./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 53f42b1a Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 603cfb64133b588a2e9c81e31ac984484d295feb0a468539180131e3ac5a47d6 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-53f42b1 [2021-11-20 07:26:03,285 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-20 07:26:03,288 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-20 07:26:03,334 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-20 07:26:03,335 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-20 07:26:03,336 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-20 07:26:03,339 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-20 07:26:03,342 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-20 07:26:03,345 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-20 07:26:03,347 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-20 07:26:03,349 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-20 07:26:03,351 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-20 07:26:03,352 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-20 07:26:03,354 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-20 07:26:03,356 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-20 07:26:03,358 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-20 07:26:03,362 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-20 07:26:03,368 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-20 07:26:03,371 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-20 07:26:03,383 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-20 07:26:03,385 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-20 07:26:03,392 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-20 07:26:03,401 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-20 07:26:03,402 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-20 07:26:03,407 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-20 07:26:03,412 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-20 07:26:03,413 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-20 07:26:03,414 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-20 07:26:03,415 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-20 07:26:03,417 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-20 07:26:03,419 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-20 07:26:03,420 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-20 07:26:03,422 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-20 07:26:03,424 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-20 07:26:03,426 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-20 07:26:03,427 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-20 07:26:03,428 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-20 07:26:03,428 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-20 07:26:03,429 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-20 07:26:03,430 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-20 07:26:03,431 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-20 07:26:03,432 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-11-20 07:26:03,490 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-20 07:26:03,491 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-20 07:26:03,492 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-20 07:26:03,499 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-20 07:26:03,501 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-20 07:26:03,502 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-20 07:26:03,503 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-20 07:26:03,503 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-20 07:26:03,503 INFO L138 SettingsManager]: * Use SBE=true [2021-11-20 07:26:03,504 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-20 07:26:03,505 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-20 07:26:03,505 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-20 07:26:03,506 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-20 07:26:03,506 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-20 07:26:03,506 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-20 07:26:03,507 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-20 07:26:03,507 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-20 07:26:03,507 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-20 07:26:03,507 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-20 07:26:03,508 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-20 07:26:03,508 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-20 07:26:03,508 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-20 07:26:03,509 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-20 07:26:03,509 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-20 07:26:03,509 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 07:26:03,510 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-20 07:26:03,510 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-20 07:26:03,511 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-20 07:26:03,511 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-20 07:26:03,513 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-20 07:26:03,513 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-20 07:26:03,514 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-20 07:26:03,514 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-20 07:26:03,514 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-20 07:26:03,515 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 603cfb64133b588a2e9c81e31ac984484d295feb0a468539180131e3ac5a47d6 [2021-11-20 07:26:03,843 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-20 07:26:03,873 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-20 07:26:03,877 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-20 07:26:03,878 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-20 07:26:03,879 INFO L275 PluginConnector]: CDTParser initialized [2021-11-20 07:26:03,881 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/../../sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c [2021-11-20 07:26:03,995 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/data/c89bad739/66922d720a53411fa38dfbef18754e18/FLAG92185b4d0 [2021-11-20 07:26:04,608 INFO L306 CDTParser]: Found 1 translation units. [2021-11-20 07:26:04,609 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c [2021-11-20 07:26:04,624 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/data/c89bad739/66922d720a53411fa38dfbef18754e18/FLAG92185b4d0 [2021-11-20 07:26:04,863 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/data/c89bad739/66922d720a53411fa38dfbef18754e18 [2021-11-20 07:26:04,866 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-20 07:26:04,868 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-20 07:26:04,870 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-20 07:26:04,870 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-20 07:26:04,875 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-20 07:26:04,875 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 07:26:04" (1/1) ... [2021-11-20 07:26:04,876 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3970fa74 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:26:04, skipping insertion in model container [2021-11-20 07:26:04,877 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 07:26:04" (1/1) ... [2021-11-20 07:26:04,892 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-20 07:26:04,967 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-20 07:26:05,212 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c[3064,3077] [2021-11-20 07:26:05,407 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 07:26:05,418 INFO L203 MainTranslator]: Completed pre-run [2021-11-20 07:26:05,473 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c[3064,3077] [2021-11-20 07:26:05,574 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 07:26:05,595 INFO L208 MainTranslator]: Completed translation [2021-11-20 07:26:05,596 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:26:05 WrapperNode [2021-11-20 07:26:05,596 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-20 07:26:05,597 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-20 07:26:05,597 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-20 07:26:05,598 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-20 07:26:05,607 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:26:05" (1/1) ... [2021-11-20 07:26:05,637 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:26:05" (1/1) ... [2021-11-20 07:26:05,676 INFO L137 Inliner]: procedures = 56, calls = 158, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 264 [2021-11-20 07:26:05,677 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-20 07:26:05,678 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-20 07:26:05,678 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-20 07:26:05,678 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-20 07:26:05,689 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:26:05" (1/1) ... [2021-11-20 07:26:05,689 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:26:05" (1/1) ... [2021-11-20 07:26:05,696 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:26:05" (1/1) ... [2021-11-20 07:26:05,696 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:26:05" (1/1) ... [2021-11-20 07:26:05,705 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:26:05" (1/1) ... [2021-11-20 07:26:05,728 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:26:05" (1/1) ... [2021-11-20 07:26:05,730 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:26:05" (1/1) ... [2021-11-20 07:26:05,733 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-20 07:26:05,734 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-20 07:26:05,735 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-20 07:26:05,735 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-20 07:26:05,750 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:26:05" (1/1) ... [2021-11-20 07:26:05,772 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 07:26:05,786 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 07:26:05,823 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-20 07:26:05,873 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-20 07:26:05,898 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-20 07:26:05,898 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-11-20 07:26:05,898 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-11-20 07:26:05,899 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-11-20 07:26:05,900 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-11-20 07:26:05,900 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-11-20 07:26:05,900 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-11-20 07:26:05,902 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-11-20 07:26:05,902 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-11-20 07:26:05,903 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-11-20 07:26:05,903 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-11-20 07:26:05,903 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-11-20 07:26:05,904 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-11-20 07:26:05,904 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-11-20 07:26:05,904 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-11-20 07:26:05,904 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-20 07:26:05,904 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-11-20 07:26:05,905 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-11-20 07:26:05,905 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-20 07:26:05,905 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-20 07:26:06,009 INFO L236 CfgBuilder]: Building ICFG [2021-11-20 07:26:06,011 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-20 07:26:06,482 INFO L277 CfgBuilder]: Performing block encoding [2021-11-20 07:26:06,515 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-20 07:26:06,516 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-20 07:26:06,518 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 07:26:06 BoogieIcfgContainer [2021-11-20 07:26:06,518 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-20 07:26:06,520 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-20 07:26:06,521 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-20 07:26:06,525 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-20 07:26:06,526 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 07:26:04" (1/3) ... [2021-11-20 07:26:06,527 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1188aa0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 07:26:06, skipping insertion in model container [2021-11-20 07:26:06,527 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 07:26:05" (2/3) ... [2021-11-20 07:26:06,527 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1188aa0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 07:26:06, skipping insertion in model container [2021-11-20 07:26:06,528 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 07:26:06" (3/3) ... [2021-11-20 07:26:06,529 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product45.cil.c [2021-11-20 07:26:06,535 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-20 07:26:06,536 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-20 07:26:06,630 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-20 07:26:06,644 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-20 07:26:06,644 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-20 07:26:06,679 INFO L276 IsEmpty]: Start isEmpty. Operand has 98 states, 74 states have (on average 1.364864864864865) internal successors, (101), 82 states have internal predecessors, (101), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2021-11-20 07:26:06,689 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-11-20 07:26:06,690 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:26:06,699 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:26:06,699 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:26:06,706 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:26:06,706 INFO L85 PathProgramCache]: Analyzing trace with hash -1310639887, now seen corresponding path program 1 times [2021-11-20 07:26:06,715 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:26:06,716 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [679214520] [2021-11-20 07:26:06,716 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:26:06,717 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:26:06,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:06,983 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-11-20 07:26:06,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:06,992 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-11-20 07:26:06,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:07,013 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 07:26:07,014 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:26:07,014 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [679214520] [2021-11-20 07:26:07,015 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [679214520] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:26:07,015 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:26:07,016 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-20 07:26:07,018 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1016966646] [2021-11-20 07:26:07,018 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:26:07,023 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-11-20 07:26:07,024 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:26:07,084 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-11-20 07:26:07,085 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-20 07:26:07,090 INFO L87 Difference]: Start difference. First operand has 98 states, 74 states have (on average 1.364864864864865) internal successors, (101), 82 states have internal predecessors, (101), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-20 07:26:07,170 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:26:07,170 INFO L93 Difference]: Finished difference Result 187 states and 252 transitions. [2021-11-20 07:26:07,172 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-11-20 07:26:07,173 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-11-20 07:26:07,174 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:26:07,186 INFO L225 Difference]: With dead ends: 187 [2021-11-20 07:26:07,186 INFO L226 Difference]: Without dead ends: 89 [2021-11-20 07:26:07,194 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-20 07:26:07,201 INFO L933 BasicCegarLoop]: 123 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 123 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 07:26:07,203 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 123 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 07:26:07,221 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89 states. [2021-11-20 07:26:07,250 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89 to 89. [2021-11-20 07:26:07,252 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 89 states, 67 states have (on average 1.2985074626865671) internal successors, (87), 74 states have internal predecessors, (87), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2021-11-20 07:26:07,255 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89 states to 89 states and 114 transitions. [2021-11-20 07:26:07,257 INFO L78 Accepts]: Start accepts. Automaton has 89 states and 114 transitions. Word has length 32 [2021-11-20 07:26:07,257 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:26:07,257 INFO L470 AbstractCegarLoop]: Abstraction has 89 states and 114 transitions. [2021-11-20 07:26:07,258 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-20 07:26:07,258 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 114 transitions. [2021-11-20 07:26:07,261 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-11-20 07:26:07,262 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:26:07,262 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:26:07,262 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-20 07:26:07,263 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:26:07,264 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:26:07,264 INFO L85 PathProgramCache]: Analyzing trace with hash -527547429, now seen corresponding path program 1 times [2021-11-20 07:26:07,264 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:26:07,264 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1284467695] [2021-11-20 07:26:07,265 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:26:07,265 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:26:07,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:07,380 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 07:26:07,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:07,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-11-20 07:26:07,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:07,392 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 07:26:07,393 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:26:07,393 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1284467695] [2021-11-20 07:26:07,393 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1284467695] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:26:07,394 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:26:07,394 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-20 07:26:07,394 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1984087228] [2021-11-20 07:26:07,394 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:26:07,396 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 07:26:07,396 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:26:07,397 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 07:26:07,397 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 07:26:07,397 INFO L87 Difference]: Start difference. First operand 89 states and 114 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-20 07:26:07,418 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:26:07,418 INFO L93 Difference]: Finished difference Result 143 states and 183 transitions. [2021-11-20 07:26:07,419 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 07:26:07,419 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2021-11-20 07:26:07,420 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:26:07,421 INFO L225 Difference]: With dead ends: 143 [2021-11-20 07:26:07,422 INFO L226 Difference]: Without dead ends: 80 [2021-11-20 07:26:07,423 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 07:26:07,425 INFO L933 BasicCegarLoop]: 101 mSDtfsCounter, 12 mSDsluCounter, 85 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 186 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 07:26:07,426 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [15 Valid, 186 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 07:26:07,427 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2021-11-20 07:26:07,438 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 80. [2021-11-20 07:26:07,439 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 80 states, 61 states have (on average 1.3114754098360655) internal successors, (80), 68 states have internal predecessors, (80), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2021-11-20 07:26:07,440 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 102 transitions. [2021-11-20 07:26:07,441 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 102 transitions. Word has length 33 [2021-11-20 07:26:07,441 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:26:07,441 INFO L470 AbstractCegarLoop]: Abstraction has 80 states and 102 transitions. [2021-11-20 07:26:07,442 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-20 07:26:07,442 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 102 transitions. [2021-11-20 07:26:07,444 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2021-11-20 07:26:07,444 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:26:07,444 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:26:07,444 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-20 07:26:07,445 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:26:07,445 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:26:07,446 INFO L85 PathProgramCache]: Analyzing trace with hash 671106305, now seen corresponding path program 1 times [2021-11-20 07:26:07,446 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:26:07,446 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [892828372] [2021-11-20 07:26:07,446 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:26:07,447 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:26:07,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:07,520 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 07:26:07,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:07,526 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-11-20 07:26:07,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:07,531 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 07:26:07,531 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:26:07,531 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [892828372] [2021-11-20 07:26:07,532 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [892828372] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:26:07,532 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:26:07,532 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-20 07:26:07,532 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2018417352] [2021-11-20 07:26:07,533 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:26:07,540 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 07:26:07,541 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:26:07,541 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 07:26:07,542 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 07:26:07,542 INFO L87 Difference]: Start difference. First operand 80 states and 102 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-20 07:26:07,567 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:26:07,567 INFO L93 Difference]: Finished difference Result 152 states and 197 transitions. [2021-11-20 07:26:07,568 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 07:26:07,568 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2021-11-20 07:26:07,569 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:26:07,570 INFO L225 Difference]: With dead ends: 152 [2021-11-20 07:26:07,570 INFO L226 Difference]: Without dead ends: 80 [2021-11-20 07:26:07,572 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 07:26:07,574 INFO L933 BasicCegarLoop]: 100 mSDtfsCounter, 79 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 100 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 07:26:07,574 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [79 Valid, 100 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 07:26:07,576 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2021-11-20 07:26:07,588 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 80. [2021-11-20 07:26:07,596 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 80 states, 61 states have (on average 1.2950819672131149) internal successors, (79), 68 states have internal predecessors, (79), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2021-11-20 07:26:07,598 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 101 transitions. [2021-11-20 07:26:07,598 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 101 transitions. Word has length 37 [2021-11-20 07:26:07,600 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:26:07,600 INFO L470 AbstractCegarLoop]: Abstraction has 80 states and 101 transitions. [2021-11-20 07:26:07,600 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-20 07:26:07,601 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 101 transitions. [2021-11-20 07:26:07,603 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2021-11-20 07:26:07,603 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:26:07,603 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:26:07,604 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-20 07:26:07,604 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:26:07,605 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:26:07,605 INFO L85 PathProgramCache]: Analyzing trace with hash -488472773, now seen corresponding path program 1 times [2021-11-20 07:26:07,605 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:26:07,605 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [517655276] [2021-11-20 07:26:07,606 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:26:07,606 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:26:07,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:07,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 07:26:07,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:07,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-20 07:26:07,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:07,764 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:26:07,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:07,773 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2021-11-20 07:26:07,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:07,779 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 07:26:07,781 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:26:07,781 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [517655276] [2021-11-20 07:26:07,781 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [517655276] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:26:07,782 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:26:07,782 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-20 07:26:07,782 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [281275061] [2021-11-20 07:26:07,784 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:26:07,785 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 07:26:07,785 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:26:07,786 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 07:26:07,786 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 07:26:07,787 INFO L87 Difference]: Start difference. First operand 80 states and 101 transitions. Second operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-11-20 07:26:08,136 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:26:08,137 INFO L93 Difference]: Finished difference Result 235 states and 297 transitions. [2021-11-20 07:26:08,137 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 07:26:08,138 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 47 [2021-11-20 07:26:08,139 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:26:08,149 INFO L225 Difference]: With dead ends: 235 [2021-11-20 07:26:08,150 INFO L226 Difference]: Without dead ends: 163 [2021-11-20 07:26:08,154 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2021-11-20 07:26:08,156 INFO L933 BasicCegarLoop]: 131 mSDtfsCounter, 187 mSDsluCounter, 175 mSDsCounter, 0 mSdLazyCounter, 101 mSolverCounterSat, 54 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 190 SdHoareTripleChecker+Valid, 306 SdHoareTripleChecker+Invalid, 155 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 54 IncrementalHoareTripleChecker+Valid, 101 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-11-20 07:26:08,157 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [190 Valid, 306 Invalid, 155 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [54 Valid, 101 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-11-20 07:26:08,159 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 163 states. [2021-11-20 07:26:08,217 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 163 to 157. [2021-11-20 07:26:08,218 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 120 states have (on average 1.2583333333333333) internal successors, (151), 128 states have internal predecessors, (151), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2021-11-20 07:26:08,220 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 192 transitions. [2021-11-20 07:26:08,221 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 192 transitions. Word has length 47 [2021-11-20 07:26:08,221 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:26:08,221 INFO L470 AbstractCegarLoop]: Abstraction has 157 states and 192 transitions. [2021-11-20 07:26:08,222 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-11-20 07:26:08,222 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 192 transitions. [2021-11-20 07:26:08,224 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2021-11-20 07:26:08,224 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:26:08,224 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:26:08,225 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-20 07:26:08,225 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:26:08,226 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:26:08,226 INFO L85 PathProgramCache]: Analyzing trace with hash 1464828133, now seen corresponding path program 1 times [2021-11-20 07:26:08,226 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:26:08,226 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [365652039] [2021-11-20 07:26:08,227 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:26:08,227 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:26:08,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:08,298 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 07:26:08,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:08,306 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-20 07:26:08,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:08,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:26:08,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:08,337 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-11-20 07:26:08,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:08,341 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 07:26:08,342 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:26:08,342 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [365652039] [2021-11-20 07:26:08,343 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [365652039] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:26:08,343 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:26:08,343 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 07:26:08,344 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [931816094] [2021-11-20 07:26:08,344 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:26:08,344 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 07:26:08,345 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:26:08,345 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 07:26:08,346 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-20 07:26:08,346 INFO L87 Difference]: Start difference. First operand 157 states and 192 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-11-20 07:26:08,584 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:26:08,585 INFO L93 Difference]: Finished difference Result 324 states and 404 transitions. [2021-11-20 07:26:08,585 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 07:26:08,586 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 53 [2021-11-20 07:26:08,588 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:26:08,595 INFO L225 Difference]: With dead ends: 324 [2021-11-20 07:26:08,595 INFO L226 Difference]: Without dead ends: 175 [2021-11-20 07:26:08,597 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2021-11-20 07:26:08,607 INFO L933 BasicCegarLoop]: 91 mSDtfsCounter, 176 mSDsluCounter, 193 mSDsCounter, 0 mSdLazyCounter, 90 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 180 SdHoareTripleChecker+Valid, 284 SdHoareTripleChecker+Invalid, 137 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 90 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 07:26:08,608 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [180 Valid, 284 Invalid, 137 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 90 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 07:26:08,609 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 175 states. [2021-11-20 07:26:08,646 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 175 to 159. [2021-11-20 07:26:08,647 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 159 states, 122 states have (on average 1.2540983606557377) internal successors, (153), 130 states have internal predecessors, (153), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2021-11-20 07:26:08,649 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 159 states to 159 states and 194 transitions. [2021-11-20 07:26:08,649 INFO L78 Accepts]: Start accepts. Automaton has 159 states and 194 transitions. Word has length 53 [2021-11-20 07:26:08,650 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:26:08,650 INFO L470 AbstractCegarLoop]: Abstraction has 159 states and 194 transitions. [2021-11-20 07:26:08,650 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-11-20 07:26:08,651 INFO L276 IsEmpty]: Start isEmpty. Operand 159 states and 194 transitions. [2021-11-20 07:26:08,662 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2021-11-20 07:26:08,662 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:26:08,663 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:26:08,663 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-20 07:26:08,663 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:26:08,664 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:26:08,664 INFO L85 PathProgramCache]: Analyzing trace with hash 1042126307, now seen corresponding path program 1 times [2021-11-20 07:26:08,664 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:26:08,664 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1237948712] [2021-11-20 07:26:08,664 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:26:08,665 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:26:08,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:08,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 07:26:08,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:08,765 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-20 07:26:08,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:08,777 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:26:08,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:08,781 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-11-20 07:26:08,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:08,796 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-11-20 07:26:08,796 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:26:08,797 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1237948712] [2021-11-20 07:26:08,797 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1237948712] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:26:08,797 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:26:08,797 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-20 07:26:08,797 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2118596028] [2021-11-20 07:26:08,798 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:26:08,798 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-20 07:26:08,798 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:26:08,799 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-20 07:26:08,799 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-20 07:26:08,799 INFO L87 Difference]: Start difference. First operand 159 states and 194 transitions. Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2021-11-20 07:26:09,152 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:26:09,152 INFO L93 Difference]: Finished difference Result 322 states and 394 transitions. [2021-11-20 07:26:09,154 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-11-20 07:26:09,155 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) Word has length 53 [2021-11-20 07:26:09,155 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:26:09,158 INFO L225 Difference]: With dead ends: 322 [2021-11-20 07:26:09,158 INFO L226 Difference]: Without dead ends: 171 [2021-11-20 07:26:09,159 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2021-11-20 07:26:09,163 INFO L933 BasicCegarLoop]: 101 mSDtfsCounter, 120 mSDsluCounter, 348 mSDsCounter, 0 mSdLazyCounter, 205 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 127 SdHoareTripleChecker+Valid, 449 SdHoareTripleChecker+Invalid, 240 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 205 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 07:26:09,165 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [127 Valid, 449 Invalid, 240 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 205 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 07:26:09,167 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 171 states. [2021-11-20 07:26:09,195 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 171 to 157. [2021-11-20 07:26:09,196 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 120 states have (on average 1.225) internal successors, (147), 128 states have internal predecessors, (147), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2021-11-20 07:26:09,198 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 188 transitions. [2021-11-20 07:26:09,198 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 188 transitions. Word has length 53 [2021-11-20 07:26:09,199 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:26:09,199 INFO L470 AbstractCegarLoop]: Abstraction has 157 states and 188 transitions. [2021-11-20 07:26:09,199 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2021-11-20 07:26:09,200 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 188 transitions. [2021-11-20 07:26:09,211 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2021-11-20 07:26:09,212 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:26:09,212 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:26:09,212 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-20 07:26:09,213 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:26:09,213 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:26:09,213 INFO L85 PathProgramCache]: Analyzing trace with hash -2072494715, now seen corresponding path program 1 times [2021-11-20 07:26:09,213 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:26:09,214 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1677568154] [2021-11-20 07:26:09,214 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:26:09,214 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:26:09,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:09,294 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 07:26:09,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:09,302 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-20 07:26:09,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:09,362 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:26:09,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:09,370 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-11-20 07:26:09,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:09,377 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 07:26:09,377 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:26:09,377 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1677568154] [2021-11-20 07:26:09,377 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1677568154] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:26:09,378 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:26:09,378 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 07:26:09,378 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [919868421] [2021-11-20 07:26:09,378 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:26:09,380 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 07:26:09,381 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:26:09,382 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 07:26:09,384 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-20 07:26:09,385 INFO L87 Difference]: Start difference. First operand 157 states and 188 transitions. Second operand has 6 states, 6 states have (on average 8.0) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-20 07:26:09,586 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:26:09,586 INFO L93 Difference]: Finished difference Result 316 states and 385 transitions. [2021-11-20 07:26:09,587 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 07:26:09,588 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 59 [2021-11-20 07:26:09,590 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:26:09,593 INFO L225 Difference]: With dead ends: 316 [2021-11-20 07:26:09,593 INFO L226 Difference]: Without dead ends: 167 [2021-11-20 07:26:09,601 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-11-20 07:26:09,604 INFO L933 BasicCegarLoop]: 90 mSDtfsCounter, 69 mSDsluCounter, 273 mSDsCounter, 0 mSdLazyCounter, 112 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 363 SdHoareTripleChecker+Invalid, 135 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 112 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 07:26:09,605 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [74 Valid, 363 Invalid, 135 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 112 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 07:26:09,607 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167 states. [2021-11-20 07:26:09,635 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167 to 160. [2021-11-20 07:26:09,636 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 160 states, 123 states have (on average 1.2195121951219512) internal successors, (150), 131 states have internal predecessors, (150), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2021-11-20 07:26:09,638 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 160 states to 160 states and 191 transitions. [2021-11-20 07:26:09,638 INFO L78 Accepts]: Start accepts. Automaton has 160 states and 191 transitions. Word has length 59 [2021-11-20 07:26:09,638 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:26:09,639 INFO L470 AbstractCegarLoop]: Abstraction has 160 states and 191 transitions. [2021-11-20 07:26:09,639 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-20 07:26:09,639 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 191 transitions. [2021-11-20 07:26:09,647 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2021-11-20 07:26:09,647 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:26:09,648 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:26:09,648 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-20 07:26:09,648 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:26:09,649 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:26:09,649 INFO L85 PathProgramCache]: Analyzing trace with hash 1236936713, now seen corresponding path program 1 times [2021-11-20 07:26:09,649 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:26:09,650 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1759090207] [2021-11-20 07:26:09,650 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:26:09,650 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:26:09,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:09,739 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 07:26:09,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:09,750 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-20 07:26:09,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:09,782 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:26:09,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:09,789 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-11-20 07:26:09,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:09,796 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 07:26:09,797 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:26:09,797 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1759090207] [2021-11-20 07:26:09,797 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1759090207] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:26:09,798 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:26:09,798 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-20 07:26:09,798 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1417933619] [2021-11-20 07:26:09,798 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:26:09,799 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 07:26:09,799 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:26:09,805 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 07:26:09,805 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 07:26:09,806 INFO L87 Difference]: Start difference. First operand 160 states and 191 transitions. Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-11-20 07:26:10,058 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:26:10,059 INFO L93 Difference]: Finished difference Result 441 states and 552 transitions. [2021-11-20 07:26:10,059 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 07:26:10,059 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 59 [2021-11-20 07:26:10,060 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:26:10,065 INFO L225 Difference]: With dead ends: 441 [2021-11-20 07:26:10,066 INFO L226 Difference]: Without dead ends: 289 [2021-11-20 07:26:10,067 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-11-20 07:26:10,068 INFO L933 BasicCegarLoop]: 140 mSDtfsCounter, 215 mSDsluCounter, 167 mSDsCounter, 0 mSdLazyCounter, 147 mSolverCounterSat, 68 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 223 SdHoareTripleChecker+Valid, 307 SdHoareTripleChecker+Invalid, 215 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 68 IncrementalHoareTripleChecker+Valid, 147 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 07:26:10,069 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [223 Valid, 307 Invalid, 215 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [68 Valid, 147 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 07:26:10,071 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 289 states. [2021-11-20 07:26:10,104 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 289 to 287. [2021-11-20 07:26:10,105 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 287 states, 218 states have (on average 1.2064220183486238) internal successors, (263), 230 states have internal predecessors, (263), 36 states have call successors, (36), 31 states have call predecessors, (36), 32 states have return successors, (51), 36 states have call predecessors, (51), 36 states have call successors, (51) [2021-11-20 07:26:10,110 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 287 states to 287 states and 350 transitions. [2021-11-20 07:26:10,111 INFO L78 Accepts]: Start accepts. Automaton has 287 states and 350 transitions. Word has length 59 [2021-11-20 07:26:10,111 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:26:10,111 INFO L470 AbstractCegarLoop]: Abstraction has 287 states and 350 transitions. [2021-11-20 07:26:10,113 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-11-20 07:26:10,114 INFO L276 IsEmpty]: Start isEmpty. Operand 287 states and 350 transitions. [2021-11-20 07:26:10,118 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2021-11-20 07:26:10,118 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:26:10,118 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:26:10,118 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-11-20 07:26:10,119 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:26:10,119 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:26:10,120 INFO L85 PathProgramCache]: Analyzing trace with hash -1533447185, now seen corresponding path program 1 times [2021-11-20 07:26:10,120 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:26:10,120 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2140039352] [2021-11-20 07:26:10,120 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:26:10,121 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:26:10,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:10,252 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 07:26:10,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:10,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-20 07:26:10,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:10,299 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-11-20 07:26:10,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:10,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:26:10,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:10,355 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-11-20 07:26:10,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:10,359 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 07:26:10,359 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:26:10,360 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2140039352] [2021-11-20 07:26:10,360 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2140039352] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 07:26:10,360 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 07:26:10,364 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-11-20 07:26:10,365 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1300972044] [2021-11-20 07:26:10,365 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 07:26:10,366 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-11-20 07:26:10,366 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:26:10,366 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-11-20 07:26:10,367 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2021-11-20 07:26:10,367 INFO L87 Difference]: Start difference. First operand 287 states and 350 transitions. Second operand has 10 states, 10 states have (on average 5.0) internal successors, (50), 8 states have internal predecessors, (50), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-11-20 07:26:11,353 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:26:11,354 INFO L93 Difference]: Finished difference Result 849 states and 1072 transitions. [2021-11-20 07:26:11,354 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-11-20 07:26:11,355 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.0) internal successors, (50), 8 states have internal predecessors, (50), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 63 [2021-11-20 07:26:11,355 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:26:11,361 INFO L225 Difference]: With dead ends: 849 [2021-11-20 07:26:11,361 INFO L226 Difference]: Without dead ends: 620 [2021-11-20 07:26:11,364 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 206 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=187, Invalid=743, Unknown=0, NotChecked=0, Total=930 [2021-11-20 07:26:11,365 INFO L933 BasicCegarLoop]: 149 mSDtfsCounter, 602 mSDsluCounter, 557 mSDsCounter, 0 mSdLazyCounter, 678 mSolverCounterSat, 194 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 609 SdHoareTripleChecker+Valid, 706 SdHoareTripleChecker+Invalid, 872 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 194 IncrementalHoareTripleChecker+Valid, 678 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2021-11-20 07:26:11,365 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [609 Valid, 706 Invalid, 872 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [194 Valid, 678 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2021-11-20 07:26:11,367 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 620 states. [2021-11-20 07:26:11,419 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 620 to 533. [2021-11-20 07:26:11,421 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 533 states, 405 states have (on average 1.2) internal successors, (486), 429 states have internal predecessors, (486), 66 states have call successors, (66), 55 states have call predecessors, (66), 61 states have return successors, (90), 66 states have call predecessors, (90), 66 states have call successors, (90) [2021-11-20 07:26:11,426 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 533 states to 533 states and 642 transitions. [2021-11-20 07:26:11,426 INFO L78 Accepts]: Start accepts. Automaton has 533 states and 642 transitions. Word has length 63 [2021-11-20 07:26:11,427 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:26:11,427 INFO L470 AbstractCegarLoop]: Abstraction has 533 states and 642 transitions. [2021-11-20 07:26:11,427 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.0) internal successors, (50), 8 states have internal predecessors, (50), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-11-20 07:26:11,427 INFO L276 IsEmpty]: Start isEmpty. Operand 533 states and 642 transitions. [2021-11-20 07:26:11,429 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2021-11-20 07:26:11,429 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:26:11,430 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:26:11,430 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-11-20 07:26:11,430 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:26:11,431 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:26:11,431 INFO L85 PathProgramCache]: Analyzing trace with hash -706462267, now seen corresponding path program 1 times [2021-11-20 07:26:11,431 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:26:11,431 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [83946469] [2021-11-20 07:26:11,431 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:26:11,432 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:26:11,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:11,494 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 07:26:11,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:11,508 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 07:26:11,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:11,527 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:26:11,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:11,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-11-20 07:26:11,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:11,546 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:26:11,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:11,549 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2021-11-20 07:26:11,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:11,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2021-11-20 07:26:11,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:11,565 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2021-11-20 07:26:11,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:11,569 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:26:11,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:11,572 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2021-11-20 07:26:11,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:11,576 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 8 proven. 18 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-11-20 07:26:11,576 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:26:11,576 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [83946469] [2021-11-20 07:26:11,577 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [83946469] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 07:26:11,577 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [931931423] [2021-11-20 07:26:11,577 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:26:11,577 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 07:26:11,578 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 07:26:11,582 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 07:26:11,601 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-20 07:26:11,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:11,755 INFO L263 TraceCheckSpWp]: Trace formula consists of 495 conjuncts, 8 conjunts are in the unsatisfiable core [2021-11-20 07:26:11,780 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:26:12,385 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 28 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 07:26:12,385 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:26:12,781 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 18 proven. 8 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-11-20 07:26:12,781 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [931931423] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-20 07:26:12,782 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-20 07:26:12,782 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2021-11-20 07:26:12,782 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [50321379] [2021-11-20 07:26:12,782 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-20 07:26:12,783 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-11-20 07:26:12,784 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:26:12,784 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-11-20 07:26:12,784 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2021-11-20 07:26:12,785 INFO L87 Difference]: Start difference. First operand 533 states and 642 transitions. Second operand has 15 states, 15 states have (on average 9.066666666666666) internal successors, (136), 10 states have internal predecessors, (136), 6 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (21), 8 states have call predecessors, (21), 6 states have call successors, (21) [2021-11-20 07:26:14,122 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:26:14,122 INFO L93 Difference]: Finished difference Result 1166 states and 1440 transitions. [2021-11-20 07:26:14,122 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2021-11-20 07:26:14,123 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 9.066666666666666) internal successors, (136), 10 states have internal predecessors, (136), 6 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (21), 8 states have call predecessors, (21), 6 states have call successors, (21) Word has length 106 [2021-11-20 07:26:14,124 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:26:14,130 INFO L225 Difference]: With dead ends: 1166 [2021-11-20 07:26:14,130 INFO L226 Difference]: Without dead ends: 689 [2021-11-20 07:26:14,134 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 282 GetRequests, 239 SyntacticMatches, 1 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 447 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=438, Invalid=1454, Unknown=0, NotChecked=0, Total=1892 [2021-11-20 07:26:14,135 INFO L933 BasicCegarLoop]: 221 mSDtfsCounter, 491 mSDsluCounter, 833 mSDsCounter, 0 mSdLazyCounter, 783 mSolverCounterSat, 254 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 494 SdHoareTripleChecker+Valid, 1054 SdHoareTripleChecker+Invalid, 1037 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 254 IncrementalHoareTripleChecker+Valid, 783 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2021-11-20 07:26:14,135 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [494 Valid, 1054 Invalid, 1037 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [254 Valid, 783 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2021-11-20 07:26:14,137 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 689 states. [2021-11-20 07:26:14,197 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 689 to 602. [2021-11-20 07:26:14,199 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 602 states, 452 states have (on average 1.1991150442477876) internal successors, (542), 484 states have internal predecessors, (542), 77 states have call successors, (77), 66 states have call predecessors, (77), 72 states have return successors, (101), 74 states have call predecessors, (101), 77 states have call successors, (101) [2021-11-20 07:26:14,205 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 602 states to 602 states and 720 transitions. [2021-11-20 07:26:14,206 INFO L78 Accepts]: Start accepts. Automaton has 602 states and 720 transitions. Word has length 106 [2021-11-20 07:26:14,206 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:26:14,206 INFO L470 AbstractCegarLoop]: Abstraction has 602 states and 720 transitions. [2021-11-20 07:26:14,207 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 9.066666666666666) internal successors, (136), 10 states have internal predecessors, (136), 6 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (21), 8 states have call predecessors, (21), 6 states have call successors, (21) [2021-11-20 07:26:14,207 INFO L276 IsEmpty]: Start isEmpty. Operand 602 states and 720 transitions. [2021-11-20 07:26:14,212 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 189 [2021-11-20 07:26:14,212 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:26:14,213 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:26:14,256 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-11-20 07:26:14,433 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-11-20 07:26:14,434 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:26:14,434 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:26:14,434 INFO L85 PathProgramCache]: Analyzing trace with hash -1427499724, now seen corresponding path program 1 times [2021-11-20 07:26:14,434 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:26:14,434 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1490964430] [2021-11-20 07:26:14,434 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:26:14,435 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:26:14,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:14,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 07:26:14,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:14,539 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 07:26:14,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:14,554 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:26:14,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:14,567 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-11-20 07:26:14,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:14,573 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:26:14,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:14,577 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2021-11-20 07:26:14,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:14,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:26:14,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:14,594 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 07:26:14,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:14,598 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-11-20 07:26:14,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:14,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:26:14,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:14,605 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 109 [2021-11-20 07:26:14,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:14,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:26:14,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:14,642 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 07:26:14,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:14,663 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 147 [2021-11-20 07:26:14,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:14,667 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 156 [2021-11-20 07:26:14,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:14,677 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:26:14,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:14,682 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 180 [2021-11-20 07:26:14,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:14,687 INFO L134 CoverageAnalysis]: Checked inductivity of 212 backedges. 83 proven. 3 refuted. 0 times theorem prover too weak. 126 trivial. 0 not checked. [2021-11-20 07:26:14,687 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:26:14,687 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1490964430] [2021-11-20 07:26:14,688 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1490964430] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 07:26:14,688 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1056901477] [2021-11-20 07:26:14,688 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:26:14,688 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 07:26:14,689 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 07:26:14,690 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 07:26:14,709 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-11-20 07:26:14,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:14,855 INFO L263 TraceCheckSpWp]: Trace formula consists of 713 conjuncts, 13 conjunts are in the unsatisfiable core [2021-11-20 07:26:14,864 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:26:15,389 INFO L134 CoverageAnalysis]: Checked inductivity of 212 backedges. 154 proven. 4 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2021-11-20 07:26:15,390 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:26:16,295 INFO L134 CoverageAnalysis]: Checked inductivity of 212 backedges. 77 proven. 39 refuted. 0 times theorem prover too weak. 96 trivial. 0 not checked. [2021-11-20 07:26:16,295 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1056901477] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-20 07:26:16,295 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-20 07:26:16,296 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 10, 11] total 26 [2021-11-20 07:26:16,296 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [62323052] [2021-11-20 07:26:16,296 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-20 07:26:16,298 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2021-11-20 07:26:16,298 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:26:16,299 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2021-11-20 07:26:16,299 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=116, Invalid=534, Unknown=0, NotChecked=0, Total=650 [2021-11-20 07:26:16,300 INFO L87 Difference]: Start difference. First operand 602 states and 720 transitions. Second operand has 26 states, 26 states have (on average 7.576923076923077) internal successors, (197), 21 states have internal predecessors, (197), 9 states have call successors, (31), 8 states have call predecessors, (31), 10 states have return successors, (34), 9 states have call predecessors, (34), 9 states have call successors, (34) [2021-11-20 07:26:19,281 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:26:19,281 INFO L93 Difference]: Finished difference Result 1753 states and 2193 transitions. [2021-11-20 07:26:19,282 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2021-11-20 07:26:19,282 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 7.576923076923077) internal successors, (197), 21 states have internal predecessors, (197), 9 states have call successors, (31), 8 states have call predecessors, (31), 10 states have return successors, (34), 9 states have call predecessors, (34), 9 states have call successors, (34) Word has length 188 [2021-11-20 07:26:19,283 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:26:19,294 INFO L225 Difference]: With dead ends: 1753 [2021-11-20 07:26:19,294 INFO L226 Difference]: Without dead ends: 1159 [2021-11-20 07:26:19,301 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 478 GetRequests, 404 SyntacticMatches, 2 SemanticMatches, 72 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1310 ImplicationChecksByTransitivity, 1.3s TimeCoverageRelationStatistics Valid=976, Invalid=4426, Unknown=0, NotChecked=0, Total=5402 [2021-11-20 07:26:19,302 INFO L933 BasicCegarLoop]: 177 mSDtfsCounter, 1469 mSDsluCounter, 1205 mSDsCounter, 0 mSdLazyCounter, 2325 mSolverCounterSat, 664 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1469 SdHoareTripleChecker+Valid, 1382 SdHoareTripleChecker+Invalid, 2989 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 664 IncrementalHoareTripleChecker+Valid, 2325 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2021-11-20 07:26:19,303 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1469 Valid, 1382 Invalid, 2989 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [664 Valid, 2325 Invalid, 0 Unknown, 0 Unchecked, 1.8s Time] [2021-11-20 07:26:19,306 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1159 states. [2021-11-20 07:26:19,404 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1159 to 1065. [2021-11-20 07:26:19,407 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1065 states, 805 states have (on average 1.1440993788819875) internal successors, (921), 850 states have internal predecessors, (921), 138 states have call successors, (138), 121 states have call predecessors, (138), 121 states have return successors, (160), 127 states have call predecessors, (160), 138 states have call successors, (160) [2021-11-20 07:26:19,417 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1065 states to 1065 states and 1219 transitions. [2021-11-20 07:26:19,418 INFO L78 Accepts]: Start accepts. Automaton has 1065 states and 1219 transitions. Word has length 188 [2021-11-20 07:26:19,418 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:26:19,419 INFO L470 AbstractCegarLoop]: Abstraction has 1065 states and 1219 transitions. [2021-11-20 07:26:19,419 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 7.576923076923077) internal successors, (197), 21 states have internal predecessors, (197), 9 states have call successors, (31), 8 states have call predecessors, (31), 10 states have return successors, (34), 9 states have call predecessors, (34), 9 states have call successors, (34) [2021-11-20 07:26:19,419 INFO L276 IsEmpty]: Start isEmpty. Operand 1065 states and 1219 transitions. [2021-11-20 07:26:19,427 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 209 [2021-11-20 07:26:19,427 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:26:19,428 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:26:19,474 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2021-11-20 07:26:19,641 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2021-11-20 07:26:19,641 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:26:19,642 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:26:19,642 INFO L85 PathProgramCache]: Analyzing trace with hash 1648051732, now seen corresponding path program 1 times [2021-11-20 07:26:19,642 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:26:19,642 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [727531580] [2021-11-20 07:26:19,643 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:26:19,643 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:26:19,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:19,732 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 07:26:19,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:19,744 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 07:26:19,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:19,763 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:26:19,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:19,772 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-11-20 07:26:19,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:19,786 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:26:19,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:19,791 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2021-11-20 07:26:19,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:19,833 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:26:19,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:19,836 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 07:26:19,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:19,842 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-11-20 07:26:19,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:19,848 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:26:19,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:19,854 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-11-20 07:26:19,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:19,876 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2021-11-20 07:26:19,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:19,880 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2021-11-20 07:26:19,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:19,891 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:26:19,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:19,894 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 07:26:19,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:19,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-11-20 07:26:19,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:19,902 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 157 [2021-11-20 07:26:19,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:19,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 167 [2021-11-20 07:26:19,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:19,911 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2021-11-20 07:26:19,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:19,917 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:26:19,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:19,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 200 [2021-11-20 07:26:19,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:19,925 INFO L134 CoverageAnalysis]: Checked inductivity of 258 backedges. 86 proven. 53 refuted. 0 times theorem prover too weak. 119 trivial. 0 not checked. [2021-11-20 07:26:19,925 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:26:19,925 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [727531580] [2021-11-20 07:26:19,926 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [727531580] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 07:26:19,926 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2096368439] [2021-11-20 07:26:19,926 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:26:19,926 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 07:26:19,927 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 07:26:19,930 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 07:26:19,949 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-11-20 07:26:20,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:20,103 INFO L263 TraceCheckSpWp]: Trace formula consists of 762 conjuncts, 10 conjunts are in the unsatisfiable core [2021-11-20 07:26:20,111 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:26:20,689 INFO L134 CoverageAnalysis]: Checked inductivity of 258 backedges. 195 proven. 9 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2021-11-20 07:26:20,690 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:26:21,649 INFO L134 CoverageAnalysis]: Checked inductivity of 258 backedges. 99 proven. 54 refuted. 0 times theorem prover too weak. 105 trivial. 0 not checked. [2021-11-20 07:26:21,649 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2096368439] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-20 07:26:21,649 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-20 07:26:21,649 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 8, 8] total 22 [2021-11-20 07:26:21,650 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [888052273] [2021-11-20 07:26:21,650 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-20 07:26:21,651 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2021-11-20 07:26:21,652 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:26:21,652 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2021-11-20 07:26:21,652 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=394, Unknown=0, NotChecked=0, Total=462 [2021-11-20 07:26:21,653 INFO L87 Difference]: Start difference. First operand 1065 states and 1219 transitions. Second operand has 22 states, 22 states have (on average 10.227272727272727) internal successors, (225), 15 states have internal predecessors, (225), 7 states have call successors, (45), 8 states have call predecessors, (45), 11 states have return successors, (40), 10 states have call predecessors, (40), 7 states have call successors, (40) [2021-11-20 07:26:23,564 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:26:23,564 INFO L93 Difference]: Finished difference Result 2080 states and 2411 transitions. [2021-11-20 07:26:23,564 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-11-20 07:26:23,565 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 10.227272727272727) internal successors, (225), 15 states have internal predecessors, (225), 7 states have call successors, (45), 8 states have call predecessors, (45), 11 states have return successors, (40), 10 states have call predecessors, (40), 7 states have call successors, (40) Word has length 208 [2021-11-20 07:26:23,565 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:26:23,575 INFO L225 Difference]: With dead ends: 2080 [2021-11-20 07:26:23,575 INFO L226 Difference]: Without dead ends: 1119 [2021-11-20 07:26:23,580 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 507 GetRequests, 459 SyntacticMatches, 2 SemanticMatches, 46 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 406 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=449, Invalid=1807, Unknown=0, NotChecked=0, Total=2256 [2021-11-20 07:26:23,581 INFO L933 BasicCegarLoop]: 139 mSDtfsCounter, 687 mSDsluCounter, 482 mSDsCounter, 0 mSdLazyCounter, 1574 mSolverCounterSat, 310 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 691 SdHoareTripleChecker+Valid, 621 SdHoareTripleChecker+Invalid, 1884 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 310 IncrementalHoareTripleChecker+Valid, 1574 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2021-11-20 07:26:23,581 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [691 Valid, 621 Invalid, 1884 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [310 Valid, 1574 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2021-11-20 07:26:23,584 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1119 states. [2021-11-20 07:26:23,673 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1119 to 1063. [2021-11-20 07:26:23,676 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1063 states, 805 states have (on average 1.132919254658385) internal successors, (912), 848 states have internal predecessors, (912), 132 states have call successors, (132), 123 states have call predecessors, (132), 125 states have return successors, (154), 125 states have call predecessors, (154), 132 states have call successors, (154) [2021-11-20 07:26:23,683 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1063 states to 1063 states and 1198 transitions. [2021-11-20 07:26:23,684 INFO L78 Accepts]: Start accepts. Automaton has 1063 states and 1198 transitions. Word has length 208 [2021-11-20 07:26:23,685 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:26:23,685 INFO L470 AbstractCegarLoop]: Abstraction has 1063 states and 1198 transitions. [2021-11-20 07:26:23,685 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 10.227272727272727) internal successors, (225), 15 states have internal predecessors, (225), 7 states have call successors, (45), 8 states have call predecessors, (45), 11 states have return successors, (40), 10 states have call predecessors, (40), 7 states have call successors, (40) [2021-11-20 07:26:23,686 INFO L276 IsEmpty]: Start isEmpty. Operand 1063 states and 1198 transitions. [2021-11-20 07:26:23,692 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 210 [2021-11-20 07:26:23,692 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:26:23,693 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:26:23,737 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-11-20 07:26:23,909 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2021-11-20 07:26:23,909 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:26:23,910 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:26:23,910 INFO L85 PathProgramCache]: Analyzing trace with hash -22386492, now seen corresponding path program 1 times [2021-11-20 07:26:23,910 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:26:23,910 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1787179278] [2021-11-20 07:26:23,910 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:26:23,911 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:26:23,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:24,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 07:26:24,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:24,051 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 07:26:24,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:24,060 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:26:24,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:24,068 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-11-20 07:26:24,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:24,074 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:26:24,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:24,078 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2021-11-20 07:26:24,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:24,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:26:24,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:24,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 07:26:24,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:24,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-11-20 07:26:24,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:24,098 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:26:24,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:24,101 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-11-20 07:26:24,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:24,110 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2021-11-20 07:26:24,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:24,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 120 [2021-11-20 07:26:24,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:24,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:26:24,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:24,136 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 07:26:24,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:24,140 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-11-20 07:26:24,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:24,143 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2021-11-20 07:26:24,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:24,147 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 168 [2021-11-20 07:26:24,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:24,151 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 177 [2021-11-20 07:26:24,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:24,189 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:26:24,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:24,221 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 201 [2021-11-20 07:26:24,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:24,225 INFO L134 CoverageAnalysis]: Checked inductivity of 259 backedges. 73 proven. 31 refuted. 0 times theorem prover too weak. 155 trivial. 0 not checked. [2021-11-20 07:26:24,225 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:26:24,226 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1787179278] [2021-11-20 07:26:24,226 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1787179278] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 07:26:24,226 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [608445163] [2021-11-20 07:26:24,226 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:26:24,227 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 07:26:24,227 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 07:26:24,229 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 07:26:24,260 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2021-11-20 07:26:24,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:24,397 INFO L263 TraceCheckSpWp]: Trace formula consists of 762 conjuncts, 18 conjunts are in the unsatisfiable core [2021-11-20 07:26:24,404 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:26:25,066 INFO L134 CoverageAnalysis]: Checked inductivity of 259 backedges. 138 proven. 26 refuted. 0 times theorem prover too weak. 95 trivial. 0 not checked. [2021-11-20 07:26:25,066 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:26:26,242 INFO L134 CoverageAnalysis]: Checked inductivity of 259 backedges. 99 proven. 45 refuted. 0 times theorem prover too weak. 115 trivial. 0 not checked. [2021-11-20 07:26:26,242 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [608445163] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-20 07:26:26,242 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-20 07:26:26,243 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 8, 13] total 28 [2021-11-20 07:26:26,248 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1617523320] [2021-11-20 07:26:26,248 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-20 07:26:26,251 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2021-11-20 07:26:26,251 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:26:26,253 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2021-11-20 07:26:26,253 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=116, Invalid=640, Unknown=0, NotChecked=0, Total=756 [2021-11-20 07:26:26,254 INFO L87 Difference]: Start difference. First operand 1063 states and 1198 transitions. Second operand has 28 states, 28 states have (on average 9.285714285714286) internal successors, (260), 22 states have internal predecessors, (260), 14 states have call successors, (48), 12 states have call predecessors, (48), 15 states have return successors, (49), 15 states have call predecessors, (49), 14 states have call successors, (49) [2021-11-20 07:26:30,734 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:26:30,734 INFO L93 Difference]: Finished difference Result 2357 states and 2710 transitions. [2021-11-20 07:26:30,735 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 63 states. [2021-11-20 07:26:30,735 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 28 states have (on average 9.285714285714286) internal successors, (260), 22 states have internal predecessors, (260), 14 states have call successors, (48), 12 states have call predecessors, (48), 15 states have return successors, (49), 15 states have call predecessors, (49), 14 states have call successors, (49) Word has length 209 [2021-11-20 07:26:30,736 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:26:30,748 INFO L225 Difference]: With dead ends: 2357 [2021-11-20 07:26:30,748 INFO L226 Difference]: Without dead ends: 1404 [2021-11-20 07:26:30,755 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 551 GetRequests, 463 SyntacticMatches, 1 SemanticMatches, 87 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2019 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=1543, Invalid=6289, Unknown=0, NotChecked=0, Total=7832 [2021-11-20 07:26:30,756 INFO L933 BasicCegarLoop]: 344 mSDtfsCounter, 2403 mSDsluCounter, 1014 mSDsCounter, 0 mSdLazyCounter, 3968 mSolverCounterSat, 1252 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2403 SdHoareTripleChecker+Valid, 1358 SdHoareTripleChecker+Invalid, 5220 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1252 IncrementalHoareTripleChecker+Valid, 3968 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.8s IncrementalHoareTripleChecker+Time [2021-11-20 07:26:30,769 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2403 Valid, 1358 Invalid, 5220 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1252 Valid, 3968 Invalid, 0 Unknown, 0 Unchecked, 2.8s Time] [2021-11-20 07:26:30,772 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1404 states. [2021-11-20 07:26:30,927 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1404 to 1259. [2021-11-20 07:26:30,930 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1259 states, 954 states have (on average 1.128930817610063) internal successors, (1077), 990 states have internal predecessors, (1077), 160 states have call successors, (160), 151 states have call predecessors, (160), 144 states have return successors, (176), 144 states have call predecessors, (176), 160 states have call successors, (176) [2021-11-20 07:26:30,940 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1259 states to 1259 states and 1413 transitions. [2021-11-20 07:26:30,941 INFO L78 Accepts]: Start accepts. Automaton has 1259 states and 1413 transitions. Word has length 209 [2021-11-20 07:26:30,941 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:26:30,941 INFO L470 AbstractCegarLoop]: Abstraction has 1259 states and 1413 transitions. [2021-11-20 07:26:30,942 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 28 states have (on average 9.285714285714286) internal successors, (260), 22 states have internal predecessors, (260), 14 states have call successors, (48), 12 states have call predecessors, (48), 15 states have return successors, (49), 15 states have call predecessors, (49), 14 states have call successors, (49) [2021-11-20 07:26:30,942 INFO L276 IsEmpty]: Start isEmpty. Operand 1259 states and 1413 transitions. [2021-11-20 07:26:30,951 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 264 [2021-11-20 07:26:30,951 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 07:26:30,952 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:26:30,994 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2021-11-20 07:26:31,165 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 07:26:31,165 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 07:26:31,166 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 07:26:31,166 INFO L85 PathProgramCache]: Analyzing trace with hash -161147261, now seen corresponding path program 1 times [2021-11-20 07:26:31,166 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 07:26:31,166 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2025558864] [2021-11-20 07:26:31,166 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:26:31,167 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 07:26:31,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,374 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 07:26:31,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,391 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 07:26:31,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,410 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:26:31,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,422 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-11-20 07:26:31,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,427 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:26:31,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,430 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2021-11-20 07:26:31,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,437 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:26:31,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,440 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 07:26:31,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-11-20 07:26:31,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,446 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 07:26:31,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,450 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-11-20 07:26:31,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,460 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2021-11-20 07:26:31,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 120 [2021-11-20 07:26:31,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,474 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:26:31,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,479 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 07:26:31,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,483 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-11-20 07:26:31,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,486 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2021-11-20 07:26:31,488 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,503 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2021-11-20 07:26:31,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,506 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2021-11-20 07:26:31,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 07:26:31,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-11-20 07:26:31,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,650 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:26:31,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,653 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-11-20 07:26:31,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,657 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 212 [2021-11-20 07:26:31,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,681 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 222 [2021-11-20 07:26:31,682 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,685 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 231 [2021-11-20 07:26:31,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,706 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 07:26:31,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,714 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 255 [2021-11-20 07:26:31,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,720 INFO L134 CoverageAnalysis]: Checked inductivity of 442 backedges. 194 proven. 36 refuted. 0 times theorem prover too weak. 212 trivial. 0 not checked. [2021-11-20 07:26:31,720 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 07:26:31,720 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2025558864] [2021-11-20 07:26:31,720 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2025558864] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 07:26:31,721 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1743174390] [2021-11-20 07:26:31,721 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 07:26:31,721 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 07:26:31,721 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 07:26:31,722 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 07:26:31,745 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2021-11-20 07:26:31,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 07:26:31,905 INFO L263 TraceCheckSpWp]: Trace formula consists of 899 conjuncts, 30 conjunts are in the unsatisfiable core [2021-11-20 07:26:31,915 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 07:26:32,729 INFO L134 CoverageAnalysis]: Checked inductivity of 442 backedges. 155 proven. 89 refuted. 0 times theorem prover too weak. 198 trivial. 0 not checked. [2021-11-20 07:26:32,732 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 07:26:34,178 INFO L134 CoverageAnalysis]: Checked inductivity of 442 backedges. 96 proven. 136 refuted. 0 times theorem prover too weak. 210 trivial. 0 not checked. [2021-11-20 07:26:34,178 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1743174390] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-20 07:26:34,178 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-20 07:26:34,179 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 11, 16] total 31 [2021-11-20 07:26:34,179 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1954579014] [2021-11-20 07:26:34,179 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-20 07:26:34,181 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2021-11-20 07:26:34,181 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 07:26:34,182 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2021-11-20 07:26:34,182 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=175, Invalid=755, Unknown=0, NotChecked=0, Total=930 [2021-11-20 07:26:34,183 INFO L87 Difference]: Start difference. First operand 1259 states and 1413 transitions. Second operand has 31 states, 31 states have (on average 9.935483870967742) internal successors, (308), 27 states have internal predecessors, (308), 18 states have call successors, (59), 13 states have call predecessors, (59), 19 states have return successors, (62), 19 states have call predecessors, (62), 18 states have call successors, (62) [2021-11-20 07:26:36,166 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 07:26:36,167 INFO L93 Difference]: Finished difference Result 1980 states and 2239 transitions. [2021-11-20 07:26:36,167 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-11-20 07:26:36,168 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 31 states have (on average 9.935483870967742) internal successors, (308), 27 states have internal predecessors, (308), 18 states have call successors, (59), 13 states have call predecessors, (59), 19 states have return successors, (62), 19 states have call predecessors, (62), 18 states have call successors, (62) Word has length 263 [2021-11-20 07:26:36,169 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 07:26:36,170 INFO L225 Difference]: With dead ends: 1980 [2021-11-20 07:26:36,170 INFO L226 Difference]: Without dead ends: 0 [2021-11-20 07:26:36,177 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 631 GetRequests, 573 SyntacticMatches, 4 SemanticMatches, 54 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 673 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=681, Invalid=2399, Unknown=0, NotChecked=0, Total=3080 [2021-11-20 07:26:36,178 INFO L933 BasicCegarLoop]: 203 mSDtfsCounter, 1380 mSDsluCounter, 665 mSDsCounter, 0 mSdLazyCounter, 2033 mSolverCounterSat, 557 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1382 SdHoareTripleChecker+Valid, 868 SdHoareTripleChecker+Invalid, 2590 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 557 IncrementalHoareTripleChecker+Valid, 2033 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2021-11-20 07:26:36,179 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1382 Valid, 868 Invalid, 2590 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [557 Valid, 2033 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2021-11-20 07:26:36,180 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-11-20 07:26:36,180 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-11-20 07:26:36,180 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-20 07:26:36,180 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-11-20 07:26:36,181 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 263 [2021-11-20 07:26:36,181 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 07:26:36,181 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-11-20 07:26:36,182 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 31 states have (on average 9.935483870967742) internal successors, (308), 27 states have internal predecessors, (308), 18 states have call successors, (59), 13 states have call predecessors, (59), 19 states have return successors, (62), 19 states have call predecessors, (62), 18 states have call successors, (62) [2021-11-20 07:26:36,182 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-11-20 07:26:36,182 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-11-20 07:26:36,186 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-20 07:26:36,236 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2021-11-20 07:26:36,405 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2021-11-20 07:26:36,407 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-11-20 07:26:56,455 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 610 616) no Hoare annotation was computed. [2021-11-20 07:26:56,456 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 610 616) the Hoare annotation is: true [2021-11-20 07:26:56,456 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 83 94) the Hoare annotation is: (let ((.cse0 (not (< 1 ~waterLevel~0))) (.cse2 (not (= ~pumpRunning~0 0))) (.cse4 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse8 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse1 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse7 (not (<= 0 ~waterLevel~0))) (.cse6 (not (<= 1 ~pumpRunning~0))) (.cse5 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse3 .cse4 (not (<= 2 ~waterLevel~0)) .cse6 .cse5) (or (not (= ~waterLevel~0 1)) .cse1 .cse2 .cse3 .cse4) (or .cse1 (not (<= ~waterLevel~0 0)) .cse2 .cse3 .cse7 .cse4) (or .cse0 .cse2 .cse3 .cse4 .cse8 .cse5) (or .cse2 .cse3 .cse7 .cse4 .cse8 (not (<= ~waterLevel~0 1))) (or .cse1 (= ~methaneLevelCritical~0 0) .cse3 .cse7 .cse6 .cse5 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-11-20 07:26:56,456 INFO L858 garLoopResultBuilder]: For program point L87-1(lines 83 94) no Hoare annotation was computed. [2021-11-20 07:26:56,457 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2021-11-20 07:26:56,457 INFO L858 garLoopResultBuilder]: For program point L897(lines 897 901) no Hoare annotation was computed. [2021-11-20 07:26:56,457 INFO L861 garLoopResultBuilder]: At program point L897-1(lines 897 901) the Hoare annotation is: true [2021-11-20 07:26:56,457 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 883 912) no Hoare annotation was computed. [2021-11-20 07:26:56,458 INFO L858 garLoopResultBuilder]: For program point L894(line 894) no Hoare annotation was computed. [2021-11-20 07:26:56,458 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 883 912) the Hoare annotation is: true [2021-11-20 07:26:56,458 INFO L861 garLoopResultBuilder]: At program point L893-2(lines 893 907) the Hoare annotation is: true [2021-11-20 07:26:56,458 INFO L861 garLoopResultBuilder]: At program point L889(line 889) the Hoare annotation is: true [2021-11-20 07:26:56,458 INFO L858 garLoopResultBuilder]: For program point L889-1(line 889) no Hoare annotation was computed. [2021-11-20 07:26:56,459 INFO L861 garLoopResultBuilder]: At program point L908(lines 883 912) the Hoare annotation is: true [2021-11-20 07:26:56,459 INFO L858 garLoopResultBuilder]: For program point L904(line 904) no Hoare annotation was computed. [2021-11-20 07:26:56,459 INFO L854 garLoopResultBuilder]: At program point L543(lines 536 545) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0)) (.cse14 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse15 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (and .cse14 (< 1 ~waterLevel~0) .cse13 .cse15)) (.cse3 (not (< 1 |old(~waterLevel~0)|))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse11 (and .cse14 .cse13 .cse15)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse12 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse10 (not (<= 0 |old(~waterLevel~0)|))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (and .cse8 .cse13)) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 (not (= |old(~waterLevel~0)| 1)) .cse0 .cse7 (and .cse8 (= ~waterLevel~0 1))) (or .cse6 .cse9 .cse0 .cse10 .cse7 (not (<= |old(~waterLevel~0)| 0))) (or .cse11 .cse0 .cse1 .cse10 .cse7 .cse5 .cse12) (or .cse0 .cse1 .cse2 .cse3 .cse7 .cse5) (or .cse6 .cse9 .cse0 .cse3 .cse7 .cse5) (or .cse11 .cse0 .cse1 .cse10 .cse4 .cse5 .cse12) (or (not (<= |old(~waterLevel~0)| 1)) .cse6 .cse9 .cse0 .cse10 .cse4) (or .cse6 .cse9 .cse0 .cse4 .cse5 (not (<= 2 |old(~waterLevel~0)|)))))) [2021-11-20 07:26:56,459 INFO L858 garLoopResultBuilder]: For program point L155(line 155) no Hoare annotation was computed. [2021-11-20 07:26:56,460 INFO L854 garLoopResultBuilder]: At program point L663(line 663) the Hoare annotation is: (let ((.cse9 (= ~pumpRunning~0 0)) (.cse12 (= 1 ~systemActive~0)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse9 (< 1 ~waterLevel~0) .cse12 .cse13)) (.cse2 (not (< 1 |old(~waterLevel~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (and .cse9 .cse13)) (.cse1 (not .cse12)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (<= 0 |old(~waterLevel~0)|))) (.cse10 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse8 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse6 .cse7 .cse3 .cse4 .cse8) (or .cse1 .cse6 .cse2 .cse3 .cse4) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse3 (and .cse9 (= ~waterLevel~0 1))) (or .cse0 .cse1 .cse2 .cse10 .cse4 .cse5) (or .cse1 .cse6 .cse2 .cse10 .cse4) (or .cse0 .cse11 .cse1 .cse7 .cse3 (not (<= |old(~waterLevel~0)| 0))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse11 .cse1 .cse7 .cse10) (or .cse1 .cse6 .cse7 .cse10 .cse4 .cse8)))) [2021-11-20 07:26:56,461 INFO L854 garLoopResultBuilder]: At program point L663-1(lines 644 668) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0)) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse23 (not (<= 2 |old(~waterLevel~0)|))) (.cse17 (not (= |old(~waterLevel~0)| 1))) (.cse10 (not (= 1 ~systemActive~0))) (.cse11 (not (<= 1 |old(~pumpRunning~0)|))) (.cse15 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse5 (<= ~waterLevel~0 0)) (.cse7 (<= 0 ~waterLevel~0)) (.cse1 (and (or .cse10 .cse11 .cse23 (= |old(~switchedOnBeforeTS~0)| 0)) (or .cse17 .cse10 .cse11 .cse15))) (.cse14 (not (<= |old(~waterLevel~0)| 0))) (.cse19 (not (< 1 |old(~waterLevel~0)|))) (.cse13 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse21 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse22 (<= 1 ~waterLevel~0)) (.cse4 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse20 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse16 (not (= |old(~pumpRunning~0)| 0))) (.cse18 (and .cse8 .cse9)) (.cse12 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5 .cse6 .cse7)) (or (and .cse8 .cse4 .cse9 .cse6) .cse10 .cse11 .cse12 .cse13 .cse14 .cse15) (or .cse16 .cse17 .cse10 .cse13 (and .cse8 (= ~waterLevel~0 1))) (or .cse16 .cse18 .cse10 .cse12 .cse13 .cse14) (or .cse0 (and .cse8 .cse4 .cse5 .cse6 .cse7) .cse1 .cse13) (or .cse16 .cse18 .cse10 .cse19 .cse2 (and (<= 1 ~pumpRunning~0) .cse9) .cse20) (or .cse10 .cse11 .cse12 .cse2 (and .cse3 .cse4 .cse9 .cse6) .cse14 .cse15) (or .cse16 .cse18 .cse10 .cse19 .cse13 .cse20) (or (and .cse8 .cse21 .cse22 .cse4 .cse6) .cse10 .cse11 .cse19 .cse13 .cse20) (or .cse10 .cse11 .cse2 (and .cse3 .cse21 .cse22 .cse4 .cse6) .cse20 .cse23) (or .cse0 .cse16 .cse18 .cse10 .cse12 .cse2)))) [2021-11-20 07:26:56,461 INFO L858 garLoopResultBuilder]: For program point L597-1(lines 597 603) no Hoare annotation was computed. [2021-11-20 07:26:56,461 INFO L854 garLoopResultBuilder]: At program point L556(line 556) the Hoare annotation is: (let ((.cse22 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse2 (not (= 1 ~systemActive~0))) (.cse17 (not (<= 1 |old(~pumpRunning~0)|))) (.cse27 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (= |old(~waterLevel~0)| |timeShift_getWaterLevel_#res#1|)) (.cse6 (< |timeShift___utac_acc__Specification5_spec__3_~tmp~3#1| 2)) (.cse26 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse23 (and .cse4 .cse5 .cse6 .cse26)) (.cse13 (not (<= |old(~waterLevel~0)| 1))) (.cse19 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (<= ~waterLevel~0 0)) (.cse12 (<= 0 ~waterLevel~0)) (.cse14 (and (or .cse2 .cse17 .cse22 (= |old(~switchedOnBeforeTS~0)| 0)) (or .cse1 .cse2 .cse17 .cse27))) (.cse24 (not (<= 0 |old(~waterLevel~0)|))) (.cse25 (not (<= |old(~waterLevel~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse8 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~3#1| ~waterLevel~0)) (.cse20 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse21 (<= 1 ~waterLevel~0)) (.cse9 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse11 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse15 (not (< 1 |old(~waterLevel~0)|))) (.cse18 (not (= ~methaneLevelCritical~0 0))) (.cse16 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5 .cse6 (= ~waterLevel~0 1))) (or (and .cse7 .cse4 .cse8 .cse9 .cse10 .cse11 .cse12) .cse13 .cse14 .cse3) (or .cse0 .cse2 .cse15 .cse3 .cse16) (or .cse2 .cse17 .cse18 (and .cse19 .cse7 .cse8 .cse20 .cse21 .cse9 .cse11) .cse16 .cse22) (or .cse0 .cse23 .cse2 .cse24 .cse3 .cse25) (or .cse2 .cse17 .cse24 .cse18 (and .cse19 .cse5 .cse6 .cse9 .cse26 .cse11) .cse25 .cse27) (or .cse13 .cse0 .cse23 .cse2 .cse24 .cse18) (or .cse13 (and .cse19 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12) .cse14 .cse18) (or .cse2 (and .cse4 .cse5 .cse6 .cse9 .cse26 .cse11) .cse17 .cse24 .cse3 .cse25 .cse27) (or .cse2 .cse17 .cse15 .cse3 (and .cse7 .cse4 .cse8 .cse20 .cse21 .cse9 .cse11) .cse16) (or .cse0 .cse2 .cse15 .cse18 .cse16)))) [2021-11-20 07:26:56,462 INFO L858 garLoopResultBuilder]: For program point L556-1(line 556) no Hoare annotation was computed. [2021-11-20 07:26:56,462 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 583 609) no Hoare annotation was computed. [2021-11-20 07:26:56,462 INFO L854 garLoopResultBuilder]: At program point L156(lines 151 158) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (< 1 |old(~waterLevel~0)|))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= 0 |old(~waterLevel~0)|))) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse0 .cse7 .cse3 .cse4) (or .cse0 .cse1 .cse7 .cse3 .cse4) (or .cse6 .cse0 .cse2 .cse3 (not (<= |old(~waterLevel~0)| 0))) (or .cse6 (not (= |old(~waterLevel~0)| 1)) .cse0 .cse3) (or .cse0 .cse1 .cse7 .cse8 .cse4) (or .cse6 .cse0 .cse7 .cse8 .cse4) (or (not (<= |old(~waterLevel~0)| 1)) .cse6 .cse0 .cse2 .cse8) (or .cse0 .cse1 .cse2 .cse8 .cse4 .cse5))) [2021-11-20 07:26:56,462 INFO L858 garLoopResultBuilder]: For program point L590(lines 590 596) no Hoare annotation was computed. [2021-11-20 07:26:56,463 INFO L858 garLoopResultBuilder]: For program point L590-2(lines 586 608) no Hoare annotation was computed. [2021-11-20 07:26:56,463 INFO L858 garLoopResultBuilder]: For program point L652(lines 652 660) no Hoare annotation was computed. [2021-11-20 07:26:56,463 INFO L858 garLoopResultBuilder]: For program point L648(lines 648 665) no Hoare annotation was computed. [2021-11-20 07:26:56,464 INFO L854 garLoopResultBuilder]: At program point L132(lines 127 135) the Hoare annotation is: (let ((.cse17 (= ~methaneLevelCritical~0 0)) (.cse27 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse7 (= ~pumpRunning~0 0)) (.cse24 (= |old(~waterLevel~0)| |timeShift_getWaterLevel_#res#1|)) (.cse25 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (and .cse7 .cse24 .cse25)) (.cse8 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse9 (<= 1 ~waterLevel~0)) (.cse13 (not (< 1 |old(~waterLevel~0)|))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse15 (not (<= |old(~waterLevel~0)| 1))) (.cse18 (not (<= 1 |old(~waterLevel~0)|))) (.cse6 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse19 (<= ~waterLevel~0 0)) (.cse20 (<= 0 ~waterLevel~0)) (.cse26 (and .cse7 .cse27 .cse25)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse23 (not (<= 2 |old(~waterLevel~0)|))) (.cse22 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse11 (<= 1 ~switchedOnBeforeTS~0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse12 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 0 |old(~waterLevel~0)|))) (.cse16 (not .cse17)) (.cse14 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= |old(~waterLevel~0)| 0))) (.cse21 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or (and .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) .cse2 .cse12 .cse13 .cse4 .cse14) (or .cse15 .cse0 .cse1 .cse2 .cse3 .cse16) (or .cse15 .cse17 .cse2 .cse12 .cse18 .cse4 (and .cse6 .cse7 .cse10 .cse19 .cse11 .cse20) .cse14 .cse21) (or .cse2 .cse12 .cse16 (and .cse22 .cse6 .cse8 .cse9 .cse10 .cse11) .cse14 .cse23) (or .cse17 .cse2 .cse12 .cse3 .cse4 .cse14 (and .cse7 .cse24 .cse10 .cse25 .cse11) .cse5 .cse21) (or .cse26 .cse0 .cse2 .cse13 .cse4 .cse14) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2 (and .cse7 .cse24 (= ~waterLevel~0 1)) .cse4) (or .cse15 .cse2 .cse12 .cse18 .cse16 (and .cse22 .cse6 .cse10 .cse19 .cse11 .cse20) .cse14 .cse21) (or .cse26 .cse0 .cse2 .cse16 (and (<= 1 ~pumpRunning~0) .cse27 .cse25) .cse14 .cse23) (or (and .cse22 .cse24 .cse10 .cse25 .cse11) .cse2 .cse12 .cse3 .cse16 .cse14 .cse5 .cse21)))) [2021-11-20 07:26:56,464 INFO L854 garLoopResultBuilder]: At program point L541(line 541) the Hoare annotation is: (let ((.cse17 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse14 (= ~pumpRunning~0 0)) (.cse15 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse13 (= 1 ~systemActive~0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse16 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse11 (not (<= |old(~waterLevel~0)| 1))) (.cse7 (not (< 1 |old(~waterLevel~0)|))) (.cse12 (and .cse17 .cse14 .cse15 .cse13 .cse2 (<= ~waterLevel~0 2) .cse16)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (and .cse17 .cse15 .cse16)) (.cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse5 (and .cse14 .cse15 .cse16)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse13)) (.cse8 (not (<= 0 |old(~waterLevel~0)|))) (.cse10 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse6 .cse0 .cse7 .cse2 .cse3) (or .cse0 .cse1 .cse8 .cse2 .cse3 .cse4 .cse9) (or .cse0 .cse1 .cse7 .cse10 .cse3 .cse4) (or .cse11 .cse6 .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse10 .cse12) (or .cse5 .cse11 .cse6 .cse0 .cse8 .cse2) (or .cse6 .cse0 .cse7 .cse10 .cse3 .cse12) (or .cse0 .cse1 .cse8 .cse10 .cse3 .cse4 .cse9) (or .cse5 .cse6 .cse0 .cse8 .cse10 (not (<= |old(~waterLevel~0)| 0)))))) [2021-11-20 07:26:56,464 INFO L858 garLoopResultBuilder]: For program point L541-1(line 541) no Hoare annotation was computed. [2021-11-20 07:26:56,464 INFO L858 garLoopResultBuilder]: For program point L558(lines 558 568) no Hoare annotation was computed. [2021-11-20 07:26:56,465 INFO L858 garLoopResultBuilder]: For program point L554(lines 554 571) no Hoare annotation was computed. [2021-11-20 07:26:56,465 INFO L854 garLoopResultBuilder]: At program point L554-1(lines 546 574) the Hoare annotation is: (let ((.cse12 (= ~methaneLevelCritical~0 0)) (.cse15 (= |old(~waterLevel~0)| |timeShift_getWaterLevel_#res#1|)) (.cse29 (<= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|)) (.cse16 (< |timeShift___utac_acc__Specification5_spec__3_~tmp~3#1| 2)) (.cse28 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse14 (= ~pumpRunning~0 0)) (.cse7 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~3#1| 2)) (.cse8 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse17 (= 1 ~systemActive~0)) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse10 (and .cse28 .cse14 .cse7 .cse8 .cse17 .cse9)) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse23 (not (<= 1 |old(~waterLevel~0)|))) (.cse6 (not (< 1 |old(~waterLevel~0)|))) (.cse11 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (<= 0 |old(~waterLevel~0)|))) (.cse20 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (and .cse28 .cse14 .cse15 .cse29 .cse16 .cse17 .cse9)) (.cse21 (not (<= |old(~waterLevel~0)| 0))) (.cse2 (not .cse17)) (.cse13 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not .cse12)) (.cse24 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse25 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~3#1| ~waterLevel~0)) (.cse18 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse26 (<= ~waterLevel~0 0)) (.cse19 (<= 1 ~switchedOnBeforeTS~0)) (.cse27 (<= 0 ~waterLevel~0)) (.cse22 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse2 .cse6 .cse4 (and (<= 1 ~pumpRunning~0) .cse7 .cse8 .cse9) .cse10 .cse11) (or .cse12 .cse2 .cse13 .cse3 (and .cse1 .cse14 .cse15 .cse16 .cse17 .cse18 .cse9 .cse19) .cse20 .cse11 .cse21 .cse22) (or .cse1 .cse2 .cse6 .cse20 .cse10 .cse11) (or .cse0 .cse12 .cse2 .cse13 .cse23 .cse20 (and .cse24 .cse1 .cse14 .cse25 .cse17 .cse18 .cse26 .cse19 .cse27) .cse11 .cse22) (or (and .cse28 .cse24 .cse1 .cse29 .cse25 .cse17 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0) .cse18 .cse19) .cse2 .cse13 .cse4 .cse11 (not (<= 2 |old(~waterLevel~0)|))) (or (and .cse28 .cse1 .cse15 .cse29 .cse16 .cse17 .cse18 .cse9 .cse19) .cse2 .cse13 .cse3 .cse4 .cse21 .cse22) (or .cse0 .cse1 .cse2 .cse23 .cse20 .cse5) (or .cse2 .cse13 .cse6 .cse20 (and .cse24 .cse1 .cse14 .cse25 .cse17 .cse18 (= ~waterLevel~0 1) .cse19) .cse11) (or .cse1 .cse2 .cse3 .cse20 .cse5 .cse21) (or (not (= |old(~waterLevel~0)| 1)) .cse2 .cse13 .cse4 (and .cse28 .cse24 .cse1 .cse29 .cse25 .cse17 .cse18 .cse26 .cse19 .cse27) .cse22)))) [2021-11-20 07:26:56,465 INFO L858 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2021-11-20 07:26:56,466 INFO L854 garLoopResultBuilder]: At program point L63-2(lines 59 70) the Hoare annotation is: (let ((.cse12 (= ~methaneLevelCritical~0 0)) (.cse16 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse17 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse3 (and .cse16 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0) .cse17)) (.cse11 (and .cse16 (= |old(~waterLevel~0)| ~waterLevel~0) .cse17)) (.cse9 (not (<= |old(~waterLevel~0)| 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (not (= |old(~waterLevel~0)| 1))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse15 (and .cse16 (<= ~waterLevel~0 0) .cse17 (<= 0 ~waterLevel~0))) (.cse13 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse6 (not (< 1 |old(~waterLevel~0)|))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse14 (not (<= |old(~waterLevel~0)| 1))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse8 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not .cse12))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse0 .cse6 .cse7 .cse4) (or .cse5 .cse0 .cse8 .cse7 .cse9) (or .cse0 .cse1 .cse6 .cse7 .cse3 .cse4) (or .cse5 .cse10 .cse0 .cse7) (or .cse11 .cse12 .cse0 .cse1 .cse8 .cse7 .cse4 .cse9 .cse13) (or .cse11 .cse0 .cse1 .cse8 .cse2 .cse9 .cse13) (or .cse14 .cse12 .cse0 .cse1 (not (<= 1 |old(~waterLevel~0)|)) .cse7 .cse4 .cse15 .cse13) (or .cse10 .cse0 .cse1 .cse2 .cse15 .cse13) (or .cse5 .cse0 .cse6 .cse2 .cse4) (or .cse14 .cse5 .cse0 .cse8 .cse2)))) [2021-11-20 07:26:56,466 INFO L854 garLoopResultBuilder]: At program point L699(lines 694 701) the Hoare annotation is: (let ((.cse7 (not (<= |old(~waterLevel~0)| 0))) (.cse10 (not (< 1 |old(~waterLevel~0)|))) (.cse12 (not (= |old(~waterLevel~0)| 1))) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= 0 |old(~waterLevel~0)|))) (.cse13 (not (= ~methaneLevelCritical~0 0))) (.cse11 (not (<= |old(~waterLevel~0)| 2))) (.cse8 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or (and .cse0 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) .cse2) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse9 .cse3 .cse10 .cse6 .cse11) (or .cse9 .cse3 .cse5 .cse6 .cse7) (or .cse9 .cse12 .cse3 .cse6) (or .cse3 .cse4 .cse10 .cse13 .cse11) (or (and .cse0 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0) .cse1 .cse2) .cse3 .cse4 .cse10 .cse6 .cse11) (or .cse9 .cse3 .cse10 .cse13 .cse11) (or .cse12 .cse3 .cse4 (and .cse0 .cse1 (<= ~waterLevel~0 0) .cse2 (<= 0 ~waterLevel~0)) .cse6 .cse8) (or (not (<= |old(~waterLevel~0)| 1)) .cse9 .cse3 .cse5 .cse13) (or .cse3 .cse4 .cse5 .cse13 .cse11 .cse8))) [2021-11-20 07:26:56,467 INFO L854 garLoopResultBuilder]: At program point L658(line 658) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (<= |old(~waterLevel~0)| 0))) (.cse7 (not (< 1 |old(~waterLevel~0)|))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 0 |old(~waterLevel~0)|))) (.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (not (= ~methaneLevelCritical~0 0))) (.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse13 (<= 1 ~switchedOnBeforeTS~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse0 .cse7 .cse3 .cse4) (or .cse0 .cse1 .cse7 .cse3 .cse4) (or .cse6 .cse0 .cse2 .cse3 .cse8) (or .cse6 .cse9 .cse0 .cse3) (or .cse0 .cse1 .cse2 .cse10 (and .cse11 .cse12 (= |old(~waterLevel~0)| ~waterLevel~0) .cse13) .cse8 .cse5) (or .cse6 .cse0 .cse7 .cse10 .cse4) (or (not (<= |old(~waterLevel~0)| 1)) .cse6 .cse0 .cse2 .cse10) (or .cse9 .cse0 .cse1 .cse10 (and .cse11 .cse12 (<= ~waterLevel~0 0) .cse13 (<= 0 ~waterLevel~0)) .cse5) (or .cse0 .cse1 .cse10 (and .cse11 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0) .cse12 .cse13) .cse4 (not (<= 2 |old(~waterLevel~0)|))))) [2021-11-20 07:26:56,467 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 583 609) the Hoare annotation is: (let ((.cse17 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse14 (= ~pumpRunning~0 0)) (.cse15 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse13 (= 1 ~systemActive~0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse16 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse11 (not (<= |old(~waterLevel~0)| 1))) (.cse7 (not (< 1 |old(~waterLevel~0)|))) (.cse12 (and .cse17 .cse14 .cse15 .cse13 .cse2 (<= ~waterLevel~0 2) .cse16)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (and .cse17 .cse15 .cse16)) (.cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse5 (and .cse14 .cse15 .cse16)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse13)) (.cse8 (not (<= 0 |old(~waterLevel~0)|))) (.cse10 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse6 .cse0 .cse7 .cse2 .cse3) (or .cse0 .cse1 .cse8 .cse2 .cse3 .cse4 .cse9) (or .cse0 .cse1 .cse7 .cse10 .cse3 .cse4) (or .cse11 .cse6 .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse10 .cse12) (or .cse5 .cse11 .cse6 .cse0 .cse8 .cse2) (or .cse6 .cse0 .cse7 .cse10 .cse3 .cse12) (or .cse0 .cse1 .cse8 .cse10 .cse3 .cse4 .cse9) (or .cse5 .cse6 .cse0 .cse8 .cse10 (not (<= |old(~waterLevel~0)| 0)))))) [2021-11-20 07:26:56,467 INFO L858 garLoopResultBuilder]: For program point L559(lines 559 565) no Hoare annotation was computed. [2021-11-20 07:26:56,467 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 583 609) no Hoare annotation was computed. [2021-11-20 07:26:56,468 INFO L854 garLoopResultBuilder]: At program point L650(line 650) the Hoare annotation is: (let ((.cse12 (= ~methaneLevelCritical~0 0)) (.cse16 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse17 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse3 (and .cse16 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0) .cse17)) (.cse11 (and .cse16 (= |old(~waterLevel~0)| ~waterLevel~0) .cse17)) (.cse9 (not (<= |old(~waterLevel~0)| 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (not (= |old(~waterLevel~0)| 1))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse15 (and .cse16 (<= ~waterLevel~0 0) .cse17 (<= 0 ~waterLevel~0))) (.cse13 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse6 (not (< 1 |old(~waterLevel~0)|))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse14 (not (<= |old(~waterLevel~0)| 1))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse8 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not .cse12))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse0 .cse6 .cse7 .cse4) (or .cse5 .cse0 .cse8 .cse7 .cse9) (or .cse0 .cse1 .cse6 .cse7 .cse3 .cse4) (or .cse5 .cse10 .cse0 .cse7) (or .cse11 .cse12 .cse0 .cse1 .cse8 .cse7 .cse4 .cse9 .cse13) (or .cse11 .cse0 .cse1 .cse8 .cse2 .cse9 .cse13) (or .cse14 .cse12 .cse0 .cse1 (not (<= 1 |old(~waterLevel~0)|)) .cse7 .cse4 .cse15 .cse13) (or .cse10 .cse0 .cse1 .cse2 .cse15 .cse13) (or .cse5 .cse0 .cse6 .cse2 .cse4) (or .cse14 .cse5 .cse0 .cse8 .cse2)))) [2021-11-20 07:26:56,468 INFO L858 garLoopResultBuilder]: For program point L650-1(line 650) no Hoare annotation was computed. [2021-11-20 07:26:56,468 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 155) no Hoare annotation was computed. [2021-11-20 07:26:56,469 INFO L854 garLoopResultBuilder]: At program point L832(lines 789 834) the Hoare annotation is: (let ((.cse2 (<= 2 ~waterLevel~0)) (.cse5 (<= ~waterLevel~0 2)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse10 (<= ~waterLevel~0 1)) (.cse11 (<= 1 ~waterLevel~0)) (.cse8 (<= ~waterLevel~0 0)) (.cse9 (<= 0 ~waterLevel~0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse12 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse6 .cse2 .cse3 .cse4 .cse5) (and .cse7 .cse6 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse6 .cse3 .cse4 .cse8 .cse9) (and .cse0 .cse1 .cse10 .cse3 .cse4 .cse11) (and .cse0 .cse1 .cse3 .cse4 .cse8 .cse9) (and .cse0 .cse6 .cse10 .cse3 .cse4 .cse11) (and .cse7 .cse6 .cse3 .cse4 .cse8 .cse12 .cse9) (and .cse7 .cse6 .cse3 .cse4 (= ~waterLevel~0 1) .cse12))) [2021-11-20 07:26:56,469 INFO L858 garLoopResultBuilder]: For program point L799(lines 799 805) no Hoare annotation was computed. [2021-11-20 07:26:56,469 INFO L858 garLoopResultBuilder]: For program point L799-1(lines 799 805) no Hoare annotation was computed. [2021-11-20 07:26:56,469 INFO L861 garLoopResultBuilder]: At program point L952(lines 944 954) the Hoare annotation is: true [2021-11-20 07:26:56,470 INFO L858 garLoopResultBuilder]: For program point L791(lines 791 795) no Hoare annotation was computed. [2021-11-20 07:26:56,470 INFO L858 garLoopResultBuilder]: For program point L965(lines 965 972) no Hoare annotation was computed. [2021-11-20 07:26:56,470 INFO L858 garLoopResultBuilder]: For program point L965-2(lines 965 972) no Hoare annotation was computed. [2021-11-20 07:26:56,470 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-11-20 07:26:56,470 INFO L854 garLoopResultBuilder]: At program point L862(lines 858 864) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 07:26:56,471 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-11-20 07:26:56,471 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-11-20 07:26:56,471 INFO L858 garLoopResultBuilder]: For program point L825(lines 825 829) no Hoare annotation was computed. [2021-11-20 07:26:56,471 INFO L854 garLoopResultBuilder]: At program point L825-2(lines 819 830) the Hoare annotation is: (let ((.cse2 (<= ~waterLevel~0 1)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse9 (< 1 ~waterLevel~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse10 (<= ~waterLevel~0 2)) (.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (<= 0 ~waterLevel~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse3 .cse4 (= ~waterLevel~0 1)) (and .cse7 .cse8 .cse9 .cse3 .cse4 .cse10) (and .cse0 .cse1 .cse9 .cse3 .cse4 .cse10) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse6) (and .cse7 .cse1 .cse9 .cse3 .cse4 .cse10) (and .cse7 .cse8 .cse3 .cse4 (<= ~waterLevel~0 0) .cse6) (and .cse0 .cse8 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse10) (and .cse0 .cse8 .cse3 .cse4 .cse10 .cse5 .cse6))) [2021-11-20 07:26:56,472 INFO L861 garLoopResultBuilder]: At program point L974(lines 955 977) the Hoare annotation is: true [2021-11-20 07:26:56,472 INFO L854 garLoopResultBuilder]: At program point L941(lines 937 943) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 07:26:56,472 INFO L858 garLoopResultBuilder]: For program point L809(lines 809 815) no Hoare annotation was computed. [2021-11-20 07:26:56,472 INFO L858 garLoopResultBuilder]: For program point L809-1(lines 809 815) no Hoare annotation was computed. [2021-11-20 07:26:56,472 INFO L861 garLoopResultBuilder]: At program point L838(lines 779 842) the Hoare annotation is: true [2021-11-20 07:26:56,473 INFO L854 garLoopResultBuilder]: At program point L801(line 801) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse6 (<= 2 ~waterLevel~0)) (.cse7 (<= ~waterLevel~0 2)) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (<= ~waterLevel~0 1)) (.cse10 (<= ~waterLevel~0 0)) (.cse5 (<= 0 ~waterLevel~0)) (.cse9 (<= 1 ~pumpRunning~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse11 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse3 .cse4 .cse7) (and .cse0 .cse8 .cse6 .cse3 .cse4 .cse7) (and .cse9 .cse8 .cse6 .cse3 .cse4 .cse7) (and .cse0 .cse8 .cse3 .cse4 .cse10 .cse5) (and .cse0 .cse8 .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0)) (and .cse9 .cse8 .cse3 .cse4 .cse10 .cse11 .cse5) (and .cse9 .cse8 .cse3 .cse4 (= ~waterLevel~0 1) .cse11))) [2021-11-20 07:26:56,473 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-11-20 07:26:56,473 INFO L854 garLoopResultBuilder]: At program point L533(lines 528 535) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 07:26:56,473 INFO L854 garLoopResultBuilder]: At program point L835(lines 788 836) the Hoare annotation is: false [2021-11-20 07:26:56,474 INFO L858 garLoopResultBuilder]: For program point L790(lines 789 834) no Hoare annotation was computed. [2021-11-20 07:26:56,474 INFO L858 garLoopResultBuilder]: For program point L819(lines 819 830) no Hoare annotation was computed. [2021-11-20 07:26:56,474 INFO L854 garLoopResultBuilder]: At program point L877(lines 872 880) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 07:26:56,474 INFO L854 garLoopResultBuilder]: At program point L811(line 811) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse5 (<= 0 ~waterLevel~0)) (.cse8 (< 1 ~waterLevel~0)) (.cse9 (<= ~waterLevel~0 2)) (.cse0 (= ~pumpRunning~0 0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse2 (<= ~waterLevel~0 1)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and .cse0 .cse1 .cse8 .cse3 .cse4 .cse9) (and .cse6 .cse7 .cse8 .cse3 .cse4 .cse9) (and .cse0 .cse7 .cse3 .cse4 (<= ~waterLevel~0 0) .cse5) (and .cse0 .cse7 .cse8 .cse3 .cse4 .cse9) (and .cse0 .cse7 .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0)))) [2021-11-20 07:26:56,475 INFO L854 garLoopResultBuilder]: At program point L869(lines 865 871) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 07:26:56,475 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2021-11-20 07:26:56,475 INFO L858 garLoopResultBuilder]: For program point L75-1(lines 71 82) no Hoare annotation was computed. [2021-11-20 07:26:56,475 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 71 82) the Hoare annotation is: (let ((.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse10 (not (<= |old(~waterLevel~0)| 0))) (.cse8 (not (= |old(~waterLevel~0)| 1))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 1 ~pumpRunning~0))) (.cse11 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse9 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse6 .cse7 .cse3 .cse4 .cse5) (or .cse0 .cse8 .cse1 .cse6 .cse3) (or .cse0 .cse1 .cse6 .cse3 .cse4 .cse5) (or .cse1 .cse9 .cse6 .cse7 .cse3 .cse10 .cse11) (or .cse0 .cse1 .cse9 .cse6 .cse3 .cse10) (or .cse8 .cse1 .cse6 .cse7 (= ~waterLevel~0 1) .cse11) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse9 .cse2 .cse3))) [2021-11-20 07:26:56,476 INFO L854 garLoopResultBuilder]: At program point L632(line 632) the Hoare annotation is: (let ((.cse12 (= 1 ~systemActive~0))) (let ((.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (<= 1 ~waterLevel~0))) (.cse9 (not (<= ~waterLevel~0 1))) (.cse7 (not (<= ~waterLevel~0 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) .cse12 (= |processEnvironment__wrappee__methaneQuery_~tmp~4#1| 0))) (.cse1 (not (<= ~waterLevel~0 0))) (.cse2 (not .cse12)) (.cse3 (not (<= 0 ~waterLevel~0))) (.cse10 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse11 (not (<= 1 ~switchedOnBeforeTS~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse3 .cse6 .cse5) (or .cse0 .cse2 (not (<= 2 ~waterLevel~0)) .cse6 .cse5 .cse7) (or .cse0 .cse2 .cse8 .cse6 .cse5 .cse9) (or .cse2 .cse10 .cse8 .cse4 .cse9 .cse11) (or (not (< 1 ~waterLevel~0)) .cse0 .cse2 .cse4 .cse5 .cse7) (or (not (= ~waterLevel~0 1)) .cse0 .cse2 .cse4 .cse5) (or .cse1 .cse2 .cse3 .cse10 .cse4 .cse11)))) [2021-11-20 07:26:56,476 INFO L858 garLoopResultBuilder]: For program point L626(lines 626 634) no Hoare annotation was computed. [2021-11-20 07:26:56,476 INFO L854 garLoopResultBuilder]: At program point L145(lines 136 149) the Hoare annotation is: (let ((.cse12 (= ~pumpRunning~0 0))) (let ((.cse7 (not (<= 1 ~waterLevel~0))) (.cse8 (not (<= ~waterLevel~0 1))) (.cse4 (and (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|) .cse12)) (.cse1 (not (<= ~waterLevel~0 0))) (.cse3 (not (<= 0 ~waterLevel~0))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse9 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse11 (not (< 1 ~waterLevel~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse10 (not (<= 1 ~methaneLevelCritical~0))) (.cse13 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse2 .cse6 .cse7 .cse5 .cse8 .cse9) (or (not (= ~waterLevel~0 1)) .cse0 .cse2 .cse4 .cse10) (or .cse0 .cse2 .cse7 .cse4 .cse5 .cse8) (or .cse11 .cse0 .cse12 .cse2 .cse5 .cse13) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse10) (or .cse1 .cse2 .cse3 .cse6 .cse5 .cse9) (or .cse11 .cse0 .cse12 .cse2 .cse10 .cse13)))) [2021-11-20 07:26:56,477 INFO L858 garLoopResultBuilder]: For program point L622(lines 622 639) no Hoare annotation was computed. [2021-11-20 07:26:56,477 INFO L858 garLoopResultBuilder]: For program point L684(lines 684 690) no Hoare annotation was computed. [2021-11-20 07:26:56,477 INFO L854 garLoopResultBuilder]: At program point L682(line 682) the Hoare annotation is: (let ((.cse1 (not (<= ~waterLevel~0 0))) (.cse3 (not (<= 0 ~waterLevel~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse10 (not (< 1 ~waterLevel~0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse11 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0))) (.cse12 (not (<= ~waterLevel~0 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 1 ~waterLevel~0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (<= ~waterLevel~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse2 .cse5 .cse6 .cse7 .cse8 .cse9) (or .cse0 .cse2 .cse6 .cse7 .cse8) (or .cse0 .cse1 .cse2 .cse3 .cse7) (or .cse10 .cse0 .cse2 .cse4 .cse11 .cse12) (or .cse1 .cse2 .cse3 .cse5 .cse7 .cse9) (or .cse10 .cse0 .cse2 .cse7 .cse11 .cse12) (or .cse0 .cse2 .cse6 .cse4 .cse8))) [2021-11-20 07:26:56,478 INFO L854 garLoopResultBuilder]: At program point L684-2(lines 677 693) the Hoare annotation is: (let ((.cse10 (not (<= ~waterLevel~0 2))) (.cse11 (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~6#1| ~methaneLevelCritical~0)) (.cse1 (not (<= ~waterLevel~0 0))) (.cse3 (not (<= 0 ~waterLevel~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse9 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 1 ~waterLevel~0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (<= ~waterLevel~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse2 .cse5 .cse6 .cse7 .cse8 .cse9) (or .cse0 .cse2 .cse6 .cse7 .cse8) (or (not (< 1 ~waterLevel~0)) .cse0 .cse2 .cse7 .cse10 (and (<= 1 ~pumpRunning~0) .cse11)) (or .cse0 .cse1 .cse2 .cse3 .cse7) (or .cse0 .cse2 (not (<= 2 ~waterLevel~0)) .cse4 .cse10 (and (= ~pumpRunning~0 0) .cse11)) (or .cse1 .cse2 .cse3 .cse5 .cse7 .cse9) (or .cse0 .cse2 .cse6 .cse4 .cse8))) [2021-11-20 07:26:56,478 INFO L858 garLoopResultBuilder]: For program point L682-1(line 682) no Hoare annotation was computed. [2021-11-20 07:26:56,478 INFO L854 garLoopResultBuilder]: At program point L773(lines 758 776) the Hoare annotation is: (let ((.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse14 (= ~pumpRunning~0 0))) (let ((.cse7 (not (<= 1 ~waterLevel~0))) (.cse9 (not (<= ~waterLevel~0 1))) (.cse4 (and (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0) .cse13 .cse14 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (<= ~waterLevel~0 0))) (.cse3 (not (<= 0 ~waterLevel~0))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse11 (and .cse13 .cse14)) (.cse12 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse2 .cse6 .cse7 .cse8 .cse9 .cse10) (or .cse0 .cse2 (not (<= 2 ~waterLevel~0)) .cse5 .cse11 .cse12) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse8) (or .cse0 .cse2 .cse7 .cse4 .cse8 .cse9) (or (not (= ~waterLevel~0 1)) .cse0 .cse2 .cse4 .cse5) (or .cse1 .cse2 .cse3 .cse6 .cse8 .cse10) (or (not (< 1 ~waterLevel~0)) .cse0 .cse2 .cse8 .cse11 .cse12)))) [2021-11-20 07:26:56,478 INFO L854 garLoopResultBuilder]: At program point L674(lines 669 676) the Hoare annotation is: (let ((.cse10 (not (< 1 ~waterLevel~0))) (.cse11 (not (<= ~waterLevel~0 2))) (.cse1 (not (<= ~waterLevel~0 0))) (.cse3 (not (<= 0 ~waterLevel~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse9 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 1 ~waterLevel~0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (<= ~waterLevel~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse2 .cse5 .cse6 .cse7 .cse8 .cse9) (or .cse0 .cse2 .cse6 .cse7 .cse8) (or .cse10 .cse0 .cse2 .cse4 .cse11) (or .cse10 .cse0 .cse2 .cse7 .cse11 (and (<= 1 ~pumpRunning~0) (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~6#1| ~methaneLevelCritical~0))) (or .cse0 .cse1 .cse2 .cse3 .cse7) (or .cse1 .cse2 .cse3 .cse5 .cse7 .cse9) (or .cse0 .cse2 .cse6 .cse4 .cse8))) [2021-11-20 07:26:56,479 INFO L858 garLoopResultBuilder]: For program point L767(lines 767 771) no Hoare annotation was computed. [2021-11-20 07:26:56,479 INFO L858 garLoopResultBuilder]: For program point L767-2(lines 767 771) no Hoare annotation was computed. [2021-11-20 07:26:56,479 INFO L854 garLoopResultBuilder]: At program point L637(line 637) the Hoare annotation is: (let ((.cse8 (not (< 1 ~waterLevel~0))) (.cse9 (not (<= ~waterLevel~0 2))) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= ~waterLevel~0 0))) (.cse3 (not (<= 0 ~waterLevel~0))) (.cse11 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse12 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 ~waterLevel~0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (<= ~waterLevel~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse2 .cse5 .cse6 .cse7) (or .cse8 .cse0 .cse2 .cse4 .cse9) (or .cse8 .cse0 .cse2 .cse6 .cse9) (or .cse10 .cse2 .cse11 .cse5 .cse6 .cse7 .cse12) (or .cse0 .cse1 .cse2 .cse3 .cse6) (or .cse10 .cse1 .cse2 .cse3 .cse11 .cse6 .cse12) (or .cse0 .cse2 .cse5 .cse4 .cse7))) [2021-11-20 07:26:56,479 INFO L858 garLoopResultBuilder]: For program point L637-1(lines 618 642) no Hoare annotation was computed. [2021-11-20 07:26:56,480 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 618 642) the Hoare annotation is: (let ((.cse7 (not (<= 1 ~waterLevel~0))) (.cse8 (not (<= ~waterLevel~0 1))) (.cse4 (not (<= ~waterLevel~0 2))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (not (<= ~waterLevel~0 0))) (.cse11 (not (<= 0 ~waterLevel~0))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse9 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse12 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3 .cse4) (or .cse5 .cse2 .cse6 .cse7 .cse3 .cse8 .cse9) (or .cse0 .cse1 .cse10 .cse2 .cse11 .cse3) (or .cse0 .cse1 .cse2 .cse7 .cse3 .cse8) (or .cse0 .cse1 .cse10 .cse2 .cse11 .cse12) (or (not (< 1 ~waterLevel~0)) .cse0 .cse1 .cse2 .cse12 .cse4) (or .cse5 .cse10 .cse2 .cse11 .cse6 .cse3 .cse9) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse12))) [2021-11-20 07:26:56,480 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 146) no Hoare annotation was computed. [2021-11-20 07:26:56,480 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 618 642) no Hoare annotation was computed. [2021-11-20 07:26:56,480 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 713 721) no Hoare annotation was computed. [2021-11-20 07:26:56,481 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 713 721) the Hoare annotation is: true [2021-11-20 07:26:56,481 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 713 721) no Hoare annotation was computed. [2021-11-20 07:26:56,481 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 702 712) the Hoare annotation is: true [2021-11-20 07:26:56,481 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 702 712) no Hoare annotation was computed. [2021-11-20 07:26:56,481 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 702 712) no Hoare annotation was computed. [2021-11-20 07:26:56,482 INFO L854 garLoopResultBuilder]: At program point L100(lines 95 103) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 0))) (.cse2 (not (<= 0 ~waterLevel~0))) (.cse8 (not (= ~waterLevel~0 1))) (.cse4 (not (<= 1 ~pumpRunning~0))) (.cse6 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse10 (not (<= 2 ~waterLevel~0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse11 (not (<= ~waterLevel~0 2))) (.cse5 (= |isMethaneAlarm_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse7 .cse4 .cse5 .cse6) (or .cse8 .cse1 .cse3 .cse4 .cse5 .cse6) (or .cse8 .cse1 .cse7 .cse4 .cse5 .cse6) (or .cse9 .cse1 .cse10 .cse3 .cse11 .cse5) (or .cse9 .cse1 .cse10 .cse7 .cse11 .cse5))) [2021-11-20 07:26:56,486 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 07:26:56,488 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-20 07:26:56,565 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 07:26:56 BoogieIcfgContainer [2021-11-20 07:26:56,566 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-20 07:26:56,566 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-20 07:26:56,567 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-20 07:26:56,567 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-20 07:26:56,567 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 07:26:06" (3/4) ... [2021-11-20 07:26:56,571 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-11-20 07:26:56,579 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-11-20 07:26:56,579 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-11-20 07:26:56,579 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-11-20 07:26:56,579 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-11-20 07:26:56,580 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-11-20 07:26:56,580 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-11-20 07:26:56,580 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-11-20 07:26:56,580 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-11-20 07:26:56,592 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 50 nodes and edges [2021-11-20 07:26:56,593 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-11-20 07:26:56,594 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-11-20 07:26:56,594 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-11-20 07:26:56,595 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-11-20 07:26:56,596 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-20 07:26:56,596 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-20 07:26:56,627 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && 1 < waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && 1 < waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2021-11-20 07:26:56,628 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) [2021-11-20 07:26:56,628 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == \result) && pumpRunning <= tmp___0) && tmp < 2) && 1 == systemActive) && \old(waterLevel) == waterLevel)) && ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || (((1 <= pumpRunning && tmp == 2) && 2 == \result) && \old(waterLevel) == waterLevel)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp == 2) && 2 == \result) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && \old(waterLevel) == \result) && tmp < 2) && 1 == systemActive) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp == 2) && 2 == \result) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && tmp <= waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && pumpRunning <= tmp___0) && tmp <= waterLevel) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((((((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && \old(waterLevel) == \result) && pumpRunning <= tmp___0) && tmp < 2) && 1 == systemActive) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == \result) && pumpRunning <= tmp___0) && tmp < 2) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && tmp <= waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == \result) && pumpRunning <= tmp___0) && tmp < 2) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 0))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && pumpRunning <= tmp___0) && tmp <= waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS))) [2021-11-20 07:26:56,629 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!(\old(waterLevel) <= 1) || ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) && (((((((((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((!(\old(waterLevel) <= 1) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))))) || !(1 <= methaneLevelCritical))) && ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((((((((pumpRunning == 0 && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) [2021-11-20 07:26:56,629 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2021-11-20 07:26:56,633 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \old(waterLevel) == \result) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) && ((((((((((\result <= waterLevel && pumpRunning == 0) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((pumpRunning == 0 && \old(waterLevel) == \result) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && ((((((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((\result <= waterLevel && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && \old(waterLevel) == \result) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((pumpRunning == 0 && \old(waterLevel) == \result) && waterLevel == 1)) || !(1 <= methaneLevelCritical))) && (((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == \result) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) [2021-11-20 07:26:56,634 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((((((((pumpRunning == 0 && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2021-11-20 07:26:56,634 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(waterLevel <= 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS)) && ((((((!(waterLevel <= 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(waterLevel == 1) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(waterLevel == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || \result == methaneLevelCritical)) && (((((!(pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || \result == methaneLevelCritical) [2021-11-20 07:26:56,635 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) || !(methaneLevelCritical == 0)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical))) && (((((!(waterLevel <= 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= switchedOnBeforeTS))) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) [2021-11-20 07:26:56,635 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && tmp == methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || (pumpRunning == 0 && tmp == methaneLevelCritical))) && (((((!(waterLevel <= 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) [2021-11-20 07:26:56,635 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && ((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2))) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && tmp == methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0))) && (((((!(waterLevel <= 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) [2021-11-20 07:26:56,636 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || (((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || (((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && \result == 0)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && \result == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical))) && (((((!(waterLevel <= 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= switchedOnBeforeTS))) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(waterLevel <= 2)) [2021-11-20 07:26:56,696 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/witness.graphml [2021-11-20 07:26:56,696 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-20 07:26:56,697 INFO L158 Benchmark]: Toolchain (without parser) took 51829.27ms. Allocated memory was 90.2MB in the beginning and 281.0MB in the end (delta: 190.8MB). Free memory was 50.7MB in the beginning and 214.8MB in the end (delta: -164.1MB). Peak memory consumption was 26.5MB. Max. memory is 16.1GB. [2021-11-20 07:26:56,698 INFO L158 Benchmark]: CDTParser took 0.34ms. Allocated memory is still 90.2MB. Free memory is still 67.9MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-20 07:26:56,699 INFO L158 Benchmark]: CACSL2BoogieTranslator took 726.30ms. Allocated memory is still 90.2MB. Free memory was 50.5MB in the beginning and 58.0MB in the end (delta: -7.5MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2021-11-20 07:26:56,699 INFO L158 Benchmark]: Boogie Procedure Inliner took 79.79ms. Allocated memory is still 90.2MB. Free memory was 57.8MB in the beginning and 55.5MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-20 07:26:56,700 INFO L158 Benchmark]: Boogie Preprocessor took 55.84ms. Allocated memory is still 90.2MB. Free memory was 55.5MB in the beginning and 53.8MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-20 07:26:56,701 INFO L158 Benchmark]: RCFGBuilder took 784.14ms. Allocated memory was 90.2MB in the beginning and 109.1MB in the end (delta: 18.9MB). Free memory was 53.8MB in the beginning and 85.3MB in the end (delta: -31.5MB). Peak memory consumption was 21.5MB. Max. memory is 16.1GB. [2021-11-20 07:26:56,702 INFO L158 Benchmark]: TraceAbstraction took 50045.34ms. Allocated memory was 109.1MB in the beginning and 281.0MB in the end (delta: 172.0MB). Free memory was 84.8MB in the beginning and 222.1MB in the end (delta: -137.3MB). Peak memory consumption was 175.0MB. Max. memory is 16.1GB. [2021-11-20 07:26:56,702 INFO L158 Benchmark]: Witness Printer took 130.24ms. Allocated memory is still 281.0MB. Free memory was 222.1MB in the beginning and 214.8MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-11-20 07:26:56,708 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.34ms. Allocated memory is still 90.2MB. Free memory is still 67.9MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 726.30ms. Allocated memory is still 90.2MB. Free memory was 50.5MB in the beginning and 58.0MB in the end (delta: -7.5MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 79.79ms. Allocated memory is still 90.2MB. Free memory was 57.8MB in the beginning and 55.5MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 55.84ms. Allocated memory is still 90.2MB. Free memory was 55.5MB in the beginning and 53.8MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 784.14ms. Allocated memory was 90.2MB in the beginning and 109.1MB in the end (delta: 18.9MB). Free memory was 53.8MB in the beginning and 85.3MB in the end (delta: -31.5MB). Peak memory consumption was 21.5MB. Max. memory is 16.1GB. * TraceAbstraction took 50045.34ms. Allocated memory was 109.1MB in the beginning and 281.0MB in the end (delta: 172.0MB). Free memory was 84.8MB in the beginning and 222.1MB in the end (delta: -137.3MB). Peak memory consumption was 175.0MB. Max. memory is 16.1GB. * Witness Printer took 130.24ms. Allocated memory is still 281.0MB. Free memory was 222.1MB in the beginning and 214.8MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 155]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 98 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 49.9s, OverallIterations: 14, TraceHistogramMax: 9, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 15.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 20.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 7936 SdHoareTripleChecker+Valid, 9.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 7890 mSDsluCounter, 8107 SdHoareTripleChecker+Invalid, 7.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5997 mSDsCounter, 3458 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 12018 IncrementalHoareTripleChecker+Invalid, 15476 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 3458 mSolverCounterUnsat, 2110 mSDtfsCounter, 12018 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 2605 GetRequests, 2222 SyntacticMatches, 11 SemanticMatches, 372 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5096 ImplicationChecksByTransitivity, 5.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1259occurred in iteration=13, InterpolantAutomatonStates: 281, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.8s AutomataMinimizationTime, 14 MinimizatonAttempts, 514 StatesRemovedByMinimization, 10 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 45 LocationsWithAnnotation, 3045 PreInvPairs, 3366 NumberOfFragments, 7260 HoareAnnotationTreeSize, 3045 FomulaSimplifications, 6016 FormulaSimplificationTreeSizeReduction, 1.8s HoareSimplificationTime, 45 FomulaSimplificationsInter, 69110 FormulaSimplificationTreeSizeReductionInter, 18.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 0.9s SatisfiabilityAnalysisTime, 10.6s InterpolantComputationTime, 2384 NumberOfCodeBlocks, 2384 NumberOfCodeBlocksAsserted, 19 NumberOfCheckSat, 3334 ConstructedInterpolants, 0 QuantifiedInterpolants, 7944 SizeOfPredicates, 13 NumberOfNonLiveVariables, 3631 ConjunctsInSsa, 79 ConjunctsInUnsatCore, 24 InterpolantComputations, 9 PerfectInterpolantSequences, 3091/3651 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 865]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 872]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: (((((((((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) || !(methaneLevelCritical == 0)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical))) && (((((!(waterLevel <= 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= switchedOnBeforeTS))) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) - InvariantResult [Line: 789]: Loop Invariant Derived loop invariant: ((((((((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2)) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2)) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 0) && 0 <= waterLevel)) || (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) && 1 <= waterLevel)) || (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 0) && 0 <= waterLevel)) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) && 1 <= waterLevel)) || ((((((1 <= pumpRunning && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) - InvariantResult [Line: 536]: Loop Invariant Derived loop invariant: ((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && 1 < waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && 1 < waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 644]: Loop Invariant Derived loop invariant: ((((((((((((!(\old(waterLevel) <= 1) || ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) && (((((((((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((!(\old(waterLevel) <= 1) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))))) || !(1 <= methaneLevelCritical))) && ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((((((((pumpRunning == 0 && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: ((((((((((!(waterLevel <= 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS)) && ((((((!(waterLevel <= 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(waterLevel == 1) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(waterLevel == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || \result == methaneLevelCritical)) && (((((!(pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || \result == methaneLevelCritical) - InvariantResult [Line: 937]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 546]: Loop Invariant Derived loop invariant: ((((((((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == \result) && pumpRunning <= tmp___0) && tmp < 2) && 1 == systemActive) && \old(waterLevel) == waterLevel)) && ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || (((1 <= pumpRunning && tmp == 2) && 2 == \result) && \old(waterLevel) == waterLevel)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp == 2) && 2 == \result) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && \old(waterLevel) == \result) && tmp < 2) && 1 == systemActive) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp == 2) && 2 == \result) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && tmp <= waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && pumpRunning <= tmp___0) && tmp <= waterLevel) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((((((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && \old(waterLevel) == \result) && pumpRunning <= tmp___0) && tmp < 2) && 1 == systemActive) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == \result) && pumpRunning <= tmp___0) && tmp < 2) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && tmp <= waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == \result) && pumpRunning <= tmp___0) && tmp < 2) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 0))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && pumpRunning <= tmp___0) && tmp <= waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 788]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 758]: Loop Invariant Derived loop invariant: (((((((((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || (((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || (((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && \result == 0)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && \result == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical))) && (((((!(waterLevel <= 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= switchedOnBeforeTS))) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(waterLevel <= 2)) - InvariantResult [Line: 528]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 694]: Loop Invariant Derived loop invariant: (((((((((((((((((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((((((((pumpRunning == 0 && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 669]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && ((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2))) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && tmp == methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0))) && (((((!(waterLevel <= 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: ((((((((((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \old(waterLevel) == \result) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) && ((((((((((\result <= waterLevel && pumpRunning == 0) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((pumpRunning == 0 && \old(waterLevel) == \result) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && ((((((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((\result <= waterLevel && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && \old(waterLevel) == \result) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((pumpRunning == 0 && \old(waterLevel) == \result) && waterLevel == 1)) || !(1 <= methaneLevelCritical))) && (((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == \result) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 858]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 955]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: ((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 883]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: ((((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 677]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && tmp == methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || (pumpRunning == 0 && tmp == methaneLevelCritical))) && (((((!(waterLevel <= 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) - InvariantResult [Line: 779]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 893]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2021-11-20 07:26:56,822 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cae72ef7-594c-4a10-b57f-583f68789ca5/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE