./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 53f42b1a Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash e7a194b3d6e079d2329a0d70eaa59b34ff3d58300de8b046ef1cd7cff7f67b94 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-53f42b1 [2021-11-20 05:58:06,119 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-20 05:58:06,123 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-20 05:58:06,186 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-20 05:58:06,187 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-20 05:58:06,191 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-20 05:58:06,194 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-20 05:58:06,199 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-20 05:58:06,202 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-20 05:58:06,208 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-20 05:58:06,209 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-20 05:58:06,211 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-20 05:58:06,212 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-20 05:58:06,215 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-20 05:58:06,217 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-20 05:58:06,222 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-20 05:58:06,224 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-20 05:58:06,225 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-20 05:58:06,228 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-20 05:58:06,236 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-20 05:58:06,239 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-20 05:58:06,240 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-20 05:58:06,244 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-20 05:58:06,246 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-20 05:58:06,256 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-20 05:58:06,256 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-20 05:58:06,257 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-20 05:58:06,259 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-20 05:58:06,260 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-20 05:58:06,261 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-20 05:58:06,262 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-20 05:58:06,263 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-20 05:58:06,265 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-20 05:58:06,267 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-20 05:58:06,268 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-20 05:58:06,269 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-20 05:58:06,269 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-20 05:58:06,270 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-20 05:58:06,270 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-20 05:58:06,271 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-20 05:58:06,272 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-20 05:58:06,273 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-11-20 05:58:06,319 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-20 05:58:06,320 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-20 05:58:06,320 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-20 05:58:06,321 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-20 05:58:06,328 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-20 05:58:06,328 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-20 05:58:06,329 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-20 05:58:06,330 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-20 05:58:06,330 INFO L138 SettingsManager]: * Use SBE=true [2021-11-20 05:58:06,330 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-20 05:58:06,331 INFO L138 SettingsManager]: * sizeof long=4 [2021-11-20 05:58:06,331 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-20 05:58:06,332 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-11-20 05:58:06,332 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-20 05:58:06,332 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-20 05:58:06,332 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-20 05:58:06,333 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-20 05:58:06,333 INFO L138 SettingsManager]: * sizeof long double=12 [2021-11-20 05:58:06,333 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-20 05:58:06,333 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-20 05:58:06,333 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-20 05:58:06,334 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-20 05:58:06,334 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-20 05:58:06,334 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-20 05:58:06,334 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 05:58:06,335 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-20 05:58:06,335 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-20 05:58:06,335 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-20 05:58:06,335 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-20 05:58:06,337 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-20 05:58:06,337 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-20 05:58:06,337 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-20 05:58:06,338 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-20 05:58:06,338 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-20 05:58:06,338 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> e7a194b3d6e079d2329a0d70eaa59b34ff3d58300de8b046ef1cd7cff7f67b94 [2021-11-20 05:58:06,597 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-20 05:58:06,621 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-20 05:58:06,624 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-20 05:58:06,626 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-20 05:58:06,627 INFO L275 PluginConnector]: CDTParser initialized [2021-11-20 05:58:06,629 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/../../sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c [2021-11-20 05:58:06,719 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/data/89ca96337/177c68457225453ca5f96b92833fca60/FLAGdd39ccb3c [2021-11-20 05:58:07,208 INFO L306 CDTParser]: Found 1 translation units. [2021-11-20 05:58:07,209 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c [2021-11-20 05:58:07,229 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/data/89ca96337/177c68457225453ca5f96b92833fca60/FLAGdd39ccb3c [2021-11-20 05:58:07,532 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/data/89ca96337/177c68457225453ca5f96b92833fca60 [2021-11-20 05:58:07,534 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-20 05:58:07,536 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-20 05:58:07,543 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-20 05:58:07,544 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-20 05:58:07,548 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-20 05:58:07,549 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 05:58:07" (1/1) ... [2021-11-20 05:58:07,550 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@87d1b6b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:58:07, skipping insertion in model container [2021-11-20 05:58:07,550 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 05:58:07" (1/1) ... [2021-11-20 05:58:07,558 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-20 05:58:07,624 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-20 05:58:07,970 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c[17915,17928] [2021-11-20 05:58:07,981 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 05:58:07,995 INFO L203 MainTranslator]: Completed pre-run [2021-11-20 05:58:08,087 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c[17915,17928] [2021-11-20 05:58:08,094 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 05:58:08,112 INFO L208 MainTranslator]: Completed translation [2021-11-20 05:58:08,112 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:58:08 WrapperNode [2021-11-20 05:58:08,112 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-20 05:58:08,114 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-20 05:58:08,114 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-20 05:58:08,114 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-20 05:58:08,121 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:58:08" (1/1) ... [2021-11-20 05:58:08,137 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:58:08" (1/1) ... [2021-11-20 05:58:08,167 INFO L137 Inliner]: procedures = 58, calls = 161, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 286 [2021-11-20 05:58:08,168 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-20 05:58:08,168 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-20 05:58:08,169 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-20 05:58:08,169 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-20 05:58:08,181 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:58:08" (1/1) ... [2021-11-20 05:58:08,181 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:58:08" (1/1) ... [2021-11-20 05:58:08,184 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:58:08" (1/1) ... [2021-11-20 05:58:08,184 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:58:08" (1/1) ... [2021-11-20 05:58:08,191 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:58:08" (1/1) ... [2021-11-20 05:58:08,196 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:58:08" (1/1) ... [2021-11-20 05:58:08,198 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:58:08" (1/1) ... [2021-11-20 05:58:08,202 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-20 05:58:08,203 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-20 05:58:08,203 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-20 05:58:08,203 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-20 05:58:08,204 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:58:08" (1/1) ... [2021-11-20 05:58:08,231 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 05:58:08,241 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 05:58:08,254 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-20 05:58:08,285 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-20 05:58:08,306 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-20 05:58:08,306 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-11-20 05:58:08,306 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-11-20 05:58:08,306 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-11-20 05:58:08,307 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-11-20 05:58:08,307 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-11-20 05:58:08,307 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-11-20 05:58:08,307 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-11-20 05:58:08,308 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-11-20 05:58:08,308 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-11-20 05:58:08,308 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-11-20 05:58:08,308 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2021-11-20 05:58:08,308 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2021-11-20 05:58:08,308 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-11-20 05:58:08,309 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-11-20 05:58:08,309 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-11-20 05:58:08,309 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-11-20 05:58:08,309 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-20 05:58:08,309 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-11-20 05:58:08,309 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-11-20 05:58:08,309 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-20 05:58:08,310 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-20 05:58:08,423 INFO L236 CfgBuilder]: Building ICFG [2021-11-20 05:58:08,425 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-20 05:58:08,826 INFO L277 CfgBuilder]: Performing block encoding [2021-11-20 05:58:08,833 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-20 05:58:08,833 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-11-20 05:58:08,835 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 05:58:08 BoogieIcfgContainer [2021-11-20 05:58:08,836 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-20 05:58:08,837 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-20 05:58:08,838 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-20 05:58:08,852 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-20 05:58:08,852 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 05:58:07" (1/3) ... [2021-11-20 05:58:08,853 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1e1bd0ce and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 05:58:08, skipping insertion in model container [2021-11-20 05:58:08,853 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:58:08" (2/3) ... [2021-11-20 05:58:08,853 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1e1bd0ce and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 05:58:08, skipping insertion in model container [2021-11-20 05:58:08,853 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 05:58:08" (3/3) ... [2021-11-20 05:58:08,854 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product53.cil.c [2021-11-20 05:58:08,859 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-20 05:58:08,859 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-20 05:58:08,930 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-20 05:58:08,939 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-20 05:58:08,939 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-20 05:58:08,975 INFO L276 IsEmpty]: Start isEmpty. Operand has 105 states, 78 states have (on average 1.3717948717948718) internal successors, (107), 88 states have internal predecessors, (107), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2021-11-20 05:58:08,986 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-11-20 05:58:08,987 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:58:08,988 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:58:08,988 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:58:08,994 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:58:08,994 INFO L85 PathProgramCache]: Analyzing trace with hash 836117038, now seen corresponding path program 1 times [2021-11-20 05:58:09,007 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:58:09,007 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1962825569] [2021-11-20 05:58:09,008 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:58:09,008 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:58:09,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:09,345 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-11-20 05:58:09,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:09,371 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-11-20 05:58:09,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:09,379 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 05:58:09,380 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:58:09,380 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1962825569] [2021-11-20 05:58:09,381 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1962825569] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:58:09,381 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:58:09,382 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-20 05:58:09,383 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [750216421] [2021-11-20 05:58:09,384 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:58:09,410 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-11-20 05:58:09,410 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:58:09,448 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-11-20 05:58:09,449 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-20 05:58:09,453 INFO L87 Difference]: Start difference. First operand has 105 states, 78 states have (on average 1.3717948717948718) internal successors, (107), 88 states have internal predecessors, (107), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-20 05:58:09,519 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:58:09,520 INFO L93 Difference]: Finished difference Result 201 states and 272 transitions. [2021-11-20 05:58:09,521 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-11-20 05:58:09,522 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-11-20 05:58:09,523 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:58:09,543 INFO L225 Difference]: With dead ends: 201 [2021-11-20 05:58:09,543 INFO L226 Difference]: Without dead ends: 96 [2021-11-20 05:58:09,549 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-20 05:58:09,555 INFO L933 BasicCegarLoop]: 133 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 133 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 05:58:09,557 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 133 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 05:58:09,576 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 96 states. [2021-11-20 05:58:09,620 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 96 to 96. [2021-11-20 05:58:09,622 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 96 states, 71 states have (on average 1.3098591549295775) internal successors, (93), 80 states have internal predecessors, (93), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2021-11-20 05:58:09,631 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 96 states to 96 states and 124 transitions. [2021-11-20 05:58:09,634 INFO L78 Accepts]: Start accepts. Automaton has 96 states and 124 transitions. Word has length 32 [2021-11-20 05:58:09,634 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:58:09,634 INFO L470 AbstractCegarLoop]: Abstraction has 96 states and 124 transitions. [2021-11-20 05:58:09,635 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-11-20 05:58:09,636 INFO L276 IsEmpty]: Start isEmpty. Operand 96 states and 124 transitions. [2021-11-20 05:58:09,643 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2021-11-20 05:58:09,643 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:58:09,644 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:58:09,645 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-20 05:58:09,646 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:58:09,647 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:58:09,647 INFO L85 PathProgramCache]: Analyzing trace with hash 485124754, now seen corresponding path program 1 times [2021-11-20 05:58:09,648 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:58:09,648 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1263462338] [2021-11-20 05:58:09,648 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:58:09,649 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:58:09,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:09,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 05:58:09,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:09,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-11-20 05:58:09,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:09,867 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 05:58:09,868 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:58:09,868 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1263462338] [2021-11-20 05:58:09,869 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1263462338] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:58:09,869 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:58:09,870 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 05:58:09,870 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [831771796] [2021-11-20 05:58:09,871 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:58:09,872 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 05:58:09,874 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:58:09,875 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 05:58:09,875 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-11-20 05:58:09,876 INFO L87 Difference]: Start difference. First operand 96 states and 124 transitions. Second operand has 6 states, 6 states have (on average 5.0) internal successors, (30), 6 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-20 05:58:10,059 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:58:10,059 INFO L93 Difference]: Finished difference Result 184 states and 243 transitions. [2021-11-20 05:58:10,060 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-20 05:58:10,060 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.0) internal successors, (30), 6 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2021-11-20 05:58:10,061 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:58:10,066 INFO L225 Difference]: With dead ends: 184 [2021-11-20 05:58:10,066 INFO L226 Difference]: Without dead ends: 96 [2021-11-20 05:58:10,068 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-11-20 05:58:10,069 INFO L933 BasicCegarLoop]: 117 mSDtfsCounter, 153 mSDsluCounter, 142 mSDsCounter, 0 mSdLazyCounter, 67 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 153 SdHoareTripleChecker+Valid, 259 SdHoareTripleChecker+Invalid, 78 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 67 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 05:58:10,070 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [153 Valid, 259 Invalid, 78 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 67 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 05:58:10,071 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 96 states. [2021-11-20 05:58:10,102 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 96 to 96. [2021-11-20 05:58:10,102 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 96 states, 71 states have (on average 1.295774647887324) internal successors, (92), 80 states have internal predecessors, (92), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2021-11-20 05:58:10,104 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 96 states to 96 states and 123 transitions. [2021-11-20 05:58:10,104 INFO L78 Accepts]: Start accepts. Automaton has 96 states and 123 transitions. Word has length 37 [2021-11-20 05:58:10,105 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:58:10,106 INFO L470 AbstractCegarLoop]: Abstraction has 96 states and 123 transitions. [2021-11-20 05:58:10,106 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.0) internal successors, (30), 6 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-11-20 05:58:10,106 INFO L276 IsEmpty]: Start isEmpty. Operand 96 states and 123 transitions. [2021-11-20 05:58:10,108 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2021-11-20 05:58:10,108 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:58:10,108 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:58:10,109 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-20 05:58:10,109 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:58:10,109 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:58:10,109 INFO L85 PathProgramCache]: Analyzing trace with hash -384973767, now seen corresponding path program 1 times [2021-11-20 05:58:10,110 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:58:10,110 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1214579058] [2021-11-20 05:58:10,110 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:58:10,110 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:58:10,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:10,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-11-20 05:58:10,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:10,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2021-11-20 05:58:10,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:10,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 05:58:10,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:10,162 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 05:58:10,162 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:58:10,163 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1214579058] [2021-11-20 05:58:10,163 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1214579058] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:58:10,163 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:58:10,163 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-20 05:58:10,164 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1884820543] [2021-11-20 05:58:10,164 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:58:10,164 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-20 05:58:10,164 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:58:10,165 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-20 05:58:10,165 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-20 05:58:10,165 INFO L87 Difference]: Start difference. First operand 96 states and 123 transitions. Second operand has 4 states, 4 states have (on average 8.0) internal successors, (32), 3 states have internal predecessors, (32), 1 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2021-11-20 05:58:10,290 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:58:10,290 INFO L93 Difference]: Finished difference Result 174 states and 223 transitions. [2021-11-20 05:58:10,291 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-20 05:58:10,291 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.0) internal successors, (32), 3 states have internal predecessors, (32), 1 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 42 [2021-11-20 05:58:10,291 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:58:10,297 INFO L225 Difference]: With dead ends: 174 [2021-11-20 05:58:10,297 INFO L226 Difference]: Without dead ends: 104 [2021-11-20 05:58:10,302 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-20 05:58:10,307 INFO L933 BasicCegarLoop]: 103 mSDtfsCounter, 72 mSDsluCounter, 115 mSDsCounter, 0 mSdLazyCounter, 57 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 218 SdHoareTripleChecker+Invalid, 74 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 57 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 05:58:10,308 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [79 Valid, 218 Invalid, 74 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 57 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 05:58:10,311 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 104 states. [2021-11-20 05:58:10,326 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 104 to 87. [2021-11-20 05:58:10,336 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 87 states, 65 states have (on average 1.3076923076923077) internal successors, (85), 74 states have internal predecessors, (85), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2021-11-20 05:58:10,337 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 111 transitions. [2021-11-20 05:58:10,338 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 111 transitions. Word has length 42 [2021-11-20 05:58:10,339 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:58:10,339 INFO L470 AbstractCegarLoop]: Abstraction has 87 states and 111 transitions. [2021-11-20 05:58:10,339 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.0) internal successors, (32), 3 states have internal predecessors, (32), 1 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2021-11-20 05:58:10,339 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 111 transitions. [2021-11-20 05:58:10,343 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2021-11-20 05:58:10,343 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:58:10,343 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:58:10,344 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-20 05:58:10,345 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:58:10,345 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:58:10,346 INFO L85 PathProgramCache]: Analyzing trace with hash 88830114, now seen corresponding path program 1 times [2021-11-20 05:58:10,346 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:58:10,346 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1254605960] [2021-11-20 05:58:10,347 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:58:10,347 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:58:10,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:10,395 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 05:58:10,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:10,403 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-11-20 05:58:10,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:10,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2021-11-20 05:58:10,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:10,411 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 05:58:10,412 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:58:10,412 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1254605960] [2021-11-20 05:58:10,412 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1254605960] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:58:10,412 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:58:10,413 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-11-20 05:58:10,413 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [595008409] [2021-11-20 05:58:10,413 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:58:10,414 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-20 05:58:10,414 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:58:10,415 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-20 05:58:10,415 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-20 05:58:10,415 INFO L87 Difference]: Start difference. First operand 87 states and 111 transitions. Second operand has 4 states, 4 states have (on average 9.25) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-11-20 05:58:10,596 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:58:10,596 INFO L93 Difference]: Finished difference Result 249 states and 324 transitions. [2021-11-20 05:58:10,596 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-20 05:58:10,596 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.25) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2021-11-20 05:58:10,597 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:58:10,603 INFO L225 Difference]: With dead ends: 249 [2021-11-20 05:58:10,603 INFO L226 Difference]: Without dead ends: 170 [2021-11-20 05:58:10,605 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-20 05:58:10,617 INFO L933 BasicCegarLoop]: 116 mSDtfsCounter, 158 mSDsluCounter, 123 mSDsCounter, 0 mSdLazyCounter, 75 mSolverCounterSat, 44 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 164 SdHoareTripleChecker+Valid, 239 SdHoareTripleChecker+Invalid, 119 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 44 IncrementalHoareTripleChecker+Valid, 75 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 05:58:10,618 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [164 Valid, 239 Invalid, 119 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [44 Valid, 75 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 05:58:10,619 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 170 states. [2021-11-20 05:58:10,650 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 170 to 164. [2021-11-20 05:58:10,659 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 164 states, 123 states have (on average 1.2845528455284554) internal successors, (158), 131 states have internal predecessors, (158), 20 states have call successors, (20), 15 states have call predecessors, (20), 20 states have return successors, (31), 22 states have call predecessors, (31), 20 states have call successors, (31) [2021-11-20 05:58:10,661 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 164 states to 164 states and 209 transitions. [2021-11-20 05:58:10,662 INFO L78 Accepts]: Start accepts. Automaton has 164 states and 209 transitions. Word has length 46 [2021-11-20 05:58:10,662 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:58:10,662 INFO L470 AbstractCegarLoop]: Abstraction has 164 states and 209 transitions. [2021-11-20 05:58:10,663 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.25) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-11-20 05:58:10,663 INFO L276 IsEmpty]: Start isEmpty. Operand 164 states and 209 transitions. [2021-11-20 05:58:10,665 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-11-20 05:58:10,665 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:58:10,665 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:58:10,665 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-20 05:58:10,666 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:58:10,669 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:58:10,669 INFO L85 PathProgramCache]: Analyzing trace with hash -2065653903, now seen corresponding path program 1 times [2021-11-20 05:58:10,669 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:58:10,670 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1489574120] [2021-11-20 05:58:10,670 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:58:10,670 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:58:10,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:10,732 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 05:58:10,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:10,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-20 05:58:10,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:10,765 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 05:58:10,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:10,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-11-20 05:58:10,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:10,815 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 05:58:10,818 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:58:10,819 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1489574120] [2021-11-20 05:58:10,819 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1489574120] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:58:10,819 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:58:10,820 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 05:58:10,820 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [558822941] [2021-11-20 05:58:10,820 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:58:10,820 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 05:58:10,823 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:58:10,824 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 05:58:10,824 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-11-20 05:58:10,824 INFO L87 Difference]: Start difference. First operand 164 states and 209 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-20 05:58:11,073 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:58:11,073 INFO L93 Difference]: Finished difference Result 328 states and 426 transitions. [2021-11-20 05:58:11,074 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 05:58:11,074 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2021-11-20 05:58:11,074 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:58:11,076 INFO L225 Difference]: With dead ends: 328 [2021-11-20 05:58:11,076 INFO L226 Difference]: Without dead ends: 172 [2021-11-20 05:58:11,077 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-11-20 05:58:11,078 INFO L933 BasicCegarLoop]: 112 mSDtfsCounter, 73 mSDsluCounter, 346 mSDsCounter, 0 mSdLazyCounter, 124 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 458 SdHoareTripleChecker+Invalid, 147 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 124 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 05:58:11,079 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [76 Valid, 458 Invalid, 147 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 124 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 05:58:11,080 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 172 states. [2021-11-20 05:58:11,098 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 172 to 167. [2021-11-20 05:58:11,099 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 167 states, 126 states have (on average 1.2777777777777777) internal successors, (161), 134 states have internal predecessors, (161), 20 states have call successors, (20), 15 states have call predecessors, (20), 20 states have return successors, (31), 22 states have call predecessors, (31), 20 states have call successors, (31) [2021-11-20 05:58:11,101 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 167 states to 167 states and 212 transitions. [2021-11-20 05:58:11,101 INFO L78 Accepts]: Start accepts. Automaton has 167 states and 212 transitions. Word has length 56 [2021-11-20 05:58:11,101 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:58:11,102 INFO L470 AbstractCegarLoop]: Abstraction has 167 states and 212 transitions. [2021-11-20 05:58:11,102 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-20 05:58:11,102 INFO L276 IsEmpty]: Start isEmpty. Operand 167 states and 212 transitions. [2021-11-20 05:58:11,103 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-11-20 05:58:11,103 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:58:11,103 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:58:11,103 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-20 05:58:11,104 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:58:11,104 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:58:11,104 INFO L85 PathProgramCache]: Analyzing trace with hash -1642952077, now seen corresponding path program 1 times [2021-11-20 05:58:11,104 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:58:11,105 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [685711977] [2021-11-20 05:58:11,105 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:58:11,105 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:58:11,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:11,150 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 05:58:11,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:11,157 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-20 05:58:11,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:11,168 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 05:58:11,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:11,199 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-11-20 05:58:11,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:11,203 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 05:58:11,203 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:58:11,203 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [685711977] [2021-11-20 05:58:11,203 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [685711977] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:58:11,203 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:58:11,204 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-20 05:58:11,204 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [802714521] [2021-11-20 05:58:11,204 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:58:11,204 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-20 05:58:11,205 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:58:11,205 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-20 05:58:11,205 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-20 05:58:11,205 INFO L87 Difference]: Start difference. First operand 167 states and 212 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 6 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-20 05:58:11,373 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:58:11,373 INFO L93 Difference]: Finished difference Result 339 states and 445 transitions. [2021-11-20 05:58:11,375 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-20 05:58:11,375 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 6 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2021-11-20 05:58:11,376 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:58:11,381 INFO L225 Difference]: With dead ends: 339 [2021-11-20 05:58:11,382 INFO L226 Difference]: Without dead ends: 180 [2021-11-20 05:58:11,383 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=30, Invalid=80, Unknown=0, NotChecked=0, Total=110 [2021-11-20 05:58:11,385 INFO L933 BasicCegarLoop]: 111 mSDtfsCounter, 116 mSDsluCounter, 405 mSDsCounter, 0 mSdLazyCounter, 166 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 120 SdHoareTripleChecker+Valid, 516 SdHoareTripleChecker+Invalid, 195 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 166 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 05:58:11,385 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [120 Valid, 516 Invalid, 195 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 166 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 05:58:11,389 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 180 states. [2021-11-20 05:58:11,418 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 180 to 169. [2021-11-20 05:58:11,425 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 169 states, 128 states have (on average 1.2734375) internal successors, (163), 136 states have internal predecessors, (163), 20 states have call successors, (20), 15 states have call predecessors, (20), 20 states have return successors, (31), 22 states have call predecessors, (31), 20 states have call successors, (31) [2021-11-20 05:58:11,430 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 169 states to 169 states and 214 transitions. [2021-11-20 05:58:11,431 INFO L78 Accepts]: Start accepts. Automaton has 169 states and 214 transitions. Word has length 56 [2021-11-20 05:58:11,432 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:58:11,432 INFO L470 AbstractCegarLoop]: Abstraction has 169 states and 214 transitions. [2021-11-20 05:58:11,433 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 6 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-11-20 05:58:11,433 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 214 transitions. [2021-11-20 05:58:11,434 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-11-20 05:58:11,434 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:58:11,434 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:58:11,435 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-20 05:58:11,435 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:58:11,435 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:58:11,435 INFO L85 PathProgramCache]: Analyzing trace with hash 846576885, now seen corresponding path program 1 times [2021-11-20 05:58:11,436 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:58:11,436 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [421588841] [2021-11-20 05:58:11,436 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:58:11,436 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:58:11,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:11,513 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 05:58:11,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:11,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-20 05:58:11,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:11,553 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 05:58:11,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:11,574 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-11-20 05:58:11,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:11,580 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 05:58:11,580 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:58:11,580 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [421588841] [2021-11-20 05:58:11,580 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [421588841] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:58:11,581 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:58:11,581 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-20 05:58:11,581 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1629306065] [2021-11-20 05:58:11,582 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:58:11,586 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 05:58:11,586 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:58:11,587 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 05:58:11,587 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 05:58:11,587 INFO L87 Difference]: Start difference. First operand 169 states and 214 transitions. Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-11-20 05:58:11,831 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:58:11,831 INFO L93 Difference]: Finished difference Result 477 states and 626 transitions. [2021-11-20 05:58:11,831 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 05:58:11,832 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2021-11-20 05:58:11,832 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:58:11,837 INFO L225 Difference]: With dead ends: 477 [2021-11-20 05:58:11,837 INFO L226 Difference]: Without dead ends: 316 [2021-11-20 05:58:11,839 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-11-20 05:58:11,840 INFO L933 BasicCegarLoop]: 165 mSDtfsCounter, 232 mSDsluCounter, 202 mSDsCounter, 0 mSdLazyCounter, 175 mSolverCounterSat, 72 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 239 SdHoareTripleChecker+Valid, 367 SdHoareTripleChecker+Invalid, 247 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 72 IncrementalHoareTripleChecker+Valid, 175 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 05:58:11,840 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [239 Valid, 367 Invalid, 247 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [72 Valid, 175 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 05:58:11,842 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 316 states. [2021-11-20 05:58:11,884 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 316 to 308. [2021-11-20 05:58:11,885 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 308 states, 231 states have (on average 1.2467532467532467) internal successors, (288), 243 states have internal predecessors, (288), 40 states have call successors, (40), 33 states have call predecessors, (40), 36 states have return successors, (66), 41 states have call predecessors, (66), 40 states have call successors, (66) [2021-11-20 05:58:11,887 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 308 states to 308 states and 394 transitions. [2021-11-20 05:58:11,888 INFO L78 Accepts]: Start accepts. Automaton has 308 states and 394 transitions. Word has length 56 [2021-11-20 05:58:11,890 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:58:11,890 INFO L470 AbstractCegarLoop]: Abstraction has 308 states and 394 transitions. [2021-11-20 05:58:11,890 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-11-20 05:58:11,890 INFO L276 IsEmpty]: Start isEmpty. Operand 308 states and 394 transitions. [2021-11-20 05:58:11,891 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2021-11-20 05:58:11,891 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:58:11,892 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:58:11,892 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-20 05:58:11,892 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:58:11,892 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:58:11,893 INFO L85 PathProgramCache]: Analyzing trace with hash 1874240715, now seen corresponding path program 1 times [2021-11-20 05:58:11,893 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:58:11,893 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1952136849] [2021-11-20 05:58:11,893 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:58:11,893 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:58:11,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:11,962 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 05:58:11,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:11,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-20 05:58:11,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:11,987 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 05:58:11,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:12,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-11-20 05:58:12,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:12,017 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-20 05:58:12,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:12,030 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-11-20 05:58:12,030 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:58:12,031 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1952136849] [2021-11-20 05:58:12,031 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1952136849] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:58:12,031 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:58:12,031 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-11-20 05:58:12,031 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [69214609] [2021-11-20 05:58:12,032 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:58:12,032 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-11-20 05:58:12,032 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:58:12,033 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-11-20 05:58:12,033 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-11-20 05:58:12,033 INFO L87 Difference]: Start difference. First operand 308 states and 394 transitions. Second operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-11-20 05:58:12,288 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:58:12,288 INFO L93 Difference]: Finished difference Result 624 states and 811 transitions. [2021-11-20 05:58:12,288 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-11-20 05:58:12,289 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 58 [2021-11-20 05:58:12,290 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:58:12,294 INFO L225 Difference]: With dead ends: 624 [2021-11-20 05:58:12,294 INFO L226 Difference]: Without dead ends: 324 [2021-11-20 05:58:12,296 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2021-11-20 05:58:12,297 INFO L933 BasicCegarLoop]: 109 mSDtfsCounter, 125 mSDsluCounter, 388 mSDsCounter, 0 mSdLazyCounter, 218 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 131 SdHoareTripleChecker+Valid, 497 SdHoareTripleChecker+Invalid, 259 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 218 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 05:58:12,297 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [131 Valid, 497 Invalid, 259 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 218 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 05:58:12,298 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 324 states. [2021-11-20 05:58:12,336 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 324 to 304. [2021-11-20 05:58:12,338 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 304 states, 227 states have (on average 1.2158590308370043) internal successors, (276), 239 states have internal predecessors, (276), 40 states have call successors, (40), 33 states have call predecessors, (40), 36 states have return successors, (66), 41 states have call predecessors, (66), 40 states have call successors, (66) [2021-11-20 05:58:12,344 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 304 states to 304 states and 382 transitions. [2021-11-20 05:58:12,344 INFO L78 Accepts]: Start accepts. Automaton has 304 states and 382 transitions. Word has length 58 [2021-11-20 05:58:12,345 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:58:12,345 INFO L470 AbstractCegarLoop]: Abstraction has 304 states and 382 transitions. [2021-11-20 05:58:12,345 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-11-20 05:58:12,346 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 382 transitions. [2021-11-20 05:58:12,348 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-11-20 05:58:12,348 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:58:12,348 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:58:12,348 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-11-20 05:58:12,349 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:58:12,349 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:58:12,349 INFO L85 PathProgramCache]: Analyzing trace with hash -1421347697, now seen corresponding path program 1 times [2021-11-20 05:58:12,350 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:58:12,350 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1898277091] [2021-11-20 05:58:12,350 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:58:12,350 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:58:12,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:12,488 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 05:58:12,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:12,511 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-11-20 05:58:12,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:12,529 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-11-20 05:58:12,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:12,553 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 05:58:12,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:12,560 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-11-20 05:58:12,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:12,563 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-11-20 05:58:12,564 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:58:12,564 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1898277091] [2021-11-20 05:58:12,564 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1898277091] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:58:12,564 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:58:12,564 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-11-20 05:58:12,565 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1522315716] [2021-11-20 05:58:12,565 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:58:12,569 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-11-20 05:58:12,570 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:58:12,570 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-11-20 05:58:12,570 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2021-11-20 05:58:12,571 INFO L87 Difference]: Start difference. First operand 304 states and 382 transitions. Second operand has 10 states, 10 states have (on average 4.7) internal successors, (47), 8 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-11-20 05:58:13,611 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:58:13,611 INFO L93 Difference]: Finished difference Result 950 states and 1254 transitions. [2021-11-20 05:58:13,611 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2021-11-20 05:58:13,612 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.7) internal successors, (47), 8 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 60 [2021-11-20 05:58:13,613 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:58:13,619 INFO L225 Difference]: With dead ends: 950 [2021-11-20 05:58:13,620 INFO L226 Difference]: Without dead ends: 709 [2021-11-20 05:58:13,622 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 13 SyntacticMatches, 1 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 288 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=221, Invalid=969, Unknown=0, NotChecked=0, Total=1190 [2021-11-20 05:58:13,625 INFO L933 BasicCegarLoop]: 180 mSDtfsCounter, 522 mSDsluCounter, 747 mSDsCounter, 0 mSdLazyCounter, 994 mSolverCounterSat, 218 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 529 SdHoareTripleChecker+Valid, 927 SdHoareTripleChecker+Invalid, 1212 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 218 IncrementalHoareTripleChecker+Valid, 994 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2021-11-20 05:58:13,626 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [529 Valid, 927 Invalid, 1212 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [218 Valid, 994 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2021-11-20 05:58:13,629 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 709 states. [2021-11-20 05:58:13,697 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 709 to 585. [2021-11-20 05:58:13,699 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 585 states, 437 states have (on average 1.2151029748283753) internal successors, (531), 463 states have internal predecessors, (531), 77 states have call successors, (77), 58 states have call predecessors, (77), 70 states have return successors, (127), 79 states have call predecessors, (127), 77 states have call successors, (127) [2021-11-20 05:58:13,704 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 585 states to 585 states and 735 transitions. [2021-11-20 05:58:13,705 INFO L78 Accepts]: Start accepts. Automaton has 585 states and 735 transitions. Word has length 60 [2021-11-20 05:58:13,705 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:58:13,705 INFO L470 AbstractCegarLoop]: Abstraction has 585 states and 735 transitions. [2021-11-20 05:58:13,706 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.7) internal successors, (47), 8 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-11-20 05:58:13,706 INFO L276 IsEmpty]: Start isEmpty. Operand 585 states and 735 transitions. [2021-11-20 05:58:13,708 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2021-11-20 05:58:13,708 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:58:13,708 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:58:13,709 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-11-20 05:58:13,709 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:58:13,710 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:58:13,710 INFO L85 PathProgramCache]: Analyzing trace with hash 118762499, now seen corresponding path program 1 times [2021-11-20 05:58:13,710 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:58:13,711 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1040433833] [2021-11-20 05:58:13,711 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:58:13,712 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:58:13,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:13,783 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 05:58:13,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:13,793 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 05:58:13,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:13,807 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 05:58:13,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:13,815 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-11-20 05:58:13,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:13,823 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 05:58:13,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:13,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2021-11-20 05:58:13,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:13,837 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2021-11-20 05:58:13,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:13,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-20 05:58:13,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:13,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 05:58:13,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:13,893 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2021-11-20 05:58:13,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:13,897 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 6 proven. 1 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2021-11-20 05:58:13,897 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:58:13,898 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1040433833] [2021-11-20 05:58:13,898 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1040433833] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 05:58:13,898 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [837461299] [2021-11-20 05:58:13,898 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:58:13,899 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 05:58:13,899 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 05:58:13,901 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 05:58:13,929 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-20 05:58:14,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:14,054 INFO L263 TraceCheckSpWp]: Trace formula consists of 507 conjuncts, 8 conjunts are in the unsatisfiable core [2021-11-20 05:58:14,066 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 05:58:14,533 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 26 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-20 05:58:14,533 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 05:58:14,908 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 18 proven. 10 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-11-20 05:58:14,908 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [837461299] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-20 05:58:14,909 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-20 05:58:14,909 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 6, 6] total 13 [2021-11-20 05:58:14,909 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1901307946] [2021-11-20 05:58:14,909 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-20 05:58:14,910 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-11-20 05:58:14,910 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:58:14,911 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-11-20 05:58:14,911 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=129, Unknown=0, NotChecked=0, Total=156 [2021-11-20 05:58:14,911 INFO L87 Difference]: Start difference. First operand 585 states and 735 transitions. Second operand has 13 states, 13 states have (on average 10.153846153846153) internal successors, (132), 9 states have internal predecessors, (132), 4 states have call successors, (23), 6 states have call predecessors, (23), 6 states have return successors, (21), 5 states have call predecessors, (21), 4 states have call successors, (21) [2021-11-20 05:58:15,945 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:58:15,946 INFO L93 Difference]: Finished difference Result 1227 states and 1586 transitions. [2021-11-20 05:58:15,946 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-11-20 05:58:15,946 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 10.153846153846153) internal successors, (132), 9 states have internal predecessors, (132), 4 states have call successors, (23), 6 states have call predecessors, (23), 6 states have return successors, (21), 5 states have call predecessors, (21), 4 states have call successors, (21) Word has length 109 [2021-11-20 05:58:15,947 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:58:15,953 INFO L225 Difference]: With dead ends: 1227 [2021-11-20 05:58:15,954 INFO L226 Difference]: Without dead ends: 703 [2021-11-20 05:58:15,958 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 276 GetRequests, 242 SyntacticMatches, 1 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 232 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=269, Invalid=921, Unknown=0, NotChecked=0, Total=1190 [2021-11-20 05:58:15,959 INFO L933 BasicCegarLoop]: 229 mSDtfsCounter, 265 mSDsluCounter, 1342 mSDsCounter, 0 mSdLazyCounter, 1067 mSolverCounterSat, 108 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 272 SdHoareTripleChecker+Valid, 1571 SdHoareTripleChecker+Invalid, 1175 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 108 IncrementalHoareTripleChecker+Valid, 1067 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2021-11-20 05:58:15,959 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [272 Valid, 1571 Invalid, 1175 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [108 Valid, 1067 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2021-11-20 05:58:15,966 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 703 states. [2021-11-20 05:58:16,028 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 703 to 641. [2021-11-20 05:58:16,030 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 641 states, 475 states have (on average 1.2) internal successors, (570), 507 states have internal predecessors, (570), 86 states have call successors, (86), 71 states have call predecessors, (86), 79 states have return successors, (114), 83 states have call predecessors, (114), 86 states have call successors, (114) [2021-11-20 05:58:16,035 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 641 states to 641 states and 770 transitions. [2021-11-20 05:58:16,037 INFO L78 Accepts]: Start accepts. Automaton has 641 states and 770 transitions. Word has length 109 [2021-11-20 05:58:16,038 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:58:16,038 INFO L470 AbstractCegarLoop]: Abstraction has 641 states and 770 transitions. [2021-11-20 05:58:16,038 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 10.153846153846153) internal successors, (132), 9 states have internal predecessors, (132), 4 states have call successors, (23), 6 states have call predecessors, (23), 6 states have return successors, (21), 5 states have call predecessors, (21), 4 states have call successors, (21) [2021-11-20 05:58:16,039 INFO L276 IsEmpty]: Start isEmpty. Operand 641 states and 770 transitions. [2021-11-20 05:58:16,046 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 188 [2021-11-20 05:58:16,046 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:58:16,046 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:58:16,070 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2021-11-20 05:58:16,251 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-11-20 05:58:16,251 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:58:16,252 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:58:16,252 INFO L85 PathProgramCache]: Analyzing trace with hash 430860499, now seen corresponding path program 1 times [2021-11-20 05:58:16,253 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:58:16,253 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1043956204] [2021-11-20 05:58:16,253 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:58:16,254 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:58:16,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:16,326 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 05:58:16,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:16,338 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 05:58:16,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:16,348 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 05:58:16,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:16,356 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-11-20 05:58:16,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:16,361 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 05:58:16,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:16,366 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-11-20 05:58:16,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:16,378 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 05:58:16,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:16,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-11-20 05:58:16,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:16,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-20 05:58:16,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:16,389 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 05:58:16,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:16,391 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2021-11-20 05:58:16,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:16,456 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 05:58:16,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:16,459 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-11-20 05:58:16,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:16,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 149 [2021-11-20 05:58:16,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:16,466 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2021-11-20 05:58:16,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:16,473 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 05:58:16,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:16,477 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 179 [2021-11-20 05:58:16,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:16,481 INFO L134 CoverageAnalysis]: Checked inductivity of 197 backedges. 78 proven. 0 refuted. 0 times theorem prover too weak. 119 trivial. 0 not checked. [2021-11-20 05:58:16,481 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:58:16,481 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1043956204] [2021-11-20 05:58:16,482 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1043956204] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:58:16,482 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 05:58:16,482 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-11-20 05:58:16,482 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [525369756] [2021-11-20 05:58:16,482 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:58:16,483 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-11-20 05:58:16,483 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:58:16,484 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-11-20 05:58:16,484 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2021-11-20 05:58:16,484 INFO L87 Difference]: Start difference. First operand 641 states and 770 transitions. Second operand has 10 states, 10 states have (on average 9.5) internal successors, (95), 7 states have internal predecessors, (95), 4 states have call successors, (13), 5 states have call predecessors, (13), 2 states have return successors, (13), 4 states have call predecessors, (13), 4 states have call successors, (13) [2021-11-20 05:58:17,498 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:58:17,498 INFO L93 Difference]: Finished difference Result 1904 states and 2320 transitions. [2021-11-20 05:58:17,498 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2021-11-20 05:58:17,499 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 9.5) internal successors, (95), 7 states have internal predecessors, (95), 4 states have call successors, (13), 5 states have call predecessors, (13), 2 states have return successors, (13), 4 states have call predecessors, (13), 4 states have call successors, (13) Word has length 187 [2021-11-20 05:58:17,499 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:58:17,508 INFO L225 Difference]: With dead ends: 1904 [2021-11-20 05:58:17,508 INFO L226 Difference]: Without dead ends: 1271 [2021-11-20 05:58:17,511 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 74 GetRequests, 46 SyntacticMatches, 0 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 186 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=196, Invalid=674, Unknown=0, NotChecked=0, Total=870 [2021-11-20 05:58:17,511 INFO L933 BasicCegarLoop]: 256 mSDtfsCounter, 548 mSDsluCounter, 569 mSDsCounter, 0 mSdLazyCounter, 688 mSolverCounterSat, 222 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 552 SdHoareTripleChecker+Valid, 825 SdHoareTripleChecker+Invalid, 910 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 222 IncrementalHoareTripleChecker+Valid, 688 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2021-11-20 05:58:17,512 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [552 Valid, 825 Invalid, 910 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [222 Valid, 688 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2021-11-20 05:58:17,514 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1271 states. [2021-11-20 05:58:17,622 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1271 to 1269. [2021-11-20 05:58:17,625 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1269 states, 941 states have (on average 1.1710945802337938) internal successors, (1102), 1001 states have internal predecessors, (1102), 169 states have call successors, (169), 142 states have call predecessors, (169), 158 states have return successors, (225), 166 states have call predecessors, (225), 169 states have call successors, (225) [2021-11-20 05:58:17,633 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1269 states to 1269 states and 1496 transitions. [2021-11-20 05:58:17,633 INFO L78 Accepts]: Start accepts. Automaton has 1269 states and 1496 transitions. Word has length 187 [2021-11-20 05:58:17,634 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:58:17,634 INFO L470 AbstractCegarLoop]: Abstraction has 1269 states and 1496 transitions. [2021-11-20 05:58:17,635 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 9.5) internal successors, (95), 7 states have internal predecessors, (95), 4 states have call successors, (13), 5 states have call predecessors, (13), 2 states have return successors, (13), 4 states have call predecessors, (13), 4 states have call successors, (13) [2021-11-20 05:58:17,635 INFO L276 IsEmpty]: Start isEmpty. Operand 1269 states and 1496 transitions. [2021-11-20 05:58:17,642 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 196 [2021-11-20 05:58:17,642 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:58:17,643 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:58:17,643 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-11-20 05:58:17,643 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:58:17,644 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:58:17,644 INFO L85 PathProgramCache]: Analyzing trace with hash 363266323, now seen corresponding path program 1 times [2021-11-20 05:58:17,644 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:58:17,644 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2127218634] [2021-11-20 05:58:17,644 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:58:17,645 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:58:17,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:17,700 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 05:58:17,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:17,706 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 05:58:17,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:17,716 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-11-20 05:58:17,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:17,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 05:58:17,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:17,732 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-11-20 05:58:17,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:17,736 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 05:58:17,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:17,742 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-20 05:58:17,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:17,788 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 05:58:17,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:17,791 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-11-20 05:58:17,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:17,796 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-20 05:58:17,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:17,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 05:58:17,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:17,803 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-11-20 05:58:17,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:17,809 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 05:58:17,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:17,812 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-11-20 05:58:17,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:17,814 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 147 [2021-11-20 05:58:17,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:17,817 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 157 [2021-11-20 05:58:17,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:17,819 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 166 [2021-11-20 05:58:17,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:17,824 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 05:58:17,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:17,828 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 187 [2021-11-20 05:58:17,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:17,831 INFO L134 CoverageAnalysis]: Checked inductivity of 201 backedges. 84 proven. 10 refuted. 0 times theorem prover too weak. 107 trivial. 0 not checked. [2021-11-20 05:58:17,831 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:58:17,832 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2127218634] [2021-11-20 05:58:17,832 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2127218634] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 05:58:17,832 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [396099413] [2021-11-20 05:58:17,832 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:58:17,833 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 05:58:17,833 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 05:58:17,834 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 05:58:17,839 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-11-20 05:58:17,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:17,977 INFO L263 TraceCheckSpWp]: Trace formula consists of 728 conjuncts, 7 conjunts are in the unsatisfiable core [2021-11-20 05:58:17,987 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 05:58:18,409 INFO L134 CoverageAnalysis]: Checked inductivity of 201 backedges. 140 proven. 0 refuted. 0 times theorem prover too weak. 61 trivial. 0 not checked. [2021-11-20 05:58:18,409 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-20 05:58:18,410 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [396099413] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 05:58:18,410 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-20 05:58:18,410 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [11] total 15 [2021-11-20 05:58:18,410 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [145912839] [2021-11-20 05:58:18,411 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 05:58:18,411 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 05:58:18,411 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:58:18,412 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 05:58:18,412 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=37, Invalid=173, Unknown=0, NotChecked=0, Total=210 [2021-11-20 05:58:18,412 INFO L87 Difference]: Start difference. First operand 1269 states and 1496 transitions. Second operand has 6 states, 6 states have (on average 20.0) internal successors, (120), 6 states have internal predecessors, (120), 3 states have call successors, (16), 3 states have call predecessors, (16), 3 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) [2021-11-20 05:58:18,575 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:58:18,576 INFO L93 Difference]: Finished difference Result 2308 states and 2735 transitions. [2021-11-20 05:58:18,576 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-20 05:58:18,577 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 20.0) internal successors, (120), 6 states have internal predecessors, (120), 3 states have call successors, (16), 3 states have call predecessors, (16), 3 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) Word has length 195 [2021-11-20 05:58:18,577 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:58:18,585 INFO L225 Difference]: With dead ends: 2308 [2021-11-20 05:58:18,585 INFO L226 Difference]: Without dead ends: 1153 [2021-11-20 05:58:18,589 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 241 GetRequests, 226 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=52, Invalid=220, Unknown=0, NotChecked=0, Total=272 [2021-11-20 05:58:18,590 INFO L933 BasicCegarLoop]: 186 mSDtfsCounter, 64 mSDsluCounter, 382 mSDsCounter, 0 mSdLazyCounter, 79 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 64 SdHoareTripleChecker+Valid, 568 SdHoareTripleChecker+Invalid, 86 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 79 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 05:58:18,591 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [64 Valid, 568 Invalid, 86 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 79 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 05:58:18,593 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1153 states. [2021-11-20 05:58:18,689 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1153 to 1138. [2021-11-20 05:58:18,692 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1138 states, 849 states have (on average 1.16489988221437) internal successors, (989), 897 states have internal predecessors, (989), 149 states have call successors, (149), 128 states have call predecessors, (149), 139 states have return successors, (195), 146 states have call predecessors, (195), 149 states have call successors, (195) [2021-11-20 05:58:18,699 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1138 states to 1138 states and 1333 transitions. [2021-11-20 05:58:18,700 INFO L78 Accepts]: Start accepts. Automaton has 1138 states and 1333 transitions. Word has length 195 [2021-11-20 05:58:18,700 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:58:18,700 INFO L470 AbstractCegarLoop]: Abstraction has 1138 states and 1333 transitions. [2021-11-20 05:58:18,701 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 20.0) internal successors, (120), 6 states have internal predecessors, (120), 3 states have call successors, (16), 3 states have call predecessors, (16), 3 states have return successors, (17), 3 states have call predecessors, (17), 3 states have call successors, (17) [2021-11-20 05:58:18,701 INFO L276 IsEmpty]: Start isEmpty. Operand 1138 states and 1333 transitions. [2021-11-20 05:58:18,706 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 196 [2021-11-20 05:58:18,707 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 05:58:18,707 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:58:18,746 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-11-20 05:58:18,935 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2021-11-20 05:58:18,935 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 05:58:18,935 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 05:58:18,936 INFO L85 PathProgramCache]: Analyzing trace with hash 412636563, now seen corresponding path program 2 times [2021-11-20 05:58:18,936 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 05:58:18,936 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1699331319] [2021-11-20 05:58:18,936 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 05:58:18,936 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 05:58:18,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:18,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 05:58:18,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:18,994 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-20 05:58:18,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:19,014 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 05:58:19,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:19,022 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-11-20 05:58:19,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:19,026 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 05:58:19,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:19,029 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-11-20 05:58:19,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:19,077 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 05:58:19,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:19,080 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-11-20 05:58:19,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:19,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-20 05:58:19,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:19,089 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 05:58:19,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:19,100 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2021-11-20 05:58:19,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:19,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-11-20 05:58:19,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:19,116 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 05:58:19,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:19,118 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-11-20 05:58:19,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:19,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 147 [2021-11-20 05:58:19,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:19,124 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 157 [2021-11-20 05:58:19,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:19,126 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 166 [2021-11-20 05:58:19,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:19,132 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 05:58:19,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:19,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 187 [2021-11-20 05:58:19,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 05:58:19,141 INFO L134 CoverageAnalysis]: Checked inductivity of 201 backedges. 88 proven. 28 refuted. 0 times theorem prover too weak. 85 trivial. 0 not checked. [2021-11-20 05:58:19,141 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 05:58:19,142 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1699331319] [2021-11-20 05:58:19,142 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1699331319] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 05:58:19,142 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1906540747] [2021-11-20 05:58:19,142 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-11-20 05:58:19,142 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 05:58:19,143 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 05:58:19,147 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 05:58:19,167 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-11-20 05:58:19,275 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2021-11-20 05:58:19,276 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-11-20 05:58:19,278 INFO L263 TraceCheckSpWp]: Trace formula consists of 728 conjuncts, 13 conjunts are in the unsatisfiable core [2021-11-20 05:58:19,285 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 05:58:19,761 INFO L134 CoverageAnalysis]: Checked inductivity of 201 backedges. 147 proven. 4 refuted. 0 times theorem prover too weak. 50 trivial. 0 not checked. [2021-11-20 05:58:19,761 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 05:58:20,582 INFO L134 CoverageAnalysis]: Checked inductivity of 201 backedges. 78 proven. 42 refuted. 0 times theorem prover too weak. 81 trivial. 0 not checked. [2021-11-20 05:58:20,582 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1906540747] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-20 05:58:20,582 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-20 05:58:20,583 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 10, 11] total 26 [2021-11-20 05:58:20,583 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1877018855] [2021-11-20 05:58:20,583 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-20 05:58:20,584 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2021-11-20 05:58:20,584 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 05:58:20,585 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2021-11-20 05:58:20,585 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=123, Invalid=527, Unknown=0, NotChecked=0, Total=650 [2021-11-20 05:58:20,585 INFO L87 Difference]: Start difference. First operand 1138 states and 1333 transitions. Second operand has 26 states, 26 states have (on average 8.576923076923077) internal successors, (223), 22 states have internal predecessors, (223), 10 states have call successors, (42), 9 states have call predecessors, (42), 9 states have return successors, (36), 9 states have call predecessors, (36), 10 states have call successors, (36) [2021-11-20 05:58:22,365 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 05:58:22,366 INFO L93 Difference]: Finished difference Result 2415 states and 2913 transitions. [2021-11-20 05:58:22,366 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2021-11-20 05:58:22,367 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 8.576923076923077) internal successors, (223), 22 states have internal predecessors, (223), 10 states have call successors, (42), 9 states have call predecessors, (42), 9 states have return successors, (36), 9 states have call predecessors, (36), 10 states have call successors, (36) Word has length 195 [2021-11-20 05:58:22,367 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 05:58:22,369 INFO L225 Difference]: With dead ends: 2415 [2021-11-20 05:58:22,369 INFO L226 Difference]: Without dead ends: 0 [2021-11-20 05:58:22,377 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 476 GetRequests, 423 SyntacticMatches, 3 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 503 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=549, Invalid=2103, Unknown=0, NotChecked=0, Total=2652 [2021-11-20 05:58:22,378 INFO L933 BasicCegarLoop]: 142 mSDtfsCounter, 726 mSDsluCounter, 496 mSDsCounter, 0 mSdLazyCounter, 2197 mSolverCounterSat, 322 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 729 SdHoareTripleChecker+Valid, 638 SdHoareTripleChecker+Invalid, 2519 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 322 IncrementalHoareTripleChecker+Valid, 2197 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2021-11-20 05:58:22,379 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [729 Valid, 638 Invalid, 2519 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [322 Valid, 2197 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2021-11-20 05:58:22,379 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-11-20 05:58:22,379 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-11-20 05:58:22,380 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-20 05:58:22,380 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-11-20 05:58:22,380 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 195 [2021-11-20 05:58:22,381 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 05:58:22,381 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-11-20 05:58:22,381 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 8.576923076923077) internal successors, (223), 22 states have internal predecessors, (223), 10 states have call successors, (42), 9 states have call predecessors, (42), 9 states have return successors, (36), 9 states have call predecessors, (36), 10 states have call successors, (36) [2021-11-20 05:58:22,382 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-11-20 05:58:22,382 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-11-20 05:58:22,384 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-20 05:58:22,427 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-11-20 05:58:22,611 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2021-11-20 05:58:22,613 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-11-20 05:58:37,000 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 551 558) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= ~waterLevel~0 1))) (.cse4 (not (<= 1 ~switchedOnBeforeTS~0)))) (and (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4) (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse3 .cse4))) [2021-11-20 05:58:37,000 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 551 558) no Hoare annotation was computed. [2021-11-20 05:58:37,000 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 551 558) no Hoare annotation was computed. [2021-11-20 05:58:37,000 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 458 464) no Hoare annotation was computed. [2021-11-20 05:58:37,000 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 458 464) the Hoare annotation is: true [2021-11-20 05:58:37,001 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 943 954) the Hoare annotation is: (let ((.cse0 (not (< 1 ~waterLevel~0))) (.cse3 (not (<= 1 ~pumpRunning~0))) (.cse5 (not (<= ~waterLevel~0 2))) (.cse6 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse9 (not (<= ~waterLevel~0 1))) (.cse7 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse8 (not (= 2 ~waterLevel~0))) (.cse2 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse4 (not (<= 1 |old(~methaneLevelCritical~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse1 .cse8 .cse2) (or .cse6 .cse1 .cse2 .cse3 .cse9 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse6 .cse1 .cse2 .cse3 .cse5) (or .cse7 .cse1 .cse2 .cse4 .cse9) (or .cse6 .cse7 .cse1 .cse2 .cse9) (or .cse7 .cse1 .cse8 .cse2 .cse4))) [2021-11-20 05:58:37,001 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 943 954) no Hoare annotation was computed. [2021-11-20 05:58:37,001 INFO L858 garLoopResultBuilder]: For program point L947-1(lines 943 954) no Hoare annotation was computed. [2021-11-20 05:58:37,001 INFO L858 garLoopResultBuilder]: For program point L833(line 833) no Hoare annotation was computed. [2021-11-20 05:58:37,001 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 812 841) no Hoare annotation was computed. [2021-11-20 05:58:37,002 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 812 841) the Hoare annotation is: true [2021-11-20 05:58:37,002 INFO L858 garLoopResultBuilder]: For program point L826(lines 826 830) no Hoare annotation was computed. [2021-11-20 05:58:37,002 INFO L861 garLoopResultBuilder]: At program point L826-1(lines 826 830) the Hoare annotation is: true [2021-11-20 05:58:37,002 INFO L858 garLoopResultBuilder]: For program point L823(line 823) no Hoare annotation was computed. [2021-11-20 05:58:37,002 INFO L861 garLoopResultBuilder]: At program point L822-2(lines 822 836) the Hoare annotation is: true [2021-11-20 05:58:37,002 INFO L861 garLoopResultBuilder]: At program point L818(line 818) the Hoare annotation is: true [2021-11-20 05:58:37,002 INFO L858 garLoopResultBuilder]: For program point L818-1(line 818) no Hoare annotation was computed. [2021-11-20 05:58:37,003 INFO L861 garLoopResultBuilder]: At program point L837(lines 812 841) the Hoare annotation is: true [2021-11-20 05:58:37,003 INFO L854 garLoopResultBuilder]: At program point L960(lines 955 963) the Hoare annotation is: (let ((.cse16 (<= 1 ~methaneLevelCritical~0)) (.cse17 (<= 1 ~pumpRunning~0)) (.cse18 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse14 (= ~methaneLevelCritical~0 0)) (.cse19 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse20 (<= ~waterLevel~0 1)) (.cse15 (= 1 ~systemActive~0)) (.cse21 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse22 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse6 (not (= |old(~waterLevel~0)| 1))) (.cse8 (and .cse17 .cse18 .cse14 .cse19 .cse20 .cse15 .cse21 .cse22)) (.cse4 (and .cse18 .cse19 (= ~waterLevel~0 1) .cse22)) (.cse13 (and .cse18 .cse19 (= |old(~waterLevel~0)| ~waterLevel~0) .cse22)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (and .cse17 .cse18 .cse16 .cse19 .cse20 .cse15 .cse21 .cse22)) (.cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse12 (not (<= |old(~waterLevel~0)| 1))) (.cse3 (not .cse16)) (.cse10 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse15)) (.cse2 (not (< 1 |old(~waterLevel~0)|))) (.cse7 (not .cse14)) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse0 .cse1 .cse7 .cse8 .cse9) (or .cse10 .cse0 .cse2 .cse3 .cse5) (or .cse6 .cse0 .cse1 .cse3 .cse11 .cse9) (or .cse12 .cse13 .cse0 .cse1 .cse7 .cse8 .cse9) (or .cse0 .cse1 .cse2 .cse7 .cse4 .cse5) (or .cse12 .cse10 .cse0 .cse7) (or .cse12 .cse13 .cse0 .cse1 .cse3 .cse11 .cse9) (or .cse12 .cse10 .cse0 .cse3) (or .cse10 .cse0 .cse2 .cse7 .cse5)))) [2021-11-20 05:58:37,003 INFO L858 garLoopResultBuilder]: For program point L923(lines 923 927) no Hoare annotation was computed. [2021-11-20 05:58:37,004 INFO L854 garLoopResultBuilder]: At program point L923-2(lines 919 930) the Hoare annotation is: (let ((.cse16 (= ~methaneLevelCritical~0 0)) (.cse18 (<= 1 ~pumpRunning~0)) (.cse14 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse21 (<= 1 ~methaneLevelCritical~0)) (.cse19 (<= ~waterLevel~0 1)) (.cse17 (= 1 ~systemActive~0)) (.cse20 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse15 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse8 (and .cse18 .cse14 .cse21 .cse19 .cse17 .cse20 .cse15)) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse3 (not .cse21)) (.cse10 (not (<= |old(~waterLevel~0)| 1))) (.cse11 (and .cse14 (= |old(~waterLevel~0)| ~waterLevel~0) .cse15)) (.cse12 (and .cse18 .cse14 .cse16 .cse19 .cse17 .cse20 .cse15)) (.cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse17)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (< 1 |old(~waterLevel~0)|))) (.cse13 (not .cse16)) (.cse4 (and .cse14 (= ~waterLevel~0 1) .cse15)) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse0 .cse2 .cse3 .cse5) (or .cse7 .cse0 .cse1 .cse8 .cse3 .cse9) (or .cse10 .cse11 .cse0 .cse1 .cse8 .cse3 .cse9) (or .cse7 .cse0 .cse12 .cse1 .cse13 .cse9) (or .cse10 .cse6 .cse0 .cse13) (or .cse10 .cse6 .cse0 .cse3) (or .cse10 .cse11 .cse0 .cse12 .cse1 .cse13 .cse9) (or .cse6 .cse0 .cse2 .cse13 .cse5) (or .cse0 .cse1 .cse2 .cse13 .cse4 .cse5)))) [2021-11-20 05:58:37,004 INFO L854 garLoopResultBuilder]: At program point L791(line 791) the Hoare annotation is: (let ((.cse25 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse21 (<= |timeShift_processEnvironment_~tmp~5#1| 0)) (.cse22 (< 0 (+ |timeShift_processEnvironment_~tmp~5#1| 1))) (.cse23 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse24 (<= 0 |timeShift_isMethaneAlarm_#res#1|)) (.cse29 (= ~methaneLevelCritical~0 0)) (.cse14 (<= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~5#1|)) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse31 (<= 1 ~methaneLevelCritical~0)) (.cse15 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse28 (<= ~waterLevel~0 1)) (.cse16 (= 1 ~systemActive~0)) (.cse30 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse5 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| ~waterLevel~0)) (.cse18 (<= 1 ~switchedOnBeforeTS~0)) (.cse19 (<= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|))) (let ((.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse9 (and .cse14 .cse3 .cse4 .cse31 .cse15 .cse28 .cse16 .cse30 .cse5 .cse18 .cse19)) (.cse11 (not .cse31)) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse17 (= ~waterLevel~0 1)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse13 (not (< 1 |old(~waterLevel~0)|))) (.cse20 (not (<= |old(~waterLevel~0)| 2))) (.cse8 (not (= |old(~waterLevel~0)| 1))) (.cse2 (not .cse16)) (.cse10 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not .cse29)) (.cse26 (and .cse21 .cse22 .cse3 .cse4 .cse29 .cse15 .cse28 .cse16 .cse30 .cse23 .cse5 .cse18 .cse24)) (.cse27 (and (<= 1 ~pumpRunning~0) .cse21 .cse25 .cse22 .cse4 .cse29 .cse15 .cse28 .cse30 .cse23 .cse5 .cse18 .cse24)) (.cse12 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5 .cse6) .cse7) (or .cse8 .cse9 .cse2 .cse10 .cse11 .cse12) (or .cse2 .cse10 .cse13 (and .cse14 .cse3 .cse4 .cse15 .cse16 .cse5 .cse17 .cse18 .cse19) .cse11 .cse20) (or .cse0 (and .cse21 .cse22 .cse3 .cse4 .cse15 .cse23 .cse5 .cse6 .cse18 .cse24) (and .cse21 .cse25 .cse22 .cse4 .cse15 .cse23 .cse5 .cse6 .cse18 .cse24) .cse2 .cse10 .cse7 .cse26 .cse27 .cse12) (or .cse1 .cse2 .cse11 (and .cse3 .cse4 .cse28 .cse5 .cse6) .cse20) (or .cse9 .cse2 .cse10 .cse11 .cse20 (and .cse14 .cse3 .cse4 .cse15 .cse5 .cse6 .cse18 .cse19) .cse12) (or .cse2 .cse10 .cse13 .cse7 (and .cse21 .cse22 .cse3 .cse4 .cse15 .cse16 .cse23 .cse5 .cse17 .cse18 .cse24) .cse20 (and .cse21 .cse25 .cse22 .cse4 .cse15 .cse23 .cse5 .cse17 .cse18 .cse24)) (or .cse1 .cse2 .cse13 .cse7 .cse20) (or .cse8 .cse2 .cse10 .cse7 .cse26 .cse27 .cse12)))) [2021-11-20 05:58:37,004 INFO L858 garLoopResultBuilder]: For program point L791-1(line 791) no Hoare annotation was computed. [2021-11-20 05:58:37,004 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 431 457) no Hoare annotation was computed. [2021-11-20 05:58:37,004 INFO L858 garLoopResultBuilder]: For program point L445-1(lines 445 451) no Hoare annotation was computed. [2021-11-20 05:58:37,005 INFO L854 garLoopResultBuilder]: At program point L532(line 532) the Hoare annotation is: (let ((.cse9 (<= |timeShift_processEnvironment_~tmp~5#1| 0)) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse11 (< 0 (+ |timeShift_processEnvironment_~tmp~5#1| 1))) (.cse17 (= ~methaneLevelCritical~0 0)) (.cse12 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse18 (= 1 ~systemActive~0)) (.cse13 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse14 (<= 1 ~switchedOnBeforeTS~0)) (.cse15 (<= 0 |timeShift_isMethaneAlarm_#res#1|))) (let ((.cse8 (and (<= 1 ~pumpRunning~0) .cse9 .cse10 .cse11 .cse17 .cse12 (<= ~waterLevel~0 1) .cse18 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse13 .cse14 .cse15)) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse18)) (.cse6 (not (< 1 |old(~waterLevel~0)|))) (.cse16 (not .cse17)) (.cse7 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse6 .cse3 .cse7) (or .cse8 .cse1 .cse2 (and .cse9 .cse10 .cse11 .cse12 .cse13 (= |old(~waterLevel~0)| ~waterLevel~0) .cse14 .cse15) .cse16 .cse7 .cse4) (or .cse1 .cse2 .cse6 .cse3 .cse7) (or .cse1 .cse2 .cse6 .cse16 .cse7 (and .cse9 .cse10 .cse11 .cse12 .cse13 (= ~waterLevel~0 1) .cse14 .cse15)) (or .cse0 .cse5 .cse1 .cse16) (or .cse8 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 .cse16 .cse4) (or .cse0 .cse5 .cse1 .cse3) (or .cse5 .cse1 .cse6 .cse16 .cse7)))) [2021-11-20 05:58:37,005 INFO L854 garLoopResultBuilder]: At program point L528(line 528) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (<= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~5#1|)) (.cse10 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse11 (<= 1 ~switchedOnBeforeTS~0)) (.cse12 (<= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse15 (<= 1 ~methaneLevelCritical~0)) (.cse16 (= 1 ~systemActive~0))) (let ((.cse5 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (< 1 |old(~waterLevel~0)|))) (.cse14 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not .cse16)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not .cse15)) (.cse7 (and (<= 1 ~pumpRunning~0) .cse8 .cse9 .cse15 .cse10 (<= ~waterLevel~0 1) .cse16 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse11 .cse12)) (.cse13 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse6 .cse3 .cse7 (and .cse8 .cse9 .cse10 (= |old(~waterLevel~0)| ~waterLevel~0) .cse11 .cse12) .cse13) (or .cse1 .cse6 .cse2 .cse14 .cse4) (or .cse5 .cse0 .cse1 .cse14) (or .cse1 .cse6 .cse2 .cse3 (and .cse8 .cse9 .cse10 (= ~waterLevel~0 1) .cse11 .cse12) .cse4) (or .cse5 .cse0 .cse1 .cse3) (or .cse5 .cse1 .cse6 .cse14 .cse13) (or .cse0 .cse1 .cse2 .cse14 .cse4) (or (not (= |old(~waterLevel~0)| 1)) .cse1 .cse6 .cse3 .cse7 .cse13)))) [2021-11-20 05:58:37,005 INFO L858 garLoopResultBuilder]: For program point L912(line 912) no Hoare annotation was computed. [2021-11-20 05:58:37,005 INFO L854 garLoopResultBuilder]: At program point L776(line 776) the Hoare annotation is: (let ((.cse15 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse14 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse16 (= 1 ~systemActive~0))) (let ((.cse7 (not (< 1 |old(~waterLevel~0)|))) (.cse8 (and (<= 1 ~pumpRunning~0) .cse13 .cse14 (< 1 ~waterLevel~0) .cse16 (<= ~waterLevel~0 2))) (.cse1 (not (<= |old(~waterLevel~0)| 1))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (and (= ~pumpRunning~0 0) .cse14 .cse15)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse12 (not (= |old(~waterLevel~0)| 2))) (.cse3 (not .cse16)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (and .cse13 .cse14 .cse15)) (.cse11 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse3 .cse5) (or .cse3 .cse6 .cse7 .cse8 .cse4 .cse9) (or .cse3 .cse6 .cse7 .cse8 .cse5 .cse9) (or .cse1 .cse3 .cse6 .cse4 .cse10 .cse11) (or .cse0 .cse2 .cse3 .cse4 .cse12) (or .cse0 .cse2 .cse3 .cse5 .cse12) (or .cse3 .cse6 .cse5 .cse9 .cse10 .cse11)))) [2021-11-20 05:58:37,005 INFO L858 garLoopResultBuilder]: For program point L776-1(line 776) no Hoare annotation was computed. [2021-11-20 05:58:37,006 INFO L854 garLoopResultBuilder]: At program point L537(line 537) the Hoare annotation is: (let ((.cse8 (not (< 1 |old(~waterLevel~0)|))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse6 .cse1 .cse7) (or .cse5 .cse6 .cse1 .cse7 (not (= |old(~waterLevel~0)| 2))) (or .cse1 .cse2 .cse8 .cse3 .cse9) (or .cse1 .cse2 .cse8 .cse7 .cse9) (or .cse5 .cse6 .cse1 .cse3 .cse9) (or .cse0 .cse1 .cse2 .cse7 .cse4))) [2021-11-20 05:58:37,006 INFO L858 garLoopResultBuilder]: For program point L793(lines 793 803) no Hoare annotation was computed. [2021-11-20 05:58:37,006 INFO L854 garLoopResultBuilder]: At program point L537-1(lines 518 542) the Hoare annotation is: (let ((.cse4 (<= 1 ~pumpRunning~0)) (.cse27 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse21 (<= |timeShift_processEnvironment_~tmp~5#1| 0)) (.cse22 (< 0 (+ |timeShift_processEnvironment_~tmp~5#1| 1))) (.cse29 (= ~methaneLevelCritical~0 0)) (.cse24 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse26 (<= 0 |timeShift_isMethaneAlarm_#res#1|)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (<= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~5#1|)) (.cse15 (= ~pumpRunning~0 0)) (.cse28 (<= 1 ~methaneLevelCritical~0)) (.cse16 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse30 (<= ~waterLevel~0 1)) (.cse23 (= 1 ~systemActive~0)) (.cse31 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse17 (<= 1 ~switchedOnBeforeTS~0)) (.cse18 (<= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|))) (let ((.cse8 (not (= |old(~waterLevel~0)| 1))) (.cse10 (and .cse14 .cse15 .cse28 .cse16 .cse30 .cse23 .cse31 .cse17 .cse18)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse15 .cse5)) (.cse12 (and .cse21 .cse22 .cse15 .cse29 .cse16 .cse30 .cse23 .cse31 .cse24 .cse17 .cse26)) (.cse19 (not (<= |old(~waterLevel~0)| 1))) (.cse13 (and .cse4 .cse21 .cse27 .cse22 .cse29 .cse16 .cse30 .cse23 .cse31 .cse24 .cse17 .cse26)) (.cse7 (not .cse29)) (.cse11 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not .cse23)) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse20 (not (< 1 |old(~waterLevel~0)|))) (.cse25 (= ~waterLevel~0 1)) (.cse3 (not .cse28)) (.cse6 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5) .cse6) (or .cse0 .cse1 .cse2 .cse7 .cse6 (and .cse4 (= 2 ~waterLevel~0) .cse5)) (or .cse8 .cse2 .cse9 .cse10 .cse3 .cse11) (or .cse12 .cse13 .cse8 .cse2 .cse9 .cse7 .cse11) (or .cse2 .cse9 .cse10 (and .cse14 .cse15 .cse16 .cse5 .cse17 .cse18) .cse3 .cse6 .cse11) (or .cse19 .cse0 .cse1 .cse2 .cse3) (or .cse2 .cse9 .cse20 (and .cse21 .cse22 .cse15 .cse16 .cse23 .cse24 .cse25 .cse17 .cse26) .cse7 .cse6 (and .cse21 .cse27 .cse22 .cse16 .cse24 .cse25 .cse17 .cse26)) (or .cse12 .cse19 .cse13 .cse2 .cse9 (and .cse21 .cse27 .cse22 .cse16 .cse24 .cse5 .cse17 .cse26) .cse7 .cse11 (and .cse21 .cse22 .cse15 .cse16 .cse24 .cse5 .cse17 .cse26)) (or .cse2 .cse9 .cse20 (and .cse14 .cse15 .cse16 .cse23 .cse25 .cse17 .cse18) .cse3 .cse6)))) [2021-11-20 05:58:37,006 INFO L858 garLoopResultBuilder]: For program point L438(lines 438 444) no Hoare annotation was computed. [2021-11-20 05:58:37,007 INFO L854 garLoopResultBuilder]: At program point L566(lines 559 569) the Hoare annotation is: (let ((.cse21 (= 1 ~systemActive~0)) (.cse9 (<= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse23 (<= 1 ~methaneLevelCritical~0)) (.cse22 (<= 1 ~pumpRunning~0)) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse20 (= ~methaneLevelCritical~0 0)) (.cse6 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse24 (<= ~waterLevel~0 1)) (.cse25 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse16 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse17 (<= 0 |timeShift_isMethaneAlarm_#res#1|))) (let ((.cse7 (= ~waterLevel~0 1)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse10 (not (<= |old(~waterLevel~0)| 1))) (.cse18 (and .cse22 .cse5 .cse20 .cse6 .cse24 .cse25 .cse16 .cse8 .cse17)) (.cse19 (not (= |old(~waterLevel~0)| 1))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not .cse23)) (.cse12 (and .cse22 .cse5 .cse23 .cse6 .cse24 .cse21 .cse25 .cse8 .cse9)) (.cse13 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse14 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse21)) (.cse2 (not (< 1 |old(~waterLevel~0)|))) (.cse15 (not .cse20)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (and .cse5 .cse6 .cse7 .cse8 .cse9)) (or .cse10 (and .cse5 .cse6 .cse11 .cse8 .cse9) .cse0 .cse1 .cse3 .cse12 .cse13) (or .cse14 .cse0 .cse2 .cse3 .cse4) (or .cse10 .cse14 .cse0 .cse15) (or .cse0 .cse1 .cse2 .cse15 (and .cse5 .cse6 .cse16 .cse7 .cse8 .cse17) .cse4) (or .cse10 .cse0 .cse1 .cse15 (and .cse5 .cse6 .cse16 .cse11 .cse8 .cse17) .cse18 .cse13) (or .cse10 .cse14 .cse0 .cse3) (or .cse19 .cse0 .cse1 .cse15 .cse18 .cse13) (or .cse19 .cse0 .cse1 .cse3 .cse12 .cse13) (or .cse14 .cse0 .cse2 .cse15 .cse4)))) [2021-11-20 05:58:37,007 INFO L858 garLoopResultBuilder]: For program point L789(lines 789 806) no Hoare annotation was computed. [2021-11-20 05:58:37,007 INFO L858 garLoopResultBuilder]: For program point L438-2(lines 434 456) no Hoare annotation was computed. [2021-11-20 05:58:37,007 INFO L854 garLoopResultBuilder]: At program point L789-1(lines 781 809) the Hoare annotation is: (let ((.cse7 (<= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~5#1|)) (.cse33 (<= 1 ~methaneLevelCritical~0)) (.cse15 (<= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse22 (<= 1 ~pumpRunning~0)) (.cse27 (<= |timeShift_processEnvironment_~tmp~5#1| 0)) (.cse28 (< 0 (+ |timeShift_processEnvironment_~tmp~5#1| 1))) (.cse36 (= ~methaneLevelCritical~0 0)) (.cse10 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse34 (<= ~waterLevel~0 1)) (.cse11 (= 1 ~systemActive~0)) (.cse35 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse29 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse14 (<= 1 ~switchedOnBeforeTS~0)) (.cse30 (<= 0 |timeShift_isMethaneAlarm_#res#1|)) (.cse18 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (= ~pumpRunning~0 0)) (.cse9 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse12 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| ~waterLevel~0)) (.cse23 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse20 (<= 2 ~waterLevel~0)) (.cse17 (not (= |old(~pumpRunning~0)| 0))) (.cse26 (and .cse18 .cse8 .cse9 .cse12 .cse23)) (.cse25 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~waterLevel~0)| 1))) (.cse31 (and .cse27 .cse28 .cse8 .cse9 .cse36 .cse10 .cse34 .cse11 .cse35 .cse29 .cse12 .cse14 .cse30)) (.cse32 (and .cse22 .cse27 .cse18 .cse28 .cse9 .cse36 .cse10 .cse34 .cse11 .cse35 .cse29 .cse12 .cse14 .cse30)) (.cse6 (not (< 1 |old(~waterLevel~0)|))) (.cse24 (not .cse36)) (.cse13 (= ~waterLevel~0 1)) (.cse1 (and .cse7 .cse8 .cse9 .cse33 .cse10 .cse34 .cse11 .cse35 .cse12 .cse14 .cse15)) (.cse2 (not .cse11)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not .cse33)) (.cse16 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse2 .cse3 .cse6 (and .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15) .cse4 .cse16) (let ((.cse19 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse21 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2))) (or .cse17 .cse2 .cse6 .cse4 (and .cse18 .cse8 .cse19 .cse20 .cse11 .cse21) .cse16 (and .cse22 .cse19 .cse21))) (or .cse17 (and .cse22 .cse9 .cse12 .cse23) .cse2 (and .cse18 .cse8 .cse9 .cse20 .cse11 .cse12 .cse23) .cse24 (not (= |old(~waterLevel~0)| 2))) (or .cse25 .cse17 .cse2 .cse24 .cse26) (or .cse17 (and (= 2 ~waterLevel~0) .cse23) .cse2 .cse4 .cse26 .cse16) (or .cse25 (and .cse27 .cse18 .cse28 .cse9 .cse10 .cse29 .cse12 .cse23 .cse14 .cse30) .cse2 .cse3 .cse24 (and .cse27 .cse28 .cse8 .cse9 .cse10 .cse11 .cse29 .cse12 .cse23 .cse14 .cse30) .cse31 .cse5 .cse32) (or .cse0 .cse2 .cse3 .cse24 .cse31 .cse5 .cse32) (or .cse2 .cse3 .cse6 .cse24 (and .cse27 .cse28 .cse8 .cse9 .cse10 .cse11 .cse29 .cse12 .cse13 .cse14 .cse30) .cse16 (and .cse27 .cse18 .cse28 .cse9 .cse10 .cse29 .cse12 .cse13 .cse14 .cse30)) (or .cse1 .cse2 .cse3 .cse4 .cse16 (and .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse23 .cse14 .cse15) .cse5)))) [2021-11-20 05:58:37,008 INFO L854 garLoopResultBuilder]: At program point L913(lines 908 915) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (not (< 1 |old(~waterLevel~0)|))) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse6 .cse3 .cse7) (or .cse1 .cse2 .cse6 .cse3 .cse7) (or .cse1 .cse2 .cse6 .cse8 .cse7) (or .cse0 .cse5 .cse1 .cse8) (or .cse0 .cse5 .cse1 .cse3) (or .cse0 .cse1 .cse2 .cse8 .cse4) (or .cse5 .cse1 .cse6 .cse8 .cse7))) [2021-11-20 05:58:37,008 INFO L854 garLoopResultBuilder]: At program point L992(lines 987 995) the Hoare annotation is: (let ((.cse28 (<= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~5#1|)) (.cse30 (<= 1 ~methaneLevelCritical~0)) (.cse29 (<= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse35 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse34 (<= 1 ~pumpRunning~0)) (.cse17 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (<= |timeShift_processEnvironment_~tmp~5#1| 0)) (.cse7 (< 0 (+ |timeShift_processEnvironment_~tmp~5#1| 1))) (.cse8 (= ~pumpRunning~0 0)) (.cse9 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse33 (= ~methaneLevelCritical~0 0)) (.cse10 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse31 (<= ~waterLevel~0 1)) (.cse25 (= 1 ~systemActive~0)) (.cse32 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse11 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse13 (<= 1 ~switchedOnBeforeTS~0)) (.cse14 (<= 0 |timeShift_isMethaneAlarm_#res#1|))) (let ((.cse15 (and .cse6 .cse7 .cse8 .cse9 .cse33 .cse10 .cse31 .cse25 .cse32 .cse11 .cse13 .cse14)) (.cse0 (not (= |old(~waterLevel~0)| 1))) (.cse16 (and .cse34 .cse6 .cse17 .cse7 .cse9 .cse33 .cse10 .cse31 .cse25 .cse32 .cse11 .cse13 .cse14)) (.cse20 (and .cse8 .cse35 .cse12)) (.cse23 (and .cse34 .cse35 .cse12)) (.cse18 (not .cse33)) (.cse4 (and .cse28 .cse8 .cse9 .cse30 .cse10 .cse31 .cse25 .cse32 .cse13 .cse29)) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse24 (= ~waterLevel~0 1)) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse22 (not (< 1 |old(~waterLevel~0)|))) (.cse19 (not (<= |old(~waterLevel~0)| 2))) (.cse26 (not (<= |old(~waterLevel~0)| 1))) (.cse21 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse25)) (.cse27 (and .cse8 .cse9 .cse12)) (.cse3 (not .cse30))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or (and .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14) .cse15 .cse1 .cse2 .cse16 (and .cse6 .cse17 .cse7 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14) .cse18 .cse19 .cse5) (or .cse15 .cse0 .cse1 .cse2 .cse16 .cse18 .cse5) (or .cse20 .cse21 .cse1 .cse22 .cse3 .cse23 .cse19) (or .cse20 .cse21 .cse1 .cse22 .cse18 .cse23 .cse19) (or (and .cse6 .cse17 .cse7 .cse9 .cse10 .cse11 .cse24 .cse13 .cse14) .cse1 .cse2 .cse22 .cse18 (and .cse6 .cse7 .cse8 .cse9 .cse10 .cse25 .cse11 .cse24 .cse13 .cse14) .cse19) (or .cse26 .cse21 .cse1 .cse27 .cse18) (or (and .cse28 .cse8 .cse9 .cse10 .cse12 .cse13 .cse29) .cse1 .cse2 .cse3 .cse19 .cse4 .cse5) (or (and .cse28 .cse8 .cse9 .cse10 .cse25 .cse24 .cse13 .cse29) .cse1 .cse2 .cse22 .cse3 .cse19) (or .cse26 .cse21 .cse1 .cse27 .cse3)))) [2021-11-20 05:58:37,008 INFO L858 garLoopResultBuilder]: For program point L794(lines 794 800) no Hoare annotation was computed. [2021-11-20 05:58:37,009 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 431 457) the Hoare annotation is: (let ((.cse15 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse14 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse16 (= 1 ~systemActive~0))) (let ((.cse7 (not (< 1 |old(~waterLevel~0)|))) (.cse8 (and (<= 1 ~pumpRunning~0) .cse13 .cse14 (< 1 ~waterLevel~0) .cse16 (<= ~waterLevel~0 2))) (.cse1 (not (<= |old(~waterLevel~0)| 1))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (and (= ~pumpRunning~0 0) .cse14 .cse15)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse12 (not (= |old(~waterLevel~0)| 2))) (.cse3 (not .cse16)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (and .cse13 .cse14 .cse15)) (.cse11 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse3 .cse5) (or .cse3 .cse6 .cse7 .cse8 .cse4 .cse9) (or .cse3 .cse6 .cse7 .cse8 .cse5 .cse9) (or .cse1 .cse3 .cse6 .cse4 .cse10 .cse11) (or .cse0 .cse2 .cse3 .cse4 .cse12) (or .cse0 .cse2 .cse3 .cse5 .cse12) (or .cse3 .cse6 .cse5 .cse9 .cse10 .cse11)))) [2021-11-20 05:58:37,009 INFO L858 garLoopResultBuilder]: For program point L526(lines 526 534) no Hoare annotation was computed. [2021-11-20 05:58:37,009 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 431 457) no Hoare annotation was computed. [2021-11-20 05:58:37,009 INFO L854 garLoopResultBuilder]: At program point L778(lines 771 780) the Hoare annotation is: (let ((.cse17 (<= 1 ~switchedOnBeforeTS~0)) (.cse15 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse18 (= ~pumpRunning~0 0)) (.cse14 (= 1 ~systemActive~0)) (.cse16 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (< 1 |old(~waterLevel~0)|))) (.cse5 (and .cse15 .cse18 (< 1 ~waterLevel~0) .cse14 (<= ~waterLevel~0 2) .cse16)) (.cse8 (and (<= 1 ~pumpRunning~0) .cse15 .cse14 .cse16 .cse17)) (.cse11 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (and .cse18 .cse16)) (.cse6 (not (<= |old(~waterLevel~0)| 1))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse12 (and .cse15 .cse16 .cse17)) (.cse1 (not .cse14)) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse13 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse0 .cse7 .cse1 .cse3) (or .cse8 .cse1 .cse9 .cse10 .cse11) (or .cse0 .cse1 .cse2 .cse10 .cse4 .cse5) (or .cse8 .cse1 .cse9 .cse3 .cse11) (or .cse6 .cse0 .cse7 .cse1 .cse10) (or .cse6 .cse12 .cse1 .cse9 .cse3 .cse13) (or .cse12 .cse1 .cse9 .cse10 .cse4 .cse13)))) [2021-11-20 05:58:37,009 INFO L858 garLoopResultBuilder]: For program point L522(lines 522 539) no Hoare annotation was computed. [2021-11-20 05:58:37,010 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 912) no Hoare annotation was computed. [2021-11-20 05:58:37,010 INFO L858 garLoopResultBuilder]: For program point L894(lines 894 901) no Hoare annotation was computed. [2021-11-20 05:58:37,010 INFO L858 garLoopResultBuilder]: For program point L894-2(lines 894 901) no Hoare annotation was computed. [2021-11-20 05:58:37,010 INFO L858 garLoopResultBuilder]: For program point L725(lines 725 731) no Hoare annotation was computed. [2021-11-20 05:58:37,010 INFO L858 garLoopResultBuilder]: For program point L725-1(lines 725 731) no Hoare annotation was computed. [2021-11-20 05:58:37,010 INFO L861 garLoopResultBuilder]: At program point L754(lines 695 758) the Hoare annotation is: true [2021-11-20 05:58:37,011 INFO L854 garLoopResultBuilder]: At program point L717(line 717) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse2 (= 2 ~waterLevel~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse8 (<= ~waterLevel~0 1)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse8 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse9 .cse8 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse9 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse2 .cse9 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse9 .cse8 .cse3 .cse4 .cse5 (<= 1 ~switchedOnBeforeTS~0) .cse6))) [2021-11-20 05:58:37,011 INFO L861 garLoopResultBuilder]: At program point L903(lines 884 906) the Hoare annotation is: true [2021-11-20 05:58:37,011 INFO L854 garLoopResultBuilder]: At program point L870(lines 866 872) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~10#1| 1)) [2021-11-20 05:58:37,011 INFO L854 garLoopResultBuilder]: At program point L672(lines 668 674) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 05:58:37,011 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-11-20 05:58:37,011 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-11-20 05:58:37,012 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-11-20 05:58:37,012 INFO L854 garLoopResultBuilder]: At program point L751(lines 704 752) the Hoare annotation is: false [2021-11-20 05:58:37,012 INFO L858 garLoopResultBuilder]: For program point L706(lines 705 750) no Hoare annotation was computed. [2021-11-20 05:58:37,012 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-11-20 05:58:37,012 INFO L854 garLoopResultBuilder]: At program point L768(lines 763 770) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~10#1| 1)) [2021-11-20 05:58:37,012 INFO L858 garLoopResultBuilder]: For program point L735(lines 735 746) no Hoare annotation was computed. [2021-11-20 05:58:37,013 INFO L854 garLoopResultBuilder]: At program point L727(line 727) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse5 (<= ~waterLevel~0 2)) (.cse9 (= 2 ~waterLevel~0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse9 .cse2 .cse3 .cse4 .cse6) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse9 .cse1 .cse2 .cse3 .cse4 .cse6) (and .cse7 .cse1 (<= ~waterLevel~0 1) .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse6))) [2021-11-20 05:58:37,013 INFO L854 garLoopResultBuilder]: At program point L748(lines 705 750) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse2 (= 2 ~waterLevel~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse8 (<= ~waterLevel~0 1)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse8 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse9 .cse8 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse9 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse2 .cse9 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse9 .cse8 .cse3 .cse4 .cse5 (<= 1 ~switchedOnBeforeTS~0) .cse6))) [2021-11-20 05:58:37,013 INFO L858 garLoopResultBuilder]: For program point L715(lines 715 721) no Hoare annotation was computed. [2021-11-20 05:58:37,013 INFO L858 garLoopResultBuilder]: For program point L715-1(lines 715 721) no Hoare annotation was computed. [2021-11-20 05:58:37,013 INFO L858 garLoopResultBuilder]: For program point L707(lines 707 711) no Hoare annotation was computed. [2021-11-20 05:58:37,014 INFO L861 garLoopResultBuilder]: At program point L881(lines 873 883) the Hoare annotation is: true [2021-11-20 05:58:37,014 INFO L854 garLoopResultBuilder]: At program point L687(lines 682 690) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 05:58:37,014 INFO L854 garLoopResultBuilder]: At program point L679(lines 675 681) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-11-20 05:58:37,014 INFO L858 garLoopResultBuilder]: For program point L741(lines 741 745) no Hoare annotation was computed. [2021-11-20 05:58:37,014 INFO L854 garLoopResultBuilder]: At program point L741-2(lines 735 746) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse5 (<= ~waterLevel~0 2)) (.cse9 (= 2 ~waterLevel~0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse10 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse9 .cse2 .cse3 .cse4 .cse6) (and .cse7 .cse8 .cse2 .cse3 .cse4 .cse5 .cse10 .cse6) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse9 .cse1 .cse2 .cse3 .cse4 .cse6) (and .cse7 .cse1 (<= ~waterLevel~0 1) .cse2 .cse3 .cse4 .cse10 .cse6))) [2021-11-20 05:58:37,015 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 466 490) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= ~waterLevel~0 1)))) (and (or .cse0 .cse1 .cse2 (not (= 2 ~waterLevel~0)) .cse3) (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 (not (<= 1 |old(~pumpRunning~0)|)) .cse3 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-11-20 05:58:37,015 INFO L854 garLoopResultBuilder]: At program point L630(lines 615 633) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse8 (= 1 ~systemActive~0))) (let ((.cse2 (not (<= ~waterLevel~0 1))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse8 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~6#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse8)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse3 .cse4 .cse0 .cse5 .cse2) (or .cse4 .cse6 .cse0 .cse5 .cse7) (or .cse3 .cse4 .cse0 (and .cse6 (= 2 ~waterLevel~0)) .cse1 .cse7)))) [2021-11-20 05:58:37,015 INFO L858 garLoopResultBuilder]: For program point L624(lines 624 628) no Hoare annotation was computed. [2021-11-20 05:58:37,015 INFO L858 garLoopResultBuilder]: For program point L624-2(lines 624 628) no Hoare annotation was computed. [2021-11-20 05:58:37,015 INFO L858 garLoopResultBuilder]: For program point L1000(lines 1000 1006) no Hoare annotation was computed. [2021-11-20 05:58:37,016 INFO L854 garLoopResultBuilder]: At program point L548(lines 543 550) the Hoare annotation is: (let ((.cse5 (not (<= ~waterLevel~0 1))) (.cse2 (<= 1 ~pumpRunning~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 (and .cse2 (= 2 ~waterLevel~0)) (not (<= 1 ~methaneLevelCritical~0)) .cse3) (or .cse0 .cse1 .cse4 .cse5) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse4 .cse5 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse2 .cse0 .cse1 .cse4 .cse3))) [2021-11-20 05:58:37,016 INFO L854 garLoopResultBuilder]: At program point L480(line 480) the Hoare annotation is: (let ((.cse5 (= 1 ~systemActive~0))) (let ((.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse5)) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) .cse5 (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0))) (.cse4 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse3 (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse4)))) [2021-11-20 05:58:37,016 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 466 490) no Hoare annotation was computed. [2021-11-20 05:58:37,016 INFO L858 garLoopResultBuilder]: For program point L474(lines 474 482) no Hoare annotation was computed. [2021-11-20 05:58:37,016 INFO L858 garLoopResultBuilder]: For program point L470(lines 470 487) no Hoare annotation was computed. [2021-11-20 05:58:37,017 INFO L854 garLoopResultBuilder]: At program point L1005(lines 996 1009) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0))) (let ((.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (<= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (and .cse1 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)))) (.cse3 (= 2 ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 (not .cse3) .cse4) (or .cse0 .cse2 .cse5 .cse4 .cse6) (or .cse2 (not (<= 1 |old(~pumpRunning~0)|)) .cse4 .cse6 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse2 .cse5 (and .cse1 .cse3) (not (<= 1 ~methaneLevelCritical~0)) (not (<= ~waterLevel~0 2)))))) [2021-11-20 05:58:37,017 INFO L854 garLoopResultBuilder]: At program point L485(line 485) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= ~waterLevel~0 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or .cse0 .cse1 .cse3 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse3 (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-11-20 05:58:37,017 INFO L858 garLoopResultBuilder]: For program point L485-1(lines 466 490) no Hoare annotation was computed. [2021-11-20 05:58:37,017 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 931 942) no Hoare annotation was computed. [2021-11-20 05:58:37,017 INFO L858 garLoopResultBuilder]: For program point L935-1(lines 931 942) no Hoare annotation was computed. [2021-11-20 05:58:37,018 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 931 942) the Hoare annotation is: (let ((.cse1 (not (= ~pumpRunning~0 0))) (.cse6 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (<= 1 ~pumpRunning~0))) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse2 .cse5 .cse6 .cse4) (or .cse1 .cse2 .cse3 .cse6 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse2 .cse3 .cse7 .cse6 .cse4) (or .cse0 .cse2 .cse3 .cse7 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse2 .cse5 .cse7 .cse4 (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))))) [2021-11-20 05:58:37,018 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 492 516) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= ~waterLevel~0 1)))) (and (or .cse0 .cse1 .cse2 (not (= 2 ~waterLevel~0)) .cse3) (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 (not (<= 1 |old(~pumpRunning~0)|)) .cse3 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-11-20 05:58:37,018 INFO L854 garLoopResultBuilder]: At program point L506(line 506) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= ~waterLevel~0 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or .cse0 .cse1 .cse3 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse3 (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-11-20 05:58:37,018 INFO L854 garLoopResultBuilder]: At program point L502(line 502) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= ~waterLevel~0 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or .cse0 .cse1 .cse3 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse3 (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-11-20 05:58:37,018 INFO L858 garLoopResultBuilder]: For program point L500(lines 500 508) no Hoare annotation was computed. [2021-11-20 05:58:37,019 INFO L858 garLoopResultBuilder]: For program point L496(lines 496 513) no Hoare annotation was computed. [2021-11-20 05:58:37,019 INFO L854 garLoopResultBuilder]: At program point L649(lines 634 652) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= ~waterLevel~0 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or .cse0 .cse1 .cse3 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse3 (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-11-20 05:58:37,019 INFO L858 garLoopResultBuilder]: For program point L643(lines 643 647) no Hoare annotation was computed. [2021-11-20 05:58:37,019 INFO L858 garLoopResultBuilder]: For program point L643-2(lines 643 647) no Hoare annotation was computed. [2021-11-20 05:58:37,019 INFO L854 garLoopResultBuilder]: At program point L511(line 511) the Hoare annotation is: (let ((.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 (not (= 2 ~waterLevel~0)) .cse3) (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse2 (not (<= 1 |old(~pumpRunning~0)|)) .cse3 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) (not (<= ~waterLevel~0 2))))) [2021-11-20 05:58:37,019 INFO L858 garLoopResultBuilder]: For program point L511-1(lines 492 516) no Hoare annotation was computed. [2021-11-20 05:58:37,019 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 492 516) no Hoare annotation was computed. [2021-11-20 05:58:37,019 INFO L854 garLoopResultBuilder]: At program point L1015(lines 1010 1018) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= ~waterLevel~0 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or .cse0 .cse1 .cse3 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse3 (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-11-20 05:58:37,019 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 570 578) no Hoare annotation was computed. [2021-11-20 05:58:37,020 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 570 578) the Hoare annotation is: true [2021-11-20 05:58:37,020 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 570 578) no Hoare annotation was computed. [2021-11-20 05:58:37,023 INFO L732 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 05:58:37,025 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-20 05:58:37,127 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 05:58:37 BoogieIcfgContainer [2021-11-20 05:58:37,127 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-20 05:58:37,128 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-20 05:58:37,128 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-20 05:58:37,128 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-20 05:58:37,129 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 05:58:08" (3/4) ... [2021-11-20 05:58:37,132 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-11-20 05:58:37,138 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-11-20 05:58:37,139 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-11-20 05:58:37,139 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-11-20 05:58:37,139 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-11-20 05:58:37,139 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-11-20 05:58:37,140 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-11-20 05:58:37,140 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-11-20 05:58:37,140 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2021-11-20 05:58:37,140 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-11-20 05:58:37,156 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 54 nodes and edges [2021-11-20 05:58:37,157 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-11-20 05:58:37,158 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-11-20 05:58:37,158 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-11-20 05:58:37,159 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-11-20 05:58:37,160 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-20 05:58:37,160 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-11-20 05:58:37,185 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2021-11-20 05:58:37,185 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == 1 [2021-11-20 05:58:37,186 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == 1 [2021-11-20 05:58:37,186 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 == waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1)) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 2 == waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1)) || ((((((pumpRunning == 0 && 2 == waterLevel) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1)) || ((((((1 <= pumpRunning && 2 == waterLevel) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1)) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && 1 <= switchedOnBeforeTS) && tmp == 1) [2021-11-20 05:58:37,188 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 < waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 == systemActive) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 < waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel))) && ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 == systemActive) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2021-11-20 05:58:37,189 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) [2021-11-20 05:58:37,190 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(\old(waterLevel) == 1) || ((((((((((methaneLevelCritical <= tmp && pumpRunning == 0) && waterLevel == \result) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((((((((methaneLevelCritical <= tmp && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && 2 <= waterLevel) && 1 == systemActive) && tmp == 2)) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && 2 == \result) && tmp == 2))) && (((((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && 2 <= waterLevel) && 1 == systemActive) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel))) && (((((!(\old(pumpRunning) == 0) || (2 == waterLevel && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((((((!(\old(waterLevel) <= 1) || (((((((((tmp <= 0 && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && waterLevel == \result) && \result == methaneLevelCritical) && \result <= 0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((((((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && \result <= 0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || ((((((((((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && waterLevel == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && tmp == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((((((((1 <= pumpRunning && tmp <= 0) && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && waterLevel == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && tmp == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result))) && ((((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((((((((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && waterLevel == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && tmp == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((((((((1 <= pumpRunning && tmp <= 0) && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && waterLevel == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && tmp == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && \result <= 0) && tmp == waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(\old(waterLevel) <= 2)) || (((((((((tmp <= 0 && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && waterLevel == \result) && \result == methaneLevelCritical) && \result <= 0) && tmp == waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result))) && ((((((((((((((((methaneLevelCritical <= tmp && pumpRunning == 0) && waterLevel == \result) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || ((((((((methaneLevelCritical <= tmp && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= \old(switchedOnBeforeTS))) [2021-11-20 05:58:37,190 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && 2 == waterLevel) && \old(waterLevel) == waterLevel))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical <= tmp && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((((((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result) || (((((((((((1 <= pumpRunning && tmp <= 0) && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical <= tmp && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || (((((methaneLevelCritical <= tmp && pumpRunning == 0) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((((((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && \result == methaneLevelCritical) && 1 == systemActive) && \result <= 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || (((((((tmp <= 0 && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && \result == methaneLevelCritical) && \result <= 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result))) && ((((((((((((((((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result) || !(\old(waterLevel) <= 1)) || (((((((((((1 <= pumpRunning && tmp <= 0) && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((tmp <= 0 && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && \result == methaneLevelCritical) && \result <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && \result == methaneLevelCritical) && \result <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((((((methaneLevelCritical <= tmp && pumpRunning == 0) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) [2021-11-20 05:58:37,191 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) [2021-11-20 05:58:37,191 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((((((methaneLevelCritical <= tmp && pumpRunning == 0) && waterLevel == \result) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= \old(switchedOnBeforeTS))) && ((((((((((((((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && \result <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result) || (((((((((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && waterLevel == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((((((1 <= pumpRunning && tmp <= 0) && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && waterLevel == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || ((((((((tmp <= 0 && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && waterLevel == \result) && \result == methaneLevelCritical) && \result <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((((((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && waterLevel == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((((((1 <= pumpRunning && tmp <= 0) && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && waterLevel == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((((((((((((tmp <= 0 && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && waterLevel == \result) && \result == methaneLevelCritical) && \result <= 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || (((((((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && \result <= 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0))) && ((((((((((((methaneLevelCritical <= tmp && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || (((((((((methaneLevelCritical <= tmp && pumpRunning == 0) && waterLevel == \result) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((((methaneLevelCritical <= tmp && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) [2021-11-20 05:58:37,192 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(waterLevel) <= 1) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((((!(\old(waterLevel) <= 1) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) [2021-11-20 05:58:37,192 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) && ((((((!(\old(waterLevel) <= 1) || ((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \result <= 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(\old(waterLevel) <= 2))) && ((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \result <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) [2021-11-20 05:58:37,193 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2))) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) [2021-11-20 05:58:37,193 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 == waterLevel)) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || (pumpRunning == 0 && 2 == waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) [2021-11-20 05:58:37,193 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2))) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) [2021-11-20 05:58:37,197 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && !(tmp == 0)) && \result == 0) && tmp___0 == 0) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2))) && ((((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && !(tmp == 0)) && \result == 0) && tmp___0 == 0) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (pumpRunning == 0 && 2 == waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) [2021-11-20 05:58:37,197 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= pumpRunning && 2 == waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && ((((1 <= pumpRunning || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) [2021-11-20 05:58:37,264 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/witness.graphml [2021-11-20 05:58:37,264 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-20 05:58:37,265 INFO L158 Benchmark]: Toolchain (without parser) took 29728.93ms. Allocated memory was 151.0MB in the beginning and 293.6MB in the end (delta: 142.6MB). Free memory was 113.3MB in the beginning and 228.6MB in the end (delta: -115.4MB). Peak memory consumption was 26.5MB. Max. memory is 16.1GB. [2021-11-20 05:58:37,265 INFO L158 Benchmark]: CDTParser took 0.30ms. Allocated memory is still 75.5MB. Free memory is still 31.1MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-20 05:58:37,266 INFO L158 Benchmark]: CACSL2BoogieTranslator took 569.60ms. Allocated memory is still 151.0MB. Free memory was 113.0MB in the beginning and 114.2MB in the end (delta: -1.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-11-20 05:58:37,267 INFO L158 Benchmark]: Boogie Procedure Inliner took 54.19ms. Allocated memory is still 151.0MB. Free memory was 114.2MB in the beginning and 111.6MB in the end (delta: 2.7MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2021-11-20 05:58:37,267 INFO L158 Benchmark]: Boogie Preprocessor took 33.51ms. Allocated memory is still 151.0MB. Free memory was 111.6MB in the beginning and 110.0MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-20 05:58:37,268 INFO L158 Benchmark]: RCFGBuilder took 633.15ms. Allocated memory is still 151.0MB. Free memory was 109.5MB in the beginning and 92.2MB in the end (delta: 17.3MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-11-20 05:58:37,268 INFO L158 Benchmark]: TraceAbstraction took 28289.96ms. Allocated memory was 151.0MB in the beginning and 293.6MB in the end (delta: 142.6MB). Free memory was 92.2MB in the beginning and 236.0MB in the end (delta: -143.8MB). Peak memory consumption was 148.8MB. Max. memory is 16.1GB. [2021-11-20 05:58:37,269 INFO L158 Benchmark]: Witness Printer took 136.60ms. Allocated memory is still 293.6MB. Free memory was 236.0MB in the beginning and 228.6MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-11-20 05:58:37,271 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.30ms. Allocated memory is still 75.5MB. Free memory is still 31.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 569.60ms. Allocated memory is still 151.0MB. Free memory was 113.0MB in the beginning and 114.2MB in the end (delta: -1.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 54.19ms. Allocated memory is still 151.0MB. Free memory was 114.2MB in the beginning and 111.6MB in the end (delta: 2.7MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 33.51ms. Allocated memory is still 151.0MB. Free memory was 111.6MB in the beginning and 110.0MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 633.15ms. Allocated memory is still 151.0MB. Free memory was 109.5MB in the beginning and 92.2MB in the end (delta: 17.3MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 28289.96ms. Allocated memory was 151.0MB in the beginning and 293.6MB in the end (delta: 142.6MB). Free memory was 92.2MB in the beginning and 236.0MB in the end (delta: -143.8MB). Peak memory consumption was 148.8MB. Max. memory is 16.1GB. * Witness Printer took 136.60ms. Allocated memory is still 293.6MB. Free memory was 236.0MB in the beginning and 228.6MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 912]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 105 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 28.1s, OverallIterations: 13, TraceHistogramMax: 5, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 6.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 14.4s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3108 SdHoareTripleChecker+Valid, 4.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3054 mSDsluCounter, 7216 SdHoareTripleChecker+Invalid, 3.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5257 mSDsCounter, 1114 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 5907 IncrementalHoareTripleChecker+Invalid, 7021 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1114 mSolverCounterUnsat, 1959 mSDtfsCounter, 5907 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1237 GetRequests, 1026 SyntacticMatches, 6 SemanticMatches, 205 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1272 ImplicationChecksByTransitivity, 2.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1269occurred in iteration=11, InterpolantAutomatonStates: 174, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 13 MinimizatonAttempts, 270 StatesRemovedByMinimization, 10 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 49 LocationsWithAnnotation, 3266 PreInvPairs, 3727 NumberOfFragments, 7373 HoareAnnotationTreeSize, 3266 FomulaSimplifications, 8726 FormulaSimplificationTreeSizeReduction, 1.5s HoareSimplificationTime, 49 FomulaSimplificationsInter, 50417 FormulaSimplificationTreeSizeReductionInter, 12.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 4.4s InterpolantComputationTime, 1628 NumberOfCodeBlocks, 1628 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 1914 ConstructedInterpolants, 0 QuantifiedInterpolants, 3635 SizeOfPredicates, 11 NumberOfNonLiveVariables, 1963 ConjunctsInSsa, 28 ConjunctsInUnsatCore, 18 InterpolantComputations, 11 PerfectInterpolantSequences, 1234/1340 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 884]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 873]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 996]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 == waterLevel)) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || (pumpRunning == 0 && 2 == waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && !(tmp == 0)) && \result == 0) && tmp___0 == 0) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2))) && ((((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && !(tmp == 0)) && \result == 0) && tmp___0 == 0) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (pumpRunning == 0 && 2 == waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) - InvariantResult [Line: 695]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 771]: Loop Invariant Derived loop invariant: (((((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 < waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 == systemActive) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 < waterLevel) && 1 == systemActive) && waterLevel <= 2) && \old(waterLevel) == waterLevel))) && ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 == systemActive) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 705]: Loop Invariant Derived loop invariant: (((((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 == waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1)) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 2 == waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1)) || ((((((pumpRunning == 0 && 2 == waterLevel) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1)) || ((((((1 <= pumpRunning && 2 == waterLevel) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1)) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && 1 <= switchedOnBeforeTS) && tmp == 1) - InvariantResult [Line: 559]: Loop Invariant Derived loop invariant: (((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) && ((((((!(\old(waterLevel) <= 1) || ((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \result <= 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(\old(waterLevel) <= 2))) && ((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \result <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 763]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == 1 - InvariantResult [Line: 668]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 919]: Loop Invariant Derived loop invariant: (((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 987]: Loop Invariant Derived loop invariant: (((((((((((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((((((methaneLevelCritical <= tmp && pumpRunning == 0) && waterLevel == \result) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= \old(switchedOnBeforeTS))) && ((((((((((((((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && \result <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result) || (((((((((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && waterLevel == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((((((1 <= pumpRunning && tmp <= 0) && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && waterLevel == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || ((((((((tmp <= 0 && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && waterLevel == \result) && \result == methaneLevelCritical) && \result <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((((((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && waterLevel == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((((((1 <= pumpRunning && tmp <= 0) && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && waterLevel == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((((((((((((tmp <= 0 && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && waterLevel == \result) && \result == methaneLevelCritical) && \result <= 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || (((((((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && \result <= 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0))) && ((((((((((((methaneLevelCritical <= tmp && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || (((((((((methaneLevelCritical <= tmp && pumpRunning == 0) && waterLevel == \result) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((((methaneLevelCritical <= tmp && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) - InvariantResult [Line: 866]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == 1 - InvariantResult [Line: 955]: Loop Invariant Derived loop invariant: (((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(waterLevel) <= 1) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((((!(\old(waterLevel) <= 1) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 518]: Loop Invariant Derived loop invariant: ((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && 2 == waterLevel) && \old(waterLevel) == waterLevel))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical <= tmp && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((((((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result) || (((((((((((1 <= pumpRunning && tmp <= 0) && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical <= tmp && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || (((((methaneLevelCritical <= tmp && pumpRunning == 0) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((((((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && \result == methaneLevelCritical) && 1 == systemActive) && \result <= 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || (((((((tmp <= 0 && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && \result == methaneLevelCritical) && \result <= 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result))) && ((((((((((((((((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result) || !(\old(waterLevel) <= 1)) || (((((((((((1 <= pumpRunning && tmp <= 0) && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((tmp <= 0 && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && \result == methaneLevelCritical) && \result <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && \result == methaneLevelCritical) && \result <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((((((methaneLevelCritical <= tmp && pumpRunning == 0) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 634]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2))) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 682]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 908]: Loop Invariant Derived loop invariant: ((((((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 704]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 543]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= pumpRunning && 2 == waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && ((((1 <= pumpRunning || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) - InvariantResult [Line: 781]: Loop Invariant Derived loop invariant: (((((((((((((!(\old(waterLevel) == 1) || ((((((((((methaneLevelCritical <= tmp && pumpRunning == 0) && waterLevel == \result) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((((((((methaneLevelCritical <= tmp && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && 2 <= waterLevel) && 1 == systemActive) && tmp == 2)) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && 2 == \result) && tmp == 2))) && (((((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && 2 <= waterLevel) && 1 == systemActive) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel))) && (((((!(\old(pumpRunning) == 0) || (2 == waterLevel && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((((((!(\old(waterLevel) <= 1) || (((((((((tmp <= 0 && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && waterLevel == \result) && \result == methaneLevelCritical) && \result <= 0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((((((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && \result <= 0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || ((((((((((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && waterLevel == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && tmp == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((((((((1 <= pumpRunning && tmp <= 0) && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && waterLevel == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && tmp == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result))) && ((((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((((((((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && waterLevel == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && tmp == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((((((((1 <= pumpRunning && tmp <= 0) && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && waterLevel == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && tmp == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((((((tmp <= 0 && 0 < tmp + 1) && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && \result <= 0) && tmp == waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(\old(waterLevel) <= 2)) || (((((((((tmp <= 0 && pumpRunning == \old(pumpRunning)) && 0 < tmp + 1) && waterLevel == \result) && \result == methaneLevelCritical) && \result <= 0) && tmp == waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result))) && ((((((((((((((((methaneLevelCritical <= tmp && pumpRunning == 0) && waterLevel == \result) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || ((((((((methaneLevelCritical <= tmp && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 1010]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2))) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 822]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 675]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 RESULT: Ultimate proved your program to be correct! [2021-11-20 05:58:37,381 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d71d29c7-d013-46e5-8540-9b00d1eabea7/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE