./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 53f42b1a Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/bin/uautomizer-DQz5hQGWxF/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/bin/uautomizer-DQz5hQGWxF/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/bin/uautomizer-DQz5hQGWxF/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/bin/uautomizer-DQz5hQGWxF/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/bin/uautomizer-DQz5hQGWxF --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 3ab30b3db91b0e47e6f9b2ed9ba465facc49148e5cdc1cad78e4808ba0c7de84 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-53f42b1 [2021-11-20 05:32:03,229 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-20 05:32:03,233 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-20 05:32:03,295 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-20 05:32:03,296 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-20 05:32:03,297 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-20 05:32:03,299 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-20 05:32:03,302 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-20 05:32:03,304 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-20 05:32:03,305 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-20 05:32:03,307 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-20 05:32:03,308 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-20 05:32:03,309 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-20 05:32:03,310 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-20 05:32:03,312 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-20 05:32:03,314 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-20 05:32:03,315 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-20 05:32:03,316 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-20 05:32:03,318 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-20 05:32:03,321 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-20 05:32:03,323 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-20 05:32:03,325 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-20 05:32:03,327 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-20 05:32:03,328 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-20 05:32:03,332 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-20 05:32:03,332 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-20 05:32:03,333 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-20 05:32:03,334 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-20 05:32:03,335 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-20 05:32:03,336 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-20 05:32:03,337 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-20 05:32:03,338 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-20 05:32:03,339 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-20 05:32:03,340 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-20 05:32:03,341 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-20 05:32:03,342 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-20 05:32:03,343 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-20 05:32:03,343 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-20 05:32:03,343 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-20 05:32:03,345 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-20 05:32:03,346 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-20 05:32:03,347 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-11-20 05:32:03,384 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-20 05:32:03,384 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-20 05:32:03,384 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-20 05:32:03,384 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-20 05:32:03,385 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-20 05:32:03,385 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-20 05:32:03,386 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-20 05:32:03,386 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-20 05:32:03,387 INFO L138 SettingsManager]: * Use SBE=true [2021-11-20 05:32:03,387 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-20 05:32:03,387 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-20 05:32:03,387 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-20 05:32:03,388 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-20 05:32:03,388 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-20 05:32:03,388 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-20 05:32:03,388 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-20 05:32:03,388 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-20 05:32:03,389 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-20 05:32:03,389 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-20 05:32:03,389 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-20 05:32:03,389 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-20 05:32:03,389 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-20 05:32:03,390 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-20 05:32:03,390 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-20 05:32:03,390 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 05:32:03,396 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-20 05:32:03,396 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-20 05:32:03,397 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-20 05:32:03,397 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-20 05:32:03,399 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-20 05:32:03,399 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-20 05:32:03,399 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-20 05:32:03,400 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-20 05:32:03,400 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-20 05:32:03,400 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/bin/uautomizer-DQz5hQGWxF/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/bin/uautomizer-DQz5hQGWxF Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 3ab30b3db91b0e47e6f9b2ed9ba465facc49148e5cdc1cad78e4808ba0c7de84 [2021-11-20 05:32:03,656 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-20 05:32:03,677 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-20 05:32:03,680 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-20 05:32:03,682 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-20 05:32:03,683 INFO L275 PluginConnector]: CDTParser initialized [2021-11-20 05:32:03,685 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/bin/uautomizer-DQz5hQGWxF/../../sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c [2021-11-20 05:32:03,777 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/bin/uautomizer-DQz5hQGWxF/data/eb2a9e4de/e85a39523a2d4457aba109eb7c3d90a2/FLAGece605c50 [2021-11-20 05:32:04,322 INFO L306 CDTParser]: Found 1 translation units. [2021-11-20 05:32:04,323 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c [2021-11-20 05:32:04,359 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/bin/uautomizer-DQz5hQGWxF/data/eb2a9e4de/e85a39523a2d4457aba109eb7c3d90a2/FLAGece605c50 [2021-11-20 05:32:04,603 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/bin/uautomizer-DQz5hQGWxF/data/eb2a9e4de/e85a39523a2d4457aba109eb7c3d90a2 [2021-11-20 05:32:04,605 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-20 05:32:04,607 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-20 05:32:04,609 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-20 05:32:04,609 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-20 05:32:04,613 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-20 05:32:04,614 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 05:32:04" (1/1) ... [2021-11-20 05:32:04,616 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2f1da003 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:32:04, skipping insertion in model container [2021-11-20 05:32:04,616 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 05:32:04" (1/1) ... [2021-11-20 05:32:04,624 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-20 05:32:04,686 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-20 05:32:04,975 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c[5071,5084] [2021-11-20 05:32:05,067 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 05:32:05,079 INFO L203 MainTranslator]: Completed pre-run [2021-11-20 05:32:05,123 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c[5071,5084] [2021-11-20 05:32:05,173 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 05:32:05,192 INFO L208 MainTranslator]: Completed translation [2021-11-20 05:32:05,193 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:32:05 WrapperNode [2021-11-20 05:32:05,193 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-20 05:32:05,194 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-20 05:32:05,195 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-20 05:32:05,195 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-20 05:32:05,203 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:32:05" (1/1) ... [2021-11-20 05:32:05,219 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:32:05" (1/1) ... [2021-11-20 05:32:05,252 INFO L137 Inliner]: procedures = 55, calls = 156, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 256 [2021-11-20 05:32:05,252 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-20 05:32:05,253 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-20 05:32:05,253 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-20 05:32:05,253 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-20 05:32:05,262 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:32:05" (1/1) ... [2021-11-20 05:32:05,262 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:32:05" (1/1) ... [2021-11-20 05:32:05,277 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:32:05" (1/1) ... [2021-11-20 05:32:05,277 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:32:05" (1/1) ... [2021-11-20 05:32:05,284 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:32:05" (1/1) ... [2021-11-20 05:32:05,303 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:32:05" (1/1) ... [2021-11-20 05:32:05,305 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:32:05" (1/1) ... [2021-11-20 05:32:05,308 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-20 05:32:05,309 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-20 05:32:05,309 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-20 05:32:05,310 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-20 05:32:05,313 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:32:05" (1/1) ... [2021-11-20 05:32:05,327 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 05:32:05,344 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 05:32:05,364 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-20 05:32:05,382 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-20 05:32:05,415 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-20 05:32:05,415 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-11-20 05:32:05,415 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-11-20 05:32:05,416 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-11-20 05:32:05,416 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-11-20 05:32:05,416 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-11-20 05:32:05,416 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-11-20 05:32:05,416 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-11-20 05:32:05,417 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-11-20 05:32:05,417 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-11-20 05:32:05,418 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-11-20 05:32:05,418 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-11-20 05:32:05,418 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-11-20 05:32:05,418 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-20 05:32:05,418 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-11-20 05:32:05,419 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-11-20 05:32:05,419 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-20 05:32:05,419 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-20 05:32:05,545 INFO L236 CfgBuilder]: Building ICFG [2021-11-20 05:32:05,559 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-20 05:32:05,956 INFO L277 CfgBuilder]: Performing block encoding [2021-11-20 05:32:05,964 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-20 05:32:05,965 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-20 05:32:05,967 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 05:32:05 BoogieIcfgContainer [2021-11-20 05:32:05,967 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-20 05:32:05,969 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-20 05:32:05,982 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-20 05:32:05,986 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-20 05:32:05,986 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 05:32:04" (1/3) ... [2021-11-20 05:32:05,987 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@14f3f4a5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 05:32:05, skipping insertion in model container [2021-11-20 05:32:05,987 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:32:05" (2/3) ... [2021-11-20 05:32:05,988 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@14f3f4a5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 05:32:05, skipping insertion in model container [2021-11-20 05:32:05,988 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 05:32:05" (3/3) ... [2021-11-20 05:32:05,989 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product37.cil.c [2021-11-20 05:32:05,995 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-20 05:32:05,996 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-20 05:32:06,083 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-20 05:32:06,091 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-20 05:32:06,091 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-20 05:32:06,112 INFO L276 IsEmpty]: Start isEmpty. Operand has 90 states, 69 states have (on average 1.3768115942028984) internal successors, (95), 77 states have internal predecessors, (95), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2021-11-20 05:32:06,121 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-11-20 05:32:06,121 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:32:06,122 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:32:06,123 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:32:06,128 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:32:06,129 INFO L85 PathProgramCache]: Analyzing trace with hash 1723855951, now seen corresponding path program 1 times [2021-11-20 05:32:06,139 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:32:06,140 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1225930543] [2021-11-20 05:32:06,140 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:32:06,141 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:32:06,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:06,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-11-20 05:32:06,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:06,415 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-11-20 05:32:06,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:06,429 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 05:32:06,431 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:32:06,432 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1225930543] [2021-11-20 05:32:06,433 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1225930543] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:32:06,433 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:32:06,434 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-20 05:32:06,436 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [221576901] [2021-11-20 05:32:06,438 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:32:06,442 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-11-20 05:32:06,442 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:32:06,478 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-11-20 05:32:06,479 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-20 05:32:06,482 INFO L87 Difference]: Start difference. First operand has 90 states, 69 states have (on average 1.3768115942028984) internal successors, (95), 77 states have internal predecessors, (95), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-20 05:32:06,519 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:32:06,519 INFO L93 Difference]: Finished difference Result 171 states and 232 transitions. [2021-11-20 05:32:06,520 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-11-20 05:32:06,521 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-11-20 05:32:06,522 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:32:06,532 INFO L225 Difference]: With dead ends: 171 [2021-11-20 05:32:06,532 INFO L226 Difference]: Without dead ends: 81 [2021-11-20 05:32:06,537 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-20 05:32:06,541 INFO L933 BasicCegarLoop]: 113 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 113 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 05:32:06,542 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 113 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 05:32:06,561 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2021-11-20 05:32:06,588 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 81. [2021-11-20 05:32:06,589 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 69 states have internal predecessors, (81), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2021-11-20 05:32:06,593 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 104 transitions. [2021-11-20 05:32:06,594 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 104 transitions. Word has length 32 [2021-11-20 05:32:06,595 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:32:06,595 INFO L470 AbstractCegarLoop]: Abstraction has 81 states and 104 transitions. [2021-11-20 05:32:06,595 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-20 05:32:06,595 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 104 transitions. [2021-11-20 05:32:06,599 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2021-11-20 05:32:06,599 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:32:06,599 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:32:06,599 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-20 05:32:06,600 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:32:06,600 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:32:06,601 INFO L85 PathProgramCache]: Analyzing trace with hash 1706700211, now seen corresponding path program 1 times [2021-11-20 05:32:06,601 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:32:06,601 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [95597379] [2021-11-20 05:32:06,601 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:32:06,602 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:32:06,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:06,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 05:32:06,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:06,730 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-11-20 05:32:06,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:06,749 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 05:32:06,749 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:32:06,749 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [95597379] [2021-11-20 05:32:06,750 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [95597379] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:32:06,750 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:32:06,750 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-20 05:32:06,750 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1935433669] [2021-11-20 05:32:06,750 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:32:06,752 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 05:32:06,752 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:32:06,753 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 05:32:06,753 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 05:32:06,753 INFO L87 Difference]: Start difference. First operand 81 states and 104 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-20 05:32:06,801 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:32:06,801 INFO L93 Difference]: Finished difference Result 154 states and 203 transitions. [2021-11-20 05:32:06,802 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 05:32:06,802 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2021-11-20 05:32:06,803 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:32:06,804 INFO L225 Difference]: With dead ends: 154 [2021-11-20 05:32:06,805 INFO L226 Difference]: Without dead ends: 81 [2021-11-20 05:32:06,806 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 05:32:06,808 INFO L933 BasicCegarLoop]: 102 mSDtfsCounter, 81 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 81 SdHoareTripleChecker+Valid, 102 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 05:32:06,809 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [81 Valid, 102 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 05:32:06,810 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2021-11-20 05:32:06,822 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 81. [2021-11-20 05:32:06,823 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 62 states have (on average 1.2903225806451613) internal successors, (80), 69 states have internal predecessors, (80), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2021-11-20 05:32:06,825 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 103 transitions. [2021-11-20 05:32:06,825 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 103 transitions. Word has length 37 [2021-11-20 05:32:06,826 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:32:06,827 INFO L470 AbstractCegarLoop]: Abstraction has 81 states and 103 transitions. [2021-11-20 05:32:06,827 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-20 05:32:06,827 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 103 transitions. [2021-11-20 05:32:06,829 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2021-11-20 05:32:06,830 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:32:06,830 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:32:06,830 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-20 05:32:06,830 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:32:06,831 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:32:06,831 INFO L85 PathProgramCache]: Analyzing trace with hash -734632956, now seen corresponding path program 1 times [2021-11-20 05:32:06,831 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:32:06,831 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1830306567] [2021-11-20 05:32:06,832 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:32:06,832 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:32:06,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:06,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 05:32:06,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:06,923 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-11-20 05:32:06,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:06,928 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 05:32:06,929 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:32:06,929 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1830306567] [2021-11-20 05:32:06,929 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1830306567] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:32:06,929 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:32:06,930 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-20 05:32:06,930 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [784854890] [2021-11-20 05:32:06,930 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:32:06,931 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 05:32:06,931 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:32:06,932 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 05:32:06,932 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 05:32:06,932 INFO L87 Difference]: Start difference. First operand 81 states and 103 transitions. Second operand has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-20 05:32:06,964 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:32:06,965 INFO L93 Difference]: Finished difference Result 127 states and 161 transitions. [2021-11-20 05:32:06,965 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 05:32:06,965 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 39 [2021-11-20 05:32:06,965 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:32:06,967 INFO L225 Difference]: With dead ends: 127 [2021-11-20 05:32:06,967 INFO L226 Difference]: Without dead ends: 72 [2021-11-20 05:32:06,968 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 05:32:06,970 INFO L933 BasicCegarLoop]: 90 mSDtfsCounter, 12 mSDsluCounter, 74 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 164 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 05:32:06,971 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [15 Valid, 164 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 05:32:06,972 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 72 states. [2021-11-20 05:32:06,981 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 72 to 72. [2021-11-20 05:32:06,981 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 72 states, 56 states have (on average 1.3035714285714286) internal successors, (73), 63 states have internal predecessors, (73), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2021-11-20 05:32:06,983 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 72 states to 72 states and 91 transitions. [2021-11-20 05:32:06,983 INFO L78 Accepts]: Start accepts. Automaton has 72 states and 91 transitions. Word has length 39 [2021-11-20 05:32:06,983 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:32:06,984 INFO L470 AbstractCegarLoop]: Abstraction has 72 states and 91 transitions. [2021-11-20 05:32:06,984 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-20 05:32:06,984 INFO L276 IsEmpty]: Start isEmpty. Operand 72 states and 91 transitions. [2021-11-20 05:32:06,985 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2021-11-20 05:32:06,986 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:32:06,986 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:32:06,986 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-20 05:32:06,986 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:32:06,987 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:32:06,987 INFO L85 PathProgramCache]: Analyzing trace with hash 2032099452, now seen corresponding path program 1 times [2021-11-20 05:32:06,987 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:32:06,988 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [646646187] [2021-11-20 05:32:06,988 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:32:06,988 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:32:07,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:07,047 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 05:32:07,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:07,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-11-20 05:32:07,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:07,062 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 05:32:07,063 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:32:07,064 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [646646187] [2021-11-20 05:32:07,064 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [646646187] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:32:07,064 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:32:07,065 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-20 05:32:07,065 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [388635704] [2021-11-20 05:32:07,065 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:32:07,066 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 05:32:07,066 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:32:07,067 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 05:32:07,067 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 05:32:07,068 INFO L87 Difference]: Start difference. First operand 72 states and 91 transitions. Second operand has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-20 05:32:07,152 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:32:07,152 INFO L93 Difference]: Finished difference Result 183 states and 238 transitions. [2021-11-20 05:32:07,152 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 05:32:07,153 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 43 [2021-11-20 05:32:07,153 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:32:07,155 INFO L225 Difference]: With dead ends: 183 [2021-11-20 05:32:07,155 INFO L226 Difference]: Without dead ends: 119 [2021-11-20 05:32:07,156 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 05:32:07,158 INFO L933 BasicCegarLoop]: 110 mSDtfsCounter, 54 mSDsluCounter, 63 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 173 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 05:32:07,158 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [54 Valid, 173 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 05:32:07,167 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 119 states. [2021-11-20 05:32:07,189 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 119 to 117. [2021-11-20 05:32:07,191 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 117 states, 90 states have (on average 1.288888888888889) internal successors, (116), 97 states have internal predecessors, (116), 14 states have call successors, (14), 12 states have call predecessors, (14), 12 states have return successors, (18), 14 states have call predecessors, (18), 14 states have call successors, (18) [2021-11-20 05:32:07,195 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 117 states to 117 states and 148 transitions. [2021-11-20 05:32:07,196 INFO L78 Accepts]: Start accepts. Automaton has 117 states and 148 transitions. Word has length 43 [2021-11-20 05:32:07,196 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:32:07,197 INFO L470 AbstractCegarLoop]: Abstraction has 117 states and 148 transitions. [2021-11-20 05:32:07,197 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-20 05:32:07,197 INFO L276 IsEmpty]: Start isEmpty. Operand 117 states and 148 transitions. [2021-11-20 05:32:07,206 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2021-11-20 05:32:07,207 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:32:07,207 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:32:07,207 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-20 05:32:07,208 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:32:07,208 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:32:07,208 INFO L85 PathProgramCache]: Analyzing trace with hash -870205615, now seen corresponding path program 1 times [2021-11-20 05:32:07,209 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:32:07,209 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1002932533] [2021-11-20 05:32:07,209 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:32:07,209 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:32:07,250 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:07,302 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 05:32:07,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:07,311 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-20 05:32:07,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:07,361 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2021-11-20 05:32:07,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:07,368 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 05:32:07,368 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:32:07,369 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1002932533] [2021-11-20 05:32:07,370 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1002932533] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:32:07,376 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:32:07,376 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 05:32:07,377 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [60651197] [2021-11-20 05:32:07,378 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:32:07,379 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 05:32:07,379 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:32:07,379 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 05:32:07,380 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-20 05:32:07,380 INFO L87 Difference]: Start difference. First operand 117 states and 148 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-11-20 05:32:07,597 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:32:07,597 INFO L93 Difference]: Finished difference Result 258 states and 334 transitions. [2021-11-20 05:32:07,598 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 05:32:07,598 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2021-11-20 05:32:07,598 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:32:07,600 INFO L225 Difference]: With dead ends: 258 [2021-11-20 05:32:07,600 INFO L226 Difference]: Without dead ends: 149 [2021-11-20 05:32:07,602 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-11-20 05:32:07,603 INFO L933 BasicCegarLoop]: 93 mSDtfsCounter, 63 mSDsluCounter, 291 mSDsCounter, 0 mSdLazyCounter, 100 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 384 SdHoareTripleChecker+Invalid, 119 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 100 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 05:32:07,604 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [66 Valid, 384 Invalid, 119 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 100 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 05:32:07,605 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 149 states. [2021-11-20 05:32:07,648 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 149 to 144. [2021-11-20 05:32:07,649 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 144 states, 112 states have (on average 1.2857142857142858) internal successors, (144), 119 states have internal predecessors, (144), 16 states have call successors, (16), 12 states have call predecessors, (16), 15 states have return successors, (23), 17 states have call predecessors, (23), 16 states have call successors, (23) [2021-11-20 05:32:07,651 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 144 states to 144 states and 183 transitions. [2021-11-20 05:32:07,651 INFO L78 Accepts]: Start accepts. Automaton has 144 states and 183 transitions. Word has length 51 [2021-11-20 05:32:07,651 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:32:07,651 INFO L470 AbstractCegarLoop]: Abstraction has 144 states and 183 transitions. [2021-11-20 05:32:07,652 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-11-20 05:32:07,652 INFO L276 IsEmpty]: Start isEmpty. Operand 144 states and 183 transitions. [2021-11-20 05:32:07,653 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2021-11-20 05:32:07,653 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:32:07,654 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:32:07,654 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-20 05:32:07,654 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:32:07,655 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:32:07,655 INFO L85 PathProgramCache]: Analyzing trace with hash 1735817939, now seen corresponding path program 1 times [2021-11-20 05:32:07,655 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:32:07,655 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1374733060] [2021-11-20 05:32:07,656 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:32:07,656 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:32:07,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:07,737 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 05:32:07,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:07,753 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-20 05:32:07,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:07,791 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2021-11-20 05:32:07,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:07,795 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 05:32:07,795 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:32:07,795 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1374733060] [2021-11-20 05:32:07,795 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1374733060] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:32:07,796 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:32:07,796 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 05:32:07,796 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [385901093] [2021-11-20 05:32:07,796 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:32:07,799 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 05:32:07,799 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:32:07,800 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 05:32:07,801 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-20 05:32:07,801 INFO L87 Difference]: Start difference. First operand 144 states and 183 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2021-11-20 05:32:07,999 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:32:08,001 INFO L93 Difference]: Finished difference Result 293 states and 383 transitions. [2021-11-20 05:32:08,001 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 05:32:08,002 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 51 [2021-11-20 05:32:08,002 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:32:08,007 INFO L225 Difference]: With dead ends: 293 [2021-11-20 05:32:08,007 INFO L226 Difference]: Without dead ends: 157 [2021-11-20 05:32:08,008 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=34, Invalid=56, Unknown=0, NotChecked=0, Total=90 [2021-11-20 05:32:08,009 INFO L933 BasicCegarLoop]: 94 mSDtfsCounter, 137 mSDsluCounter, 204 mSDsCounter, 0 mSdLazyCounter, 88 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 140 SdHoareTripleChecker+Valid, 298 SdHoareTripleChecker+Invalid, 123 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 88 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 05:32:08,010 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [140 Valid, 298 Invalid, 123 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 88 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 05:32:08,011 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 157 states. [2021-11-20 05:32:08,025 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 157 to 146. [2021-11-20 05:32:08,025 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 146 states, 114 states have (on average 1.280701754385965) internal successors, (146), 121 states have internal predecessors, (146), 16 states have call successors, (16), 12 states have call predecessors, (16), 15 states have return successors, (23), 17 states have call predecessors, (23), 16 states have call successors, (23) [2021-11-20 05:32:08,027 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 146 states to 146 states and 185 transitions. [2021-11-20 05:32:08,027 INFO L78 Accepts]: Start accepts. Automaton has 146 states and 185 transitions. Word has length 51 [2021-11-20 05:32:08,027 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:32:08,028 INFO L470 AbstractCegarLoop]: Abstraction has 146 states and 185 transitions. [2021-11-20 05:32:08,028 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2021-11-20 05:32:08,028 INFO L276 IsEmpty]: Start isEmpty. Operand 146 states and 185 transitions. [2021-11-20 05:32:08,029 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2021-11-20 05:32:08,029 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:32:08,029 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:32:08,029 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-20 05:32:08,030 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:32:08,030 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:32:08,030 INFO L85 PathProgramCache]: Analyzing trace with hash -2136447531, now seen corresponding path program 1 times [2021-11-20 05:32:08,030 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:32:08,030 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1330400371] [2021-11-20 05:32:08,030 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:32:08,031 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:32:08,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:08,070 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 05:32:08,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:08,077 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-20 05:32:08,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:08,092 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2021-11-20 05:32:08,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:08,096 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 05:32:08,096 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:32:08,096 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1330400371] [2021-11-20 05:32:08,097 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1330400371] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:32:08,097 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:32:08,097 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-20 05:32:08,097 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [605563436] [2021-11-20 05:32:08,097 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:32:08,098 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 05:32:08,098 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:32:08,098 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 05:32:08,098 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 05:32:08,099 INFO L87 Difference]: Start difference. First operand 146 states and 185 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-11-20 05:32:08,329 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:32:08,329 INFO L93 Difference]: Finished difference Result 421 states and 552 transitions. [2021-11-20 05:32:08,329 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 05:32:08,330 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2021-11-20 05:32:08,330 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:32:08,337 INFO L225 Difference]: With dead ends: 421 [2021-11-20 05:32:08,337 INFO L226 Difference]: Without dead ends: 283 [2021-11-20 05:32:08,338 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-11-20 05:32:08,361 INFO L933 BasicCegarLoop]: 145 mSDtfsCounter, 208 mSDsluCounter, 170 mSDsCounter, 0 mSdLazyCounter, 144 mSolverCounterSat, 61 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 215 SdHoareTripleChecker+Valid, 315 SdHoareTripleChecker+Invalid, 205 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 61 IncrementalHoareTripleChecker+Valid, 144 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 05:32:08,362 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [215 Valid, 315 Invalid, 205 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [61 Valid, 144 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 05:32:08,367 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 283 states. [2021-11-20 05:32:08,412 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 283 to 275. [2021-11-20 05:32:08,417 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 275 states, 211 states have (on average 1.2559241706161137) internal successors, (265), 222 states have internal predecessors, (265), 34 states have call successors, (34), 28 states have call predecessors, (34), 29 states have return successors, (53), 34 states have call predecessors, (53), 34 states have call successors, (53) [2021-11-20 05:32:08,421 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 275 states to 275 states and 352 transitions. [2021-11-20 05:32:08,421 INFO L78 Accepts]: Start accepts. Automaton has 275 states and 352 transitions. Word has length 51 [2021-11-20 05:32:08,423 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:32:08,424 INFO L470 AbstractCegarLoop]: Abstraction has 275 states and 352 transitions. [2021-11-20 05:32:08,424 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-11-20 05:32:08,426 INFO L276 IsEmpty]: Start isEmpty. Operand 275 states and 352 transitions. [2021-11-20 05:32:08,428 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2021-11-20 05:32:08,428 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:32:08,428 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:32:08,428 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-20 05:32:08,429 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:32:08,429 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:32:08,429 INFO L85 PathProgramCache]: Analyzing trace with hash -1858186128, now seen corresponding path program 1 times [2021-11-20 05:32:08,430 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:32:08,430 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1205052921] [2021-11-20 05:32:08,430 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:32:08,430 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:32:08,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:08,514 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 05:32:08,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:08,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-20 05:32:08,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:08,532 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 05:32:08,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:08,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-11-20 05:32:08,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:08,562 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-11-20 05:32:08,563 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:32:08,564 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1205052921] [2021-11-20 05:32:08,564 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1205052921] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:32:08,564 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:32:08,564 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-20 05:32:08,564 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1119533298] [2021-11-20 05:32:08,564 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:32:08,565 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-20 05:32:08,565 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:32:08,566 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-20 05:32:08,566 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-20 05:32:08,566 INFO L87 Difference]: Start difference. First operand 275 states and 352 transitions. Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2021-11-20 05:32:08,847 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:32:08,847 INFO L93 Difference]: Finished difference Result 558 states and 727 transitions. [2021-11-20 05:32:08,848 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-11-20 05:32:08,852 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) Word has length 53 [2021-11-20 05:32:08,853 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:32:08,857 INFO L225 Difference]: With dead ends: 558 [2021-11-20 05:32:08,857 INFO L226 Difference]: Without dead ends: 291 [2021-11-20 05:32:08,859 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2021-11-20 05:32:08,860 INFO L933 BasicCegarLoop]: 94 mSDtfsCounter, 105 mSDsluCounter, 334 mSDsCounter, 0 mSdLazyCounter, 189 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 111 SdHoareTripleChecker+Valid, 428 SdHoareTripleChecker+Invalid, 221 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 189 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 05:32:08,861 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [111 Valid, 428 Invalid, 221 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 189 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 05:32:08,867 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 291 states. [2021-11-20 05:32:08,900 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 291 to 271. [2021-11-20 05:32:08,901 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 271 states, 207 states have (on average 1.2222222222222223) internal successors, (253), 218 states have internal predecessors, (253), 34 states have call successors, (34), 28 states have call predecessors, (34), 29 states have return successors, (53), 34 states have call predecessors, (53), 34 states have call successors, (53) [2021-11-20 05:32:08,903 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 271 states to 271 states and 340 transitions. [2021-11-20 05:32:08,904 INFO L78 Accepts]: Start accepts. Automaton has 271 states and 340 transitions. Word has length 53 [2021-11-20 05:32:08,904 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:32:08,907 INFO L470 AbstractCegarLoop]: Abstraction has 271 states and 340 transitions. [2021-11-20 05:32:08,907 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2021-11-20 05:32:08,907 INFO L276 IsEmpty]: Start isEmpty. Operand 271 states and 340 transitions. [2021-11-20 05:32:08,909 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-11-20 05:32:08,909 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:32:08,909 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:32:08,910 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-11-20 05:32:08,910 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:32:08,910 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:32:08,911 INFO L85 PathProgramCache]: Analyzing trace with hash -2030829189, now seen corresponding path program 1 times [2021-11-20 05:32:08,911 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:32:08,911 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [702982417] [2021-11-20 05:32:08,911 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:32:08,911 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:32:08,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:09,022 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 05:32:09,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:09,049 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-20 05:32:09,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:09,060 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-11-20 05:32:09,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:09,078 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2021-11-20 05:32:09,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:09,081 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 05:32:09,082 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:32:09,082 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [702982417] [2021-11-20 05:32:09,082 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [702982417] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:32:09,082 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:32:09,083 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-11-20 05:32:09,083 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1487649364] [2021-11-20 05:32:09,083 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:32:09,084 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-11-20 05:32:09,084 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:32:09,084 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-11-20 05:32:09,085 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2021-11-20 05:32:09,085 INFO L87 Difference]: Start difference. First operand 271 states and 340 transitions. Second operand has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-11-20 05:32:10,071 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:32:10,071 INFO L93 Difference]: Finished difference Result 858 states and 1130 transitions. [2021-11-20 05:32:10,072 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2021-11-20 05:32:10,072 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 55 [2021-11-20 05:32:10,073 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:32:10,079 INFO L225 Difference]: With dead ends: 858 [2021-11-20 05:32:10,079 INFO L226 Difference]: Without dead ends: 645 [2021-11-20 05:32:10,081 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 43 GetRequests, 10 SyntacticMatches, 1 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 262 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=215, Invalid=907, Unknown=0, NotChecked=0, Total=1122 [2021-11-20 05:32:10,084 INFO L933 BasicCegarLoop]: 160 mSDtfsCounter, 468 mSDsluCounter, 690 mSDsCounter, 0 mSdLazyCounter, 718 mSolverCounterSat, 176 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 475 SdHoareTripleChecker+Valid, 850 SdHoareTripleChecker+Invalid, 894 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 176 IncrementalHoareTripleChecker+Valid, 718 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2021-11-20 05:32:10,084 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [475 Valid, 850 Invalid, 894 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [176 Valid, 718 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2021-11-20 05:32:10,087 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 645 states. [2021-11-20 05:32:10,135 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 645 to 524. [2021-11-20 05:32:10,136 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 524 states, 401 states have (on average 1.2194513715710724) internal successors, (489), 425 states have internal predecessors, (489), 65 states have call successors, (65), 49 states have call predecessors, (65), 57 states have return successors, (104), 67 states have call predecessors, (104), 65 states have call successors, (104) [2021-11-20 05:32:10,141 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 524 states to 524 states and 658 transitions. [2021-11-20 05:32:10,142 INFO L78 Accepts]: Start accepts. Automaton has 524 states and 658 transitions. Word has length 55 [2021-11-20 05:32:10,142 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:32:10,142 INFO L470 AbstractCegarLoop]: Abstraction has 524 states and 658 transitions. [2021-11-20 05:32:10,143 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-11-20 05:32:10,143 INFO L276 IsEmpty]: Start isEmpty. Operand 524 states and 658 transitions. [2021-11-20 05:32:10,144 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2021-11-20 05:32:10,145 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:32:10,145 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:32:10,145 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-11-20 05:32:10,145 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:32:10,146 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:32:10,146 INFO L85 PathProgramCache]: Analyzing trace with hash 309041265, now seen corresponding path program 1 times [2021-11-20 05:32:10,146 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:32:10,146 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1663732945] [2021-11-20 05:32:10,147 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:32:10,147 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:32:10,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:10,211 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 05:32:10,212 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:10,224 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 05:32:10,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:10,242 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 05:32:10,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:10,251 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-11-20 05:32:10,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:10,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2021-11-20 05:32:10,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:10,279 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2021-11-20 05:32:10,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:10,283 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 05:32:10,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:10,286 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2021-11-20 05:32:10,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:10,290 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 8 proven. 18 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2021-11-20 05:32:10,291 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:32:10,291 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1663732945] [2021-11-20 05:32:10,291 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1663732945] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 05:32:10,291 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [980510417] [2021-11-20 05:32:10,291 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:32:10,292 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 05:32:10,292 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 05:32:10,307 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 05:32:10,328 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-20 05:32:10,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:10,442 INFO L263 TraceCheckSpWp]: Trace formula consists of 466 conjuncts, 8 conjunts are in the unsatisfiable core [2021-11-20 05:32:10,452 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 05:32:10,837 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 24 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 05:32:10,837 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 05:32:11,155 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 18 proven. 8 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2021-11-20 05:32:11,156 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [980510417] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-20 05:32:11,156 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-20 05:32:11,156 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2021-11-20 05:32:11,156 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [768494285] [2021-11-20 05:32:11,157 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-20 05:32:11,157 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-11-20 05:32:11,157 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:32:11,158 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-11-20 05:32:11,158 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2021-11-20 05:32:11,159 INFO L87 Difference]: Start difference. First operand 524 states and 658 transitions. Second operand has 15 states, 15 states have (on average 8.6) internal successors, (129), 10 states have internal predecessors, (129), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (17), 8 states have call predecessors, (17), 6 states have call successors, (17) [2021-11-20 05:32:12,291 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:32:12,292 INFO L93 Difference]: Finished difference Result 1125 states and 1452 transitions. [2021-11-20 05:32:12,292 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2021-11-20 05:32:12,292 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 8.6) internal successors, (129), 10 states have internal predecessors, (129), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (17), 8 states have call predecessors, (17), 6 states have call successors, (17) Word has length 94 [2021-11-20 05:32:12,293 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:32:12,297 INFO L225 Difference]: With dead ends: 1125 [2021-11-20 05:32:12,298 INFO L226 Difference]: Without dead ends: 657 [2021-11-20 05:32:12,301 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 254 GetRequests, 211 SyntacticMatches, 1 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 446 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=438, Invalid=1454, Unknown=0, NotChecked=0, Total=1892 [2021-11-20 05:32:12,302 INFO L933 BasicCegarLoop]: 208 mSDtfsCounter, 455 mSDsluCounter, 948 mSDsCounter, 0 mSdLazyCounter, 824 mSolverCounterSat, 239 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 458 SdHoareTripleChecker+Valid, 1156 SdHoareTripleChecker+Invalid, 1063 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 239 IncrementalHoareTripleChecker+Valid, 824 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2021-11-20 05:32:12,303 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [458 Valid, 1156 Invalid, 1063 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [239 Valid, 824 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2021-11-20 05:32:12,304 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 657 states. [2021-11-20 05:32:12,345 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 657 to 585. [2021-11-20 05:32:12,346 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 585 states, 441 states have (on average 1.2086167800453516) internal successors, (533), 473 states have internal predecessors, (533), 75 states have call successors, (75), 63 states have call predecessors, (75), 68 states have return successors, (100), 70 states have call predecessors, (100), 75 states have call successors, (100) [2021-11-20 05:32:12,351 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 585 states to 585 states and 708 transitions. [2021-11-20 05:32:12,352 INFO L78 Accepts]: Start accepts. Automaton has 585 states and 708 transitions. Word has length 94 [2021-11-20 05:32:12,352 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:32:12,352 INFO L470 AbstractCegarLoop]: Abstraction has 585 states and 708 transitions. [2021-11-20 05:32:12,353 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 8.6) internal successors, (129), 10 states have internal predecessors, (129), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (17), 8 states have call predecessors, (17), 6 states have call successors, (17) [2021-11-20 05:32:12,353 INFO L276 IsEmpty]: Start isEmpty. Operand 585 states and 708 transitions. [2021-11-20 05:32:12,357 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 165 [2021-11-20 05:32:12,357 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:32:12,357 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:32:12,397 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-11-20 05:32:12,580 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-11-20 05:32:12,581 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:32:12,581 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:32:12,582 INFO L85 PathProgramCache]: Analyzing trace with hash -360814269, now seen corresponding path program 1 times [2021-11-20 05:32:12,582 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:32:12,582 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1447674683] [2021-11-20 05:32:12,582 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:32:12,582 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:32:12,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:12,657 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 05:32:12,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:12,672 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 05:32:12,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:12,683 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 05:32:12,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:12,690 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-11-20 05:32:12,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:12,695 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2021-11-20 05:32:12,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:12,711 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 05:32:12,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:12,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-11-20 05:32:12,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:12,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 05:32:12,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:12,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2021-11-20 05:32:12,729 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:12,793 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 05:32:12,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:12,796 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 131 [2021-11-20 05:32:12,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:12,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 140 [2021-11-20 05:32:12,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:12,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 156 [2021-11-20 05:32:12,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:12,812 INFO L134 CoverageAnalysis]: Checked inductivity of 184 backedges. 78 proven. 0 refuted. 0 times theorem prover too weak. 106 trivial. 0 not checked. [2021-11-20 05:32:12,812 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:32:12,812 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1447674683] [2021-11-20 05:32:12,812 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1447674683] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:32:12,812 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:32:12,813 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-11-20 05:32:12,813 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1636963809] [2021-11-20 05:32:12,813 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:32:12,814 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-11-20 05:32:12,814 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:32:12,815 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-11-20 05:32:12,815 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2021-11-20 05:32:12,815 INFO L87 Difference]: Start difference. First operand 585 states and 708 transitions. Second operand has 10 states, 10 states have (on average 8.5) internal successors, (85), 7 states have internal predecessors, (85), 3 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2021-11-20 05:32:13,466 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:32:13,466 INFO L93 Difference]: Finished difference Result 1594 states and 1958 transitions. [2021-11-20 05:32:13,466 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2021-11-20 05:32:13,467 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 8.5) internal successors, (85), 7 states have internal predecessors, (85), 3 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) Word has length 164 [2021-11-20 05:32:13,468 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:32:13,476 INFO L225 Difference]: With dead ends: 1594 [2021-11-20 05:32:13,476 INFO L226 Difference]: Without dead ends: 1017 [2021-11-20 05:32:13,480 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 64 GetRequests, 34 SyntacticMatches, 0 SemanticMatches, 30 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 207 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=211, Invalid=781, Unknown=0, NotChecked=0, Total=992 [2021-11-20 05:32:13,481 INFO L933 BasicCegarLoop]: 175 mSDtfsCounter, 409 mSDsluCounter, 506 mSDsCounter, 0 mSdLazyCounter, 606 mSolverCounterSat, 143 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 413 SdHoareTripleChecker+Valid, 681 SdHoareTripleChecker+Invalid, 749 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 143 IncrementalHoareTripleChecker+Valid, 606 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-11-20 05:32:13,481 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [413 Valid, 681 Invalid, 749 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [143 Valid, 606 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-11-20 05:32:13,483 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1017 states. [2021-11-20 05:32:13,575 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1017 to 1002. [2021-11-20 05:32:13,577 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1002 states, 759 states have (on average 1.1712779973649539) internal successors, (889), 805 states have internal predecessors, (889), 128 states have call successors, (128), 111 states have call predecessors, (128), 114 states have return successors, (164), 116 states have call predecessors, (164), 128 states have call successors, (164) [2021-11-20 05:32:13,584 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1002 states to 1002 states and 1181 transitions. [2021-11-20 05:32:13,585 INFO L78 Accepts]: Start accepts. Automaton has 1002 states and 1181 transitions. Word has length 164 [2021-11-20 05:32:13,585 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:32:13,586 INFO L470 AbstractCegarLoop]: Abstraction has 1002 states and 1181 transitions. [2021-11-20 05:32:13,586 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 8.5) internal successors, (85), 7 states have internal predecessors, (85), 3 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2021-11-20 05:32:13,586 INFO L276 IsEmpty]: Start isEmpty. Operand 1002 states and 1181 transitions. [2021-11-20 05:32:13,592 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 173 [2021-11-20 05:32:13,593 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:32:13,595 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:32:13,596 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-11-20 05:32:13,596 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:32:13,596 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:32:13,596 INFO L85 PathProgramCache]: Analyzing trace with hash 1054333355, now seen corresponding path program 1 times [2021-11-20 05:32:13,597 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:32:13,597 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1010635086] [2021-11-20 05:32:13,597 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:32:13,597 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:32:13,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:13,670 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 05:32:13,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:13,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 05:32:13,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:13,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 05:32:13,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:13,707 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-11-20 05:32:13,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:13,711 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2021-11-20 05:32:13,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:13,766 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 05:32:13,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:13,770 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-11-20 05:32:13,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:13,773 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 05:32:13,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:13,784 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-11-20 05:32:13,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:13,787 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2021-11-20 05:32:13,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:13,795 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 05:32:13,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:13,798 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2021-11-20 05:32:13,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:13,801 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 139 [2021-11-20 05:32:13,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:13,803 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 148 [2021-11-20 05:32:13,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:13,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2021-11-20 05:32:13,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:13,812 INFO L134 CoverageAnalysis]: Checked inductivity of 188 backedges. 88 proven. 28 refuted. 0 times theorem prover too weak. 72 trivial. 0 not checked. [2021-11-20 05:32:13,812 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:32:13,812 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1010635086] [2021-11-20 05:32:13,813 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1010635086] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 05:32:13,813 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1640664430] [2021-11-20 05:32:13,813 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:32:13,813 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 05:32:13,814 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 05:32:13,815 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 05:32:13,842 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-11-20 05:32:13,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:32:13,956 INFO L263 TraceCheckSpWp]: Trace formula consists of 672 conjuncts, 13 conjunts are in the unsatisfiable core [2021-11-20 05:32:13,968 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 05:32:14,481 INFO L134 CoverageAnalysis]: Checked inductivity of 188 backedges. 138 proven. 4 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2021-11-20 05:32:14,481 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 05:32:15,220 INFO L134 CoverageAnalysis]: Checked inductivity of 188 backedges. 78 proven. 42 refuted. 0 times theorem prover too weak. 68 trivial. 0 not checked. [2021-11-20 05:32:15,221 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1640664430] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-20 05:32:15,221 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-20 05:32:15,221 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 10, 11] total 26 [2021-11-20 05:32:15,221 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [465206683] [2021-11-20 05:32:15,222 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-20 05:32:15,223 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2021-11-20 05:32:15,223 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:32:15,223 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2021-11-20 05:32:15,224 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=123, Invalid=527, Unknown=0, NotChecked=0, Total=650 [2021-11-20 05:32:15,224 INFO L87 Difference]: Start difference. First operand 1002 states and 1181 transitions. Second operand has 26 states, 26 states have (on average 7.961538461538462) internal successors, (207), 22 states have internal predecessors, (207), 10 states have call successors, (34), 9 states have call predecessors, (34), 9 states have return successors, (31), 9 states have call predecessors, (31), 10 states have call successors, (31) [2021-11-20 05:32:16,553 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:32:16,553 INFO L93 Difference]: Finished difference Result 2105 states and 2551 transitions. [2021-11-20 05:32:16,553 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2021-11-20 05:32:16,554 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 7.961538461538462) internal successors, (207), 22 states have internal predecessors, (207), 10 states have call successors, (34), 9 states have call predecessors, (34), 9 states have return successors, (31), 9 states have call predecessors, (31), 10 states have call successors, (31) Word has length 172 [2021-11-20 05:32:16,554 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:32:16,555 INFO L225 Difference]: With dead ends: 2105 [2021-11-20 05:32:16,555 INFO L226 Difference]: Without dead ends: 0 [2021-11-20 05:32:16,563 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 420 GetRequests, 367 SyntacticMatches, 3 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 503 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=549, Invalid=2103, Unknown=0, NotChecked=0, Total=2652 [2021-11-20 05:32:16,563 INFO L933 BasicCegarLoop]: 124 mSDtfsCounter, 576 mSDsluCounter, 390 mSDsCounter, 0 mSdLazyCounter, 1315 mSolverCounterSat, 219 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 579 SdHoareTripleChecker+Valid, 514 SdHoareTripleChecker+Invalid, 1534 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 219 IncrementalHoareTripleChecker+Valid, 1315 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2021-11-20 05:32:16,564 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [579 Valid, 514 Invalid, 1534 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [219 Valid, 1315 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2021-11-20 05:32:16,564 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-11-20 05:32:16,565 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-11-20 05:32:16,565 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-20 05:32:16,565 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-11-20 05:32:16,565 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 172 [2021-11-20 05:32:16,565 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:32:16,566 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-11-20 05:32:16,566 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 7.961538461538462) internal successors, (207), 22 states have internal predecessors, (207), 10 states have call successors, (34), 9 states have call predecessors, (34), 9 states have return successors, (31), 9 states have call predecessors, (31), 10 states have call successors, (31) [2021-11-20 05:32:16,566 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-11-20 05:32:16,566 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-11-20 05:32:16,569 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-20 05:32:16,610 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-11-20 05:32:16,791 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 05:32:16,793 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-11-20 05:32:27,470 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 346 352) no Hoare annotation was computed. [2021-11-20 05:32:27,471 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 346 352) the Hoare annotation is: true [2021-11-20 05:32:27,471 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 83 94) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~pumpRunning~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or (not (< 1 ~waterLevel~0)) .cse0 .cse1 .cse2 .cse3) (or (not (= |old(~methaneLevelCritical~0)| 0)) .cse0 .cse1 .cse2 (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 .cse3))) [2021-11-20 05:32:27,471 INFO L858 garLoopResultBuilder]: For program point L87-1(lines 83 94) no Hoare annotation was computed. [2021-11-20 05:32:27,471 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2021-11-20 05:32:27,471 INFO L858 garLoopResultBuilder]: For program point L184(lines 184 194) no Hoare annotation was computed. [2021-11-20 05:32:27,471 INFO L858 garLoopResultBuilder]: For program point L180(lines 180 197) no Hoare annotation was computed. [2021-11-20 05:32:27,472 INFO L854 garLoopResultBuilder]: At program point L180-1(lines 172 200) the Hoare annotation is: (let ((.cse16 (= ~methaneLevelCritical~0 0))) (let ((.cse25 (<= 1 ~pumpRunning~0)) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse17 (= ~pumpRunning~0 0)) (.cse7 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse8 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse9 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse26 (<= ~waterLevel~0 1)) (.cse10 (= 1 ~systemActive~0)) (.cse4 (not .cse16)) (.cse27 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse11 (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0)) (.cse13 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse19 (= ~waterLevel~0 1)) (.cse15 (and .cse6 .cse17 .cse7 .cse8 .cse9 .cse26 .cse10 .cse4 .cse27 .cse11 .cse13)) (.cse22 (not (= |old(~waterLevel~0)| 1))) (.cse2 (and .cse25 .cse5 .cse6 .cse7 .cse8 .cse16 .cse9 .cse26 .cse10 .cse27 .cse11 .cse13)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse14 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse21 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse10)) (.cse18 (not (< 1 |old(~waterLevel~0)|))) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse20 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (and .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) .cse14) (or .cse15 .cse0 .cse16 .cse1 .cse3 (and .cse6 .cse17 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) .cse14) (or .cse1 .cse3 .cse18 .cse4 (and .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse19 .cse13) .cse20) (or .cse0 .cse21 .cse1 (and .cse17 .cse7 .cse8 .cse12)) (or .cse16 .cse1 .cse3 .cse18 (and .cse6 .cse17 .cse7 .cse8 .cse9 .cse10 .cse11 .cse19 .cse13) .cse20) (or .cse15 .cse22 .cse16 .cse1 .cse3 .cse14) (or .cse22 .cse1 .cse2 .cse3 .cse4 .cse14) (let ((.cse23 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse24 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2))) (or (and .cse17 .cse23 .cse12 .cse24) .cse21 .cse1 .cse18 (and .cse25 .cse23 .cse12 .cse24) .cse20)))))) [2021-11-20 05:32:27,472 INFO L854 garLoopResultBuilder]: At program point L399(line 399) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse4 (not (<= |old(~waterLevel~0)| 1))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 (not (= |old(~waterLevel~0)| 2))) (or .cse2 .cse3 (not (< 1 |old(~waterLevel~0)|)) (not (<= |old(~waterLevel~0)| 2))) (or .cse4 .cse0 .cse1 .cse2) (or .cse4 .cse2 .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2021-11-20 05:32:27,473 INFO L854 garLoopResultBuilder]: At program point L399-1(lines 380 404) the Hoare annotation is: (let ((.cse6 (= ~methaneLevelCritical~0 0))) (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse20 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse15 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse16 (= ~pumpRunning~0 0)) (.cse17 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse22 (<= ~waterLevel~0 1)) (.cse21 (= 1 ~systemActive~0)) (.cse11 (not .cse6)) (.cse23 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse18 (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0)) (.cse19 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse9 (not (= |old(~waterLevel~0)| 2))) (.cse10 (not (= |old(~waterLevel~0)| 1))) (.cse8 (and .cse15 .cse16 .cse17 .cse22 .cse21 .cse11 .cse23 .cse18 .cse19)) (.cse14 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse16 .cse4)) (.cse12 (and .cse3 .cse20 .cse15 .cse6 .cse17 .cse22 .cse21 .cse23 .cse18 .cse19)) (.cse13 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not .cse21)) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4) .cse5) (or .cse6 .cse2 .cse7 .cse8 .cse9) (or .cse10 .cse2 .cse7 .cse11 .cse12 .cse13) (or .cse2 .cse7 .cse11 .cse12 .cse9) (or .cse10 .cse6 .cse2 .cse7 .cse8 .cse13) (or .cse14 .cse6 .cse2 .cse7 .cse8 (and .cse15 .cse16 .cse17 .cse18 .cse4 .cse19) .cse13) (or .cse14 .cse0 .cse1 .cse2) (or .cse2 .cse7 .cse11 .cse12 .cse5 .cse13 (and .cse20 .cse15 .cse17 .cse18 .cse4 .cse19)) (or .cse2 .cse7 (not (< 1 |old(~waterLevel~0)|)) (= ~waterLevel~0 1) .cse5))))) [2021-11-20 05:32:27,473 INFO L854 garLoopResultBuilder]: At program point L428(lines 421 431) the Hoare annotation is: (let ((.cse5 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse8 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse4 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse7 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5 .cse6) .cse7 (and .cse2 .cse3 .cse4 (= |old(~waterLevel~0)| ~waterLevel~0) .cse6) .cse8) (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse5 .cse8) (or .cse0 (and .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse6) .cse1 (not (< 1 |old(~waterLevel~0)|)) .cse7) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse7))) [2021-11-20 05:32:27,473 INFO L858 garLoopResultBuilder]: For program point L333-1(lines 333 339) no Hoare annotation was computed. [2021-11-20 05:32:27,473 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 319 345) no Hoare annotation was computed. [2021-11-20 05:32:27,473 INFO L858 garLoopResultBuilder]: For program point L185(lines 185 191) no Hoare annotation was computed. [2021-11-20 05:32:27,473 INFO L858 garLoopResultBuilder]: For program point L309(line 309) no Hoare annotation was computed. [2021-11-20 05:32:27,474 INFO L854 garLoopResultBuilder]: At program point L169(lines 162 171) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) .cse1 (not (<= |old(~waterLevel~0)| 2))) (or (not (<= |old(~waterLevel~0)| 1)) .cse2 .cse1 .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse2 .cse1 .cse3 (not (= |old(~waterLevel~0)| 2)))))) [2021-11-20 05:32:27,474 INFO L858 garLoopResultBuilder]: For program point L326(lines 326 332) no Hoare annotation was computed. [2021-11-20 05:32:27,474 INFO L858 garLoopResultBuilder]: For program point L326-2(lines 322 344) no Hoare annotation was computed. [2021-11-20 05:32:27,474 INFO L858 garLoopResultBuilder]: For program point L388(lines 388 396) no Hoare annotation was computed. [2021-11-20 05:32:27,474 INFO L854 garLoopResultBuilder]: At program point L132(lines 127 135) the Hoare annotation is: (let ((.cse21 (= ~methaneLevelCritical~0 0))) (let ((.cse0 (= ~pumpRunning~0 0)) (.cse10 (not .cse21)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse13 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse14 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse15 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse24 (<= ~waterLevel~0 1)) (.cse23 (= 1 ~systemActive~0)) (.cse25 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse16 (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0)) (.cse17 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse20 (not (= |old(~waterLevel~0)| 1))) (.cse11 (and .cse6 .cse12 .cse13 .cse14 .cse21 .cse15 .cse24 .cse23 .cse25 .cse16 .cse17)) (.cse22 (and .cse13 .cse0 .cse14 .cse15 .cse24 .cse23 .cse10 .cse25 .cse16 .cse17)) (.cse18 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (< 1 |old(~waterLevel~0)|))) (.cse19 (= ~waterLevel~0 1)) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse8 (not (<= |old(~waterLevel~0)| 1))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not .cse23)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (let ((.cse1 (= 2 |timeShift_getWaterLevel_#res#1|))) (or (and .cse0 .cse1 .cse2) .cse3 .cse4 .cse5 (and .cse6 .cse1 .cse2) .cse7)) (or .cse8 .cse4 .cse9 .cse10 .cse11 (and .cse12 .cse13 .cse14 .cse15 .cse16 .cse2 .cse17) .cse18) (or .cse4 .cse9 .cse5 .cse10 (and .cse12 .cse13 .cse14 .cse15 .cse16 .cse19 .cse17) .cse7) (or .cse20 .cse21 .cse4 .cse9 .cse22 .cse18) (or .cse20 .cse4 .cse9 .cse10 .cse11 .cse18) (or .cse8 .cse21 .cse4 .cse9 .cse22 (and .cse13 .cse0 .cse14 .cse15 .cse16 .cse2 .cse17) .cse18) (or .cse21 .cse4 .cse9 .cse5 (and .cse13 .cse0 .cse14 .cse15 .cse16 .cse19 .cse17) .cse7) (or .cse8 .cse3 .cse4 (and .cse0 .cse14 .cse2)))))) [2021-11-20 05:32:27,474 INFO L858 garLoopResultBuilder]: For program point L384(lines 384 401) no Hoare annotation was computed. [2021-11-20 05:32:27,475 INFO L854 garLoopResultBuilder]: At program point L182(line 182) the Hoare annotation is: (let ((.cse0 (= ~methaneLevelCritical~0 0))) (let ((.cse6 (= ~pumpRunning~0 0)) (.cse22 (= 1 ~systemActive~0)) (.cse18 (not .cse0)) (.cse19 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse7 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse8 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse9 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse23 (<= ~waterLevel~0 1)) (.cse24 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse10 (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0)) (.cse12 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse17 (not (= |old(~pumpRunning~0)| 0))) (.cse14 (not (<= |old(~waterLevel~0)| 1))) (.cse15 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse20 (and .cse19 .cse5 .cse7 .cse8 .cse9 .cse23 .cse24 .cse10 .cse12)) (.cse13 (and .cse5 .cse6 .cse7 .cse8 .cse9 .cse23 .cse22 .cse18 .cse24 .cse10 .cse12)) (.cse21 (not (= |old(~waterLevel~0)| 1))) (.cse16 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse1 (not .cse22)) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (< 1 |old(~waterLevel~0)|))) (.cse11 (= ~waterLevel~0 1)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (and .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12)) (or .cse13 .cse14 .cse0 .cse1 .cse2 (and .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse15 .cse12) .cse16) (or .cse17 .cse1 .cse3 .cse4) (or .cse14 .cse17 .cse1 (and .cse6 .cse7 .cse8 .cse15)) (or .cse14 .cse1 .cse2 .cse18 (and .cse19 .cse5 .cse7 .cse8 .cse9 .cse10 .cse15 .cse12) .cse20 .cse16) (or .cse21 .cse1 .cse2 .cse18 .cse20 .cse16) (or .cse13 .cse21 .cse0 .cse1 .cse2 .cse16) (or .cse1 .cse2 .cse3 .cse18 (and .cse19 .cse5 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12) .cse4))))) [2021-11-20 05:32:27,475 INFO L854 garLoopResultBuilder]: At program point L310(lines 305 312) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) .cse2) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse2))) [2021-11-20 05:32:27,475 INFO L858 garLoopResultBuilder]: For program point L182-1(line 182) no Hoare annotation was computed. [2021-11-20 05:32:27,475 INFO L854 garLoopResultBuilder]: At program point L100(lines 95 103) the Hoare annotation is: (let ((.cse10 (= ~methaneLevelCritical~0 0))) (let ((.cse7 (not .cse10)) (.cse14 (<= 1 ~pumpRunning~0)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse15 (<= ~waterLevel~0 1)) (.cse13 (= 1 ~systemActive~0)) (.cse16 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse6 (not (= |old(~waterLevel~0)| 1))) (.cse8 (and .cse14 .cse2 .cse10 .cse3 .cse15 .cse13 .cse16 .cse4)) (.cse12 (and .cse2 .cse3 (= |old(~waterLevel~0)| ~waterLevel~0) .cse4)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (and .cse14 .cse2 .cse3 .cse15 .cse13 .cse7 .cse16 .cse4)) (.cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not .cse13)) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) (and .cse2 .cse3 (= ~waterLevel~0 1) .cse4) .cse5) (or .cse6 .cse0 .cse1 .cse7 .cse8 .cse9) (or .cse6 .cse10 .cse0 .cse1 .cse11 .cse9) (or (not (<= |old(~waterLevel~0)| 1)) .cse12 .cse0 .cse1 .cse7 .cse8 .cse9) (or .cse12 .cse10 .cse0 .cse1 .cse11 .cse5 .cse9) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse5))))) [2021-11-20 05:32:27,475 INFO L854 garLoopResultBuilder]: At program point L418(lines 413 420) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse11 (= 1 ~systemActive~0)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse6 (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0)) (.cse7 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse8 (and .cse2 .cse3 .cse4 (<= ~waterLevel~0 1) .cse11 .cse5 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse6 .cse7)) (.cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not .cse11)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5 .cse6 (= |old(~waterLevel~0)| ~waterLevel~0) .cse7) .cse8 .cse9) (or .cse0 .cse1 .cse8 (not (= |old(~waterLevel~0)| 2))) (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse8 .cse9) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse10) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) (= ~waterLevel~0 1) .cse10)))) [2021-11-20 05:32:27,475 INFO L858 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2021-11-20 05:32:27,475 INFO L854 garLoopResultBuilder]: At program point L63-2(lines 59 70) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 0))) (let ((.cse14 (<= 1 ~pumpRunning~0)) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse13 (= 1 ~systemActive~0)) (.cse9 (not .cse2)) (.cse15 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse11 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse5 (and .cse14 .cse10 .cse13 .cse9 .cse15 .cse11)) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse1 (and .cse10 (= |old(~waterLevel~0)| ~waterLevel~0) .cse11)) (.cse8 (and .cse14 .cse10 .cse2 (<= ~waterLevel~0 1) .cse13 .cse15 .cse11)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse3 (not .cse13)) (.cse12 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse7 .cse3 .cse8 .cse4 .cse9 .cse6) (or .cse7 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse3 .cse4 (not (< 1 |old(~waterLevel~0)|)) (and .cse10 (= ~waterLevel~0 1) .cse11) .cse12) (or .cse0 .cse1 .cse3 .cse8 .cse4 .cse9 .cse6) (or (not (= |old(~pumpRunning~0)| 0)) .cse3 .cse12))))) [2021-11-20 05:32:27,475 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 319 345) the Hoare annotation is: (let ((.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (not (= |old(~pumpRunning~0)| 0)) .cse2 .cse3) (or .cse2 .cse4 (not (< 1 |old(~waterLevel~0)|)) (and .cse5 .cse0 (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse2 .cse4 (and .cse5 .cse0 .cse1) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2021-11-20 05:32:27,476 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 319 345) no Hoare annotation was computed. [2021-11-20 05:32:27,476 INFO L854 garLoopResultBuilder]: At program point L394(line 394) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse10 (= ~methaneLevelCritical~0 0)) (.cse7 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse11 (= 1 ~systemActive~0)) (.cse8 (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0)) (.cse9 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (and (<= 1 ~pumpRunning~0) .cse5 .cse6 .cse10 .cse7 (<= ~waterLevel~0 1) .cse11 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse8 .cse9)) (.cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not .cse11)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (and .cse5 .cse6 .cse7 .cse8 (= |old(~waterLevel~0)| ~waterLevel~0) .cse9)) (or .cse10 .cse0 .cse1 .cse3 .cse4) (or .cse0 .cse1 .cse2 (not (= |old(~waterLevel~0)| 2))) (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse4) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse3) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) (= ~waterLevel~0 1) .cse3)))) [2021-11-20 05:32:27,476 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 309) no Hoare annotation was computed. [2021-11-20 05:32:27,476 INFO L854 garLoopResultBuilder]: At program point L167(line 167) the Hoare annotation is: (let ((.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (not (= |old(~pumpRunning~0)| 0)) .cse2 .cse3) (or .cse2 .cse4 (not (< 1 |old(~waterLevel~0)|)) (and .cse5 .cse0 (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse2 .cse4 (and .cse5 .cse0 .cse1) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2021-11-20 05:32:27,476 INFO L858 garLoopResultBuilder]: For program point L167-1(line 167) no Hoare annotation was computed. [2021-11-20 05:32:27,476 INFO L858 garLoopResultBuilder]: For program point L225(line 225) no Hoare annotation was computed. [2021-11-20 05:32:27,476 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 204 233) no Hoare annotation was computed. [2021-11-20 05:32:27,476 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 204 233) the Hoare annotation is: true [2021-11-20 05:32:27,476 INFO L858 garLoopResultBuilder]: For program point L218(lines 218 222) no Hoare annotation was computed. [2021-11-20 05:32:27,476 INFO L861 garLoopResultBuilder]: At program point L218-1(lines 218 222) the Hoare annotation is: true [2021-11-20 05:32:27,477 INFO L858 garLoopResultBuilder]: For program point L215(line 215) no Hoare annotation was computed. [2021-11-20 05:32:27,477 INFO L861 garLoopResultBuilder]: At program point L214-2(lines 214 228) the Hoare annotation is: true [2021-11-20 05:32:27,477 INFO L861 garLoopResultBuilder]: At program point L210(line 210) the Hoare annotation is: true [2021-11-20 05:32:27,477 INFO L858 garLoopResultBuilder]: For program point L210-1(line 210) no Hoare annotation was computed. [2021-11-20 05:32:27,477 INFO L861 garLoopResultBuilder]: At program point L229(lines 204 233) the Hoare annotation is: true [2021-11-20 05:32:27,477 INFO L858 garLoopResultBuilder]: For program point L291-2(lines 291 298) no Hoare annotation was computed. [2021-11-20 05:32:27,477 INFO L854 garLoopResultBuilder]: At program point L159(lines 154 161) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 05:32:27,477 INFO L858 garLoopResultBuilder]: For program point L543(lines 543 547) no Hoare annotation was computed. [2021-11-20 05:32:27,477 INFO L854 garLoopResultBuilder]: At program point L543-2(lines 537 548) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2))) (or (and .cse0 (< 1 ~waterLevel~0) .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)))) [2021-11-20 05:32:27,477 INFO L861 garLoopResultBuilder]: At program point L275(lines 267 277) the Hoare annotation is: true [2021-11-20 05:32:27,477 INFO L858 garLoopResultBuilder]: For program point L527(lines 527 533) no Hoare annotation was computed. [2021-11-20 05:32:27,477 INFO L858 garLoopResultBuilder]: For program point L527-1(lines 527 533) no Hoare annotation was computed. [2021-11-20 05:32:27,478 INFO L861 garLoopResultBuilder]: At program point L556(lines 497 560) the Hoare annotation is: true [2021-11-20 05:32:27,478 INFO L861 garLoopResultBuilder]: At program point L300(lines 281 303) the Hoare annotation is: true [2021-11-20 05:32:27,478 INFO L854 garLoopResultBuilder]: At program point L263(lines 259 265) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 05:32:27,478 INFO L854 garLoopResultBuilder]: At program point L519(line 519) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3) (and .cse4 (= ~methaneLevelCritical~0 0) .cse5 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 .cse5 .cse2 .cse3))) [2021-11-20 05:32:27,478 INFO L854 garLoopResultBuilder]: At program point L577(lines 573 579) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 05:32:27,478 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-11-20 05:32:27,478 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-11-20 05:32:27,478 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-11-20 05:32:27,478 INFO L854 garLoopResultBuilder]: At program point L553(lines 506 554) the Hoare annotation is: false [2021-11-20 05:32:27,479 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-11-20 05:32:27,479 INFO L858 garLoopResultBuilder]: For program point L508(lines 507 552) no Hoare annotation was computed. [2021-11-20 05:32:27,479 INFO L858 garLoopResultBuilder]: For program point L537(lines 537 548) no Hoare annotation was computed. [2021-11-20 05:32:27,479 INFO L854 garLoopResultBuilder]: At program point L529(line 529) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0 2)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (< 1 ~waterLevel~0) .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3) (and .cse0 (= ~methaneLevelCritical~0 0) (<= ~waterLevel~0 1) .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)))) [2021-11-20 05:32:27,479 INFO L854 garLoopResultBuilder]: At program point L550(lines 507 552) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3) (and .cse4 (= ~methaneLevelCritical~0 0) .cse5 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 .cse5 .cse2 .cse3))) [2021-11-20 05:32:27,479 INFO L858 garLoopResultBuilder]: For program point L517(lines 517 523) no Hoare annotation was computed. [2021-11-20 05:32:27,479 INFO L858 garLoopResultBuilder]: For program point L517-1(lines 517 523) no Hoare annotation was computed. [2021-11-20 05:32:27,479 INFO L858 garLoopResultBuilder]: For program point L509(lines 509 513) no Hoare annotation was computed. [2021-11-20 05:32:27,479 INFO L854 garLoopResultBuilder]: At program point L592(lines 587 595) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 05:32:27,480 INFO L854 garLoopResultBuilder]: At program point L584(lines 580 586) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 05:32:27,480 INFO L858 garLoopResultBuilder]: For program point L291(lines 291 298) no Hoare annotation was computed. [2021-11-20 05:32:27,480 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 354 378) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-11-20 05:32:27,480 INFO L854 garLoopResultBuilder]: At program point L145(lines 136 149) the Hoare annotation is: (let ((.cse2 (not (<= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) .cse2) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 (= ~pumpRunning~0 0) .cse1 (not (<= ~waterLevel~0 2))))) [2021-11-20 05:32:27,480 INFO L854 garLoopResultBuilder]: At program point L368(line 368) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-11-20 05:32:27,481 INFO L854 garLoopResultBuilder]: At program point L492(lines 477 495) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (let ((.cse1 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse1 (= 2 ~waterLevel~0)) (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (not (<= ~waterLevel~0 2)))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-11-20 05:32:27,481 INFO L858 garLoopResultBuilder]: For program point L362(lines 362 370) no Hoare annotation was computed. [2021-11-20 05:32:27,481 INFO L858 garLoopResultBuilder]: For program point L358(lines 358 375) no Hoare annotation was computed. [2021-11-20 05:32:27,481 INFO L858 garLoopResultBuilder]: For program point L486(lines 486 490) no Hoare annotation was computed. [2021-11-20 05:32:27,481 INFO L858 garLoopResultBuilder]: For program point L486-2(lines 486 490) no Hoare annotation was computed. [2021-11-20 05:32:27,481 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 354 378) no Hoare annotation was computed. [2021-11-20 05:32:27,481 INFO L854 garLoopResultBuilder]: At program point L410(lines 405 412) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2))))) [2021-11-20 05:32:27,482 INFO L854 garLoopResultBuilder]: At program point L373(line 373) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-11-20 05:32:27,482 INFO L858 garLoopResultBuilder]: For program point L373-1(lines 354 378) no Hoare annotation was computed. [2021-11-20 05:32:27,482 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 146) no Hoare annotation was computed. [2021-11-20 05:32:27,482 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2021-11-20 05:32:27,482 INFO L858 garLoopResultBuilder]: For program point L75-1(lines 71 82) no Hoare annotation was computed. [2021-11-20 05:32:27,482 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 71 82) the Hoare annotation is: (let ((.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse4 (not (= ~pumpRunning~0 0))) (.cse5 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 ~pumpRunning~0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse2 .cse3) (or .cse5 .cse4 .cse0 .cse3) (or .cse5 .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-11-20 05:32:27,483 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 432 440) no Hoare annotation was computed. [2021-11-20 05:32:27,483 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 432 440) the Hoare annotation is: true [2021-11-20 05:32:27,483 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 432 440) no Hoare annotation was computed. [2021-11-20 05:32:27,486 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:32:27,488 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-20 05:32:27,578 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 05:32:27 BoogieIcfgContainer [2021-11-20 05:32:27,583 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-20 05:32:27,584 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-20 05:32:27,584 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-20 05:32:27,584 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-20 05:32:27,585 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 05:32:05" (3/4) ... [2021-11-20 05:32:27,588 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-11-20 05:32:27,598 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-11-20 05:32:27,598 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-11-20 05:32:27,599 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-11-20 05:32:27,599 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-11-20 05:32:27,599 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-11-20 05:32:27,599 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-11-20 05:32:27,600 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-11-20 05:32:27,620 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 52 nodes and edges [2021-11-20 05:32:27,622 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-11-20 05:32:27,622 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-11-20 05:32:27,623 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-11-20 05:32:27,624 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-11-20 05:32:27,625 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-20 05:32:27,625 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-20 05:32:27,661 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && (((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) == 2)) [2021-11-20 05:32:27,662 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2021-11-20 05:32:27,663 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || (((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && waterLevel == \result) && tmp == waterLevel) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && tmp == waterLevel) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && ((((((((((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(\old(waterLevel) <= 1)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && tmp == waterLevel) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((((((((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(\old(waterLevel) == 1)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || (((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && waterLevel == \result) && tmp == waterLevel) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(\old(waterLevel) <= 2)) [2021-11-20 05:32:27,664 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && ((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2))) && (((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || (((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) [2021-11-20 05:32:27,665 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2021-11-20 05:32:27,665 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && ((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && waterLevel == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || ((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && waterLevel == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || ((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) [2021-11-20 05:32:27,665 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(waterLevel) <= 1) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2021-11-20 05:32:27,666 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || waterLevel + 1 <= \old(waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2021-11-20 05:32:27,666 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\result == 0)) || !(waterLevel <= 1)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2021-11-20 05:32:27,666 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) [2021-11-20 05:32:27,667 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && 2 == waterLevel)) || (((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) || !(waterLevel <= 2)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) [2021-11-20 05:32:27,667 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= pumpRunning && 2 == waterLevel)) || !(waterLevel <= 2)) [2021-11-20 05:32:27,721 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/bin/uautomizer-DQz5hQGWxF/witness.graphml [2021-11-20 05:32:27,721 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-20 05:32:27,722 INFO L158 Benchmark]: Toolchain (without parser) took 23114.54ms. Allocated memory was 96.5MB in the beginning and 207.6MB in the end (delta: 111.1MB). Free memory was 62.9MB in the beginning and 94.4MB in the end (delta: -31.4MB). Peak memory consumption was 79.6MB. Max. memory is 16.1GB. [2021-11-20 05:32:27,723 INFO L158 Benchmark]: CDTParser took 0.26ms. Allocated memory is still 96.5MB. Free memory was 48.4MB in the beginning and 48.3MB in the end (delta: 77.0kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-20 05:32:27,723 INFO L158 Benchmark]: CACSL2BoogieTranslator took 584.57ms. Allocated memory is still 96.5MB. Free memory was 62.9MB in the beginning and 64.8MB in the end (delta: -1.9MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-11-20 05:32:27,724 INFO L158 Benchmark]: Boogie Procedure Inliner took 57.77ms. Allocated memory is still 96.5MB. Free memory was 64.8MB in the beginning and 62.2MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-20 05:32:27,725 INFO L158 Benchmark]: Boogie Preprocessor took 55.50ms. Allocated memory is still 96.5MB. Free memory was 62.2MB in the beginning and 60.7MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-20 05:32:27,725 INFO L158 Benchmark]: RCFGBuilder took 658.22ms. Allocated memory was 96.5MB in the beginning and 117.4MB in the end (delta: 21.0MB). Free memory was 60.4MB in the beginning and 92.6MB in the end (delta: -32.2MB). Peak memory consumption was 19.3MB. Max. memory is 16.1GB. [2021-11-20 05:32:27,726 INFO L158 Benchmark]: TraceAbstraction took 21614.42ms. Allocated memory was 117.4MB in the beginning and 207.6MB in the end (delta: 90.2MB). Free memory was 92.1MB in the beginning and 100.7MB in the end (delta: -8.6MB). Peak memory consumption was 125.8MB. Max. memory is 16.1GB. [2021-11-20 05:32:27,726 INFO L158 Benchmark]: Witness Printer took 137.02ms. Allocated memory is still 207.6MB. Free memory was 100.7MB in the beginning and 94.4MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-11-20 05:32:27,730 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.26ms. Allocated memory is still 96.5MB. Free memory was 48.4MB in the beginning and 48.3MB in the end (delta: 77.0kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 584.57ms. Allocated memory is still 96.5MB. Free memory was 62.9MB in the beginning and 64.8MB in the end (delta: -1.9MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 57.77ms. Allocated memory is still 96.5MB. Free memory was 64.8MB in the beginning and 62.2MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 55.50ms. Allocated memory is still 96.5MB. Free memory was 62.2MB in the beginning and 60.7MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 658.22ms. Allocated memory was 96.5MB in the beginning and 117.4MB in the end (delta: 21.0MB). Free memory was 60.4MB in the beginning and 92.6MB in the end (delta: -32.2MB). Peak memory consumption was 19.3MB. Max. memory is 16.1GB. * TraceAbstraction took 21614.42ms. Allocated memory was 117.4MB in the beginning and 207.6MB in the end (delta: 90.2MB). Free memory was 92.1MB in the beginning and 100.7MB in the end (delta: -8.6MB). Peak memory consumption was 125.8MB. Max. memory is 16.1GB. * Witness Printer took 137.02ms. Allocated memory is still 207.6MB. Free memory was 100.7MB in the beginning and 94.4MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 309]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 90 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 21.4s, OverallIterations: 12, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 5.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 10.7s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2607 SdHoareTripleChecker+Valid, 3.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2568 mSDsluCounter, 5178 SdHoareTripleChecker+Invalid, 2.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3670 mSDsCounter, 930 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3995 IncrementalHoareTripleChecker+Invalid, 4925 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 930 mSolverCounterUnsat, 1508 mSDtfsCounter, 3995 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 879 GetRequests, 683 SyntacticMatches, 5 SemanticMatches, 191 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1449 ImplicationChecksByTransitivity, 1.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1002occurred in iteration=11, InterpolantAutomatonStates: 166, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 12 MinimizatonAttempts, 254 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 42 LocationsWithAnnotation, 2247 PreInvPairs, 2664 NumberOfFragments, 3769 HoareAnnotationTreeSize, 2247 FomulaSimplifications, 3314 FormulaSimplificationTreeSizeReduction, 1.0s HoareSimplificationTime, 42 FomulaSimplificationsInter, 46986 FormulaSimplificationTreeSizeReductionInter, 9.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 3.4s InterpolantComputationTime, 1108 NumberOfCodeBlocks, 1108 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 1358 ConstructedInterpolants, 0 QuantifiedInterpolants, 2897 SizeOfPredicates, 6 NumberOfNonLiveVariables, 1138 ConjunctsInSsa, 21 ConjunctsInUnsatCore, 16 InterpolantComputations, 10 PerfectInterpolantSequences, 765/874 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\result == 0)) || !(waterLevel <= 1)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 405]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= pumpRunning && 2 == waterLevel)) || !(waterLevel <= 2)) - InvariantResult [Line: 380]: Loop Invariant Derived loop invariant: (((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && ((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2))) && (((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || (((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 497]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 204]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 421]: Loop Invariant Derived loop invariant: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || waterLevel + 1 <= \old(waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 477]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && 2 == waterLevel)) || (((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) || !(waterLevel <= 2)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 214]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: ((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(waterLevel) <= 1) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 580]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 305]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 172]: Loop Invariant Derived loop invariant: ((((((((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || (((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && waterLevel == \result) && tmp == waterLevel) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && tmp == waterLevel) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && ((((((((((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(\old(waterLevel) <= 1)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && tmp == waterLevel) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((((((((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(\old(waterLevel) == 1)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || (((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && waterLevel == \result) && tmp == waterLevel) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 154]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 267]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: (((((((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && ((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && waterLevel == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || ((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && waterLevel == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || ((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 259]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 506]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && (((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) == 2)) - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: ((((((((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 413]: Loop Invariant Derived loop invariant: ((((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 573]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 587]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 281]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 507]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0) || (((1 <= pumpRunning && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) && 1 <= switchedOnBeforeTS)) || (((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) RESULT: Ultimate proved your program to be correct! [2021-11-20 05:32:27,825 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3f1e79-e39f-451c-9188-6f390c1dc722/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE