./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 63182f13 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 323b2112d56f35ec9fc5a7837411d8e54d2d46e3d8981d77e080eaf0dd99497b --- Real Ultimate output --- This is Ultimate 0.2.1-dev-63182f1 [2021-11-13 17:30:59,702 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-13 17:30:59,704 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-13 17:30:59,745 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-13 17:30:59,746 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-13 17:30:59,747 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-13 17:30:59,749 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-13 17:30:59,751 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-13 17:30:59,754 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-13 17:30:59,755 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-13 17:30:59,756 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-13 17:30:59,758 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-13 17:30:59,759 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-13 17:30:59,760 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-13 17:30:59,762 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-13 17:30:59,764 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-13 17:30:59,765 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-13 17:30:59,767 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-13 17:30:59,769 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-13 17:30:59,772 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-13 17:30:59,774 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-13 17:30:59,776 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-13 17:30:59,778 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-13 17:30:59,779 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-13 17:30:59,783 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-13 17:30:59,790 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-13 17:30:59,791 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-13 17:30:59,792 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-13 17:30:59,793 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-13 17:30:59,794 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-13 17:30:59,795 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-13 17:30:59,796 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-13 17:30:59,797 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-13 17:30:59,798 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-13 17:30:59,799 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-13 17:30:59,800 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-13 17:30:59,801 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-13 17:30:59,801 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-13 17:30:59,802 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-13 17:30:59,803 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-13 17:30:59,804 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-13 17:30:59,805 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-11-13 17:30:59,834 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-13 17:30:59,834 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-13 17:30:59,834 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-13 17:30:59,834 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-13 17:30:59,835 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-13 17:30:59,835 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-13 17:30:59,836 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-13 17:30:59,836 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-13 17:30:59,836 INFO L138 SettingsManager]: * Use SBE=true [2021-11-13 17:30:59,839 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-13 17:30:59,840 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-13 17:30:59,840 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-13 17:30:59,840 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-13 17:30:59,841 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-13 17:30:59,841 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-13 17:30:59,841 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-13 17:30:59,841 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-13 17:30:59,841 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-13 17:30:59,842 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-13 17:30:59,842 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-13 17:30:59,842 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-13 17:30:59,842 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-13 17:30:59,842 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-13 17:30:59,843 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-13 17:30:59,843 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-13 17:30:59,843 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-13 17:30:59,843 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-13 17:30:59,844 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-13 17:30:59,844 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-13 17:30:59,845 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-13 17:30:59,845 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-13 17:30:59,846 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-13 17:30:59,846 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-13 17:30:59,846 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-13 17:30:59,846 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 323b2112d56f35ec9fc5a7837411d8e54d2d46e3d8981d77e080eaf0dd99497b [2021-11-13 17:31:00,112 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-13 17:31:00,135 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-13 17:31:00,138 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-13 17:31:00,140 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-13 17:31:00,141 INFO L275 PluginConnector]: CDTParser initialized [2021-11-13 17:31:00,142 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/../../sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c [2021-11-13 17:31:00,208 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/data/0001afa00/0c9bde8423ae40cba5c2679a1b5c9cca/FLAGfcb4d40b6 [2021-11-13 17:31:00,784 INFO L306 CDTParser]: Found 1 translation units. [2021-11-13 17:31:00,785 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c [2021-11-13 17:31:00,805 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/data/0001afa00/0c9bde8423ae40cba5c2679a1b5c9cca/FLAGfcb4d40b6 [2021-11-13 17:31:01,043 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/data/0001afa00/0c9bde8423ae40cba5c2679a1b5c9cca [2021-11-13 17:31:01,046 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-13 17:31:01,048 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-13 17:31:01,052 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-13 17:31:01,053 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-13 17:31:01,056 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-13 17:31:01,057 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.11 05:31:01" (1/1) ... [2021-11-13 17:31:01,059 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@23fe8996 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 05:31:01, skipping insertion in model container [2021-11-13 17:31:01,060 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.11 05:31:01" (1/1) ... [2021-11-13 17:31:01,068 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-13 17:31:01,141 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-13 17:31:01,383 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c[9626,9639] [2021-11-13 17:31:01,441 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-13 17:31:01,452 INFO L203 MainTranslator]: Completed pre-run [2021-11-13 17:31:01,495 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c[9626,9639] [2021-11-13 17:31:01,531 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-13 17:31:01,550 INFO L208 MainTranslator]: Completed translation [2021-11-13 17:31:01,551 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 05:31:01 WrapperNode [2021-11-13 17:31:01,551 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-13 17:31:01,556 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-13 17:31:01,557 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-13 17:31:01,557 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-13 17:31:01,565 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 05:31:01" (1/1) ... [2021-11-13 17:31:01,599 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 05:31:01" (1/1) ... [2021-11-13 17:31:01,644 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-13 17:31:01,646 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-13 17:31:01,646 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-13 17:31:01,647 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-13 17:31:01,656 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 05:31:01" (1/1) ... [2021-11-13 17:31:01,656 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 05:31:01" (1/1) ... [2021-11-13 17:31:01,660 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 05:31:01" (1/1) ... [2021-11-13 17:31:01,661 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 05:31:01" (1/1) ... [2021-11-13 17:31:01,669 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 05:31:01" (1/1) ... [2021-11-13 17:31:01,683 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 05:31:01" (1/1) ... [2021-11-13 17:31:01,685 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 05:31:01" (1/1) ... [2021-11-13 17:31:01,689 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-13 17:31:01,690 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-13 17:31:01,690 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-13 17:31:01,690 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-13 17:31:01,697 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 05:31:01" (1/1) ... [2021-11-13 17:31:01,707 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-13 17:31:01,718 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/z3 [2021-11-13 17:31:01,740 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-13 17:31:01,752 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-13 17:31:01,785 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-13 17:31:01,786 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-11-13 17:31:01,786 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-11-13 17:31:01,786 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-11-13 17:31:01,786 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-11-13 17:31:01,786 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-11-13 17:31:01,786 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-11-13 17:31:01,786 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-11-13 17:31:01,786 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-11-13 17:31:01,787 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-11-13 17:31:01,787 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-11-13 17:31:01,787 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-11-13 17:31:01,787 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-11-13 17:31:01,787 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-11-13 17:31:01,787 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-11-13 17:31:01,787 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-11-13 17:31:01,787 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-11-13 17:31:01,787 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-11-13 17:31:01,787 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-11-13 17:31:01,788 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-13 17:31:01,788 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-11-13 17:31:01,788 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-11-13 17:31:01,788 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-13 17:31:01,788 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-13 17:31:02,664 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-13 17:31:02,672 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-13 17:31:02,675 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.11 05:31:02 BoogieIcfgContainer [2021-11-13 17:31:02,675 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-13 17:31:02,678 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-13 17:31:02,679 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-13 17:31:02,682 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-13 17:31:02,686 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 13.11 05:31:01" (1/3) ... [2021-11-13 17:31:02,687 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3c1dddac and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.11 05:31:02, skipping insertion in model container [2021-11-13 17:31:02,688 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.11 05:31:01" (2/3) ... [2021-11-13 17:31:02,688 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3c1dddac and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.11 05:31:02, skipping insertion in model container [2021-11-13 17:31:02,688 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.11 05:31:02" (3/3) ... [2021-11-13 17:31:02,690 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product64.cil.c [2021-11-13 17:31:02,700 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-13 17:31:02,700 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-13 17:31:02,772 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-13 17:31:02,782 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-13 17:31:02,783 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-13 17:31:02,830 INFO L276 IsEmpty]: Start isEmpty. Operand has 118 states, 87 states have (on average 1.3563218390804597) internal successors, (118), 98 states have internal predecessors, (118), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2021-11-13 17:31:02,847 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-11-13 17:31:02,848 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 17:31:02,850 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 17:31:02,851 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 17:31:02,857 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 17:31:02,858 INFO L85 PathProgramCache]: Analyzing trace with hash 1423497268, now seen corresponding path program 1 times [2021-11-13 17:31:02,868 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 17:31:02,869 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [253307197] [2021-11-13 17:31:02,870 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:02,871 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 17:31:03,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:03,231 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-11-13 17:31:03,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:03,238 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-11-13 17:31:03,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:03,245 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-13 17:31:03,246 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 17:31:03,246 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [253307197] [2021-11-13 17:31:03,247 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [253307197] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-13 17:31:03,248 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-13 17:31:03,248 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-13 17:31:03,250 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1004506957] [2021-11-13 17:31:03,251 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-13 17:31:03,255 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-11-13 17:31:03,256 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 17:31:03,282 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-11-13 17:31:03,282 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-13 17:31:03,285 INFO L87 Difference]: Start difference. First operand has 118 states, 87 states have (on average 1.3563218390804597) internal successors, (118), 98 states have internal predecessors, (118), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-13 17:31:03,327 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 17:31:03,327 INFO L93 Difference]: Finished difference Result 227 states and 306 transitions. [2021-11-13 17:31:03,328 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-11-13 17:31:03,330 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-11-13 17:31:03,330 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 17:31:03,339 INFO L225 Difference]: With dead ends: 227 [2021-11-13 17:31:03,339 INFO L226 Difference]: Without dead ends: 109 [2021-11-13 17:31:03,344 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-13 17:31:03,348 INFO L933 BasicCegarLoop]: 150 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.00ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 150 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 2.49ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.00ms IncrementalHoareTripleChecker+Time [2021-11-13 17:31:03,350 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 150 Invalid, 0 Unknown, 0 Unchecked, 2.49ms Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.00ms Time] [2021-11-13 17:31:03,365 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 109 states. [2021-11-13 17:31:03,393 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 109 to 109. [2021-11-13 17:31:03,394 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 109 states, 80 states have (on average 1.3) internal successors, (104), 90 states have internal predecessors, (104), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2021-11-13 17:31:03,398 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 109 states to 109 states and 141 transitions. [2021-11-13 17:31:03,400 INFO L78 Accepts]: Start accepts. Automaton has 109 states and 141 transitions. Word has length 32 [2021-11-13 17:31:03,401 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 17:31:03,401 INFO L470 AbstractCegarLoop]: Abstraction has 109 states and 141 transitions. [2021-11-13 17:31:03,401 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-13 17:31:03,402 INFO L276 IsEmpty]: Start isEmpty. Operand 109 states and 141 transitions. [2021-11-13 17:31:03,405 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-11-13 17:31:03,406 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 17:31:03,406 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 17:31:03,406 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-13 17:31:03,407 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 17:31:03,407 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 17:31:03,408 INFO L85 PathProgramCache]: Analyzing trace with hash -1062885571, now seen corresponding path program 1 times [2021-11-13 17:31:03,408 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 17:31:03,408 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [389612833] [2021-11-13 17:31:03,409 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:03,409 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 17:31:03,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:03,498 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-13 17:31:03,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:03,503 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-11-13 17:31:03,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:03,508 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-13 17:31:03,509 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 17:31:03,509 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [389612833] [2021-11-13 17:31:03,509 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [389612833] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-13 17:31:03,509 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-13 17:31:03,510 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-13 17:31:03,510 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [382075496] [2021-11-13 17:31:03,510 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-13 17:31:03,512 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-13 17:31:03,512 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 17:31:03,513 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-13 17:31:03,513 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-13 17:31:03,514 INFO L87 Difference]: Start difference. First operand 109 states and 141 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-13 17:31:03,541 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 17:31:03,541 INFO L93 Difference]: Finished difference Result 178 states and 230 transitions. [2021-11-13 17:31:03,545 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-13 17:31:03,545 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2021-11-13 17:31:03,546 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 17:31:03,548 INFO L225 Difference]: With dead ends: 178 [2021-11-13 17:31:03,549 INFO L226 Difference]: Without dead ends: 100 [2021-11-13 17:31:03,551 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-13 17:31:03,557 INFO L933 BasicCegarLoop]: 128 mSDtfsCounter, 17 mSDsluCounter, 106 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.55ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 234 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 3.56ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.79ms IncrementalHoareTripleChecker+Time [2021-11-13 17:31:03,558 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [21 Valid, 234 Invalid, 1 Unknown, 0 Unchecked, 3.56ms Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 1.79ms Time] [2021-11-13 17:31:03,559 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100 states. [2021-11-13 17:31:03,582 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100 to 100. [2021-11-13 17:31:03,583 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 100 states, 74 states have (on average 1.3108108108108107) internal successors, (97), 84 states have internal predecessors, (97), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2021-11-13 17:31:03,589 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100 states to 100 states and 129 transitions. [2021-11-13 17:31:03,589 INFO L78 Accepts]: Start accepts. Automaton has 100 states and 129 transitions. Word has length 33 [2021-11-13 17:31:03,591 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 17:31:03,592 INFO L470 AbstractCegarLoop]: Abstraction has 100 states and 129 transitions. [2021-11-13 17:31:03,592 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-13 17:31:03,592 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 129 transitions. [2021-11-13 17:31:03,594 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-11-13 17:31:03,594 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 17:31:03,595 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 17:31:03,607 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-13 17:31:03,607 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 17:31:03,607 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 17:31:03,608 INFO L85 PathProgramCache]: Analyzing trace with hash 214115468, now seen corresponding path program 1 times [2021-11-13 17:31:03,608 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 17:31:03,608 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [75441983] [2021-11-13 17:31:03,608 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:03,609 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 17:31:03,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:03,782 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-11-13 17:31:03,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:03,795 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-11-13 17:31:03,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:03,809 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-13 17:31:03,809 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 17:31:03,810 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [75441983] [2021-11-13 17:31:03,810 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [75441983] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-13 17:31:03,811 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-13 17:31:03,811 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-13 17:31:03,811 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [770713253] [2021-11-13 17:31:03,812 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-13 17:31:03,817 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-13 17:31:03,817 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 17:31:03,818 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-13 17:31:03,818 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-13 17:31:03,818 INFO L87 Difference]: Start difference. First operand 100 states and 129 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-13 17:31:03,974 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 17:31:03,975 INFO L93 Difference]: Finished difference Result 239 states and 312 transitions. [2021-11-13 17:31:03,975 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-13 17:31:03,976 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2021-11-13 17:31:03,976 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 17:31:03,979 INFO L225 Difference]: With dead ends: 239 [2021-11-13 17:31:03,979 INFO L226 Difference]: Without dead ends: 147 [2021-11-13 17:31:03,980 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-11-13 17:31:03,982 INFO L933 BasicCegarLoop]: 142 mSDtfsCounter, 190 mSDsluCounter, 289 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 51.33ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 190 SdHoareTripleChecker+Valid, 431 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 6.81ms SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 74.47ms IncrementalHoareTripleChecker+Time [2021-11-13 17:31:03,982 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [190 Valid, 431 Invalid, 33 Unknown, 0 Unchecked, 6.81ms Time], IncrementalHoareTripleChecker [21 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 74.47ms Time] [2021-11-13 17:31:03,984 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 147 states. [2021-11-13 17:31:04,003 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 147 to 144. [2021-11-13 17:31:04,004 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 144 states, 107 states have (on average 1.3271028037383177) internal successors, (142), 120 states have internal predecessors, (142), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (23), 16 states have call predecessors, (23), 22 states have call successors, (23) [2021-11-13 17:31:04,006 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 144 states to 144 states and 187 transitions. [2021-11-13 17:31:04,006 INFO L78 Accepts]: Start accepts. Automaton has 144 states and 187 transitions. Word has length 38 [2021-11-13 17:31:04,007 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 17:31:04,007 INFO L470 AbstractCegarLoop]: Abstraction has 144 states and 187 transitions. [2021-11-13 17:31:04,007 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-13 17:31:04,008 INFO L276 IsEmpty]: Start isEmpty. Operand 144 states and 187 transitions. [2021-11-13 17:31:04,010 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2021-11-13 17:31:04,010 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 17:31:04,010 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 17:31:04,011 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-13 17:31:04,011 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 17:31:04,011 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 17:31:04,012 INFO L85 PathProgramCache]: Analyzing trace with hash 384205224, now seen corresponding path program 1 times [2021-11-13 17:31:04,012 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 17:31:04,012 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1146765491] [2021-11-13 17:31:04,016 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:04,017 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 17:31:04,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:04,139 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-13 17:31:04,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:04,147 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2021-11-13 17:31:04,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:04,162 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-11-13 17:31:04,162 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 17:31:04,162 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1146765491] [2021-11-13 17:31:04,162 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1146765491] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-13 17:31:04,163 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-13 17:31:04,163 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-13 17:31:04,163 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1012088056] [2021-11-13 17:31:04,164 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-13 17:31:04,164 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-13 17:31:04,164 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 17:31:04,165 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-13 17:31:04,165 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-13 17:31:04,165 INFO L87 Difference]: Start difference. First operand 144 states and 187 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-13 17:31:04,402 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 17:31:04,403 INFO L93 Difference]: Finished difference Result 337 states and 449 transitions. [2021-11-13 17:31:04,403 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-13 17:31:04,403 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2021-11-13 17:31:04,404 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 17:31:04,407 INFO L225 Difference]: With dead ends: 337 [2021-11-13 17:31:04,407 INFO L226 Difference]: Without dead ends: 201 [2021-11-13 17:31:04,409 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-11-13 17:31:04,411 INFO L933 BasicCegarLoop]: 138 mSDtfsCounter, 66 mSDsluCounter, 452 mSDsCounter, 0 mSdLazyCounter, 80 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 147.89ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 590 SdHoareTripleChecker+Invalid, 93 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 6.13ms SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 80 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 175.64ms IncrementalHoareTripleChecker+Time [2021-11-13 17:31:04,411 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [67 Valid, 590 Invalid, 93 Unknown, 0 Unchecked, 6.13ms Time], IncrementalHoareTripleChecker [13 Valid, 80 Invalid, 0 Unknown, 0 Unchecked, 175.64ms Time] [2021-11-13 17:31:04,413 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 201 states. [2021-11-13 17:31:04,442 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 201 to 191. [2021-11-13 17:31:04,450 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 191 states, 143 states have (on average 1.2587412587412588) internal successors, (180), 155 states have internal predecessors, (180), 26 states have call successors, (26), 21 states have call predecessors, (26), 21 states have return successors, (34), 24 states have call predecessors, (34), 26 states have call successors, (34) [2021-11-13 17:31:04,452 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 191 states to 191 states and 240 transitions. [2021-11-13 17:31:04,452 INFO L78 Accepts]: Start accepts. Automaton has 191 states and 240 transitions. Word has length 41 [2021-11-13 17:31:04,453 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 17:31:04,453 INFO L470 AbstractCegarLoop]: Abstraction has 191 states and 240 transitions. [2021-11-13 17:31:04,453 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-13 17:31:04,453 INFO L276 IsEmpty]: Start isEmpty. Operand 191 states and 240 transitions. [2021-11-13 17:31:04,456 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2021-11-13 17:31:04,461 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 17:31:04,461 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 17:31:04,461 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-13 17:31:04,462 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 17:31:04,462 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 17:31:04,463 INFO L85 PathProgramCache]: Analyzing trace with hash -602736799, now seen corresponding path program 1 times [2021-11-13 17:31:04,463 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 17:31:04,463 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1887859843] [2021-11-13 17:31:04,463 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:04,464 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 17:31:04,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:04,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-13 17:31:04,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:04,530 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-11-13 17:31:04,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:04,539 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 17:31:04,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:04,546 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-13 17:31:04,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:04,556 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2021-11-13 17:31:04,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:04,561 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-13 17:31:04,561 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 17:31:04,562 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1887859843] [2021-11-13 17:31:04,562 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1887859843] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-13 17:31:04,562 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-13 17:31:04,562 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-13 17:31:04,562 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1638279074] [2021-11-13 17:31:04,563 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-13 17:31:04,563 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-13 17:31:04,564 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 17:31:04,566 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-13 17:31:04,566 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-13 17:31:04,567 INFO L87 Difference]: Start difference. First operand 191 states and 240 transitions. Second operand has 4 states, 4 states have (on average 13.75) internal successors, (55), 3 states have internal predecessors, (55), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2021-11-13 17:31:04,866 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 17:31:04,866 INFO L93 Difference]: Finished difference Result 405 states and 508 transitions. [2021-11-13 17:31:04,866 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-13 17:31:04,867 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 13.75) internal successors, (55), 3 states have internal predecessors, (55), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 68 [2021-11-13 17:31:04,867 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 17:31:04,870 INFO L225 Difference]: With dead ends: 405 [2021-11-13 17:31:04,870 INFO L226 Difference]: Without dead ends: 222 [2021-11-13 17:31:04,871 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-13 17:31:04,873 INFO L933 BasicCegarLoop]: 148 mSDtfsCounter, 107 mSDsluCounter, 156 mSDsCounter, 0 mSdLazyCounter, 77 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 200.19ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 116 SdHoareTripleChecker+Valid, 304 SdHoareTripleChecker+Invalid, 103 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 4.65ms SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 77 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 251.62ms IncrementalHoareTripleChecker+Time [2021-11-13 17:31:04,874 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [116 Valid, 304 Invalid, 103 Unknown, 0 Unchecked, 4.65ms Time], IncrementalHoareTripleChecker [26 Valid, 77 Invalid, 0 Unknown, 0 Unchecked, 251.62ms Time] [2021-11-13 17:31:04,875 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 222 states. [2021-11-13 17:31:04,894 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 222 to 218. [2021-11-13 17:31:04,895 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 218 states, 163 states have (on average 1.2453987730061349) internal successors, (203), 175 states have internal predecessors, (203), 28 states have call successors, (28), 21 states have call predecessors, (28), 26 states have return successors, (39), 30 states have call predecessors, (39), 28 states have call successors, (39) [2021-11-13 17:31:04,897 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 218 states to 218 states and 270 transitions. [2021-11-13 17:31:04,898 INFO L78 Accepts]: Start accepts. Automaton has 218 states and 270 transitions. Word has length 68 [2021-11-13 17:31:04,898 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 17:31:04,898 INFO L470 AbstractCegarLoop]: Abstraction has 218 states and 270 transitions. [2021-11-13 17:31:04,899 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 13.75) internal successors, (55), 3 states have internal predecessors, (55), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2021-11-13 17:31:04,899 INFO L276 IsEmpty]: Start isEmpty. Operand 218 states and 270 transitions. [2021-11-13 17:31:04,902 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-11-13 17:31:04,902 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 17:31:04,902 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 17:31:04,903 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-13 17:31:04,903 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 17:31:04,903 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 17:31:04,904 INFO L85 PathProgramCache]: Analyzing trace with hash -578050563, now seen corresponding path program 1 times [2021-11-13 17:31:04,904 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 17:31:04,904 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1008155404] [2021-11-13 17:31:04,904 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:04,904 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 17:31:04,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:04,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-11-13 17:31:04,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:04,963 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-11-13 17:31:04,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:04,982 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 17:31:04,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:05,029 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-13 17:31:05,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:05,038 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-11-13 17:31:05,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:05,045 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-13 17:31:05,045 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 17:31:05,045 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1008155404] [2021-11-13 17:31:05,046 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1008155404] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-13 17:31:05,046 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-13 17:31:05,046 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-13 17:31:05,046 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [429615066] [2021-11-13 17:31:05,046 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-13 17:31:05,048 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-13 17:31:05,049 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 17:31:05,049 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-13 17:31:05,050 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-13 17:31:05,050 INFO L87 Difference]: Start difference. First operand 218 states and 270 transitions. Second operand has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-11-13 17:31:05,348 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 17:31:05,348 INFO L93 Difference]: Finished difference Result 438 states and 557 transitions. [2021-11-13 17:31:05,349 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-13 17:31:05,349 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 65 [2021-11-13 17:31:05,350 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 17:31:05,353 INFO L225 Difference]: With dead ends: 438 [2021-11-13 17:31:05,353 INFO L226 Difference]: Without dead ends: 228 [2021-11-13 17:31:05,354 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-11-13 17:31:05,362 INFO L933 BasicCegarLoop]: 114 mSDtfsCounter, 82 mSDsluCounter, 350 mSDsCounter, 0 mSdLazyCounter, 139 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 185.76ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 87 SdHoareTripleChecker+Valid, 464 SdHoareTripleChecker+Invalid, 168 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 6.53ms SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 139 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 224.47ms IncrementalHoareTripleChecker+Time [2021-11-13 17:31:05,367 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [87 Valid, 464 Invalid, 168 Unknown, 0 Unchecked, 6.53ms Time], IncrementalHoareTripleChecker [29 Valid, 139 Invalid, 0 Unknown, 0 Unchecked, 224.47ms Time] [2021-11-13 17:31:05,371 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 228 states. [2021-11-13 17:31:05,389 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 228 to 221. [2021-11-13 17:31:05,390 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 221 states, 166 states have (on average 1.2409638554216869) internal successors, (206), 178 states have internal predecessors, (206), 28 states have call successors, (28), 21 states have call predecessors, (28), 26 states have return successors, (39), 30 states have call predecessors, (39), 28 states have call successors, (39) [2021-11-13 17:31:05,393 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 221 states to 221 states and 273 transitions. [2021-11-13 17:31:05,393 INFO L78 Accepts]: Start accepts. Automaton has 221 states and 273 transitions. Word has length 65 [2021-11-13 17:31:05,393 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 17:31:05,394 INFO L470 AbstractCegarLoop]: Abstraction has 221 states and 273 transitions. [2021-11-13 17:31:05,394 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-11-13 17:31:05,394 INFO L276 IsEmpty]: Start isEmpty. Operand 221 states and 273 transitions. [2021-11-13 17:31:05,396 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-11-13 17:31:05,396 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 17:31:05,396 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 17:31:05,396 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-13 17:31:05,397 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 17:31:05,397 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 17:31:05,397 INFO L85 PathProgramCache]: Analyzing trace with hash 808152831, now seen corresponding path program 1 times [2021-11-13 17:31:05,398 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 17:31:05,398 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1813907672] [2021-11-13 17:31:05,398 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:05,398 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 17:31:05,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:05,511 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-11-13 17:31:05,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:05,521 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-11-13 17:31:05,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:05,544 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 17:31:05,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:05,580 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-13 17:31:05,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:05,591 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-11-13 17:31:05,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:05,595 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-13 17:31:05,596 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 17:31:05,596 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1813907672] [2021-11-13 17:31:05,596 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1813907672] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-13 17:31:05,596 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-13 17:31:05,597 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-13 17:31:05,597 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1861915392] [2021-11-13 17:31:05,597 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-13 17:31:05,598 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-13 17:31:05,601 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 17:31:05,602 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-13 17:31:05,602 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-13 17:31:05,602 INFO L87 Difference]: Start difference. First operand 221 states and 273 transitions. Second operand has 7 states, 7 states have (on average 7.428571428571429) internal successors, (52), 6 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-11-13 17:31:05,956 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 17:31:05,957 INFO L93 Difference]: Finished difference Result 447 states and 567 transitions. [2021-11-13 17:31:05,958 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-13 17:31:05,958 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.428571428571429) internal successors, (52), 6 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 65 [2021-11-13 17:31:05,960 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 17:31:05,970 INFO L225 Difference]: With dead ends: 447 [2021-11-13 17:31:05,971 INFO L226 Difference]: Without dead ends: 234 [2021-11-13 17:31:05,972 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=30, Invalid=80, Unknown=0, NotChecked=0, Total=110 [2021-11-13 17:31:05,974 INFO L933 BasicCegarLoop]: 114 mSDtfsCounter, 133 mSDsluCounter, 399 mSDsCounter, 0 mSdLazyCounter, 190 mSolverCounterSat, 37 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 234.36ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 139 SdHoareTripleChecker+Valid, 513 SdHoareTripleChecker+Invalid, 227 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 5.69ms SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 190 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 289.12ms IncrementalHoareTripleChecker+Time [2021-11-13 17:31:05,974 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [139 Valid, 513 Invalid, 227 Unknown, 0 Unchecked, 5.69ms Time], IncrementalHoareTripleChecker [37 Valid, 190 Invalid, 0 Unknown, 0 Unchecked, 289.12ms Time] [2021-11-13 17:31:05,976 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 234 states. [2021-11-13 17:31:06,005 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 234 to 223. [2021-11-13 17:31:06,006 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 223 states, 168 states have (on average 1.2380952380952381) internal successors, (208), 180 states have internal predecessors, (208), 28 states have call successors, (28), 21 states have call predecessors, (28), 26 states have return successors, (39), 30 states have call predecessors, (39), 28 states have call successors, (39) [2021-11-13 17:31:06,009 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 223 states to 223 states and 275 transitions. [2021-11-13 17:31:06,010 INFO L78 Accepts]: Start accepts. Automaton has 223 states and 275 transitions. Word has length 65 [2021-11-13 17:31:06,010 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 17:31:06,010 INFO L470 AbstractCegarLoop]: Abstraction has 223 states and 275 transitions. [2021-11-13 17:31:06,011 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.428571428571429) internal successors, (52), 6 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-11-13 17:31:06,011 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 275 transitions. [2021-11-13 17:31:06,013 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-11-13 17:31:06,013 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 17:31:06,013 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 17:31:06,014 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-13 17:31:06,014 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 17:31:06,014 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 17:31:06,015 INFO L85 PathProgramCache]: Analyzing trace with hash 1509752705, now seen corresponding path program 1 times [2021-11-13 17:31:06,015 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 17:31:06,015 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1766319125] [2021-11-13 17:31:06,015 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:06,015 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 17:31:06,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:06,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-11-13 17:31:06,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:06,094 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-11-13 17:31:06,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:06,113 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 17:31:06,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:06,128 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-13 17:31:06,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:06,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2021-11-13 17:31:06,138 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:06,141 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-13 17:31:06,141 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 17:31:06,141 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1766319125] [2021-11-13 17:31:06,142 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1766319125] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-13 17:31:06,142 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-13 17:31:06,142 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-13 17:31:06,142 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [952767401] [2021-11-13 17:31:06,142 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-13 17:31:06,143 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-13 17:31:06,143 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 17:31:06,144 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-13 17:31:06,144 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-13 17:31:06,144 INFO L87 Difference]: Start difference. First operand 223 states and 275 transitions. Second operand has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-11-13 17:31:06,580 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 17:31:06,580 INFO L93 Difference]: Finished difference Result 661 states and 844 transitions. [2021-11-13 17:31:06,581 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-13 17:31:06,581 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 65 [2021-11-13 17:31:06,581 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 17:31:06,585 INFO L225 Difference]: With dead ends: 661 [2021-11-13 17:31:06,586 INFO L226 Difference]: Without dead ends: 446 [2021-11-13 17:31:06,587 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 14 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-11-13 17:31:06,588 INFO L933 BasicCegarLoop]: 173 mSDtfsCounter, 257 mSDsluCounter, 221 mSDsCounter, 0 mSdLazyCounter, 184 mSolverCounterSat, 82 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 294.15ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 265 SdHoareTripleChecker+Valid, 394 SdHoareTripleChecker+Invalid, 266 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 6.55ms SdHoareTripleChecker+Time, 82 IncrementalHoareTripleChecker+Valid, 184 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 365.77ms IncrementalHoareTripleChecker+Time [2021-11-13 17:31:06,589 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [265 Valid, 394 Invalid, 266 Unknown, 0 Unchecked, 6.55ms Time], IncrementalHoareTripleChecker [82 Valid, 184 Invalid, 0 Unknown, 0 Unchecked, 365.77ms Time] [2021-11-13 17:31:06,590 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 446 states. [2021-11-13 17:31:06,626 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 446 to 444. [2021-11-13 17:31:06,628 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 444 states, 334 states have (on average 1.2125748502994012) internal successors, (405), 354 states have internal predecessors, (405), 59 states have call successors, (59), 48 states have call predecessors, (59), 50 states have return successors, (86), 59 states have call predecessors, (86), 59 states have call successors, (86) [2021-11-13 17:31:06,632 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 444 states to 444 states and 550 transitions. [2021-11-13 17:31:06,632 INFO L78 Accepts]: Start accepts. Automaton has 444 states and 550 transitions. Word has length 65 [2021-11-13 17:31:06,633 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 17:31:06,633 INFO L470 AbstractCegarLoop]: Abstraction has 444 states and 550 transitions. [2021-11-13 17:31:06,633 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-11-13 17:31:06,633 INFO L276 IsEmpty]: Start isEmpty. Operand 444 states and 550 transitions. [2021-11-13 17:31:06,635 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2021-11-13 17:31:06,635 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 17:31:06,635 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 17:31:06,635 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-11-13 17:31:06,636 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 17:31:06,636 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 17:31:06,636 INFO L85 PathProgramCache]: Analyzing trace with hash 920584039, now seen corresponding path program 1 times [2021-11-13 17:31:06,637 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 17:31:06,637 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2072486496] [2021-11-13 17:31:06,637 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:06,637 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 17:31:06,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:06,806 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-13 17:31:06,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:06,841 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-11-13 17:31:06,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:06,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2021-11-13 17:31:06,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:06,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 17:31:06,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:06,868 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-13 17:31:06,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:06,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2021-11-13 17:31:06,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:06,880 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-13 17:31:06,880 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 17:31:06,881 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2072486496] [2021-11-13 17:31:06,881 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2072486496] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-13 17:31:06,881 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-13 17:31:06,881 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-11-13 17:31:06,881 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1840304071] [2021-11-13 17:31:06,881 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-13 17:31:06,883 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-11-13 17:31:06,883 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 17:31:06,883 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-11-13 17:31:06,884 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2021-11-13 17:31:06,884 INFO L87 Difference]: Start difference. First operand 444 states and 550 transitions. Second operand has 9 states, 9 states have (on average 6.0) internal successors, (54), 7 states have internal predecessors, (54), 4 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2021-11-13 17:31:07,888 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 17:31:07,889 INFO L93 Difference]: Finished difference Result 1346 states and 1729 transitions. [2021-11-13 17:31:07,889 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2021-11-13 17:31:07,889 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 6.0) internal successors, (54), 7 states have internal predecessors, (54), 4 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) Word has length 69 [2021-11-13 17:31:07,891 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 17:31:07,899 INFO L225 Difference]: With dead ends: 1346 [2021-11-13 17:31:07,899 INFO L226 Difference]: Without dead ends: 1003 [2021-11-13 17:31:07,902 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 41 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 151 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=153, Invalid=549, Unknown=0, NotChecked=0, Total=702 [2021-11-13 17:31:07,904 INFO L933 BasicCegarLoop]: 180 mSDtfsCounter, 614 mSDsluCounter, 507 mSDsCounter, 0 mSdLazyCounter, 626 mSolverCounterSat, 216 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 600.33ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 622 SdHoareTripleChecker+Valid, 687 SdHoareTripleChecker+Invalid, 842 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 12.79ms SdHoareTripleChecker+Time, 216 IncrementalHoareTripleChecker+Valid, 626 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 723.67ms IncrementalHoareTripleChecker+Time [2021-11-13 17:31:07,905 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [622 Valid, 687 Invalid, 842 Unknown, 0 Unchecked, 12.79ms Time], IncrementalHoareTripleChecker [216 Valid, 626 Invalid, 0 Unknown, 0 Unchecked, 723.67ms Time] [2021-11-13 17:31:07,906 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1003 states. [2021-11-13 17:31:07,981 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1003 to 822. [2021-11-13 17:31:07,983 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 822 states, 617 states have (on average 1.2106969205834683) internal successors, (747), 658 states have internal predecessors, (747), 109 states have call successors, (109), 83 states have call predecessors, (109), 95 states have return successors, (160), 110 states have call predecessors, (160), 109 states have call successors, (160) [2021-11-13 17:31:07,992 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 822 states to 822 states and 1016 transitions. [2021-11-13 17:31:07,993 INFO L78 Accepts]: Start accepts. Automaton has 822 states and 1016 transitions. Word has length 69 [2021-11-13 17:31:07,994 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 17:31:07,994 INFO L470 AbstractCegarLoop]: Abstraction has 822 states and 1016 transitions. [2021-11-13 17:31:07,994 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 6.0) internal successors, (54), 7 states have internal predecessors, (54), 4 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2021-11-13 17:31:07,994 INFO L276 IsEmpty]: Start isEmpty. Operand 822 states and 1016 transitions. [2021-11-13 17:31:08,002 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 124 [2021-11-13 17:31:08,002 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 17:31:08,003 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 17:31:08,004 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-11-13 17:31:08,005 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 17:31:08,005 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 17:31:08,005 INFO L85 PathProgramCache]: Analyzing trace with hash 1227003405, now seen corresponding path program 1 times [2021-11-13 17:31:08,006 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 17:31:08,006 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1751772188] [2021-11-13 17:31:08,006 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:08,006 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 17:31:08,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:08,121 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-13 17:31:08,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:08,136 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-13 17:31:08,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:08,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-13 17:31:08,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:08,176 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-11-13 17:31:08,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:08,190 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 17:31:08,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:08,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-13 17:31:08,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:08,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2021-11-13 17:31:08,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:08,221 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2021-11-13 17:31:08,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:08,228 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2021-11-13 17:31:08,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:08,241 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-13 17:31:08,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:08,250 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 17:31:08,250 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:08,256 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2021-11-13 17:31:08,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:08,264 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 18 proven. 11 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-11-13 17:31:08,264 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 17:31:08,265 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1751772188] [2021-11-13 17:31:08,265 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1751772188] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-13 17:31:08,265 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [981250278] [2021-11-13 17:31:08,265 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:08,265 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-13 17:31:08,266 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/z3 [2021-11-13 17:31:08,271 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-13 17:31:08,272 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-13 17:31:08,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:08,451 INFO L263 TraceCheckSpWp]: Trace formula consists of 597 conjuncts, 8 conjunts are in the unsatisfiable core [2021-11-13 17:31:08,474 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-13 17:31:08,935 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 31 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-13 17:31:08,935 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-13 17:31:09,297 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 19 proven. 10 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-11-13 17:31:09,298 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [981250278] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-13 17:31:09,298 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-13 17:31:09,298 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 6, 6] total 16 [2021-11-13 17:31:09,299 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1716833817] [2021-11-13 17:31:09,299 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-13 17:31:09,300 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2021-11-13 17:31:09,300 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 17:31:09,300 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2021-11-13 17:31:09,301 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2021-11-13 17:31:09,301 INFO L87 Difference]: Start difference. First operand 822 states and 1016 transitions. Second operand has 16 states, 16 states have (on average 9.0625) internal successors, (145), 11 states have internal predecessors, (145), 5 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (23), 7 states have call predecessors, (23), 5 states have call successors, (23) [2021-11-13 17:31:11,461 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 17:31:11,461 INFO L93 Difference]: Finished difference Result 1858 states and 2365 transitions. [2021-11-13 17:31:11,462 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2021-11-13 17:31:11,462 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 9.0625) internal successors, (145), 11 states have internal predecessors, (145), 5 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (23), 7 states have call predecessors, (23), 5 states have call successors, (23) Word has length 123 [2021-11-13 17:31:11,463 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 17:31:11,471 INFO L225 Difference]: With dead ends: 1858 [2021-11-13 17:31:11,471 INFO L226 Difference]: Without dead ends: 1133 [2021-11-13 17:31:11,475 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 331 GetRequests, 281 SyntacticMatches, 1 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 667 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=429, Invalid=2121, Unknown=0, NotChecked=0, Total=2550 [2021-11-13 17:31:11,476 INFO L933 BasicCegarLoop]: 263 mSDtfsCounter, 508 mSDsluCounter, 1347 mSDsCounter, 0 mSdLazyCounter, 1447 mSolverCounterSat, 237 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1239.49ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 509 SdHoareTripleChecker+Valid, 1610 SdHoareTripleChecker+Invalid, 1684 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 42.03ms SdHoareTripleChecker+Time, 237 IncrementalHoareTripleChecker+Valid, 1447 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1461.51ms IncrementalHoareTripleChecker+Time [2021-11-13 17:31:11,477 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [509 Valid, 1610 Invalid, 1684 Unknown, 0 Unchecked, 42.03ms Time], IncrementalHoareTripleChecker [237 Valid, 1447 Invalid, 0 Unknown, 0 Unchecked, 1461.51ms Time] [2021-11-13 17:31:11,479 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1133 states. [2021-11-13 17:31:11,544 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1133 to 919. [2021-11-13 17:31:11,546 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 919 states, 682 states have (on average 1.187683284457478) internal successors, (810), 735 states have internal predecessors, (810), 126 states have call successors, (126), 104 states have call predecessors, (126), 110 states have return successors, (159), 116 states have call predecessors, (159), 126 states have call successors, (159) [2021-11-13 17:31:11,553 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 919 states to 919 states and 1095 transitions. [2021-11-13 17:31:11,553 INFO L78 Accepts]: Start accepts. Automaton has 919 states and 1095 transitions. Word has length 123 [2021-11-13 17:31:11,554 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 17:31:11,554 INFO L470 AbstractCegarLoop]: Abstraction has 919 states and 1095 transitions. [2021-11-13 17:31:11,554 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 9.0625) internal successors, (145), 11 states have internal predecessors, (145), 5 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (23), 7 states have call predecessors, (23), 5 states have call successors, (23) [2021-11-13 17:31:11,555 INFO L276 IsEmpty]: Start isEmpty. Operand 919 states and 1095 transitions. [2021-11-13 17:31:11,560 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 220 [2021-11-13 17:31:11,561 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 17:31:11,561 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 17:31:11,600 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-11-13 17:31:11,777 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-13 17:31:11,777 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 17:31:11,777 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 17:31:11,778 INFO L85 PathProgramCache]: Analyzing trace with hash 190109661, now seen corresponding path program 1 times [2021-11-13 17:31:11,778 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 17:31:11,778 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1359572864] [2021-11-13 17:31:11,778 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:11,778 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 17:31:11,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:11,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-13 17:31:11,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:11,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-13 17:31:11,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:11,899 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-13 17:31:11,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:11,905 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-11-13 17:31:11,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:11,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 17:31:11,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:11,914 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-13 17:31:11,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:11,918 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2021-11-13 17:31:11,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:11,929 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-13 17:31:11,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:11,931 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-13 17:31:11,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:11,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-11-13 17:31:11,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:11,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-13 17:31:11,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:11,941 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 17:31:11,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:11,944 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 127 [2021-11-13 17:31:11,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:11,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-13 17:31:11,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:11,980 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-13 17:31:11,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:11,998 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-11-13 17:31:11,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:12,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 162 [2021-11-13 17:31:12,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:12,009 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 173 [2021-11-13 17:31:12,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:12,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2021-11-13 17:31:12,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:12,026 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 17:31:12,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:12,032 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-13 17:31:12,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:12,036 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 211 [2021-11-13 17:31:12,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:12,040 INFO L134 CoverageAnalysis]: Checked inductivity of 235 backedges. 87 proven. 3 refuted. 0 times theorem prover too weak. 145 trivial. 0 not checked. [2021-11-13 17:31:12,040 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 17:31:12,040 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1359572864] [2021-11-13 17:31:12,040 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1359572864] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-13 17:31:12,041 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [134356658] [2021-11-13 17:31:12,041 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:12,041 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-13 17:31:12,041 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/z3 [2021-11-13 17:31:12,045 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-13 17:31:12,064 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-11-13 17:31:12,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:12,253 INFO L263 TraceCheckSpWp]: Trace formula consists of 844 conjuncts, 13 conjunts are in the unsatisfiable core [2021-11-13 17:31:12,261 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-13 17:31:12,829 INFO L134 CoverageAnalysis]: Checked inductivity of 235 backedges. 171 proven. 4 refuted. 0 times theorem prover too weak. 60 trivial. 0 not checked. [2021-11-13 17:31:12,830 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-13 17:31:13,787 INFO L134 CoverageAnalysis]: Checked inductivity of 235 backedges. 82 proven. 42 refuted. 0 times theorem prover too weak. 111 trivial. 0 not checked. [2021-11-13 17:31:13,788 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [134356658] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-13 17:31:13,788 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-13 17:31:13,788 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 10, 11] total 26 [2021-11-13 17:31:13,788 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1155471212] [2021-11-13 17:31:13,789 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-13 17:31:13,790 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2021-11-13 17:31:13,790 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 17:31:13,791 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2021-11-13 17:31:13,792 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=116, Invalid=534, Unknown=0, NotChecked=0, Total=650 [2021-11-13 17:31:13,792 INFO L87 Difference]: Start difference. First operand 919 states and 1095 transitions. Second operand has 26 states, 26 states have (on average 8.461538461538462) internal successors, (220), 21 states have internal predecessors, (220), 10 states have call successors, (42), 8 states have call predecessors, (42), 10 states have return successors, (42), 10 states have call predecessors, (42), 10 states have call successors, (42) [2021-11-13 17:31:17,721 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 17:31:17,721 INFO L93 Difference]: Finished difference Result 2824 states and 3488 transitions. [2021-11-13 17:31:17,722 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 58 states. [2021-11-13 17:31:17,722 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 8.461538461538462) internal successors, (220), 21 states have internal predecessors, (220), 10 states have call successors, (42), 8 states have call predecessors, (42), 10 states have return successors, (42), 10 states have call predecessors, (42), 10 states have call successors, (42) Word has length 219 [2021-11-13 17:31:17,723 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 17:31:17,735 INFO L225 Difference]: With dead ends: 2824 [2021-11-13 17:31:17,736 INFO L226 Difference]: Without dead ends: 1913 [2021-11-13 17:31:17,742 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 561 GetRequests, 479 SyntacticMatches, 2 SemanticMatches, 80 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1717 ImplicationChecksByTransitivity, 1.3s TimeCoverageRelationStatistics Valid=1150, Invalid=5492, Unknown=0, NotChecked=0, Total=6642 [2021-11-13 17:31:17,743 INFO L933 BasicCegarLoop]: 230 mSDtfsCounter, 1826 mSDsluCounter, 1445 mSDsCounter, 0 mSdLazyCounter, 2724 mSolverCounterSat, 878 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2241.77ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 1826 SdHoareTripleChecker+Valid, 1675 SdHoareTripleChecker+Invalid, 3602 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 30.63ms SdHoareTripleChecker+Time, 878 IncrementalHoareTripleChecker+Valid, 2724 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2634.89ms IncrementalHoareTripleChecker+Time [2021-11-13 17:31:17,744 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1826 Valid, 1675 Invalid, 3602 Unknown, 0 Unchecked, 30.63ms Time], IncrementalHoareTripleChecker [878 Valid, 2724 Invalid, 0 Unknown, 0 Unchecked, 2634.89ms Time] [2021-11-13 17:31:17,747 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1913 states. [2021-11-13 17:31:17,895 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1913 to 1867. [2021-11-13 17:31:17,899 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1867 states, 1396 states have (on average 1.1389684813753582) internal successors, (1590), 1486 states have internal predecessors, (1590), 256 states have call successors, (256), 219 states have call predecessors, (256), 214 states have return successors, (300), 228 states have call predecessors, (300), 256 states have call successors, (300) [2021-11-13 17:31:17,911 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1867 states to 1867 states and 2146 transitions. [2021-11-13 17:31:17,912 INFO L78 Accepts]: Start accepts. Automaton has 1867 states and 2146 transitions. Word has length 219 [2021-11-13 17:31:17,912 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 17:31:17,912 INFO L470 AbstractCegarLoop]: Abstraction has 1867 states and 2146 transitions. [2021-11-13 17:31:17,913 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 8.461538461538462) internal successors, (220), 21 states have internal predecessors, (220), 10 states have call successors, (42), 8 states have call predecessors, (42), 10 states have return successors, (42), 10 states have call predecessors, (42), 10 states have call successors, (42) [2021-11-13 17:31:17,913 INFO L276 IsEmpty]: Start isEmpty. Operand 1867 states and 2146 transitions. [2021-11-13 17:31:17,921 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 236 [2021-11-13 17:31:17,921 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 17:31:17,921 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 17:31:17,960 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-11-13 17:31:18,145 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2021-11-13 17:31:18,145 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 17:31:18,145 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 17:31:18,145 INFO L85 PathProgramCache]: Analyzing trace with hash -989451591, now seen corresponding path program 1 times [2021-11-13 17:31:18,146 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 17:31:18,146 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [683087412] [2021-11-13 17:31:18,146 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:18,146 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 17:31:18,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:18,236 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-13 17:31:18,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:18,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-13 17:31:18,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:18,264 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-13 17:31:18,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:18,275 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-11-13 17:31:18,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:18,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 17:31:18,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:18,292 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-13 17:31:18,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:18,295 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2021-11-13 17:31:18,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:18,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-13 17:31:18,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:18,332 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-13 17:31:18,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:18,335 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-11-13 17:31:18,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:18,343 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-13 17:31:18,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:18,348 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 17:31:18,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:18,350 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-11-13 17:31:18,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:18,374 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 130 [2021-11-13 17:31:18,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:18,378 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 137 [2021-11-13 17:31:18,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:18,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-13 17:31:18,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:18,389 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-13 17:31:18,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:18,391 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-11-13 17:31:18,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:18,395 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-13 17:31:18,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:18,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 178 [2021-11-13 17:31:18,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:18,403 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 189 [2021-11-13 17:31:18,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:18,406 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 198 [2021-11-13 17:31:18,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:18,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 17:31:18,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:18,417 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-13 17:31:18,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:18,421 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 227 [2021-11-13 17:31:18,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:18,424 INFO L134 CoverageAnalysis]: Checked inductivity of 277 backedges. 100 proven. 50 refuted. 0 times theorem prover too weak. 127 trivial. 0 not checked. [2021-11-13 17:31:18,424 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 17:31:18,425 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [683087412] [2021-11-13 17:31:18,425 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [683087412] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-13 17:31:18,425 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1215565419] [2021-11-13 17:31:18,425 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:18,425 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-13 17:31:18,426 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/z3 [2021-11-13 17:31:18,426 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-13 17:31:18,443 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-11-13 17:31:18,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:18,603 INFO L263 TraceCheckSpWp]: Trace formula consists of 886 conjuncts, 12 conjunts are in the unsatisfiable core [2021-11-13 17:31:18,609 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-13 17:31:19,265 INFO L134 CoverageAnalysis]: Checked inductivity of 277 backedges. 211 proven. 11 refuted. 0 times theorem prover too weak. 55 trivial. 0 not checked. [2021-11-13 17:31:19,265 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-13 17:31:20,238 INFO L134 CoverageAnalysis]: Checked inductivity of 277 backedges. 106 proven. 62 refuted. 0 times theorem prover too weak. 109 trivial. 0 not checked. [2021-11-13 17:31:20,238 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1215565419] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-13 17:31:20,239 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-13 17:31:20,239 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 8, 8] total 23 [2021-11-13 17:31:20,239 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1617710666] [2021-11-13 17:31:20,239 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-13 17:31:20,241 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2021-11-13 17:31:20,242 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 17:31:20,242 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2021-11-13 17:31:20,242 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=70, Invalid=436, Unknown=0, NotChecked=0, Total=506 [2021-11-13 17:31:20,243 INFO L87 Difference]: Start difference. First operand 1867 states and 2146 transitions. Second operand has 23 states, 23 states have (on average 10.869565217391305) internal successors, (250), 16 states have internal predecessors, (250), 6 states have call successors, (54), 8 states have call predecessors, (54), 11 states have return successors, (47), 9 states have call predecessors, (47), 6 states have call successors, (47) [2021-11-13 17:31:22,744 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 17:31:22,745 INFO L93 Difference]: Finished difference Result 3674 states and 4252 transitions. [2021-11-13 17:31:22,745 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2021-11-13 17:31:22,746 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 10.869565217391305) internal successors, (250), 16 states have internal predecessors, (250), 6 states have call successors, (54), 8 states have call predecessors, (54), 11 states have return successors, (47), 9 states have call predecessors, (47), 6 states have call successors, (47) Word has length 235 [2021-11-13 17:31:22,746 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 17:31:22,761 INFO L225 Difference]: With dead ends: 3674 [2021-11-13 17:31:22,761 INFO L226 Difference]: Without dead ends: 1993 [2021-11-13 17:31:22,768 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 576 GetRequests, 525 SyntacticMatches, 3 SemanticMatches, 48 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 472 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=414, Invalid=2036, Unknown=0, NotChecked=0, Total=2450 [2021-11-13 17:31:22,769 INFO L933 BasicCegarLoop]: 167 mSDtfsCounter, 583 mSDsluCounter, 649 mSDsCounter, 0 mSdLazyCounter, 2172 mSolverCounterSat, 236 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1533.85ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 584 SdHoareTripleChecker+Valid, 816 SdHoareTripleChecker+Invalid, 2408 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 15.42ms SdHoareTripleChecker+Time, 236 IncrementalHoareTripleChecker+Valid, 2172 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1788.92ms IncrementalHoareTripleChecker+Time [2021-11-13 17:31:22,769 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [584 Valid, 816 Invalid, 2408 Unknown, 0 Unchecked, 15.42ms Time], IncrementalHoareTripleChecker [236 Valid, 2172 Invalid, 0 Unknown, 0 Unchecked, 1788.92ms Time] [2021-11-13 17:31:22,772 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1993 states. [2021-11-13 17:31:22,883 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1993 to 1815. [2021-11-13 17:31:22,887 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1815 states, 1362 states have (on average 1.1343612334801763) internal successors, (1545), 1442 states have internal predecessors, (1545), 234 states have call successors, (234), 215 states have call predecessors, (234), 218 states have return successors, (278), 222 states have call predecessors, (278), 234 states have call successors, (278) [2021-11-13 17:31:22,901 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1815 states to 1815 states and 2057 transitions. [2021-11-13 17:31:22,901 INFO L78 Accepts]: Start accepts. Automaton has 1815 states and 2057 transitions. Word has length 235 [2021-11-13 17:31:22,902 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 17:31:22,902 INFO L470 AbstractCegarLoop]: Abstraction has 1815 states and 2057 transitions. [2021-11-13 17:31:22,902 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 10.869565217391305) internal successors, (250), 16 states have internal predecessors, (250), 6 states have call successors, (54), 8 states have call predecessors, (54), 11 states have return successors, (47), 9 states have call predecessors, (47), 6 states have call successors, (47) [2021-11-13 17:31:22,903 INFO L276 IsEmpty]: Start isEmpty. Operand 1815 states and 2057 transitions. [2021-11-13 17:31:22,910 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 237 [2021-11-13 17:31:22,910 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 17:31:22,911 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 17:31:22,950 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-11-13 17:31:23,125 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2021-11-13 17:31:23,125 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 17:31:23,125 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 17:31:23,125 INFO L85 PathProgramCache]: Analyzing trace with hash 2077038584, now seen corresponding path program 1 times [2021-11-13 17:31:23,125 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 17:31:23,126 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1073248286] [2021-11-13 17:31:23,126 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:23,126 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 17:31:23,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:23,254 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-13 17:31:23,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:23,265 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-13 17:31:23,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:23,271 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-13 17:31:23,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:23,279 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-11-13 17:31:23,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:23,318 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 17:31:23,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:23,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-13 17:31:23,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:23,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2021-11-13 17:31:23,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:23,346 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-13 17:31:23,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:23,349 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-13 17:31:23,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:23,353 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-11-13 17:31:23,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:23,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-13 17:31:23,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:23,363 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 17:31:23,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:23,367 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-11-13 17:31:23,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:23,375 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 131 [2021-11-13 17:31:23,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:23,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 138 [2021-11-13 17:31:23,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:23,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-13 17:31:23,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:23,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-13 17:31:23,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:23,401 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-11-13 17:31:23,402 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:23,404 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-13 17:31:23,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:23,410 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 179 [2021-11-13 17:31:23,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:23,429 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 190 [2021-11-13 17:31:23,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:23,433 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 199 [2021-11-13 17:31:23,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:23,450 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 17:31:23,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:23,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-13 17:31:23,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:23,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 228 [2021-11-13 17:31:23,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:23,583 INFO L134 CoverageAnalysis]: Checked inductivity of 278 backedges. 94 proven. 3 refuted. 0 times theorem prover too weak. 181 trivial. 0 not checked. [2021-11-13 17:31:23,583 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 17:31:23,583 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1073248286] [2021-11-13 17:31:23,583 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1073248286] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-13 17:31:23,584 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [194959212] [2021-11-13 17:31:23,584 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:23,584 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-13 17:31:23,584 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/z3 [2021-11-13 17:31:23,585 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-13 17:31:23,600 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2021-11-13 17:31:23,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:23,761 INFO L263 TraceCheckSpWp]: Trace formula consists of 886 conjuncts, 18 conjunts are in the unsatisfiable core [2021-11-13 17:31:23,767 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-13 17:31:24,394 INFO L134 CoverageAnalysis]: Checked inductivity of 278 backedges. 151 proven. 26 refuted. 0 times theorem prover too weak. 101 trivial. 0 not checked. [2021-11-13 17:31:24,395 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-13 17:31:25,471 INFO L134 CoverageAnalysis]: Checked inductivity of 278 backedges. 107 proven. 45 refuted. 0 times theorem prover too weak. 126 trivial. 0 not checked. [2021-11-13 17:31:25,472 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [194959212] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-13 17:31:25,472 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-13 17:31:25,472 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 8, 13] total 29 [2021-11-13 17:31:25,476 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1966608593] [2021-11-13 17:31:25,476 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-13 17:31:25,480 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2021-11-13 17:31:25,480 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 17:31:25,481 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2021-11-13 17:31:25,481 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=120, Invalid=692, Unknown=0, NotChecked=0, Total=812 [2021-11-13 17:31:25,482 INFO L87 Difference]: Start difference. First operand 1815 states and 2057 transitions. Second operand has 29 states, 29 states have (on average 9.379310344827585) internal successors, (272), 23 states have internal predecessors, (272), 13 states have call successors, (55), 12 states have call predecessors, (55), 15 states have return successors, (56), 15 states have call predecessors, (56), 13 states have call successors, (56) [2021-11-13 17:31:31,088 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 17:31:31,089 INFO L93 Difference]: Finished difference Result 4095 states and 4701 transitions. [2021-11-13 17:31:31,089 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 70 states. [2021-11-13 17:31:31,089 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 29 states have (on average 9.379310344827585) internal successors, (272), 23 states have internal predecessors, (272), 13 states have call successors, (55), 12 states have call predecessors, (55), 15 states have return successors, (56), 15 states have call predecessors, (56), 13 states have call successors, (56) Word has length 236 [2021-11-13 17:31:31,090 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 17:31:31,106 INFO L225 Difference]: With dead ends: 4095 [2021-11-13 17:31:31,106 INFO L226 Difference]: Without dead ends: 2478 [2021-11-13 17:31:31,114 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 631 GetRequests, 534 SyntacticMatches, 2 SemanticMatches, 95 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2522 ImplicationChecksByTransitivity, 1.6s TimeCoverageRelationStatistics Valid=1623, Invalid=7689, Unknown=0, NotChecked=0, Total=9312 [2021-11-13 17:31:31,115 INFO L933 BasicCegarLoop]: 479 mSDtfsCounter, 3046 mSDsluCounter, 1248 mSDsCounter, 0 mSdLazyCounter, 5264 mSolverCounterSat, 1716 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3307.42ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 3046 SdHoareTripleChecker+Valid, 1727 SdHoareTripleChecker+Invalid, 6980 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 34.34ms SdHoareTripleChecker+Time, 1716 IncrementalHoareTripleChecker+Valid, 5264 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3966.04ms IncrementalHoareTripleChecker+Time [2021-11-13 17:31:31,116 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3046 Valid, 1727 Invalid, 6980 Unknown, 0 Unchecked, 34.34ms Time], IncrementalHoareTripleChecker [1716 Valid, 5264 Invalid, 0 Unknown, 0 Unchecked, 3966.04ms Time] [2021-11-13 17:31:31,119 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2478 states. [2021-11-13 17:31:31,292 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2478 to 2250. [2021-11-13 17:31:31,296 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2250 states, 1692 states have (on average 1.1335697399527187) internal successors, (1918), 1779 states have internal predecessors, (1918), 293 states have call successors, (293), 270 states have call predecessors, (293), 264 states have return successors, (332), 272 states have call predecessors, (332), 293 states have call successors, (332) [2021-11-13 17:31:31,315 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2250 states to 2250 states and 2543 transitions. [2021-11-13 17:31:31,316 INFO L78 Accepts]: Start accepts. Automaton has 2250 states and 2543 transitions. Word has length 236 [2021-11-13 17:31:31,316 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 17:31:31,316 INFO L470 AbstractCegarLoop]: Abstraction has 2250 states and 2543 transitions. [2021-11-13 17:31:31,317 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 29 states have (on average 9.379310344827585) internal successors, (272), 23 states have internal predecessors, (272), 13 states have call successors, (55), 12 states have call predecessors, (55), 15 states have return successors, (56), 15 states have call predecessors, (56), 13 states have call successors, (56) [2021-11-13 17:31:31,317 INFO L276 IsEmpty]: Start isEmpty. Operand 2250 states and 2543 transitions. [2021-11-13 17:31:31,327 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 273 [2021-11-13 17:31:31,327 INFO L506 BasicCegarLoop]: Found error trace [2021-11-13 17:31:31,328 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 17:31:31,368 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2021-11-13 17:31:31,553 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2021-11-13 17:31:31,553 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-13 17:31:31,553 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-13 17:31:31,553 INFO L85 PathProgramCache]: Analyzing trace with hash 1010468718, now seen corresponding path program 1 times [2021-11-13 17:31:31,553 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-13 17:31:31,553 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [140949606] [2021-11-13 17:31:31,554 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:31,554 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-13 17:31:31,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-13 17:31:31,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,652 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-13 17:31:31,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-13 17:31:31,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,683 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-11-13 17:31:31,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,687 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 17:31:31,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,691 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-13 17:31:31,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,694 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2021-11-13 17:31:31,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-13 17:31:31,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,704 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-13 17:31:31,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,706 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-11-13 17:31:31,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,710 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-13 17:31:31,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,713 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 17:31:31,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-11-13 17:31:31,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,723 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 131 [2021-11-13 17:31:31,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 138 [2021-11-13 17:31:31,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,733 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-13 17:31:31,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,735 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-13 17:31:31,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,739 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-11-13 17:31:31,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,742 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-13 17:31:31,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,744 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 179 [2021-11-13 17:31:31,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,747 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 185 [2021-11-13 17:31:31,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,750 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 195 [2021-11-13 17:31:31,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,787 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-13 17:31:31,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,789 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 215 [2021-11-13 17:31:31,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,803 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 226 [2021-11-13 17:31:31,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,806 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 235 [2021-11-13 17:31:31,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,812 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-13 17:31:31,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,816 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-13 17:31:31,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,820 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 264 [2021-11-13 17:31:31,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:31,823 INFO L134 CoverageAnalysis]: Checked inductivity of 392 backedges. 111 proven. 35 refuted. 0 times theorem prover too weak. 246 trivial. 0 not checked. [2021-11-13 17:31:31,823 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-13 17:31:31,823 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [140949606] [2021-11-13 17:31:31,823 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [140949606] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-13 17:31:31,823 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1444066647] [2021-11-13 17:31:31,824 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-13 17:31:31,824 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-13 17:31:31,824 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/z3 [2021-11-13 17:31:31,825 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-13 17:31:31,845 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2021-11-13 17:31:32,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-13 17:31:32,013 INFO L263 TraceCheckSpWp]: Trace formula consists of 980 conjuncts, 21 conjunts are in the unsatisfiable core [2021-11-13 17:31:32,019 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-13 17:31:32,728 INFO L134 CoverageAnalysis]: Checked inductivity of 392 backedges. 235 proven. 18 refuted. 0 times theorem prover too weak. 139 trivial. 0 not checked. [2021-11-13 17:31:32,729 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-13 17:31:33,976 INFO L134 CoverageAnalysis]: Checked inductivity of 392 backedges. 142 proven. 77 refuted. 0 times theorem prover too weak. 173 trivial. 0 not checked. [2021-11-13 17:31:33,976 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1444066647] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-13 17:31:33,976 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-13 17:31:33,977 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 11, 15] total 32 [2021-11-13 17:31:33,977 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1106794125] [2021-11-13 17:31:33,977 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-13 17:31:33,978 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2021-11-13 17:31:33,978 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-13 17:31:33,978 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2021-11-13 17:31:33,979 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=166, Invalid=826, Unknown=0, NotChecked=0, Total=992 [2021-11-13 17:31:33,979 INFO L87 Difference]: Start difference. First operand 2250 states and 2543 transitions. Second operand has 32 states, 32 states have (on average 9.15625) internal successors, (293), 27 states have internal predecessors, (293), 13 states have call successors, (54), 11 states have call predecessors, (54), 15 states have return successors, (56), 13 states have call predecessors, (56), 13 states have call successors, (56) [2021-11-13 17:31:37,691 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-13 17:31:37,691 INFO L93 Difference]: Finished difference Result 4043 states and 4657 transitions. [2021-11-13 17:31:37,697 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 54 states. [2021-11-13 17:31:37,697 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 32 states have (on average 9.15625) internal successors, (293), 27 states have internal predecessors, (293), 13 states have call successors, (54), 11 states have call predecessors, (54), 15 states have return successors, (56), 13 states have call predecessors, (56), 13 states have call successors, (56) Word has length 272 [2021-11-13 17:31:37,698 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-13 17:31:37,699 INFO L225 Difference]: With dead ends: 4043 [2021-11-13 17:31:37,699 INFO L226 Difference]: Without dead ends: 0 [2021-11-13 17:31:37,711 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 668 GetRequests, 587 SyntacticMatches, 3 SemanticMatches, 78 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1480 ImplicationChecksByTransitivity, 1.3s TimeCoverageRelationStatistics Valid=1323, Invalid=4997, Unknown=0, NotChecked=0, Total=6320 [2021-11-13 17:31:37,712 INFO L933 BasicCegarLoop]: 246 mSDtfsCounter, 1438 mSDsluCounter, 894 mSDsCounter, 0 mSdLazyCounter, 3348 mSolverCounterSat, 708 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2080.27ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 1445 SdHoareTripleChecker+Valid, 1140 SdHoareTripleChecker+Invalid, 4056 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 15.57ms SdHoareTripleChecker+Time, 708 IncrementalHoareTripleChecker+Valid, 3348 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2486.73ms IncrementalHoareTripleChecker+Time [2021-11-13 17:31:37,712 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1445 Valid, 1140 Invalid, 4056 Unknown, 0 Unchecked, 15.57ms Time], IncrementalHoareTripleChecker [708 Valid, 3348 Invalid, 0 Unknown, 0 Unchecked, 2486.73ms Time] [2021-11-13 17:31:37,713 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-11-13 17:31:37,713 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-11-13 17:31:37,713 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-13 17:31:37,714 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-11-13 17:31:37,714 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 272 [2021-11-13 17:31:37,715 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-13 17:31:37,715 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-11-13 17:31:37,715 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 32 states have (on average 9.15625) internal successors, (293), 27 states have internal predecessors, (293), 13 states have call successors, (54), 11 states have call predecessors, (54), 15 states have return successors, (56), 13 states have call predecessors, (56), 13 states have call successors, (56) [2021-11-13 17:31:37,715 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-11-13 17:31:37,716 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-11-13 17:31:37,718 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-13 17:31:37,754 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2021-11-13 17:31:37,941 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2021-11-13 17:31:37,943 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-11-13 17:32:03,350 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 325 332) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= 0 ~systemActive~0)) (.cse8 (= 2 ~waterLevel~0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not .cse8)) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (and (<= 1 ~pumpRunning~0) .cse5 .cse8 (not .cse4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse2 (not (<= ~waterLevel~0 1)) .cse4 .cse6) (or .cse5 .cse0 .cse7 (not (<= ~waterLevel~0 2)) .cse4 .cse6) (or .cse0 .cse1 .cse7 .cse3 .cse4)))) [2021-11-13 17:32:03,350 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 325 332) no Hoare annotation was computed. [2021-11-13 17:32:03,350 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 325 332) no Hoare annotation was computed. [2021-11-13 17:32:03,350 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 215 221) no Hoare annotation was computed. [2021-11-13 17:32:03,350 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 215 221) the Hoare annotation is: true [2021-11-13 17:32:03,350 INFO L858 garLoopResultBuilder]: For program point L417(lines 417 421) no Hoare annotation was computed. [2021-11-13 17:32:03,350 INFO L858 garLoopResultBuilder]: For program point L417-2(lines 417 421) no Hoare annotation was computed. [2021-11-13 17:32:03,350 INFO L854 garLoopResultBuilder]: At program point L263(line 263) the Hoare annotation is: (let ((.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse2 .cse0 .cse3 .cse1) (or .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse1))) [2021-11-13 17:32:03,350 INFO L854 garLoopResultBuilder]: At program point L259(line 259) the Hoare annotation is: (let ((.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse2 .cse0 .cse3 .cse1) (or .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse1))) [2021-11-13 17:32:03,351 INFO L858 garLoopResultBuilder]: For program point L257(lines 257 265) no Hoare annotation was computed. [2021-11-13 17:32:03,351 INFO L858 garLoopResultBuilder]: For program point L253(lines 253 270) no Hoare annotation was computed. [2021-11-13 17:32:03,351 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 249 273) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (<= ~waterLevel~0 2))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse2 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse4 (not (<= ~waterLevel~0 1)) .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-11-13 17:32:03,351 INFO L854 garLoopResultBuilder]: At program point L268(line 268) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (<= ~waterLevel~0 2))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 .cse3) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse4 (not (<= ~waterLevel~0 1)) .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 .cse4 .cse2 .cse3))) [2021-11-13 17:32:03,351 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 249 273) no Hoare annotation was computed. [2021-11-13 17:32:03,351 INFO L858 garLoopResultBuilder]: For program point L268-1(lines 249 273) no Hoare annotation was computed. [2021-11-13 17:32:03,351 INFO L854 garLoopResultBuilder]: At program point L423(lines 408 426) the Hoare annotation is: (let ((.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse2 .cse0 .cse3 .cse1) (or .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse1))) [2021-11-13 17:32:03,351 INFO L854 garLoopResultBuilder]: At program point L549(lines 544 552) the Hoare annotation is: (let ((.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse2 .cse0 .cse3 .cse1) (or .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse1))) [2021-11-13 17:32:03,352 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 344 352) no Hoare annotation was computed. [2021-11-13 17:32:03,352 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 344 352) the Hoare annotation is: true [2021-11-13 17:32:03,353 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 344 352) no Hoare annotation was computed. [2021-11-13 17:32:03,353 INFO L858 garLoopResultBuilder]: For program point L481-1(lines 477 488) no Hoare annotation was computed. [2021-11-13 17:32:03,353 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 477 488) the Hoare annotation is: (let ((.cse4 (not (<= 1 ~pumpRunning~0))) (.cse5 (= 0 ~systemActive~0)) (.cse3 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse2 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 (not (<= 1 |old(~methaneLevelCritical~0)|)) .cse2) (or .cse3 (not (= 2 ~waterLevel~0)) .cse1 .cse4 .cse5) (or .cse3 .cse1 .cse4 (not (<= ~waterLevel~0 1)) .cse5 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse3 .cse0 .cse1 .cse2))) [2021-11-13 17:32:03,353 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 477 488) no Hoare annotation was computed. [2021-11-13 17:32:03,353 INFO L858 garLoopResultBuilder]: For program point L576(line 576) no Hoare annotation was computed. [2021-11-13 17:32:03,354 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 555 584) no Hoare annotation was computed. [2021-11-13 17:32:03,354 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 555 584) the Hoare annotation is: true [2021-11-13 17:32:03,354 INFO L858 garLoopResultBuilder]: For program point L569(lines 569 573) no Hoare annotation was computed. [2021-11-13 17:32:03,354 INFO L861 garLoopResultBuilder]: At program point L569-1(lines 569 573) the Hoare annotation is: true [2021-11-13 17:32:03,354 INFO L858 garLoopResultBuilder]: For program point L566(line 566) no Hoare annotation was computed. [2021-11-13 17:32:03,355 INFO L861 garLoopResultBuilder]: At program point L565-2(lines 565 579) the Hoare annotation is: true [2021-11-13 17:32:03,355 INFO L861 garLoopResultBuilder]: At program point L561(line 561) the Hoare annotation is: true [2021-11-13 17:32:03,355 INFO L858 garLoopResultBuilder]: For program point L561-1(line 561) no Hoare annotation was computed. [2021-11-13 17:32:03,355 INFO L861 garLoopResultBuilder]: At program point L580(lines 555 584) the Hoare annotation is: true [2021-11-13 17:32:03,355 INFO L858 garLoopResultBuilder]: For program point L283(lines 283 291) no Hoare annotation was computed. [2021-11-13 17:32:03,355 INFO L858 garLoopResultBuilder]: For program point L279(lines 279 296) no Hoare annotation was computed. [2021-11-13 17:32:03,355 INFO L858 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2021-11-13 17:32:03,356 INFO L854 garLoopResultBuilder]: At program point L659(lines 654 661) the Hoare annotation is: (let ((.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0)) (.cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 2)) .cse2) (or .cse6 .cse5 .cse3) (or .cse0 .cse5 .cse2 .cse3 .cse4) (or .cse6 .cse1 .cse3))) [2021-11-13 17:32:03,356 INFO L858 garLoopResultBuilder]: For program point L457(lines 457 461) no Hoare annotation was computed. [2021-11-13 17:32:03,356 INFO L854 garLoopResultBuilder]: At program point L457-2(lines 453 464) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse14 (= ~methaneLevelCritical~0 0)) (.cse16 (<= ~waterLevel~0 0)) (.cse17 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= 0 ~systemActive~0))) (let ((.cse5 (and (<= 1 ~pumpRunning~0) .cse8 .cse14 .cse16 .cse17 .cse9 (not .cse3))) (.cse4 (= ~waterLevel~0 1)) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse1 (not .cse14)) (.cse11 (and .cse8 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse9)) (.cse13 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse12 (not (<= 1 ~methaneLevelCritical~0))) (.cse15 (and .cse8 .cse16 .cse17 .cse9)) (.cse10 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (<= |old(~waterLevel~0)| 0))) (.cse7 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse3 .cse6 .cse7) (or (and .cse8 .cse9) .cse0 .cse1 .cse3 .cse10 (not (<= 2 |old(~waterLevel~0)|))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse11 .cse1 .cse5 .cse3 .cse7) (or .cse0 .cse12 (and .cse8 .cse4 .cse9) .cse2 .cse3) (or .cse13 .cse1 .cse10) (or .cse14 .cse0 .cse11 .cse12 .cse15 .cse3 .cse10 .cse7) (or .cse13 .cse12 .cse10) (or .cse14 .cse0 .cse12 .cse15 .cse3 .cse10 .cse6 .cse7)))) [2021-11-13 17:32:03,356 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 188 214) no Hoare annotation was computed. [2021-11-13 17:32:03,358 INFO L854 garLoopResultBuilder]: At program point L69(lines 62 71) the Hoare annotation is: (let ((.cse10 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (and (= ~pumpRunning~0 0) .cse10)) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse10 (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse4 .cse5) (or .cse0 .cse1 .cse6 .cse4 .cse7 .cse5) (or .cse8 .cse9 .cse2 .cse7) (or .cse8 .cse9 .cse6 .cse7) (or .cse0 .cse1 .cse6 .cse3 .cse4)))) [2021-11-13 17:32:03,358 INFO L854 garLoopResultBuilder]: At program point L82(line 82) the Hoare annotation is: (let ((.cse12 (= 0 ~systemActive~0))) (let ((.cse18 (= ~methaneLevelCritical~0 0)) (.cse25 (<= 1 ~methaneLevelCritical~0)) (.cse7 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse24 (not .cse12)) (.cse9 (= |timeShift_processEnvironment_~tmp~4#1| ~methaneLevelCritical~0)) (.cse17 (= ~pumpRunning~0 0)) (.cse5 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse6 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse23 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse16 (= ~waterLevel~0 1)) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse3 (and .cse17 .cse5 .cse6 .cse23)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse15 (not (= |old(~waterLevel~0)| 2))) (.cse21 (not (<= |old(~waterLevel~0)| 0))) (.cse10 (and .cse17 .cse5 .cse6 .cse7 .cse8 .cse24 .cse9)) (.cse14 (not .cse25)) (.cse20 (and .cse17 .cse5 .cse25 .cse6 (<= ~waterLevel~0 0) .cse23 .cse8 .cse9)) (.cse13 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse11 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not .cse18)) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse19 (not (<= |old(~waterLevel~0)| 2))) (.cse22 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (and .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) .cse10 (not (= |old(~waterLevel~0)| 1)) .cse11 .cse2 .cse12 .cse13) (or .cse1 .cse14 .cse15) (or .cse11 .cse2 .cse15 .cse12 .cse16) (or .cse11 .cse14 (and .cse17 .cse16) .cse15 .cse12) (or .cse0 .cse1 .cse14 .cse3) (or .cse18 .cse11 .cse14 .cse12 .cse19 .cse20 .cse21 .cse13) (or (and .cse5 .cse6 .cse8 .cse9) .cse11 .cse14 .cse12 .cse19 .cse22) (or .cse1 .cse2 .cse15) (or .cse11 .cse2 (and .cse17 .cse5 .cse6 .cse23 .cse8 .cse9) (and .cse4 .cse5 .cse6 .cse23 .cse8 .cse9) .cse12 .cse21 .cse13) (or .cse10 .cse18 .cse11 .cse14 .cse12 .cse19 .cse20 .cse13) (or (and .cse17 .cse5 .cse6 .cse8 .cse24 .cse9) .cse11 .cse2 (and .cse4 .cse5 .cse6 .cse8 .cse9) .cse12 .cse19 .cse22))))) [2021-11-13 17:32:03,358 INFO L858 garLoopResultBuilder]: For program point L82-1(line 82) no Hoare annotation was computed. [2021-11-13 17:32:03,358 INFO L858 garLoopResultBuilder]: For program point L202-1(lines 202 208) no Hoare annotation was computed. [2021-11-13 17:32:03,359 INFO L854 garLoopResultBuilder]: At program point L289(line 289) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (= ~methaneLevelCritical~0 0)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (= 0 ~systemActive~0)) (.cse5 (= |timeShift_processEnvironment_~tmp~4#1| ~methaneLevelCritical~0))) (let ((.cse7 (and (<= 1 ~pumpRunning~0) .cse3 .cse12 (<= ~waterLevel~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) .cse4 (not .cse6) .cse5)) (.cse8 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse1 (not .cse12)) (.cse11 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (and .cse3 (= ~waterLevel~0 1) .cse4 .cse5) .cse6) (or .cse0 .cse1 .cse6 .cse7 (not (<= |old(~waterLevel~0)| 0)) .cse8) (or .cse0 .cse9 .cse6 .cse10 .cse8) (or (and .cse3 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse4 .cse5) (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse6 .cse7 .cse8) (or .cse0 .cse9 .cse2 .cse6) (or .cse11 .cse1 .cse10) (or .cse11 .cse9 .cse10)))) [2021-11-13 17:32:03,359 INFO L854 garLoopResultBuilder]: At program point L285(line 285) the Hoare annotation is: (let ((.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0)) (.cse4 (= |timeShift_processEnvironment_~tmp~4#1| ~methaneLevelCritical~0)) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (and .cse2 (= |old(~waterLevel~0)| ~waterLevel~0) .cse3 .cse4) .cse5 (not (<= |old(~waterLevel~0)| 0)) .cse6) (or .cse0 .cse7 .cse5 .cse8 (not (<= 2 |old(~waterLevel~0)|))) (or .cse9 .cse7 .cse8) (or .cse0 .cse7 .cse5 .cse8 .cse6) (or (and .cse2 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse3 .cse4) (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse5 .cse6) (or .cse9 .cse1 .cse8) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 2)) (and .cse2 (= ~waterLevel~0 1) .cse3 .cse4) .cse5))) [2021-11-13 17:32:03,359 INFO L854 garLoopResultBuilder]: At program point L281(line 281) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse14 (= ~methaneLevelCritical~0 0)) (.cse16 (<= ~waterLevel~0 0)) (.cse17 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= 0 ~systemActive~0))) (let ((.cse5 (and (<= 1 ~pumpRunning~0) .cse8 .cse14 .cse16 .cse17 .cse9 (not .cse3))) (.cse4 (= ~waterLevel~0 1)) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse1 (not .cse14)) (.cse11 (and .cse8 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse9)) (.cse13 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse12 (not (<= 1 ~methaneLevelCritical~0))) (.cse15 (and .cse8 .cse16 .cse17 .cse9)) (.cse10 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (<= |old(~waterLevel~0)| 0))) (.cse7 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse3 .cse6 .cse7) (or (and .cse8 .cse9) .cse0 .cse1 .cse3 .cse10 (not (<= 2 |old(~waterLevel~0)|))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse11 .cse1 .cse5 .cse3 .cse7) (or .cse0 .cse12 (and .cse8 .cse4 .cse9) .cse2 .cse3) (or .cse13 .cse1 .cse10) (or .cse14 .cse0 .cse11 .cse12 .cse15 .cse3 .cse10 .cse7) (or .cse13 .cse12 .cse10) (or .cse14 .cse0 .cse12 .cse15 .cse3 .cse10 .cse6 .cse7)))) [2021-11-13 17:32:03,359 INFO L858 garLoopResultBuilder]: For program point L281-1(line 281) no Hoare annotation was computed. [2021-11-13 17:32:03,360 INFO L854 garLoopResultBuilder]: At program point L294(line 294) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0))) (let ((.cse8 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse9 (not (= |old(~waterLevel~0)| 2))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not .cse2))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (not (<= |old(~waterLevel~0)| 1)) .cse5 .cse6 .cse7) (or .cse0 .cse6 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse8 .cse6 .cse3) (or .cse5 .cse8 .cse1 .cse3) (or .cse0 .cse1 .cse9 .cse2) (or .cse0 .cse6 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse9 .cse7) (or .cse5 .cse1 .cse3 .cse7)))) [2021-11-13 17:32:03,360 INFO L854 garLoopResultBuilder]: At program point L294-1(lines 275 299) the Hoare annotation is: (let ((.cse9 (= 0 ~systemActive~0))) (let ((.cse22 (<= 1 ~pumpRunning~0)) (.cse21 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse24 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse18 (not .cse9)) (.cse15 (= ~pumpRunning~0 0)) (.cse25 (<= ~waterLevel~0 0)) (.cse23 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse17 (<= 1 ~switchedOnBeforeTS~0)) (.cse19 (= |timeShift_processEnvironment_~tmp~4#1| ~methaneLevelCritical~0))) (let ((.cse6 (and .cse15 .cse25 .cse23 .cse17 .cse19)) (.cse13 (not (<= |old(~waterLevel~0)| 0))) (.cse2 (and .cse15 .cse23)) (.cse16 (= ~waterLevel~0 1)) (.cse20 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (and .cse15 .cse24 .cse17 .cse18 .cse19)) (.cse3 (not .cse4)) (.cse12 (and .cse22 .cse21 .cse4 .cse25 .cse23 .cse17 .cse18 .cse19)) (.cse11 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse14 (and .cse15 .cse4 .cse25 .cse23 .cse17 .cse18 .cse19)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (or .cse5 .cse3 .cse9 .cse12 .cse13 .cse11 .cse14) (or .cse5 .cse3 (and .cse15 .cse16 .cse17 .cse18 .cse19) .cse20 (and .cse21 .cse16 .cse17 .cse19) .cse9) (or .cse4 .cse5 .cse6 .cse7 .cse9 .cse10 .cse13 .cse11) (or .cse1 .cse2 .cse7 .cse10) (or (and .cse15 .cse16 .cse18) .cse5 .cse7 .cse20 .cse9) (or .cse1 (and .cse22 .cse23 .cse18) .cse3 (and .cse15 .cse23 .cse18) .cse10) (or (and .cse17 .cse19) .cse5 .cse7 .cse9 .cse10 (not (<= 2 |old(~waterLevel~0)|))) (or (and .cse21 .cse24 .cse17 .cse19) .cse0 .cse5 .cse8 .cse3 .cse9 .cse12 .cse11 .cse14) (or .cse1 .cse7 .cse10 .cse18))))) [2021-11-13 17:32:03,360 INFO L854 garLoopResultBuilder]: At program point L67(line 67) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse5 (and (= ~pumpRunning~0 0) .cse3 .cse11)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0)) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse8 (and .cse2 .cse3 .cse11))) (and (or .cse0 .cse1 (and .cse2 (= 2 ~waterLevel~0) .cse3) (not (= |old(~waterLevel~0)| 2)) .cse4) (or .cse5 .cse6 .cse1 .cse7) (or .cse0 .cse1 .cse4 .cse7 .cse8 .cse9) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse10 .cse4 .cse8 .cse9) (or .cse5 .cse6 .cse10 .cse7) (or .cse0 .cse10 .cse4 .cse7 .cse8 (not (<= 2 |old(~waterLevel~0)|)))))) [2021-11-13 17:32:03,361 INFO L858 garLoopResultBuilder]: For program point L195(lines 195 201) no Hoare annotation was computed. [2021-11-13 17:32:03,361 INFO L858 garLoopResultBuilder]: For program point L67-1(line 67) no Hoare annotation was computed. [2021-11-13 17:32:03,361 INFO L858 garLoopResultBuilder]: For program point L195-2(lines 191 213) no Hoare annotation was computed. [2021-11-13 17:32:03,361 INFO L858 garLoopResultBuilder]: For program point L84(lines 84 94) no Hoare annotation was computed. [2021-11-13 17:32:03,362 INFO L858 garLoopResultBuilder]: For program point L658(line 658) no Hoare annotation was computed. [2021-11-13 17:32:03,362 INFO L858 garLoopResultBuilder]: For program point L80(lines 80 97) no Hoare annotation was computed. [2021-11-13 17:32:03,362 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 188 214) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse5 (and (= ~pumpRunning~0 0) .cse3 .cse11)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0)) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse8 (and .cse2 .cse3 .cse11))) (and (or .cse0 .cse1 (and .cse2 (= 2 ~waterLevel~0) .cse3) (not (= |old(~waterLevel~0)| 2)) .cse4) (or .cse5 .cse6 .cse1 .cse7) (or .cse0 .cse1 .cse4 .cse7 .cse8 .cse9) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse10 .cse4 .cse8 .cse9) (or .cse5 .cse6 .cse10 .cse7) (or .cse0 .cse10 .cse4 .cse7 .cse8 (not (<= 2 |old(~waterLevel~0)|)))))) [2021-11-13 17:32:03,362 INFO L854 garLoopResultBuilder]: At program point L80-1(lines 72 100) the Hoare annotation is: (let ((.cse11 (= 0 ~systemActive~0))) (let ((.cse31 (<= 1 ~methaneLevelCritical~0)) (.cse27 (= ~waterLevel~0 1)) (.cse25 (= ~pumpRunning~0 0)) (.cse22 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse30 (<= 1 ~pumpRunning~0)) (.cse17 (= ~methaneLevelCritical~0 0)) (.cse6 (<= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|)) (.cse32 (<= ~waterLevel~0 0)) (.cse23 (<= 1 ~switchedOnBeforeTS~0)) (.cse4 (not .cse11)) (.cse24 (= |timeShift_processEnvironment_~tmp~4#1| ~methaneLevelCritical~0)) (.cse19 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse20 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse21 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse26 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (and .cse19 .cse20 .cse21 .cse26)) (.cse12 (and .cse30 .cse19 .cse20 .cse21 .cse17 .cse6 .cse32 .cse26 .cse23 .cse4 .cse24)) (.cse16 (and .cse25 .cse20 .cse21 .cse22 .cse23 .cse4 .cse24)) (.cse13 (and .cse25 .cse20 .cse21 .cse17 .cse32 .cse26 .cse23 .cse4 .cse24)) (.cse5 (not (<= |old(~waterLevel~0)| 1))) (.cse9 (and .cse25 .cse20 .cse21 .cse27 .cse23 .cse4 .cse24)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse17)) (.cse10 (not (= |old(~waterLevel~0)| 2))) (.cse18 (and .cse25 .cse20 .cse31 .cse21 .cse32 .cse26 .cse23 .cse4 .cse24)) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not .cse31)) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse14 (not (<= |old(~waterLevel~0)| 0))) (.cse15 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse6 .cse1) (or .cse0 .cse7 .cse2 .cse3) (or .cse8 .cse7 .cse9 .cse10 .cse11) (or .cse12 .cse8 .cse13 .cse1 .cse11 .cse14 .cse15) (or .cse16 .cse17 .cse18 .cse8 .cse7 .cse11 .cse2 .cse15) (or .cse5 .cse12 .cse16 .cse8 .cse13 .cse1 (and .cse19 .cse20 .cse21 .cse6 .cse22 .cse23 .cse4 .cse24) .cse11 .cse15) (or .cse5 .cse0 (and .cse25 .cse20 .cse21 .cse26 .cse4) .cse1 .cse11) (or .cse5 .cse0 .cse6 .cse7) (or .cse8 .cse9 (and .cse19 .cse20 .cse21 .cse6 .cse27 .cse23 .cse24) .cse1 .cse10 .cse11) (let ((.cse28 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse29 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2))) (or .cse0 (and .cse25 .cse28 .cse26 .cse4 .cse29) .cse1 (and .cse30 .cse28 .cse26 .cse29) .cse10 .cse11)) (or .cse17 .cse18 .cse8 .cse7 .cse11 .cse2 .cse14 .cse15))))) [2021-11-13 17:32:03,364 INFO L854 garLoopResultBuilder]: At program point L526(lines 521 529) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0))) (let ((.cse26 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse25 (<= 1 ~pumpRunning~0)) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (= ~methaneLevelCritical~0 0)) (.cse20 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse16 (not .cse4)) (.cse15 (= ~pumpRunning~0 0)) (.cse10 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse27 (<= 1 ~methaneLevelCritical~0)) (.cse28 (<= ~waterLevel~0 0)) (.cse24 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse12 (<= 1 ~switchedOnBeforeTS~0)) (.cse13 (= |timeShift_processEnvironment_~tmp~4#1| ~methaneLevelCritical~0))) (let ((.cse3 (and .cse15 .cse10 .cse27 .cse28 .cse24 .cse12 .cse13)) (.cse6 (not (<= |old(~waterLevel~0)| 0))) (.cse8 (and .cse15 .cse10 .cse20 .cse12 .cse16 .cse13)) (.cse18 (and .cse15 .cse10 .cse0 .cse28 .cse24 .cse12 .cse16 .cse13)) (.cse19 (and .cse25 .cse9 .cse10 .cse0 .cse28 .cse24 .cse12 .cse16 .cse13)) (.cse7 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse11 (= ~waterLevel~0 1)) (.cse22 (and .cse15 .cse10 .cse24)) (.cse23 (and .cse15 .cse26 .cse24)) (.cse21 (not (= |old(~pumpRunning~0)| 0))) (.cse14 (not .cse0)) (.cse17 (not (= |old(~waterLevel~0)| 2))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not .cse27)) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (or .cse0 .cse8 .cse1 .cse2 .cse3 .cse4 .cse5 .cse7) (or (and .cse9 .cse10 .cse11 .cse12 .cse13) .cse1 .cse14 (and .cse15 .cse10 .cse11 .cse12 .cse16 .cse13) .cse17 .cse4) (or .cse1 .cse14 .cse18 .cse4 .cse19 .cse6 .cse7) (or (not (<= |old(~waterLevel~0)| 1)) .cse8 .cse1 (and .cse9 .cse10 .cse20 .cse12 .cse13) .cse14 .cse18 .cse4 .cse19 .cse7) (or (and .cse15 .cse11 .cse16) .cse1 .cse2 .cse17 .cse4) (or .cse21 .cse22 .cse2 .cse5) (or .cse23 .cse21 .cse14 .cse17 .cse16) (or .cse21 (and (= 2 ~waterLevel~0) .cse24) .cse22 .cse14 .cse5) (or .cse23 .cse21 .cse14 .cse17 (and .cse25 .cse26)) (or (and .cse10 .cse12 .cse13) .cse1 .cse2 .cse4 .cse5 (not (<= 2 |old(~waterLevel~0)|))))))) [2021-11-13 17:32:03,365 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 188 214) no Hoare annotation was computed. [2021-11-13 17:32:03,365 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 658) no Hoare annotation was computed. [2021-11-13 17:32:03,365 INFO L854 garLoopResultBuilder]: At program point L168(lines 117 169) the Hoare annotation is: false [2021-11-13 17:32:03,365 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-11-13 17:32:03,365 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-11-13 17:32:03,365 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-11-13 17:32:03,366 INFO L858 garLoopResultBuilder]: For program point L156(lines 156 162) no Hoare annotation was computed. [2021-11-13 17:32:03,366 INFO L854 garLoopResultBuilder]: At program point L156-2(lines 148 163) the Hoare annotation is: (let ((.cse7 (= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= ~waterLevel~0 2)) (.cse10 (<= 1 ~switchedOnBeforeTS~0)) (.cse9 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse8 .cse2 .cse3 .cse4 .cse9) (and .cse6 .cse1 .cse7 .cse2 .cse3 .cse4 .cse9) (and .cse6 .cse8 .cse2 .cse3 .cse4 .cse5 .cse10 .cse9) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse1 .cse2 .cse3 .cse4 .cse5 .cse10 .cse9))) [2021-11-13 17:32:03,366 INFO L858 garLoopResultBuilder]: For program point L119(lines 118 167) no Hoare annotation was computed. [2021-11-13 17:32:03,367 INFO L854 garLoopResultBuilder]: At program point L693(lines 688 696) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-11-13 17:32:03,367 INFO L858 garLoopResultBuilder]: For program point L148(lines 148 163) no Hoare annotation was computed. [2021-11-13 17:32:03,368 INFO L854 garLoopResultBuilder]: At program point L433(line 433) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse7 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse4 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse8 (<= ~waterLevel~0 2)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse7 .cse1 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse2 .cse3 .cse4 .cse5 .cse8 .cse9 .cse6) (and .cse0 .cse7 .cse3 .cse4 .cse5 .cse8 .cse9 .cse6))) [2021-11-13 17:32:03,368 INFO L854 garLoopResultBuilder]: At program point L685(lines 681 687) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-11-13 17:32:03,369 INFO L854 garLoopResultBuilder]: At program point L140(line 140) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse7 (= 2 ~waterLevel~0)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse8 (not (= 0 ~systemActive~0)))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse1 (<= ~waterLevel~0 1) .cse2 .cse3) (and .cse6 .cse7 .cse5 .cse1 .cse2 .cse3 .cse8) (and .cse0 .cse7 .cse5 .cse1 .cse2 .cse3) (and .cse6 .cse5 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse8))) [2021-11-13 17:32:03,369 INFO L854 garLoopResultBuilder]: At program point L165(lines 118 167) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse6 (<= ~waterLevel~0 1)) (.cse8 (<= 1 ~pumpRunning~0)) (.cse9 (not (= 0 ~systemActive~0))) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= 2 ~waterLevel~0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse4 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse3 .cse6 .cse4 .cse5) (and .cse0 .cse7 .cse3 .cse6 .cse4 .cse5) (and .cse8 .cse7 .cse3 .cse6 .cse4 .cse5 (<= 1 ~switchedOnBeforeTS~0) .cse9) (and .cse8 .cse2 .cse7 .cse3 .cse4 .cse5 .cse9) (and .cse0 .cse2 .cse7 .cse3 .cse4 .cse5))) [2021-11-13 17:32:03,369 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-11-13 17:32:03,369 INFO L858 garLoopResultBuilder]: For program point L640(lines 640 647) no Hoare annotation was computed. [2021-11-13 17:32:03,369 INFO L858 garLoopResultBuilder]: For program point L128(lines 128 134) no Hoare annotation was computed. [2021-11-13 17:32:03,370 INFO L858 garLoopResultBuilder]: For program point L128-1(lines 128 134) no Hoare annotation was computed. [2021-11-13 17:32:03,370 INFO L858 garLoopResultBuilder]: For program point L640-2(lines 640 647) no Hoare annotation was computed. [2021-11-13 17:32:03,370 INFO L858 garLoopResultBuilder]: For program point L120(lines 120 124) no Hoare annotation was computed. [2021-11-13 17:32:03,370 INFO L861 garLoopResultBuilder]: At program point L624(lines 616 626) the Hoare annotation is: true [2021-11-13 17:32:03,370 INFO L861 garLoopResultBuilder]: At program point L649(lines 630 652) the Hoare annotation is: true [2021-11-13 17:32:03,370 INFO L854 garLoopResultBuilder]: At program point L678(lines 674 680) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-11-13 17:32:03,371 INFO L854 garLoopResultBuilder]: At program point L447(lines 442 449) the Hoare annotation is: (let ((.cse2 (= 2 ~waterLevel~0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse9 (<= 1 ~pumpRunning~0)) (.cse8 (<= ~waterLevel~0 2)) (.cse10 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse4 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse7 .cse3 .cse4 .cse5 .cse8 .cse6) (and .cse9 .cse2 .cse7 .cse3 .cse4 .cse5 .cse6) (and .cse9 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse9 .cse7 .cse3 .cse4 .cse5 .cse8 .cse10 .cse6) (and .cse0 .cse1 .cse3 .cse4 .cse5 (<= ~waterLevel~0 0) .cse6) (and .cse9 .cse1 .cse3 .cse4 .cse5 .cse8 .cse10 .cse6) (and .cse0 .cse1 .cse3 .cse4 .cse5 (= ~waterLevel~0 1) .cse6))) [2021-11-13 17:32:03,371 INFO L854 garLoopResultBuilder]: At program point L59(lines 54 61) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~8#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-11-13 17:32:03,371 INFO L854 garLoopResultBuilder]: At program point L439(lines 427 441) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (= 0 ~systemActive~0))) (or (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 .cse4 .cse5))) [2021-11-13 17:32:03,371 INFO L858 garLoopResultBuilder]: For program point L431(lines 431 437) no Hoare annotation was computed. [2021-11-13 17:32:03,371 INFO L858 garLoopResultBuilder]: For program point L431-1(lines 431 437) no Hoare annotation was computed. [2021-11-13 17:32:03,371 INFO L861 garLoopResultBuilder]: At program point L171(lines 108 175) the Hoare annotation is: true [2021-11-13 17:32:03,371 INFO L858 garLoopResultBuilder]: For program point L138(lines 138 144) no Hoare annotation was computed. [2021-11-13 17:32:03,372 INFO L858 garLoopResultBuilder]: For program point L138-1(lines 138 144) no Hoare annotation was computed. [2021-11-13 17:32:03,372 INFO L854 garLoopResultBuilder]: At program point L613(lines 609 615) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~8#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-11-13 17:32:03,372 INFO L854 garLoopResultBuilder]: At program point L130(line 130) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse6 (<= ~waterLevel~0 1)) (.cse8 (<= 1 ~pumpRunning~0)) (.cse9 (not (= 0 ~systemActive~0))) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= 2 ~waterLevel~0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse4 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse3 .cse6 .cse4 .cse5) (and .cse0 .cse7 .cse3 .cse6 .cse4 .cse5) (and .cse8 .cse7 .cse3 .cse6 .cse4 .cse5 (<= 1 ~switchedOnBeforeTS~0) .cse9) (and .cse8 .cse2 .cse7 .cse3 .cse4 .cse5 .cse9) (and .cse0 .cse2 .cse7 .cse3 .cse4 .cse5))) [2021-11-13 17:32:03,372 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 223 247) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (<= ~waterLevel~0 2))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse2 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse4 (not (<= ~waterLevel~0 1)) .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-11-13 17:32:03,373 INFO L854 garLoopResultBuilder]: At program point L539(lines 530 543) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0))) (let ((.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse1 (and .cse2 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)))) (.cse6 (not (<= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= 2 ~waterLevel~0)) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (and .cse2 .cse3) .cse4 (not (<= ~waterLevel~0 2)) .cse5) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse4 .cse6 .cse5 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 .cse7 .cse6 .cse5) (or .cse0 .cse2 (not .cse3) .cse7 .cse5)))) [2021-11-13 17:32:03,373 INFO L854 garLoopResultBuilder]: At program point L242(line 242) the Hoare annotation is: (let ((.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse2 .cse0 .cse3 .cse1) (or .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse1))) [2021-11-13 17:32:03,373 INFO L858 garLoopResultBuilder]: For program point L242-1(lines 223 247) no Hoare annotation was computed. [2021-11-13 17:32:03,373 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 223 247) no Hoare annotation was computed. [2021-11-13 17:32:03,373 INFO L858 garLoopResultBuilder]: For program point L315(lines 315 321) no Hoare annotation was computed. [2021-11-13 17:32:03,373 INFO L854 garLoopResultBuilder]: At program point L313(line 313) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse5 (= 2 ~waterLevel~0)) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (<= ~waterLevel~0 1))) (.cse2 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse3 .cse4 (not .cse5) .cse6 .cse2) (or .cse3 (and .cse4 .cse5) .cse0 (not (<= ~waterLevel~0 2)) .cse2) (or .cse3 .cse6 .cse1 .cse2))) [2021-11-13 17:32:03,374 INFO L854 garLoopResultBuilder]: At program point L315-2(lines 308 324) the Hoare annotation is: (let ((.cse1 (not (<= ~waterLevel~0 1))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (= 2 ~waterLevel~0)) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse3 .cse0 .cse1 .cse2) (or .cse3 (not (<= 1 ~methaneLevelCritical~0)) (not (<= ~waterLevel~0 2)) (and .cse4 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~5#1|) .cse5) .cse2) (or (<= 1 ~pumpRunning~0) .cse3 .cse4 (not .cse5) .cse0 .cse2))) [2021-11-13 17:32:03,374 INFO L858 garLoopResultBuilder]: For program point L313-1(line 313) no Hoare annotation was computed. [2021-11-13 17:32:03,374 INFO L858 garLoopResultBuilder]: For program point L534(lines 534 540) no Hoare annotation was computed. [2021-11-13 17:32:03,374 INFO L854 garLoopResultBuilder]: At program point L404(lines 389 407) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse4 (= 0 ~systemActive~0))) (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (<= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (<= ~waterLevel~0 2))) (.cse7 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~6#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (not .cse4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse5 .cse6 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse2 .cse7 .cse6 .cse4) (or .cse0 (and .cse1 (= 2 ~waterLevel~0)) .cse5 .cse3 .cse7 .cse4)))) [2021-11-13 17:32:03,374 INFO L854 garLoopResultBuilder]: At program point L305(lines 300 307) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= ~waterLevel~0 2))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0)) .cse1 .cse2 .cse3) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= ~waterLevel~0 1)) .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2 .cse3))) [2021-11-13 17:32:03,375 INFO L858 garLoopResultBuilder]: For program point L398(lines 398 402) no Hoare annotation was computed. [2021-11-13 17:32:03,375 INFO L854 garLoopResultBuilder]: At program point L237(line 237) the Hoare annotation is: (let ((.cse1 (= 0 ~systemActive~0))) (let ((.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0) (not .cse1))) (.cse4 (not (<= ~waterLevel~0 2)))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse2 .cse3 .cse0 .cse4 .cse1) (or .cse2 .cse3 (not (<= 1 ~methaneLevelCritical~0)) .cse4 .cse1)))) [2021-11-13 17:32:03,375 INFO L858 garLoopResultBuilder]: For program point L398-2(lines 398 402) no Hoare annotation was computed. [2021-11-13 17:32:03,375 INFO L858 garLoopResultBuilder]: For program point L231(lines 231 239) no Hoare annotation was computed. [2021-11-13 17:32:03,375 INFO L858 garLoopResultBuilder]: For program point L227(lines 227 244) no Hoare annotation was computed. [2021-11-13 17:32:03,376 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 465 476) no Hoare annotation was computed. [2021-11-13 17:32:03,376 INFO L858 garLoopResultBuilder]: For program point L469-1(lines 465 476) no Hoare annotation was computed. [2021-11-13 17:32:03,376 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 465 476) the Hoare annotation is: (let ((.cse5 (not (= ~pumpRunning~0 0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (<= 1 ~pumpRunning~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 (not (<= 1 ~methaneLevelCritical~0)) .cse2 .cse4) (or .cse5 .cse0 .cse2 .cse4) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-11-13 17:32:03,377 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 333 343) the Hoare annotation is: true [2021-11-13 17:32:03,377 INFO L854 garLoopResultBuilder]: At program point L494(lines 489 497) the Hoare annotation is: (let ((.cse6 (not (= ~pumpRunning~0 0))) (.cse7 (not (<= 2 ~waterLevel~0))) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (<= ~waterLevel~0 2))) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (<= 1 ~pumpRunning~0))) (.cse2 (not (<= ~waterLevel~0 1))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (= |isMethaneAlarm_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse5 (not (<= 1 ~switchedOnBeforeTS~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse8 .cse9 .cse3 .cse4) (or .cse6 .cse7 .cse0 .cse9 .cse3 .cse4) (or .cse8 .cse1 .cse2 .cse3 .cse4 .cse5))) [2021-11-13 17:32:03,377 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 333 343) no Hoare annotation was computed. [2021-11-13 17:32:03,378 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 333 343) no Hoare annotation was computed. [2021-11-13 17:32:03,381 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-13 17:32:03,384 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-13 17:32:03,485 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 13.11 05:32:03 BoogieIcfgContainer [2021-11-13 17:32:03,485 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-13 17:32:03,485 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-13 17:32:03,486 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-13 17:32:03,486 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-13 17:32:03,486 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.11 05:31:02" (3/4) ... [2021-11-13 17:32:03,490 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-11-13 17:32:03,496 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-11-13 17:32:03,496 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-11-13 17:32:03,497 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-11-13 17:32:03,497 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-11-13 17:32:03,497 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-11-13 17:32:03,497 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-11-13 17:32:03,497 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-11-13 17:32:03,497 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-11-13 17:32:03,498 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-11-13 17:32:03,498 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-11-13 17:32:03,519 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2021-11-13 17:32:03,520 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-11-13 17:32:03,521 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-11-13 17:32:03,522 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-11-13 17:32:03,523 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-11-13 17:32:03,523 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-13 17:32:03,524 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-13 17:32:03,553 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2021-11-13 17:32:03,554 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2021-11-13 17:32:03,554 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2021-11-13 17:32:03,554 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) || (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && waterLevel <= 1) && tmp == 1) && splverifierCounter == 0)) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel <= 1) && tmp == 1) && splverifierCounter == 0)) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && waterLevel <= 1) && tmp == 1) && splverifierCounter == 0) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || ((((((1 <= pumpRunning && 2 == waterLevel) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || (((((pumpRunning == 0 && 2 == waterLevel) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) [2021-11-13 17:32:03,556 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) || 0 == systemActive) [2021-11-13 17:32:03,557 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || waterLevel == 1) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((pumpRunning == \old(pumpRunning) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(methaneLevelCritical == 0)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((((((methaneLevelCritical == 0 || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((((((methaneLevelCritical == 0 || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) [2021-11-13 17:32:03,557 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((1 <= pumpRunning && 2 == waterLevel) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 0) && !(0 == systemActive))) || (((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive)) [2021-11-13 17:32:03,559 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || (((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || pumpRunning <= tmp___0) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || (((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel))) && ((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && tmp == waterLevel) && methaneLevelCritical == 0) && pumpRunning <= tmp___0) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical) || !(1 <= \old(pumpRunning))) || ((((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && methaneLevelCritical == 0) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical) || methaneLevelCritical == 0) || ((((((((pumpRunning == 0 && waterLevel == \result) && 1 <= methaneLevelCritical) && tmp == waterLevel) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((!(\old(waterLevel) <= 1) || ((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && tmp == waterLevel) && methaneLevelCritical == 0) && pumpRunning <= tmp___0) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || ((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(1 <= \old(pumpRunning))) || ((((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && methaneLevelCritical == 0) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0)) || (((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || pumpRunning <= tmp___0) || !(1 <= methaneLevelCritical))) && (((((!(1 <= \old(pumpRunning)) || ((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) && tmp == 2)) || !(methaneLevelCritical == 0)) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((((((methaneLevelCritical == 0 || ((((((((pumpRunning == 0 && waterLevel == \result) && 1 <= methaneLevelCritical) && tmp == waterLevel) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) [2021-11-13 17:32:03,559 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) && (((((((methaneLevelCritical == 0 || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && tmp == methaneLevelCritical)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical))) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(\old(waterLevel) == 2)) || (((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp == methaneLevelCritical)) || 0 == systemActive)) && (((((((methaneLevelCritical == 0 || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && tmp == methaneLevelCritical)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((((pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) <= 2))) && ((((((1 <= switchedOnBeforeTS && tmp == methaneLevelCritical) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((((((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && tmp == methaneLevelCritical) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(1 <= \old(switchedOnBeforeTS))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical))) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) [2021-11-13 17:32:03,560 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) [2021-11-13 17:32:03,560 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 0 == systemActive) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 0 == systemActive) [2021-11-13 17:32:03,561 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((methaneLevelCritical == 0 || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == 0 && waterLevel == \result) && 1 <= methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && tmp == methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) && (((((((methaneLevelCritical == 0 || (((((pumpRunning == 0 && waterLevel == \result) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == 0 && waterLevel == \result) && 1 <= methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && tmp == methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp == methaneLevelCritical) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((pumpRunning == 0 && waterLevel == \result) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || (((((((pumpRunning == 0 && waterLevel == \result) && methaneLevelCritical == 0) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || 0 == systemActive) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && methaneLevelCritical == 0) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((!(\old(waterLevel) <= 1) || (((((pumpRunning == 0 && waterLevel == \result) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0)) || (((((((pumpRunning == 0 && waterLevel == \result) && methaneLevelCritical == 0) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || 0 == systemActive) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && methaneLevelCritical == 0) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || (2 == waterLevel && \old(waterLevel) == waterLevel)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || (1 <= pumpRunning && 2 == \result))) && (((((((waterLevel == \result && 1 <= switchedOnBeforeTS) && tmp == methaneLevelCritical) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2021-11-13 17:32:03,561 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 <= methaneLevelCritical) || !(1 <= pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS)) && (((((!(pumpRunning == 0) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive) || \result == methaneLevelCritical)) && (((((!(pumpRunning == 0) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) || \result == methaneLevelCritical)) && (((((!(methaneLevelCritical == 0) || !(1 <= pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS)) [2021-11-13 17:32:03,562 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) [2021-11-13 17:32:03,565 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || ((pumpRunning == 0 && methaneLevelCritical <= tmp) && 2 == waterLevel)) || 0 == systemActive)) && (((((1 <= pumpRunning || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(2 == waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-11-13 17:32:03,565 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && !(\result == 0))) || (pumpRunning == 0 && 2 == waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && !(\result == 0))) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) [2021-11-13 17:32:03,565 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 == waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) [2021-11-13 17:32:03,566 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) [2021-11-13 17:32:03,566 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && !(tmp == 0)) && \result == 0) && !(0 == systemActive))) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && 2 == waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && !(tmp == 0)) && \result == 0) && !(0 == systemActive))) || 0 == systemActive) [2021-11-13 17:32:03,617 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/witness.graphml [2021-11-13 17:32:03,618 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-13 17:32:03,618 INFO L158 Benchmark]: Toolchain (without parser) took 62570.83ms. Allocated memory was 100.7MB in the beginning and 450.9MB in the end (delta: 350.2MB). Free memory was 59.1MB in the beginning and 297.7MB in the end (delta: -238.6MB). Peak memory consumption was 111.2MB. Max. memory is 16.1GB. [2021-11-13 17:32:03,619 INFO L158 Benchmark]: CDTParser took 0.32ms. Allocated memory is still 100.7MB. Free memory is still 76.2MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-13 17:32:03,620 INFO L158 Benchmark]: CACSL2BoogieTranslator took 503.48ms. Allocated memory is still 100.7MB. Free memory was 58.9MB in the beginning and 67.2MB in the end (delta: -8.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-11-13 17:32:03,620 INFO L158 Benchmark]: Boogie Procedure Inliner took 89.03ms. Allocated memory is still 100.7MB. Free memory was 67.2MB in the beginning and 64.5MB in the end (delta: 2.7MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2021-11-13 17:32:03,620 INFO L158 Benchmark]: Boogie Preprocessor took 42.70ms. Allocated memory is still 100.7MB. Free memory was 64.5MB in the beginning and 62.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-13 17:32:03,622 INFO L158 Benchmark]: RCFGBuilder took 985.83ms. Allocated memory was 100.7MB in the beginning and 121.6MB in the end (delta: 21.0MB). Free memory was 62.1MB in the beginning and 87.4MB in the end (delta: -25.3MB). Peak memory consumption was 36.4MB. Max. memory is 16.1GB. [2021-11-13 17:32:03,622 INFO L158 Benchmark]: TraceAbstraction took 60806.69ms. Allocated memory was 121.6MB in the beginning and 450.9MB in the end (delta: 329.3MB). Free memory was 86.7MB in the beginning and 306.1MB in the end (delta: -219.4MB). Peak memory consumption was 282.7MB. Max. memory is 16.1GB. [2021-11-13 17:32:03,623 INFO L158 Benchmark]: Witness Printer took 132.35ms. Allocated memory is still 450.9MB. Free memory was 306.1MB in the beginning and 297.7MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-11-13 17:32:03,626 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.32ms. Allocated memory is still 100.7MB. Free memory is still 76.2MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 503.48ms. Allocated memory is still 100.7MB. Free memory was 58.9MB in the beginning and 67.2MB in the end (delta: -8.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 89.03ms. Allocated memory is still 100.7MB. Free memory was 67.2MB in the beginning and 64.5MB in the end (delta: 2.7MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 42.70ms. Allocated memory is still 100.7MB. Free memory was 64.5MB in the beginning and 62.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 985.83ms. Allocated memory was 100.7MB in the beginning and 121.6MB in the end (delta: 21.0MB). Free memory was 62.1MB in the beginning and 87.4MB in the end (delta: -25.3MB). Peak memory consumption was 36.4MB. Max. memory is 16.1GB. * TraceAbstraction took 60806.69ms. Allocated memory was 121.6MB in the beginning and 450.9MB in the end (delta: 329.3MB). Free memory was 86.7MB in the beginning and 306.1MB in the end (delta: -219.4MB). Peak memory consumption was 282.7MB. Max. memory is 16.1GB. * Witness Printer took 132.35ms. Allocated memory is still 450.9MB. Free memory was 306.1MB in the beginning and 297.7MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 658]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 118 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 60.6s, OverallIterations: 14, TraceHistogramMax: 8, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 21.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 25.4s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 8917 SdHoareTripleChecker+Valid, 14444.63ms IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 8867 mSDsluCounter, 10735 SdHoareTripleChecker+Invalid, 12118.36ms Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 8063 mSDsCounter, 4199 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 16264 IncrementalHoareTripleChecker+Invalid, 20463 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 4199 mSolverCounterUnsat, 2672 mSDtfsCounter, 16264 mSolverCounterSat, 193.20ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 2928 GetRequests, 2502 SyntacticMatches, 12 SemanticMatches, 414 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7023 ImplicationChecksByTransitivity, 6.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=2250occurred in iteration=13, InterpolantAutomatonStates: 326, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.9s AutomataMinimizationTime, 14 MinimizatonAttempts, 884 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 55 LocationsWithAnnotation, 5413 PreInvPairs, 6163 NumberOfFragments, 6022 HoareAnnotationTreeSize, 5413 FomulaSimplifications, 45040 FormulaSimplificationTreeSizeReduction, 3.9s HoareSimplificationTime, 55 FomulaSimplificationsInter, 132331 FormulaSimplificationTreeSizeReductionInter, 21.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 1.1s SatisfiabilityAnalysisTime, 10.1s InterpolantComputationTime, 2646 NumberOfCodeBlocks, 2646 NumberOfCodeBlocksAsserted, 19 NumberOfCheckSat, 3707 ConstructedInterpolants, 0 QuantifiedInterpolants, 7789 SizeOfPredicates, 12 NumberOfNonLiveVariables, 4193 ConjunctsInSsa, 72 ConjunctsInUnsatCore, 24 InterpolantComputations, 9 PerfectInterpolantSequences, 3291/3699 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 674]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 654]: Loop Invariant Derived loop invariant: ((((((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 565]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 275]: Loop Invariant Derived loop invariant: ((((((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) && (((((((methaneLevelCritical == 0 || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && tmp == methaneLevelCritical)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical))) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(\old(waterLevel) == 2)) || (((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp == methaneLevelCritical)) || 0 == systemActive)) && (((((((methaneLevelCritical == 0 || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && tmp == methaneLevelCritical)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((((pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) <= 2))) && ((((((1 <= switchedOnBeforeTS && tmp == methaneLevelCritical) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((((((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && tmp == methaneLevelCritical) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(1 <= \old(switchedOnBeforeTS))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical))) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 609]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 108]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 616]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 118]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) || (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && waterLevel <= 1) && tmp == 1) && splverifierCounter == 0)) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel <= 1) && tmp == 1) && splverifierCounter == 0)) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && waterLevel <= 1) && tmp == 1) && splverifierCounter == 0) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || ((((((1 <= pumpRunning && 2 == waterLevel) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || (((((pumpRunning == 0 && 2 == waterLevel) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) - InvariantResult [Line: 453]: Loop Invariant Derived loop invariant: (((((((((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || waterLevel == 1) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((pumpRunning == \old(pumpRunning) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(methaneLevelCritical == 0)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((((((methaneLevelCritical == 0 || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((((((methaneLevelCritical == 0 || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 308]: Loop Invariant Derived loop invariant: ((((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || ((pumpRunning == 0 && methaneLevelCritical <= tmp) && 2 == waterLevel)) || 0 == systemActive)) && (((((1 <= pumpRunning || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(2 == waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 300]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 == waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) - InvariantResult [Line: 489]: Loop Invariant Derived loop invariant: (((((((!(1 <= methaneLevelCritical) || !(1 <= pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS)) && (((((!(pumpRunning == 0) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive) || \result == methaneLevelCritical)) && (((((!(pumpRunning == 0) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) || \result == methaneLevelCritical)) && (((((!(methaneLevelCritical == 0) || !(1 <= pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 389]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && !(tmp == 0)) && \result == 0) && !(0 == systemActive))) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && 2 == waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && !(tmp == 0)) && \result == 0) && !(0 == systemActive))) || 0 == systemActive) - InvariantResult [Line: 681]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: ((((((((((((((((methaneLevelCritical == 0 || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == 0 && waterLevel == \result) && 1 <= methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && tmp == methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) && (((((((methaneLevelCritical == 0 || (((((pumpRunning == 0 && waterLevel == \result) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == 0 && waterLevel == \result) && 1 <= methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && tmp == methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp == methaneLevelCritical) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((pumpRunning == 0 && waterLevel == \result) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || (((((((pumpRunning == 0 && waterLevel == \result) && methaneLevelCritical == 0) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || 0 == systemActive) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && methaneLevelCritical == 0) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((!(\old(waterLevel) <= 1) || (((((pumpRunning == 0 && waterLevel == \result) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0)) || (((((((pumpRunning == 0 && waterLevel == \result) && methaneLevelCritical == 0) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || 0 == systemActive) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && methaneLevelCritical == 0) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || (2 == waterLevel && \old(waterLevel) == waterLevel)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || (1 <= pumpRunning && 2 == \result))) && (((((((waterLevel == \result && 1 <= switchedOnBeforeTS) && tmp == methaneLevelCritical) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: ((((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) || 0 == systemActive) - InvariantResult [Line: 555]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 688]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 427]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 0 == systemActive) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 0 == systemActive) - InvariantResult [Line: 72]: Loop Invariant Derived loop invariant: ((((((((((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || (((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || pumpRunning <= tmp___0) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || (((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel))) && ((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && tmp == waterLevel) && methaneLevelCritical == 0) && pumpRunning <= tmp___0) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical) || !(1 <= \old(pumpRunning))) || ((((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && methaneLevelCritical == 0) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical) || methaneLevelCritical == 0) || ((((((((pumpRunning == 0 && waterLevel == \result) && 1 <= methaneLevelCritical) && tmp == waterLevel) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((!(\old(waterLevel) <= 1) || ((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && tmp == waterLevel) && methaneLevelCritical == 0) && pumpRunning <= tmp___0) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || ((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(1 <= \old(pumpRunning))) || ((((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && methaneLevelCritical == 0) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0)) || (((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || pumpRunning <= tmp___0) || !(1 <= methaneLevelCritical))) && (((((!(1 <= \old(pumpRunning)) || ((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) && tmp == 2)) || !(methaneLevelCritical == 0)) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((((((methaneLevelCritical == 0 || ((((((((pumpRunning == 0 && waterLevel == \result) && 1 <= methaneLevelCritical) && tmp == waterLevel) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && tmp == methaneLevelCritical)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 530]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && !(\result == 0))) || (pumpRunning == 0 && 2 == waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && !(\result == 0))) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 630]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: ((((((((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((1 <= pumpRunning && 2 == waterLevel) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 0) && !(0 == systemActive))) || (((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive)) - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: ((((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) - InvariantResult [Line: 544]: Loop Invariant Derived loop invariant: ((((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) RESULT: Ultimate proved your program to be correct! [2021-11-13 17:32:03,715 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0ca1838d-02de-466b-bb24-7604b44bb7f2/bin/uautomizer-YU5uOKAj3y/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE