalid=216, Unknown=0, NotChecked=0, Total=272 [2023-11-06 23:10:26,248 INFO L87 Difference]: Start difference. First operand 714 states and 848 transitions. Second operand has 17 states, 17 states have (on average 7.235294117647059) internal successors, (123), 13 states have internal predecessors, (123), 6 states have call successors, (18), 9 states have call predecessors, (18), 6 states have return successors, (16), 6 states have call predecessors, (16), 6 states have call successors, (16) [2023-11-06 23:10:27,222 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:10:27,222 INFO L93 Difference]: Finished difference Result 1453 states and 1801 transitions. [2023-11-06 23:10:27,223 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2023-11-06 23:10:27,223 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 17 states have (on average 7.235294117647059) internal successors, (123), 13 states have internal predecessors, (123), 6 states have call successors, (18), 9 states have call predecessors, (18), 6 states have return successors, (16), 6 states have call predecessors, (16), 6 states have call successors, (16) Word has length 87 [2023-11-06 23:10:27,224 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:10:27,224 INFO L225 Difference]: With dead ends: 1453 [2023-11-06 23:10:27,225 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 23:10:27,230 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 230 GetRequests, 179 SyntacticMatches, 7 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 411 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=571, Invalid=1499, Unknown=0, NotChecked=0, Total=2070 [2023-11-06 23:10:27,231 INFO L413 NwaCegarLoop]: 82 mSDtfsCounter, 413 mSDsluCounter, 521 mSDsCounter, 0 mSdLazyCounter, 662 mSolverCounterSat, 110 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 415 SdHoareTripleChecker+Valid, 603 SdHoareTripleChecker+Invalid, 772 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 110 IncrementalHoareTripleChecker+Valid, 662 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2023-11-06 23:10:27,231 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [415 Valid, 603 Invalid, 772 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [110 Valid, 662 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2023-11-06 23:10:27,232 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 23:10:27,232 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 23:10:27,232 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 23:10:27,232 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 23:10:27,233 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 87 [2023-11-06 23:10:27,234 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:10:27,235 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 23:10:27,235 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 17 states have (on average 7.235294117647059) internal successors, (123), 13 states have internal predecessors, (123), 6 states have call successors, (18), 9 states have call predecessors, (18), 6 states have return successors, (16), 6 states have call predecessors, (16), 6 states have call successors, (16) [2023-11-06 23:10:27,235 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 23:10:27,235 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 23:10:27,239 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 23:10:27,250 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-06 23:10:27,445 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 23:10:27,447 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 23:10:35,288 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 641 647) no Hoare annotation was computed. [2023-11-06 23:10:35,288 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 641 647) the Hoare annotation is: true [2023-11-06 23:10:35,288 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 450 461) the Hoare annotation is: (let ((.cse5 (< ~pumpRunning~0 1)) (.cse1 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse0 (< 2 ~waterLevel~0)) (.cse2 (not (= ~pumpRunning~0 0))) (.cse4 (not (= 1 ~systemActive~0))) (.cse6 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse7 (< |old(~methaneLevelCritical~0)| 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse4 .cse6 .cse7) (or .cse0 .cse5 .cse1 .cse3 .cse4) (or .cse0 .cse2 .cse4 .cse6 .cse7))) [2023-11-06 23:10:35,289 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 450 461) no Hoare annotation was computed. [2023-11-06 23:10:35,289 INFO L899 garLoopResultBuilder]: For program point L454-1(lines 450 461) no Hoare annotation was computed. [2023-11-06 23:10:35,289 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 896 925) no Hoare annotation was computed. [2023-11-06 23:10:35,290 INFO L902 garLoopResultBuilder]: At program point L921(lines 896 925) the Hoare annotation is: true [2023-11-06 23:10:35,290 INFO L899 garLoopResultBuilder]: For program point L917(line 917) no Hoare annotation was computed. [2023-11-06 23:10:35,290 INFO L899 garLoopResultBuilder]: For program point L910(lines 910 914) no Hoare annotation was computed. [2023-11-06 23:10:35,290 INFO L902 garLoopResultBuilder]: At program point L910-1(lines 910 914) the Hoare annotation is: true [2023-11-06 23:10:35,290 INFO L899 garLoopResultBuilder]: For program point L907(line 907) no Hoare annotation was computed. [2023-11-06 23:10:35,290 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 896 925) the Hoare annotation is: true [2023-11-06 23:10:35,290 INFO L902 garLoopResultBuilder]: At program point L906-2(lines 906 920) the Hoare annotation is: true [2023-11-06 23:10:35,291 INFO L902 garLoopResultBuilder]: At program point L902(line 902) the Hoare annotation is: true [2023-11-06 23:10:35,291 INFO L899 garLoopResultBuilder]: For program point L902-1(line 902) no Hoare annotation was computed. [2023-11-06 23:10:35,291 INFO L899 garLoopResultBuilder]: For program point L576(lines 576 596) no Hoare annotation was computed. [2023-11-06 23:10:35,291 INFO L899 garLoopResultBuilder]: For program point L605(line 605) no Hoare annotation was computed. [2023-11-06 23:10:35,291 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 517 525) the Hoare annotation is: (let ((.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (< |old(~pumpRunning~0)| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (< 2 |old(~waterLevel~0)|)) (.cse6 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse5 .cse3 .cse6) (or .cse1 .cse4 .cse2 .cse5 .cse3) (or .cse0 .cse1 .cse3 .cse6))) [2023-11-06 23:10:35,291 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 617 640) no Hoare annotation was computed. [2023-11-06 23:10:35,295 INFO L895 garLoopResultBuilder]: At program point getWaterLevel_returnLabel#1(lines 494 502) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse7 (= ~pumpRunning~0 0)) (.cse8 (<= ~waterLevel~0 1)) (.cse3 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse4 (< |old(~pumpRunning~0)| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (< 2 |old(~waterLevel~0)|)) (.cse6 (< ~methaneLevelCritical~0 1))) (and (or (< 1 |old(~waterLevel~0)|) .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse5 .cse6) (let ((.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and .cse7 .cse8 .cse9) .cse0 .cse1 .cse2 (and (<= 1 ~pumpRunning~0) .cse9) .cse5)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 (= |timeShift_getWaterLevel_#res#1| 1)) (let ((.cse10 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse8 .cse10 .cse3) .cse2 (and .cse7 .cse8 .cse10 .cse3) .cse4 .cse5)) (or .cse0 .cse1 .cse5 .cse6))) [2023-11-06 23:10:35,295 INFO L895 garLoopResultBuilder]: At program point L689(line 689) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse4 (< |old(~pumpRunning~0)| 1)) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (= |timeShift_processEnvironment_~tmp~5#1| 0) (<= ~waterLevel~0 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (< 2 |old(~waterLevel~0)|)) (.cse6 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse5 .cse3 .cse6) (or .cse1 .cse2 .cse4 .cse5 .cse3) (or .cse0 .cse1 .cse3 .cse6))) [2023-11-06 23:10:35,295 INFO L899 garLoopResultBuilder]: For program point L586(lines 586 592) no Hoare annotation was computed. [2023-11-06 23:10:35,295 INFO L899 garLoopResultBuilder]: For program point L582(lines 582 595) no Hoare annotation was computed. [2023-11-06 23:10:35,296 INFO L895 garLoopResultBuilder]: At program point L582-1(lines 567 599) the Hoare annotation is: (let ((.cse4 (= 1 ~systemActive~0)) (.cse5 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (not .cse5)) (.cse8 (<= 1 ~pumpRunning~0)) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not .cse4)) (.cse2 (= ~pumpRunning~0 0)) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= ~waterLevel~0 1)) (.cse10 (not (= |timeShift___utac_acc__Specification3_spec__1_~tmp~3#1| 0))) (.cse13 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse14 (< |old(~pumpRunning~0)| 1)) (.cse9 (< 2 |old(~waterLevel~0)|)) (.cse11 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5 .cse6) .cse7 (and .cse8 .cse6) .cse9) (or .cse0 .cse1 (and .cse2 .cse4 .cse5 .cse6 .cse10) .cse9 .cse11 (and .cse8 .cse6 .cse10)) (or .cse1 (and .cse12 .cse3 .cse13) .cse7 .cse14 (and .cse2 .cse3 .cse4 .cse13) .cse9) (or .cse1 (and .cse2 .cse3 .cse4 .cse10 .cse13) (and .cse12 .cse3 .cse10 .cse13) .cse14 .cse9 .cse11)))) [2023-11-06 23:10:35,296 INFO L895 garLoopResultBuilder]: At program point L574(line 574) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse7 (<= ~waterLevel~0 1)) (.cse13 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse12 (= 1 ~systemActive~0)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (<= 1 ~pumpRunning~0) .cse2)) (.cse6 (< ~methaneLevelCritical~0 1)) (.cse3 (not .cse12)) (.cse9 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7 .cse13)) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse10 (< |old(~pumpRunning~0)| 1)) (.cse11 (and .cse1 .cse7 .cse12 .cse13)) (.cse5 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 (and .cse1 .cse2) .cse3 .cse4 .cse5 .cse6) (or (and .cse1 .cse7 .cse2) .cse0 .cse3 .cse8 .cse4 .cse5) (or .cse3 .cse9 .cse10 .cse11 .cse5 .cse6) (or .cse3 .cse9 .cse8 .cse10 .cse11 .cse5)))) [2023-11-06 23:10:35,296 INFO L899 garLoopResultBuilder]: For program point L574-1(line 574) no Hoare annotation was computed. [2023-11-06 23:10:35,296 INFO L895 garLoopResultBuilder]: At program point L694(line 694) the Hoare annotation is: (let ((.cse3 (< ~methaneLevelCritical~0 1)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (< |old(~pumpRunning~0)| 1)) (.cse2 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse0 .cse2 .cse3) (or .cse4 .cse5 .cse0 .cse6 .cse2) (or .cse0 .cse6 .cse1 .cse2))) [2023-11-06 23:10:35,296 INFO L895 garLoopResultBuilder]: At program point L694-1(lines 675 699) the Hoare annotation is: (let ((.cse9 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (= ~pumpRunning~0 0)) (.cse11 (<= ~waterLevel~0 1)) (.cse12 (= 1 ~systemActive~0)) (.cse13 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse2 (< |old(~pumpRunning~0)| 1)) (.cse3 (and .cse8 .cse11 .cse12 .cse13)) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse11 (= |timeShift_processEnvironment_~tmp~5#1| 0) .cse13)) (.cse6 (< ~methaneLevelCritical~0 1)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse12)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse10 (and (<= 1 ~pumpRunning~0) .cse9)) (.cse5 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse7 (and .cse8 .cse9) .cse0 .cse10 .cse5 .cse6) (or (and .cse8 .cse11 .cse9) .cse7 .cse0 .cse1 .cse10 .cse5)))) [2023-11-06 23:10:35,296 INFO L899 garLoopResultBuilder]: For program point L628-1(lines 628 634) no Hoare annotation was computed. [2023-11-06 23:10:35,297 INFO L899 garLoopResultBuilder]: For program point L818(lines 818 822) no Hoare annotation was computed. [2023-11-06 23:10:35,297 INFO L899 garLoopResultBuilder]: For program point L818-2(lines 818 822) no Hoare annotation was computed. [2023-11-06 23:10:35,297 INFO L899 garLoopResultBuilder]: For program point L430(lines 430 434) no Hoare annotation was computed. [2023-11-06 23:10:35,297 INFO L895 garLoopResultBuilder]: At program point L430-2(lines 426 437) the Hoare annotation is: (let ((.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (< |old(~pumpRunning~0)| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (< 2 |old(~waterLevel~0)|)) (.cse6 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse5 .cse3 .cse6) (or .cse1 .cse4 .cse2 .cse5 .cse3) (or .cse0 .cse1 .cse3 .cse6))) [2023-11-06 23:10:35,297 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 601 608) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse4 (< |old(~pumpRunning~0)| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (< 2 |old(~waterLevel~0)|)) (.cse5 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse3 .cse5) (or .cse1 .cse2 .cse4 .cse3) (or .cse0 .cse1 .cse3 .cse5))) [2023-11-06 23:10:35,297 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 617 640) the Hoare annotation is: (let ((.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse8)) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse4 (< ~methaneLevelCritical~0 1)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (and (= ~pumpRunning~0 0) .cse8)) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse3 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse1 .cse2 .cse3) (or .cse6 .cse7 .cse0 .cse3 .cse4) (or .cse6 .cse7 .cse0 .cse5 .cse3)))) [2023-11-06 23:10:35,297 INFO L895 garLoopResultBuilder]: At program point deactivatePump_returnLabel#1(lines 726 733) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse4 (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|))) (.cse5 (< |old(~pumpRunning~0)| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (< 2 |old(~waterLevel~0)|)) (.cse6 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse5 .cse3) (or .cse1 .cse4 .cse5 .cse3 .cse6) (or .cse0 .cse1 .cse3 .cse6))) [2023-11-06 23:10:35,297 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 809 827) the Hoare annotation is: (let ((.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (< |old(~pumpRunning~0)| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (< 2 |old(~waterLevel~0)|)) (.cse6 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse5 .cse3 .cse6) (or .cse1 .cse4 .cse2 .cse5 .cse3) (or .cse0 .cse1 .cse3 .cse6))) [2023-11-06 23:10:35,298 INFO L899 garLoopResultBuilder]: For program point L621-1(lines 620 639) no Hoare annotation was computed. [2023-11-06 23:10:35,298 INFO L899 garLoopResultBuilder]: For program point L683(lines 683 691) no Hoare annotation was computed. [2023-11-06 23:10:35,298 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 617 640) no Hoare annotation was computed. [2023-11-06 23:10:35,298 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 745 753) the Hoare annotation is: (let ((.cse1 (< |old(~pumpRunning~0)| 1)) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse2 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse1 .cse2) (or (< 1 |old(~waterLevel~0)|) .cse5 .cse0 .cse4) (or .cse5 .cse0 .cse2 .cse3) (or .cse5 .cse0 .cse4 (and (<= 1 ~pumpRunning~0) (not (= |timeShift_isPumpRunning_#res#1| 0)) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse2))) [2023-11-06 23:10:35,298 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 605) no Hoare annotation was computed. [2023-11-06 23:10:35,298 INFO L899 garLoopResultBuilder]: For program point L679(lines 679 696) no Hoare annotation was computed. [2023-11-06 23:10:35,298 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 462 470) the Hoare annotation is: true [2023-11-06 23:10:35,298 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 462 470) no Hoare annotation was computed. [2023-11-06 23:10:35,298 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 462 470) no Hoare annotation was computed. [2023-11-06 23:10:35,298 INFO L895 garLoopResultBuilder]: At program point L886(lines 839 887) the Hoare annotation is: false [2023-11-06 23:10:35,299 INFO L899 garLoopResultBuilder]: For program point L977(lines 977 984) no Hoare annotation was computed. [2023-11-06 23:10:35,299 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 957 966) the Hoare annotation is: true [2023-11-06 23:10:35,299 INFO L899 garLoopResultBuilder]: For program point L977-2(lines 977 984) no Hoare annotation was computed. [2023-11-06 23:10:35,299 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 541 547) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 23:10:35,299 INFO L899 garLoopResultBuilder]: For program point L841(lines 840 885) no Hoare annotation was computed. [2023-11-06 23:10:35,299 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 967 989) the Hoare annotation is: true [2023-11-06 23:10:35,299 INFO L899 garLoopResultBuilder]: For program point L870(lines 870 881) no Hoare annotation was computed. [2023-11-06 23:10:35,300 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 23:10:35,300 INFO L895 garLoopResultBuilder]: At program point L862(line 862) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse7 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= ~waterLevel~0 2)) (.cse6 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6))) [2023-11-06 23:10:35,300 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 23:10:35,300 INFO L895 garLoopResultBuilder]: At program point L883(lines 840 885) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse5 (<= ~waterLevel~0 2)) (.cse7 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 (<= ~waterLevel~0 1) .cse3 .cse4 .cse6))) [2023-11-06 23:10:35,300 INFO L899 garLoopResultBuilder]: For program point L850(lines 850 856) no Hoare annotation was computed. [2023-11-06 23:10:35,300 INFO L899 garLoopResultBuilder]: For program point L850-1(lines 850 856) no Hoare annotation was computed. [2023-11-06 23:10:35,301 INFO L899 garLoopResultBuilder]: For program point L842(lines 842 846) no Hoare annotation was computed. [2023-11-06 23:10:35,301 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 950 956) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= 1 ~systemActive~0) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~10#1| 1)) [2023-11-06 23:10:35,301 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 23:10:35,301 INFO L899 garLoopResultBuilder]: For program point L876(lines 876 880) no Hoare annotation was computed. [2023-11-06 23:10:35,301 INFO L895 garLoopResultBuilder]: At program point L876-2(lines 870 881) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse7 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= ~waterLevel~0 2)) (.cse6 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6))) [2023-11-06 23:10:35,301 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 23:10:35,302 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 548 554) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 23:10:35,302 INFO L899 garLoopResultBuilder]: For program point L860(lines 860 866) no Hoare annotation was computed. [2023-11-06 23:10:35,302 INFO L899 garLoopResultBuilder]: For program point L860-1(lines 860 866) no Hoare annotation was computed. [2023-11-06 23:10:35,302 INFO L902 garLoopResultBuilder]: At program point L889(lines 830 893) the Hoare annotation is: true [2023-11-06 23:10:35,302 INFO L895 garLoopResultBuilder]: At program point L852(line 852) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse5 (<= ~waterLevel~0 2)) (.cse7 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 (<= ~waterLevel~0 1) .cse3 .cse4 .cse6))) [2023-11-06 23:10:35,302 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 555 563) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 23:10:35,302 INFO L899 garLoopResultBuilder]: For program point L799(lines 799 803) no Hoare annotation was computed. [2023-11-06 23:10:35,303 INFO L899 garLoopResultBuilder]: For program point L799-2(lines 799 803) no Hoare annotation was computed. [2023-11-06 23:10:35,303 INFO L895 garLoopResultBuilder]: At program point L663(line 663) the Hoare annotation is: (let ((.cse1 (< 1 ~waterLevel~0)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (< 2 ~waterLevel~0)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse7 (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1))) (.cse4 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse3 .cse4) (or .cse5 .cse6 .cse0 .cse2 .cse7) (or .cse5 .cse6 .cse0 .cse7 .cse4))) [2023-11-06 23:10:35,303 INFO L899 garLoopResultBuilder]: For program point L657(lines 657 665) no Hoare annotation was computed. [2023-11-06 23:10:35,303 INFO L899 garLoopResultBuilder]: For program point L653(lines 653 670) no Hoare annotation was computed. [2023-11-06 23:10:35,303 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 649 673) the Hoare annotation is: (let ((.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse5 (< 2 ~waterLevel~0)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (= ~pumpRunning~0 0)) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (< 1 ~waterLevel~0)) (.cse4 (< |old(~pumpRunning~0)| 1)) (.cse8 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse1 .cse3) (or .cse5 .cse6 .cse7 .cse1 .cse8) (or .cse0 .cse1 .cse2 .cse4 .cse8))) [2023-11-06 23:10:35,304 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 503 516) the Hoare annotation is: (let ((.cse9 (= ~pumpRunning~0 0))) (let ((.cse1 (< 1 ~waterLevel~0)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (< 2 ~waterLevel~0)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse7 (and .cse9 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (.cse8 (and .cse9 (<= ~waterLevel~0 1))) (.cse4 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse3 .cse4) (or .cse5 .cse6 .cse0 .cse7 .cse2 .cse8) (or .cse5 .cse6 .cse0 .cse7 .cse8 .cse4)))) [2023-11-06 23:10:35,304 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 790 808) the Hoare annotation is: (let ((.cse10 (= 1 ~systemActive~0)) (.cse11 (= |old(~pumpRunning~0)| 0)) (.cse9 (= ~pumpRunning~0 0))) (let ((.cse1 (< 1 ~waterLevel~0)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse8 (< ~methaneLevelCritical~0 1)) (.cse4 (< 2 ~waterLevel~0)) (.cse5 (and .cse9 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1| 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (.cse6 (not .cse11)) (.cse0 (not .cse10)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse7 (and .cse9 (<= ~waterLevel~0 1) .cse10 .cse11))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse0 .cse7 .cse8) (or .cse0 .cse1 .cse3 .cse8) (or .cse4 .cse5 .cse6 .cse0 .cse2 .cse7)))) [2023-11-06 23:10:35,304 INFO L895 garLoopResultBuilder]: At program point L668(line 668) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (< 1 ~waterLevel~0)) (.cse7 (< |old(~pumpRunning~0)| 1)) (.cse3 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse6 .cse7) (or .cse0 .cse1 .cse2 .cse6) (or .cse4 .cse2 .cse5 .cse7 .cse3))) [2023-11-06 23:10:35,304 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 649 673) no Hoare annotation was computed. [2023-11-06 23:10:35,304 INFO L899 garLoopResultBuilder]: For program point L507(lines 507 513) no Hoare annotation was computed. [2023-11-06 23:10:35,305 INFO L899 garLoopResultBuilder]: For program point L668-1(lines 649 673) no Hoare annotation was computed. [2023-11-06 23:10:35,305 INFO L899 garLoopResultBuilder]: For program point L716(lines 716 722) no Hoare annotation was computed. [2023-11-06 23:10:35,305 INFO L895 garLoopResultBuilder]: At program point isMethaneAlarm_returnLabel#1(lines 734 744) the Hoare annotation is: (let ((.cse12 (= 1 ~systemActive~0)) (.cse13 (= |old(~pumpRunning~0)| 0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (< 1 ~waterLevel~0)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse4 (< 2 ~waterLevel~0)) (.cse5 (not .cse13)) (.cse0 (not .cse12)) (.cse11 (<= ~waterLevel~0 1)) (.cse6 (= ~pumpRunning~0 0)) (.cse8 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|)) (.cse9 (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~4#1|)) (.cse10 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (.cse14 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (let ((.cse7 (= |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1| 0))) (or .cse4 .cse5 .cse0 (and .cse6 .cse7 .cse8 .cse9 .cse10) .cse2 (and .cse6 .cse7 .cse11 .cse12 .cse13))) (or .cse0 .cse1 .cse3 .cse14) (or .cse4 .cse5 .cse0 (and .cse6 .cse11 .cse12 .cse13) (and .cse6 .cse8 .cse9 .cse10) .cse14)))) [2023-11-06 23:10:35,305 INFO L895 garLoopResultBuilder]: At program point L716-2(lines 709 725) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (< 1 ~waterLevel~0)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse4 (< 2 ~waterLevel~0)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (<= 1 ~pumpRunning~0)) (.cse8 (<= ~waterLevel~0 1)) (.cse10 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|)) (.cse11 (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~4#1|)) (.cse12 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (.cse13 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (let ((.cse7 (= |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1| 0)) (.cse9 (= 0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~6#1|))) (or .cse4 .cse5 .cse0 (and .cse6 .cse7 .cse8 .cse9) .cse2 (and .cse6 .cse7 .cse9 .cse10 .cse11 .cse12))) (or .cse0 .cse1 .cse3 .cse13) (let ((.cse14 (= ~pumpRunning~0 0))) (or .cse4 .cse5 .cse0 (and .cse6 .cse10 .cse11 .cse12) (and .cse6 .cse8) (and .cse14 .cse8) (and .cse14 .cse10 .cse11 .cse12) .cse13)))) [2023-11-06 23:10:35,306 INFO L895 garLoopResultBuilder]: At program point activatePump__wrappee__lowWaterSensor_returnLabel#1(lines 700 707) the Hoare annotation is: (let ((.cse4 (< 2 ~waterLevel~0)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (<= ~waterLevel~0 1)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse6 (<= 1 ~pumpRunning~0)) (.cse7 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|)) (.cse8 (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~4#1|)) (.cse9 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (< 1 ~waterLevel~0)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse11 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse0 (and .cse6 .cse7 .cse8 .cse9) (and .cse6 .cse10) .cse11) (let ((.cse12 (= |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1| 0)) (.cse13 (= 0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~6#1|))) (or .cse4 .cse5 .cse0 (and .cse6 .cse12 .cse10 .cse13) .cse2 (and .cse6 .cse12 .cse13 .cse7 .cse8 .cse9))) (or .cse0 .cse1 .cse3 .cse11))) [2023-11-06 23:10:35,306 INFO L895 garLoopResultBuilder]: At program point L739(line 739) the Hoare annotation is: (let ((.cse9 (= ~pumpRunning~0 0)) (.cse10 (= 1 ~systemActive~0)) (.cse11 (= |old(~pumpRunning~0)| 0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (< 1 ~waterLevel~0)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse4 (< 2 ~waterLevel~0)) (.cse5 (not .cse11)) (.cse0 (not .cse10)) (.cse6 (and .cse9 (<= ~waterLevel~0 1) .cse10 .cse11)) (.cse7 (and .cse9 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~4#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (.cse8 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse0 .cse2 .cse6 .cse7) (or .cse0 .cse1 .cse3 .cse8) (or .cse4 .cse5 .cse0 .cse6 .cse7 .cse8)))) [2023-11-06 23:10:35,306 INFO L899 garLoopResultBuilder]: For program point L739-1(line 739) no Hoare annotation was computed. [2023-11-06 23:10:35,306 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 438 449) no Hoare annotation was computed. [2023-11-06 23:10:35,306 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 438 449) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse5 (< ~pumpRunning~0 1)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (< 2 |old(~waterLevel~0)|)) (.cse4 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse6 .cse2 .cse3) (or (< 1 |old(~waterLevel~0)|) .cse0 .cse1 .cse6 .cse2) (or .cse5 .cse1 .cse2 .cse3 .cse4))) [2023-11-06 23:10:35,307 INFO L899 garLoopResultBuilder]: For program point L442-1(lines 438 449) no Hoare annotation was computed. [2023-11-06 23:10:35,309 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:10:35,312 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 23:10:35,364 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 11:10:35 BoogieIcfgContainer [2023-11-06 23:10:35,365 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 23:10:35,365 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 23:10:35,365 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 23:10:35,366 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 23:10:35,366 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 11:10:17" (3/4) ... [2023-11-06 23:10:35,368 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 23:10:35,372 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 23:10:35,373 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 23:10:35,373 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 23:10:35,373 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 23:10:35,373 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-06 23:10:35,373 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 23:10:35,373 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 23:10:35,382 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 17 nodes and edges [2023-11-06 23:10:35,383 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 23:10:35,384 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 23:10:35,385 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 23:10:35,385 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 23:10:35,414 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 23:10:35,415 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) && (tmp == 1)) [2023-11-06 23:10:35,415 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 <= pumpRunning) && (methaneLevelCritical == 0)) && (\result == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (tmp == 1)) || (((((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (\result == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (tmp == 1))) || (((((((1 <= pumpRunning) && (1 <= methaneLevelCritical)) && (\result == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (tmp == 1))) || (((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (tmp == 1))) [2023-11-06 23:10:35,416 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (2 < \old(waterLevel))) && ((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && ((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) [2023-11-06 23:10:35,417 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (waterLevel <= \old(waterLevel)))) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (tmp == 0)) && (waterLevel <= \old(waterLevel)))) || (2 < \old(waterLevel))) && (((((!((1 == systemActive)) || (\old(pumpRunning) < 1)) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (waterLevel <= \old(waterLevel)))) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (tmp == 0)) && (waterLevel <= \old(waterLevel)))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && (((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || ((1 <= pumpRunning) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && ((((((((pumpRunning == 0) && (waterLevel <= 1)) && (\old(waterLevel) == waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((1 <= pumpRunning) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel)))) [2023-11-06 23:10:35,417 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel))) || !((methaneLevelCritical == 0))) || ((1 <= pumpRunning) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel))) && (((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((((pumpRunning == 0) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)) && !((tmp == 0)))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1)) || (((1 <= pumpRunning) && (\old(waterLevel) == waterLevel)) && !((tmp == 0))))) && (((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (waterLevel <= \old(waterLevel)))) || (2 < \old(waterLevel)))) && (((((!((1 == systemActive)) || (((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && !((tmp == 0))) && (waterLevel <= \old(waterLevel)))) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && !((tmp == 0))) && (waterLevel <= \old(waterLevel)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) [2023-11-06 23:10:35,418 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((1 == systemActive)) || (1 < waterLevel)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (((((pumpRunning == 0) && (\result == 0)) && (1 <= \result)) && (1 <= tmp)) && (\result == 0))) || !((methaneLevelCritical == 0))) || (((((pumpRunning == 0) && (\result == 0)) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)))) && (((!((1 == systemActive)) || (1 < waterLevel)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || ((((pumpRunning == 0) && (1 <= \result)) && (1 <= tmp)) && (\result == 0))) || (methaneLevelCritical < 1))) [2023-11-06 23:10:35,418 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (2 < \old(waterLevel))) && ((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && ((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) [2023-11-06 23:10:35,419 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\result <= 1)) && (((!((1 == systemActive)) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && ((((((((pumpRunning == 0) && (waterLevel <= 1)) && (\old(waterLevel) == waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((1 <= pumpRunning) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel)))) && ((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\result == 1))) && (((((!((1 == systemActive)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel))) && (\result <= 1))) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel))) && (\result <= 1))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) [2023-11-06 23:10:35,419 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((1 == systemActive)) || (1 < waterLevel)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((!((1 == systemActive)) || (1 < waterLevel)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 0))) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (waterLevel <= 1)))) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 0))) || ((pumpRunning == 0) && (waterLevel <= 1))) || (methaneLevelCritical < 1))) [2023-11-06 23:10:35,419 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((1 == systemActive)) || (1 < waterLevel)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (\result == 0)) && (waterLevel <= 1)) && (0 == tmp))) || !((methaneLevelCritical == 0))) || ((((((1 <= pumpRunning) && (\result == 0)) && (0 == tmp)) && (1 <= \result)) && (1 <= tmp)) && (\result == 0)))) && (((!((1 == systemActive)) || (1 < waterLevel)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && ((((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (1 <= \result)) && (1 <= tmp)) && (\result == 0))) || ((1 <= pumpRunning) && (waterLevel <= 1))) || ((pumpRunning == 0) && (waterLevel <= 1))) || ((((pumpRunning == 0) && (1 <= \result)) && (1 <= tmp)) && (\result == 0))) || (methaneLevelCritical < 1))) [2023-11-06 23:10:35,420 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((1 == systemActive)) || (1 < waterLevel)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (1 <= \result)) && (1 <= tmp)) && (\result == 0))) || ((1 <= pumpRunning) && (waterLevel <= 1))) || (methaneLevelCritical < 1))) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (\result == 0)) && (waterLevel <= 1)) && (0 == tmp))) || !((methaneLevelCritical == 0))) || ((((((1 <= pumpRunning) && (\result == 0)) && (0 == tmp)) && (1 <= \result)) && (1 <= tmp)) && (\result == 0)))) && (((!((1 == systemActive)) || (1 < waterLevel)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) [2023-11-06 23:10:35,420 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (2 < \old(waterLevel))) && ((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && ((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) [2023-11-06 23:10:35,420 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((1 == systemActive)) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1)) && (((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && ((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (((1 <= pumpRunning) && !((\result == 0))) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel)))) [2023-11-06 23:10:35,421 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((1 == systemActive)) || (1 < waterLevel)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((((2 < waterLevel) || (((((pumpRunning == 0) && (tmp == 0)) && (1 <= \result)) && (1 <= tmp___0)) && (\result == 0))) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || (methaneLevelCritical < 1))) && (((!((1 == systemActive)) || (1 < waterLevel)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && ((((((2 < waterLevel) || (((((pumpRunning == 0) && (tmp == 0)) && (1 <= \result)) && (1 <= tmp___0)) && (\result == 0))) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)))) [2023-11-06 23:10:35,421 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (2 < \old(waterLevel))) && ((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (((pumpRunning == 0) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && ((((!((1 == systemActive)) || (((pumpRunning == 0) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) [2023-11-06 23:10:35,421 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (2 < \old(waterLevel))) && (((!((1 == systemActive)) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && (((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) [2023-11-06 23:10:35,477 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) [2023-11-06 23:10:35,478 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) && (tmp == 1)) [2023-11-06 23:10:35,478 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 <= pumpRunning) && (methaneLevelCritical == 0)) && (\result == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (tmp == 1)) || (((((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (\result == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (tmp == 1))) || (((((((1 <= pumpRunning) && (1 <= methaneLevelCritical)) && (\result == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (tmp == 1))) || (((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (tmp == 1))) [2023-11-06 23:10:35,479 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (2 < \old(waterLevel))) && ((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && ((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) [2023-11-06 23:10:35,479 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (waterLevel <= \old(waterLevel)))) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (tmp == 0)) && (waterLevel <= \old(waterLevel)))) || (2 < \old(waterLevel))) && (((((!((1 == systemActive)) || (\old(pumpRunning) < 1)) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (waterLevel <= \old(waterLevel)))) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (tmp == 0)) && (waterLevel <= \old(waterLevel)))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && (((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || ((1 <= pumpRunning) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && ((((((((pumpRunning == 0) && (waterLevel <= 1)) && (\old(waterLevel) == waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((1 <= pumpRunning) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel)))) [2023-11-06 23:10:35,480 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel))) || !((methaneLevelCritical == 0))) || ((1 <= pumpRunning) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel))) && (((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((((pumpRunning == 0) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)) && !((tmp == 0)))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1)) || (((1 <= pumpRunning) && (\old(waterLevel) == waterLevel)) && !((tmp == 0))))) && (((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (waterLevel <= \old(waterLevel)))) || (2 < \old(waterLevel)))) && (((((!((1 == systemActive)) || (((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && !((tmp == 0))) && (waterLevel <= \old(waterLevel)))) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && !((tmp == 0))) && (waterLevel <= \old(waterLevel)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) [2023-11-06 23:10:35,480 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((1 == systemActive)) || (1 < waterLevel)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (((((pumpRunning == 0) && (\result == 0)) && (1 <= \result)) && (1 <= tmp)) && (\result == 0))) || !((methaneLevelCritical == 0))) || (((((pumpRunning == 0) && (\result == 0)) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)))) && (((!((1 == systemActive)) || (1 < waterLevel)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || ((((pumpRunning == 0) && (1 <= \result)) && (1 <= tmp)) && (\result == 0))) || (methaneLevelCritical < 1))) [2023-11-06 23:10:35,480 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (2 < \old(waterLevel))) && ((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && ((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) [2023-11-06 23:10:35,480 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\result <= 1)) && (((!((1 == systemActive)) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && ((((((((pumpRunning == 0) && (waterLevel <= 1)) && (\old(waterLevel) == waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((1 <= pumpRunning) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel)))) && ((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\result == 1))) && (((((!((1 == systemActive)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel))) && (\result <= 1))) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel))) && (\result <= 1))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) [2023-11-06 23:10:35,481 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((1 == systemActive)) || (1 < waterLevel)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((!((1 == systemActive)) || (1 < waterLevel)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 0))) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (waterLevel <= 1)))) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 0))) || ((pumpRunning == 0) && (waterLevel <= 1))) || (methaneLevelCritical < 1))) [2023-11-06 23:10:35,481 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((1 == systemActive)) || (1 < waterLevel)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (\result == 0)) && (waterLevel <= 1)) && (0 == tmp))) || !((methaneLevelCritical == 0))) || ((((((1 <= pumpRunning) && (\result == 0)) && (0 == tmp)) && (1 <= \result)) && (1 <= tmp)) && (\result == 0)))) && (((!((1 == systemActive)) || (1 < waterLevel)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && ((((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (1 <= \result)) && (1 <= tmp)) && (\result == 0))) || ((1 <= pumpRunning) && (waterLevel <= 1))) || ((pumpRunning == 0) && (waterLevel <= 1))) || ((((pumpRunning == 0) && (1 <= \result)) && (1 <= tmp)) && (\result == 0))) || (methaneLevelCritical < 1))) [2023-11-06 23:10:35,481 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((1 == systemActive)) || (1 < waterLevel)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (1 <= \result)) && (1 <= tmp)) && (\result == 0))) || ((1 <= pumpRunning) && (waterLevel <= 1))) || (methaneLevelCritical < 1))) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (\result == 0)) && (waterLevel <= 1)) && (0 == tmp))) || !((methaneLevelCritical == 0))) || ((((((1 <= pumpRunning) && (\result == 0)) && (0 == tmp)) && (1 <= \result)) && (1 <= tmp)) && (\result == 0)))) && (((!((1 == systemActive)) || (1 < waterLevel)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) [2023-11-06 23:10:35,481 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (2 < \old(waterLevel))) && ((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && ((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) [2023-11-06 23:10:35,481 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((1 == systemActive)) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1)) && (((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && ((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (((1 <= pumpRunning) && !((\result == 0))) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel)))) [2023-11-06 23:10:35,482 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((1 == systemActive)) || (1 < waterLevel)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((((2 < waterLevel) || (((((pumpRunning == 0) && (tmp == 0)) && (1 <= \result)) && (1 <= tmp___0)) && (\result == 0))) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || (methaneLevelCritical < 1))) && (((!((1 == systemActive)) || (1 < waterLevel)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && ((((((2 < waterLevel) || (((((pumpRunning == 0) && (tmp == 0)) && (1 <= \result)) && (1 <= tmp___0)) && (\result == 0))) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)))) [2023-11-06 23:10:35,484 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (2 < \old(waterLevel))) && ((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (((pumpRunning == 0) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && ((((!((1 == systemActive)) || (((pumpRunning == 0) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) [2023-11-06 23:10:35,484 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (2 < \old(waterLevel))) && (((!((1 == systemActive)) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && (((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) [2023-11-06 23:10:35,504 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 23:10:35,505 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 23:10:35,505 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 23:10:35,505 INFO L158 Benchmark]: Toolchain (without parser) took 18736.96ms. Allocated memory was 115.3MB in the beginning and 281.0MB in the end (delta: 165.7MB). Free memory was 74.0MB in the beginning and 227.3MB in the end (delta: -153.3MB). Peak memory consumption was 14.5MB. Max. memory is 16.1GB. [2023-11-06 23:10:35,506 INFO L158 Benchmark]: CDTParser took 0.33ms. Allocated memory is still 115.3MB. Free memory is still 84.1MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 23:10:35,506 INFO L158 Benchmark]: CACSL2BoogieTranslator took 516.96ms. Allocated memory is still 115.3MB. Free memory was 73.7MB in the beginning and 54.4MB in the end (delta: 19.3MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-06 23:10:35,506 INFO L158 Benchmark]: Boogie Procedure Inliner took 54.93ms. Allocated memory is still 115.3MB. Free memory was 54.4MB in the beginning and 52.0MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 23:10:35,507 INFO L158 Benchmark]: Boogie Preprocessor took 48.76ms. Allocated memory is still 115.3MB. Free memory was 52.0MB in the beginning and 50.3MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 23:10:35,508 INFO L158 Benchmark]: RCFGBuilder took 576.38ms. Allocated memory was 115.3MB in the beginning and 159.4MB in the end (delta: 44.0MB). Free memory was 50.3MB in the beginning and 124.1MB in the end (delta: -73.9MB). Peak memory consumption was 19.6MB. Max. memory is 16.1GB. [2023-11-06 23:10:35,508 INFO L158 Benchmark]: TraceAbstraction took 17392.05ms. Allocated memory was 159.4MB in the beginning and 281.0MB in the end (delta: 121.6MB). Free memory was 123.6MB in the beginning and 235.7MB in the end (delta: -112.1MB). Peak memory consumption was 162.7MB. Max. memory is 16.1GB. [2023-11-06 23:10:35,509 INFO L158 Benchmark]: Witness Printer took 139.76ms. Allocated memory is still 281.0MB. Free memory was 235.7MB in the beginning and 227.3MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-06 23:10:35,513 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.33ms. Allocated memory is still 115.3MB. Free memory is still 84.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 516.96ms. Allocated memory is still 115.3MB. Free memory was 73.7MB in the beginning and 54.4MB in the end (delta: 19.3MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 54.93ms. Allocated memory is still 115.3MB. Free memory was 54.4MB in the beginning and 52.0MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 48.76ms. Allocated memory is still 115.3MB. Free memory was 52.0MB in the beginning and 50.3MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 576.38ms. Allocated memory was 115.3MB in the beginning and 159.4MB in the end (delta: 44.0MB). Free memory was 50.3MB in the beginning and 124.1MB in the end (delta: -73.9MB). Peak memory consumption was 19.6MB. Max. memory is 16.1GB. * TraceAbstraction took 17392.05ms. Allocated memory was 159.4MB in the beginning and 281.0MB in the end (delta: 121.6MB). Free memory was 123.6MB in the beginning and 235.7MB in the end (delta: -112.1MB). Peak memory consumption was 162.7MB. Max. memory is 16.1GB. * Witness Printer took 139.76ms. Allocated memory is still 281.0MB. Free memory was 235.7MB in the beginning and 227.3MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] - GenericResultAtLocation [Line: 415]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [415] - GenericResultAtLocation [Line: 526]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [526] - GenericResultAtLocation [Line: 564]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [564] - GenericResultAtLocation [Line: 600]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [600] - GenericResultAtLocation [Line: 609]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [609] - GenericResultAtLocation [Line: 828]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [828] - GenericResultAtLocation [Line: 894]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [894] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 605]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 93 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 17.3s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 5.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 7.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2119 SdHoareTripleChecker+Valid, 2.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2099 mSDsluCounter, 4018 SdHoareTripleChecker+Invalid, 2.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2965 mSDsCounter, 518 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3567 IncrementalHoareTripleChecker+Invalid, 4085 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 518 mSolverCounterUnsat, 1053 mSDtfsCounter, 3567 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 491 GetRequests, 320 SyntacticMatches, 7 SemanticMatches, 164 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 829 ImplicationChecksByTransitivity, 1.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=790occurred in iteration=9, InterpolantAutomatonStates: 143, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 12 MinimizatonAttempts, 190 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 43 LocationsWithAnnotation, 2198 PreInvPairs, 2670 NumberOfFragments, 2790 HoareAnnotationTreeSize, 2198 FomulaSimplifications, 8784 FormulaSimplificationTreeSizeReduction, 1.1s HoareSimplificationTime, 43 FomulaSimplificationsInter, 15295 FormulaSimplificationTreeSizeReductionInter, 6.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 2.3s InterpolantComputationTime, 714 NumberOfCodeBlocks, 714 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 786 ConstructedInterpolants, 0 QuantifiedInterpolants, 1534 SizeOfPredicates, 7 NumberOfNonLiveVariables, 544 ConjunctsInSsa, 28 ConjunctsInUnsatCore, 15 InterpolantComputations, 11 PerfectInterpolantSequences, 71/90 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 426]: Loop Invariant Derived loop invariant: ((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (2 < \old(waterLevel))) && ((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && ((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 950]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) && (tmp == 1)) - InvariantResult [Line: 567]: Loop Invariant Derived loop invariant: ((((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel))) || !((methaneLevelCritical == 0))) || ((1 <= pumpRunning) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel))) && (((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((((pumpRunning == 0) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)) && !((tmp == 0)))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1)) || (((1 <= pumpRunning) && (\old(waterLevel) == waterLevel)) && !((tmp == 0))))) && (((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (waterLevel <= \old(waterLevel)))) || (2 < \old(waterLevel)))) && (((((!((1 == systemActive)) || (((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && !((tmp == 0))) && (waterLevel <= \old(waterLevel)))) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && !((tmp == 0))) && (waterLevel <= \old(waterLevel)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 906]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 840]: Loop Invariant Derived loop invariant: ((((((((((1 <= pumpRunning) && (methaneLevelCritical == 0)) && (\result == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (tmp == 1)) || (((((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (\result == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (tmp == 1))) || (((((((1 <= pumpRunning) && (1 <= methaneLevelCritical)) && (\result == 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (tmp == 1))) || (((((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0)) && (tmp == 1))) - InvariantResult [Line: 700]: Loop Invariant Derived loop invariant: ((((((!((1 == systemActive)) || (1 < waterLevel)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (1 <= \result)) && (1 <= tmp)) && (\result == 0))) || ((1 <= pumpRunning) && (waterLevel <= 1))) || (methaneLevelCritical < 1))) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (\result == 0)) && (waterLevel <= 1)) && (0 == tmp))) || !((methaneLevelCritical == 0))) || ((((((1 <= pumpRunning) && (\result == 0)) && (0 == tmp)) && (1 <= \result)) && (1 <= tmp)) && (\result == 0)))) && (((!((1 == systemActive)) || (1 < waterLevel)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) - InvariantResult [Line: 896]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 541]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 809]: Loop Invariant Derived loop invariant: ((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (2 < \old(waterLevel))) && ((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && ((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 830]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 745]: Loop Invariant Derived loop invariant: (((((((!((1 == systemActive)) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1)) && (((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && ((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (((1 <= pumpRunning) && !((\result == 0))) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel)))) - InvariantResult [Line: 503]: Loop Invariant Derived loop invariant: ((((((!((1 == systemActive)) || (1 < waterLevel)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((!((1 == systemActive)) || (1 < waterLevel)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 0))) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (waterLevel <= 1)))) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 0))) || ((pumpRunning == 0) && (waterLevel <= 1))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 517]: Loop Invariant Derived loop invariant: ((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (2 < \old(waterLevel))) && ((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && ((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 675]: Loop Invariant Derived loop invariant: ((((((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (waterLevel <= \old(waterLevel)))) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (tmp == 0)) && (waterLevel <= \old(waterLevel)))) || (2 < \old(waterLevel))) && (((((!((1 == systemActive)) || (\old(pumpRunning) < 1)) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (waterLevel <= \old(waterLevel)))) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (tmp == 0)) && (waterLevel <= \old(waterLevel)))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && (((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || ((1 <= pumpRunning) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && ((((((((pumpRunning == 0) && (waterLevel <= 1)) && (\old(waterLevel) == waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((1 <= pumpRunning) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel)))) - InvariantResult [Line: 790]: Loop Invariant Derived loop invariant: ((((((!((1 == systemActive)) || (1 < waterLevel)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((((2 < waterLevel) || (((((pumpRunning == 0) && (tmp == 0)) && (1 <= \result)) && (1 <= tmp___0)) && (\result == 0))) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || (methaneLevelCritical < 1))) && (((!((1 == systemActive)) || (1 < waterLevel)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && ((((((2 < waterLevel) || (((((pumpRunning == 0) && (tmp == 0)) && (1 <= \result)) && (1 <= tmp___0)) && (\result == 0))) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)))) - InvariantResult [Line: 957]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 601]: Loop Invariant Derived loop invariant: ((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (2 < \old(waterLevel))) && (((!((1 == systemActive)) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && (((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 494]: Loop Invariant Derived loop invariant: ((((((((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\result <= 1)) && (((!((1 == systemActive)) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && ((((((((pumpRunning == 0) && (waterLevel <= 1)) && (\old(waterLevel) == waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((1 <= pumpRunning) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel)))) && ((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\result == 1))) && (((((!((1 == systemActive)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel))) && (\result <= 1))) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel))) && (\result <= 1))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 555]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (\result == 1)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 548]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 734]: Loop Invariant Derived loop invariant: ((((((!((1 == systemActive)) || (1 < waterLevel)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (((((pumpRunning == 0) && (\result == 0)) && (1 <= \result)) && (1 <= tmp)) && (\result == 0))) || !((methaneLevelCritical == 0))) || (((((pumpRunning == 0) && (\result == 0)) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)))) && (((!((1 == systemActive)) || (1 < waterLevel)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || ((((pumpRunning == 0) && (1 <= \result)) && (1 <= tmp)) && (\result == 0))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 967]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 709]: Loop Invariant Derived loop invariant: ((((((!((1 == systemActive)) || (1 < waterLevel)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (\result == 0)) && (waterLevel <= 1)) && (0 == tmp))) || !((methaneLevelCritical == 0))) || ((((((1 <= pumpRunning) && (\result == 0)) && (0 == tmp)) && (1 <= \result)) && (1 <= tmp)) && (\result == 0)))) && (((!((1 == systemActive)) || (1 < waterLevel)) || (\old(pumpRunning) < 1)) || (methaneLevelCritical < 1))) && ((((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((((1 <= pumpRunning) && (1 <= \result)) && (1 <= tmp)) && (\result == 0))) || ((1 <= pumpRunning) && (waterLevel <= 1))) || ((pumpRunning == 0) && (waterLevel <= 1))) || ((((pumpRunning == 0) && (1 <= \result)) && (1 <= tmp)) && (\result == 0))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 839]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 726]: Loop Invariant Derived loop invariant: ((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (2 < \old(waterLevel))) && ((((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || (((pumpRunning == 0) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && ((((!((1 == systemActive)) || (((pumpRunning == 0) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel))) || (methaneLevelCritical < 1))) RESULT: Ultimate proved your program to be correct! [2023-11-06 23:10:35,579 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9e6acfb-1866-4650-b856-5495a36cbdba/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE