./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product40.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 839c364b Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/bin/uautomizer-DrprNOufMa/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/bin/uautomizer-DrprNOufMa/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/bin/uautomizer-DrprNOufMa/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/bin/uautomizer-DrprNOufMa/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product40.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/bin/uautomizer-DrprNOufMa --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 31801b0d0a8db366707af3e7371b9dc02f7c34625c63f4c3f856015d4449b4b2 --- Real Ultimate output --- This is Ultimate 0.2.2-hotfix-svcomp22-839c364 [2021-12-07 00:49:14,440 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-07 00:49:14,441 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-07 00:49:14,470 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-07 00:49:14,471 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-07 00:49:14,472 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-07 00:49:14,474 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-07 00:49:14,476 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-07 00:49:14,478 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-07 00:49:14,479 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-07 00:49:14,480 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-07 00:49:14,482 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-07 00:49:14,482 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-07 00:49:14,483 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-07 00:49:14,485 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-07 00:49:14,486 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-07 00:49:14,487 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-07 00:49:14,488 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-07 00:49:14,490 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-07 00:49:14,492 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-07 00:49:14,494 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-07 00:49:14,496 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-07 00:49:14,497 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-07 00:49:14,498 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-07 00:49:14,501 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-07 00:49:14,502 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-07 00:49:14,502 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-07 00:49:14,503 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-07 00:49:14,504 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-07 00:49:14,505 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-07 00:49:14,505 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-07 00:49:14,506 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-07 00:49:14,507 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-07 00:49:14,508 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-07 00:49:14,509 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-07 00:49:14,509 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-07 00:49:14,510 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-07 00:49:14,510 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-07 00:49:14,510 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-07 00:49:14,511 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-07 00:49:14,511 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-07 00:49:14,512 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/bin/uautomizer-DrprNOufMa/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-07 00:49:14,534 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-07 00:49:14,534 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-07 00:49:14,535 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-07 00:49:14,535 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-07 00:49:14,535 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-07 00:49:14,536 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-07 00:49:14,536 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-07 00:49:14,536 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-07 00:49:14,536 INFO L138 SettingsManager]: * Use SBE=true [2021-12-07 00:49:14,537 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-07 00:49:14,537 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-07 00:49:14,537 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-07 00:49:14,537 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-07 00:49:14,537 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-07 00:49:14,537 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-07 00:49:14,537 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-07 00:49:14,537 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-07 00:49:14,538 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-07 00:49:14,538 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-07 00:49:14,538 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-07 00:49:14,538 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-07 00:49:14,538 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-07 00:49:14,538 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-07 00:49:14,538 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-07 00:49:14,539 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-07 00:49:14,539 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-07 00:49:14,539 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-07 00:49:14,539 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-07 00:49:14,539 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-07 00:49:14,539 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-07 00:49:14,539 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-07 00:49:14,539 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-07 00:49:14,540 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-07 00:49:14,540 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-07 00:49:14,540 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/bin/uautomizer-DrprNOufMa/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/bin/uautomizer-DrprNOufMa Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 31801b0d0a8db366707af3e7371b9dc02f7c34625c63f4c3f856015d4449b4b2 [2021-12-07 00:49:14,721 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-07 00:49:14,736 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-07 00:49:14,738 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-07 00:49:14,738 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-07 00:49:14,739 INFO L275 PluginConnector]: CDTParser initialized [2021-12-07 00:49:14,740 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/bin/uautomizer-DrprNOufMa/../../sv-benchmarks/c/product-lines/minepump_spec5_product40.cil.c [2021-12-07 00:49:14,782 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/bin/uautomizer-DrprNOufMa/data/f462e0caf/19b01139c9e0406b8bcda5428e7e0182/FLAGf33ee7781 [2021-12-07 00:49:15,188 INFO L306 CDTParser]: Found 1 translation units. [2021-12-07 00:49:15,188 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/sv-benchmarks/c/product-lines/minepump_spec5_product40.cil.c [2021-12-07 00:49:15,198 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/bin/uautomizer-DrprNOufMa/data/f462e0caf/19b01139c9e0406b8bcda5428e7e0182/FLAGf33ee7781 [2021-12-07 00:49:15,208 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/bin/uautomizer-DrprNOufMa/data/f462e0caf/19b01139c9e0406b8bcda5428e7e0182 [2021-12-07 00:49:15,210 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-07 00:49:15,211 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-07 00:49:15,212 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-07 00:49:15,212 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-07 00:49:15,215 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-07 00:49:15,215 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 12:49:15" (1/1) ... [2021-12-07 00:49:15,216 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2c5234f5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:49:15, skipping insertion in model container [2021-12-07 00:49:15,216 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 12:49:15" (1/1) ... [2021-12-07 00:49:15,222 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-07 00:49:15,249 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-07 00:49:15,464 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/sv-benchmarks/c/product-lines/minepump_spec5_product40.cil.c[17098,17111] [2021-12-07 00:49:15,476 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-07 00:49:15,485 INFO L203 MainTranslator]: Completed pre-run [2021-12-07 00:49:15,542 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/sv-benchmarks/c/product-lines/minepump_spec5_product40.cil.c[17098,17111] [2021-12-07 00:49:15,548 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-07 00:49:15,562 INFO L208 MainTranslator]: Completed translation [2021-12-07 00:49:15,563 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:49:15 WrapperNode [2021-12-07 00:49:15,563 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-07 00:49:15,564 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-07 00:49:15,564 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-07 00:49:15,564 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-07 00:49:15,569 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:49:15" (1/1) ... [2021-12-07 00:49:15,583 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:49:15" (1/1) ... [2021-12-07 00:49:15,606 INFO L137 Inliner]: procedures = 57, calls = 159, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 262 [2021-12-07 00:49:15,606 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-07 00:49:15,607 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-07 00:49:15,607 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-07 00:49:15,607 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-07 00:49:15,613 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:49:15" (1/1) ... [2021-12-07 00:49:15,613 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:49:15" (1/1) ... [2021-12-07 00:49:15,616 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:49:15" (1/1) ... [2021-12-07 00:49:15,616 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:49:15" (1/1) ... [2021-12-07 00:49:15,622 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:49:15" (1/1) ... [2021-12-07 00:49:15,627 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:49:15" (1/1) ... [2021-12-07 00:49:15,629 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:49:15" (1/1) ... [2021-12-07 00:49:15,632 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-07 00:49:15,633 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-07 00:49:15,633 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-07 00:49:15,633 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-07 00:49:15,634 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:49:15" (1/1) ... [2021-12-07 00:49:15,641 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-07 00:49:15,650 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:49:15,660 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-07 00:49:15,663 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-07 00:49:15,690 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-07 00:49:15,690 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-07 00:49:15,690 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-07 00:49:15,690 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-07 00:49:15,690 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-07 00:49:15,690 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-07 00:49:15,690 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-07 00:49:15,690 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-07 00:49:15,691 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-07 00:49:15,691 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-07 00:49:15,691 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-07 00:49:15,691 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-12-07 00:49:15,691 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-12-07 00:49:15,691 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-07 00:49:15,691 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-07 00:49:15,691 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-07 00:49:15,691 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-07 00:49:15,691 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-07 00:49:15,691 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-07 00:49:15,691 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-07 00:49:15,744 INFO L236 CfgBuilder]: Building ICFG [2021-12-07 00:49:15,745 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-07 00:49:15,964 INFO L277 CfgBuilder]: Performing block encoding [2021-12-07 00:49:15,971 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-07 00:49:15,971 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-07 00:49:15,973 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 12:49:15 BoogieIcfgContainer [2021-12-07 00:49:15,973 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-07 00:49:15,974 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-07 00:49:15,974 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-07 00:49:15,977 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-07 00:49:15,977 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 07.12 12:49:15" (1/3) ... [2021-12-07 00:49:15,977 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@52804f4e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.12 12:49:15, skipping insertion in model container [2021-12-07 00:49:15,977 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:49:15" (2/3) ... [2021-12-07 00:49:15,978 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@52804f4e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.12 12:49:15, skipping insertion in model container [2021-12-07 00:49:15,978 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 12:49:15" (3/3) ... [2021-12-07 00:49:15,979 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product40.cil.c [2021-12-07 00:49:15,983 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-07 00:49:15,983 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-07 00:49:16,018 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-07 00:49:16,023 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-07 00:49:16,023 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-07 00:49:16,037 INFO L276 IsEmpty]: Start isEmpty. Operand has 98 states, 74 states have (on average 1.364864864864865) internal successors, (101), 83 states have internal predecessors, (101), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2021-12-07 00:49:16,043 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-12-07 00:49:16,044 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 00:49:16,044 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:49:16,045 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 00:49:16,048 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:49:16,049 INFO L85 PathProgramCache]: Analyzing trace with hash 694872208, now seen corresponding path program 1 times [2021-12-07 00:49:16,055 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:49:16,056 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [27286848] [2021-12-07 00:49:16,056 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:49:16,056 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:49:16,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:16,203 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-07 00:49:16,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:16,209 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-07 00:49:16,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:16,214 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-07 00:49:16,215 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:49:16,215 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [27286848] [2021-12-07 00:49:16,215 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [27286848] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:49:16,216 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:49:16,216 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-07 00:49:16,217 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1968905975] [2021-12-07 00:49:16,217 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:49:16,221 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-07 00:49:16,221 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:49:16,241 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-07 00:49:16,242 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-07 00:49:16,244 INFO L87 Difference]: Start difference. First operand has 98 states, 74 states have (on average 1.364864864864865) internal successors, (101), 83 states have internal predecessors, (101), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-07 00:49:16,269 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:49:16,270 INFO L93 Difference]: Finished difference Result 187 states and 252 transitions. [2021-12-07 00:49:16,271 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-07 00:49:16,272 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-12-07 00:49:16,272 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 00:49:16,282 INFO L225 Difference]: With dead ends: 187 [2021-12-07 00:49:16,283 INFO L226 Difference]: Without dead ends: 89 [2021-12-07 00:49:16,287 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-07 00:49:16,291 INFO L933 BasicCegarLoop]: 123 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 123 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-07 00:49:16,292 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 123 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-07 00:49:16,310 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89 states. [2021-12-07 00:49:16,335 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89 to 89. [2021-12-07 00:49:16,337 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 89 states, 67 states have (on average 1.2985074626865671) internal successors, (87), 75 states have internal predecessors, (87), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-07 00:49:16,340 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89 states to 89 states and 114 transitions. [2021-12-07 00:49:16,342 INFO L78 Accepts]: Start accepts. Automaton has 89 states and 114 transitions. Word has length 32 [2021-12-07 00:49:16,342 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 00:49:16,342 INFO L470 AbstractCegarLoop]: Abstraction has 89 states and 114 transitions. [2021-12-07 00:49:16,343 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-07 00:49:16,343 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 114 transitions. [2021-12-07 00:49:16,346 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-12-07 00:49:16,346 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 00:49:16,346 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:49:16,347 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-07 00:49:16,347 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 00:49:16,348 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:49:16,348 INFO L85 PathProgramCache]: Analyzing trace with hash -778098819, now seen corresponding path program 1 times [2021-12-07 00:49:16,348 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:49:16,348 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1558635023] [2021-12-07 00:49:16,349 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:49:16,349 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:49:16,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:16,428 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-07 00:49:16,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:16,433 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-07 00:49:16,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:16,439 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-07 00:49:16,439 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:49:16,439 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1558635023] [2021-12-07 00:49:16,439 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1558635023] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:49:16,440 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:49:16,440 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-07 00:49:16,440 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1765509426] [2021-12-07 00:49:16,440 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:49:16,441 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-07 00:49:16,442 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:49:16,442 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-07 00:49:16,442 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-07 00:49:16,443 INFO L87 Difference]: Start difference. First operand 89 states and 114 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-07 00:49:16,457 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:49:16,457 INFO L93 Difference]: Finished difference Result 138 states and 176 transitions. [2021-12-07 00:49:16,457 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-07 00:49:16,457 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2021-12-07 00:49:16,458 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 00:49:16,459 INFO L225 Difference]: With dead ends: 138 [2021-12-07 00:49:16,459 INFO L226 Difference]: Without dead ends: 80 [2021-12-07 00:49:16,460 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-07 00:49:16,461 INFO L933 BasicCegarLoop]: 101 mSDtfsCounter, 17 mSDsluCounter, 79 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 180 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-07 00:49:16,461 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [21 Valid, 180 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-07 00:49:16,462 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2021-12-07 00:49:16,469 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 80. [2021-12-07 00:49:16,470 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 80 states, 61 states have (on average 1.3114754098360655) internal successors, (80), 69 states have internal predecessors, (80), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2021-12-07 00:49:16,471 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 102 transitions. [2021-12-07 00:49:16,471 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 102 transitions. Word has length 33 [2021-12-07 00:49:16,471 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 00:49:16,471 INFO L470 AbstractCegarLoop]: Abstraction has 80 states and 102 transitions. [2021-12-07 00:49:16,472 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-07 00:49:16,472 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 102 transitions. [2021-12-07 00:49:16,473 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-07 00:49:16,473 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 00:49:16,473 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:49:16,473 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-07 00:49:16,473 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 00:49:16,474 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:49:16,474 INFO L85 PathProgramCache]: Analyzing trace with hash 1811500472, now seen corresponding path program 1 times [2021-12-07 00:49:16,474 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:49:16,474 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1555396118] [2021-12-07 00:49:16,474 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:49:16,475 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:49:16,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:16,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-07 00:49:16,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:16,526 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-12-07 00:49:16,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:16,531 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-07 00:49:16,531 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:49:16,532 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1555396118] [2021-12-07 00:49:16,532 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1555396118] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:49:16,532 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:49:16,532 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-07 00:49:16,532 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2132708222] [2021-12-07 00:49:16,533 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:49:16,533 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-07 00:49:16,533 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:49:16,534 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-07 00:49:16,534 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-07 00:49:16,534 INFO L87 Difference]: Start difference. First operand 80 states and 102 transitions. Second operand has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-07 00:49:16,570 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:49:16,570 INFO L93 Difference]: Finished difference Result 222 states and 289 transitions. [2021-12-07 00:49:16,570 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-07 00:49:16,571 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2021-12-07 00:49:16,571 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 00:49:16,573 INFO L225 Difference]: With dead ends: 222 [2021-12-07 00:49:16,573 INFO L226 Difference]: Without dead ends: 150 [2021-12-07 00:49:16,575 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-07 00:49:16,576 INFO L933 BasicCegarLoop]: 125 mSDtfsCounter, 90 mSDsluCounter, 89 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 90 SdHoareTripleChecker+Valid, 214 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-07 00:49:16,576 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [90 Valid, 214 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-07 00:49:16,578 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 150 states. [2021-12-07 00:49:16,593 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 150 to 147. [2021-12-07 00:49:16,593 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 147 states, 110 states have (on average 1.3363636363636364) internal successors, (147), 125 states have internal predecessors, (147), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) [2021-12-07 00:49:16,595 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 147 states to 147 states and 191 transitions. [2021-12-07 00:49:16,595 INFO L78 Accepts]: Start accepts. Automaton has 147 states and 191 transitions. Word has length 38 [2021-12-07 00:49:16,595 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 00:49:16,595 INFO L470 AbstractCegarLoop]: Abstraction has 147 states and 191 transitions. [2021-12-07 00:49:16,595 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-07 00:49:16,595 INFO L276 IsEmpty]: Start isEmpty. Operand 147 states and 191 transitions. [2021-12-07 00:49:16,597 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2021-12-07 00:49:16,597 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 00:49:16,597 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:49:16,597 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-07 00:49:16,598 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 00:49:16,598 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:49:16,598 INFO L85 PathProgramCache]: Analyzing trace with hash -1858694344, now seen corresponding path program 1 times [2021-12-07 00:49:16,598 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:49:16,598 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [813534837] [2021-12-07 00:49:16,598 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:49:16,598 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:49:16,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:16,661 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-07 00:49:16,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:16,666 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2021-12-07 00:49:16,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:16,675 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-07 00:49:16,676 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:49:16,676 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [813534837] [2021-12-07 00:49:16,676 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [813534837] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:49:16,676 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:49:16,676 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-07 00:49:16,677 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1117704736] [2021-12-07 00:49:16,677 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:49:16,677 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-07 00:49:16,677 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:49:16,678 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-07 00:49:16,678 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-07 00:49:16,678 INFO L87 Difference]: Start difference. First operand 147 states and 191 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-07 00:49:16,783 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:49:16,783 INFO L93 Difference]: Finished difference Result 389 states and 518 transitions. [2021-12-07 00:49:16,783 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-07 00:49:16,784 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2021-12-07 00:49:16,784 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 00:49:16,787 INFO L225 Difference]: With dead ends: 389 [2021-12-07 00:49:16,787 INFO L226 Difference]: Without dead ends: 250 [2021-12-07 00:49:16,789 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-12-07 00:49:16,790 INFO L933 BasicCegarLoop]: 115 mSDtfsCounter, 50 mSDsluCounter, 373 mSDsCounter, 0 mSdLazyCounter, 68 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 488 SdHoareTripleChecker+Invalid, 79 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 68 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-07 00:49:16,791 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [51 Valid, 488 Invalid, 79 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 68 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-07 00:49:16,792 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 250 states. [2021-12-07 00:49:16,818 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 250 to 237. [2021-12-07 00:49:16,819 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 237 states, 178 states have (on average 1.2921348314606742) internal successors, (230), 193 states have internal predecessors, (230), 32 states have call successors, (32), 26 states have call predecessors, (32), 26 states have return successors, (40), 29 states have call predecessors, (40), 32 states have call successors, (40) [2021-12-07 00:49:16,821 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 237 states to 237 states and 302 transitions. [2021-12-07 00:49:16,822 INFO L78 Accepts]: Start accepts. Automaton has 237 states and 302 transitions. Word has length 41 [2021-12-07 00:49:16,822 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 00:49:16,822 INFO L470 AbstractCegarLoop]: Abstraction has 237 states and 302 transitions. [2021-12-07 00:49:16,822 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-07 00:49:16,822 INFO L276 IsEmpty]: Start isEmpty. Operand 237 states and 302 transitions. [2021-12-07 00:49:16,825 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2021-12-07 00:49:16,825 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 00:49:16,825 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:49:16,825 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-07 00:49:16,826 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 00:49:16,826 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:49:16,826 INFO L85 PathProgramCache]: Analyzing trace with hash 68722199, now seen corresponding path program 1 times [2021-12-07 00:49:16,826 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:49:16,826 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [774069909] [2021-12-07 00:49:16,827 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:49:16,827 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:49:16,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:16,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-07 00:49:16,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:16,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-07 00:49:16,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:16,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-12-07 00:49:16,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:16,904 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-07 00:49:16,904 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:49:16,904 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [774069909] [2021-12-07 00:49:16,905 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [774069909] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:49:16,905 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:49:16,905 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-07 00:49:16,905 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1704387451] [2021-12-07 00:49:16,905 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:49:16,905 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-07 00:49:16,906 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:49:16,906 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-07 00:49:16,906 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-07 00:49:16,906 INFO L87 Difference]: Start difference. First operand 237 states and 302 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-07 00:49:17,068 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:49:17,068 INFO L93 Difference]: Finished difference Result 767 states and 1026 transitions. [2021-12-07 00:49:17,069 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-07 00:49:17,069 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 52 [2021-12-07 00:49:17,069 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 00:49:17,073 INFO L225 Difference]: With dead ends: 767 [2021-12-07 00:49:17,073 INFO L226 Difference]: Without dead ends: 538 [2021-12-07 00:49:17,075 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=111, Unknown=0, NotChecked=0, Total=156 [2021-12-07 00:49:17,075 INFO L933 BasicCegarLoop]: 115 mSDtfsCounter, 174 mSDsluCounter, 314 mSDsCounter, 0 mSdLazyCounter, 152 mSolverCounterSat, 51 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 180 SdHoareTripleChecker+Valid, 429 SdHoareTripleChecker+Invalid, 203 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 51 IncrementalHoareTripleChecker+Valid, 152 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-07 00:49:17,076 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [180 Valid, 429 Invalid, 203 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [51 Valid, 152 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-07 00:49:17,077 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 538 states. [2021-12-07 00:49:17,111 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 538 to 475. [2021-12-07 00:49:17,113 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 475 states, 362 states have (on average 1.2651933701657458) internal successors, (458), 382 states have internal predecessors, (458), 61 states have call successors, (61), 47 states have call predecessors, (61), 51 states have return successors, (89), 60 states have call predecessors, (89), 61 states have call successors, (89) [2021-12-07 00:49:17,116 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 475 states to 475 states and 608 transitions. [2021-12-07 00:49:17,116 INFO L78 Accepts]: Start accepts. Automaton has 475 states and 608 transitions. Word has length 52 [2021-12-07 00:49:17,116 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 00:49:17,117 INFO L470 AbstractCegarLoop]: Abstraction has 475 states and 608 transitions. [2021-12-07 00:49:17,117 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-07 00:49:17,117 INFO L276 IsEmpty]: Start isEmpty. Operand 475 states and 608 transitions. [2021-12-07 00:49:17,119 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2021-12-07 00:49:17,119 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 00:49:17,119 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:49:17,120 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-07 00:49:17,120 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 00:49:17,120 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:49:17,120 INFO L85 PathProgramCache]: Analyzing trace with hash -353979627, now seen corresponding path program 1 times [2021-12-07 00:49:17,120 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:49:17,121 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1332754530] [2021-12-07 00:49:17,121 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:49:17,121 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:49:17,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:17,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-07 00:49:17,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:17,159 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-07 00:49:17,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:17,179 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-12-07 00:49:17,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:17,183 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-07 00:49:17,183 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:49:17,183 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1332754530] [2021-12-07 00:49:17,183 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1332754530] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:49:17,183 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:49:17,184 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-07 00:49:17,184 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [310222191] [2021-12-07 00:49:17,184 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:49:17,184 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-07 00:49:17,184 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:49:17,185 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-07 00:49:17,185 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-07 00:49:17,185 INFO L87 Difference]: Start difference. First operand 475 states and 608 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-07 00:49:17,299 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:49:17,299 INFO L93 Difference]: Finished difference Result 968 states and 1259 transitions. [2021-12-07 00:49:17,299 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-07 00:49:17,300 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 52 [2021-12-07 00:49:17,300 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 00:49:17,304 INFO L225 Difference]: With dead ends: 968 [2021-12-07 00:49:17,304 INFO L226 Difference]: Without dead ends: 501 [2021-12-07 00:49:17,306 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-07 00:49:17,307 INFO L933 BasicCegarLoop]: 97 mSDtfsCounter, 63 mSDsluCounter, 303 mSDsCounter, 0 mSdLazyCounter, 111 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 400 SdHoareTripleChecker+Invalid, 132 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 111 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-07 00:49:17,307 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [66 Valid, 400 Invalid, 132 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 111 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-07 00:49:17,309 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 501 states. [2021-12-07 00:49:17,340 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 501 to 487. [2021-12-07 00:49:17,341 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 487 states, 374 states have (on average 1.2566844919786095) internal successors, (470), 394 states have internal predecessors, (470), 61 states have call successors, (61), 47 states have call predecessors, (61), 51 states have return successors, (89), 60 states have call predecessors, (89), 61 states have call successors, (89) [2021-12-07 00:49:17,345 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 487 states to 487 states and 620 transitions. [2021-12-07 00:49:17,346 INFO L78 Accepts]: Start accepts. Automaton has 487 states and 620 transitions. Word has length 52 [2021-12-07 00:49:17,346 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 00:49:17,346 INFO L470 AbstractCegarLoop]: Abstraction has 487 states and 620 transitions. [2021-12-07 00:49:17,346 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-07 00:49:17,346 INFO L276 IsEmpty]: Start isEmpty. Operand 487 states and 620 transitions. [2021-12-07 00:49:17,348 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2021-12-07 00:49:17,348 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 00:49:17,348 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:49:17,349 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-07 00:49:17,349 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 00:49:17,349 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:49:17,349 INFO L85 PathProgramCache]: Analyzing trace with hash -2042923369, now seen corresponding path program 1 times [2021-12-07 00:49:17,350 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:49:17,350 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1625772646] [2021-12-07 00:49:17,350 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:49:17,350 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:49:17,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:17,388 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-07 00:49:17,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:17,393 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-07 00:49:17,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:17,410 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-12-07 00:49:17,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:17,413 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-07 00:49:17,413 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:49:17,414 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1625772646] [2021-12-07 00:49:17,414 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1625772646] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:49:17,414 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:49:17,414 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-07 00:49:17,414 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [373940088] [2021-12-07 00:49:17,414 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:49:17,415 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-07 00:49:17,415 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:49:17,415 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-07 00:49:17,415 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-07 00:49:17,415 INFO L87 Difference]: Start difference. First operand 487 states and 620 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2021-12-07 00:49:17,580 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:49:17,580 INFO L93 Difference]: Finished difference Result 892 states and 1146 transitions. [2021-12-07 00:49:17,581 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-07 00:49:17,581 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 52 [2021-12-07 00:49:17,581 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 00:49:17,584 INFO L225 Difference]: With dead ends: 892 [2021-12-07 00:49:17,584 INFO L226 Difference]: Without dead ends: 413 [2021-12-07 00:49:17,586 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2021-12-07 00:49:17,587 INFO L933 BasicCegarLoop]: 108 mSDtfsCounter, 213 mSDsluCounter, 311 mSDsCounter, 0 mSdLazyCounter, 142 mSolverCounterSat, 54 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 221 SdHoareTripleChecker+Valid, 419 SdHoareTripleChecker+Invalid, 196 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 54 IncrementalHoareTripleChecker+Valid, 142 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-07 00:49:17,587 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [221 Valid, 419 Invalid, 196 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [54 Valid, 142 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-07 00:49:17,589 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 413 states. [2021-12-07 00:49:17,620 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 413 to 397. [2021-12-07 00:49:17,621 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 397 states, 304 states have (on average 1.2335526315789473) internal successors, (375), 321 states have internal predecessors, (375), 50 states have call successors, (50), 38 states have call predecessors, (50), 42 states have return successors, (64), 49 states have call predecessors, (64), 50 states have call successors, (64) [2021-12-07 00:49:17,624 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 397 states to 397 states and 489 transitions. [2021-12-07 00:49:17,624 INFO L78 Accepts]: Start accepts. Automaton has 397 states and 489 transitions. Word has length 52 [2021-12-07 00:49:17,625 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 00:49:17,625 INFO L470 AbstractCegarLoop]: Abstraction has 397 states and 489 transitions. [2021-12-07 00:49:17,625 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2021-12-07 00:49:17,625 INFO L276 IsEmpty]: Start isEmpty. Operand 397 states and 489 transitions. [2021-12-07 00:49:17,627 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-12-07 00:49:17,627 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 00:49:17,627 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:49:17,627 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-07 00:49:17,628 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 00:49:17,628 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:49:17,628 INFO L85 PathProgramCache]: Analyzing trace with hash -1510613325, now seen corresponding path program 1 times [2021-12-07 00:49:17,628 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:49:17,628 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [41821186] [2021-12-07 00:49:17,629 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:49:17,629 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:49:17,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:17,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-07 00:49:17,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:17,728 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-07 00:49:17,729 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:17,736 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2021-12-07 00:49:17,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:17,751 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-12-07 00:49:17,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:17,755 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-07 00:49:17,755 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:49:17,755 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [41821186] [2021-12-07 00:49:17,755 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [41821186] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:49:17,755 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:49:17,755 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-07 00:49:17,756 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1348202938] [2021-12-07 00:49:17,756 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:49:17,756 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-07 00:49:17,756 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:49:17,757 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-07 00:49:17,757 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2021-12-07 00:49:17,757 INFO L87 Difference]: Start difference. First operand 397 states and 489 transitions. Second operand has 10 states, 10 states have (on average 4.5) internal successors, (45), 8 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-07 00:49:18,359 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:49:18,359 INFO L93 Difference]: Finished difference Result 1519 states and 2017 transitions. [2021-12-07 00:49:18,359 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2021-12-07 00:49:18,360 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.5) internal successors, (45), 8 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2021-12-07 00:49:18,360 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 00:49:18,368 INFO L225 Difference]: With dead ends: 1519 [2021-12-07 00:49:18,368 INFO L226 Difference]: Without dead ends: 1234 [2021-12-07 00:49:18,371 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 44 GetRequests, 10 SyntacticMatches, 1 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 295 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=221, Invalid=969, Unknown=0, NotChecked=0, Total=1190 [2021-12-07 00:49:18,372 INFO L933 BasicCegarLoop]: 174 mSDtfsCounter, 576 mSDsluCounter, 740 mSDsCounter, 0 mSdLazyCounter, 757 mSolverCounterSat, 210 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 586 SdHoareTripleChecker+Valid, 914 SdHoareTripleChecker+Invalid, 967 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 210 IncrementalHoareTripleChecker+Valid, 757 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-07 00:49:18,372 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [586 Valid, 914 Invalid, 967 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [210 Valid, 757 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-07 00:49:18,374 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1234 states. [2021-12-07 00:49:18,440 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1234 to 1080. [2021-12-07 00:49:18,443 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1080 states, 817 states have (on average 1.2276621787025703) internal successors, (1003), 870 states have internal predecessors, (1003), 142 states have call successors, (142), 104 states have call predecessors, (142), 120 states have return successors, (220), 140 states have call predecessors, (220), 142 states have call successors, (220) [2021-12-07 00:49:18,450 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1080 states to 1080 states and 1365 transitions. [2021-12-07 00:49:18,451 INFO L78 Accepts]: Start accepts. Automaton has 1080 states and 1365 transitions. Word has length 56 [2021-12-07 00:49:18,451 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 00:49:18,451 INFO L470 AbstractCegarLoop]: Abstraction has 1080 states and 1365 transitions. [2021-12-07 00:49:18,451 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.5) internal successors, (45), 8 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-07 00:49:18,451 INFO L276 IsEmpty]: Start isEmpty. Operand 1080 states and 1365 transitions. [2021-12-07 00:49:18,453 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2021-12-07 00:49:18,454 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 00:49:18,454 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:49:18,454 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-07 00:49:18,454 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 00:49:18,454 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:49:18,455 INFO L85 PathProgramCache]: Analyzing trace with hash -1339070827, now seen corresponding path program 1 times [2021-12-07 00:49:18,455 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:49:18,455 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1356160340] [2021-12-07 00:49:18,455 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:49:18,455 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:49:18,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:18,492 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-07 00:49:18,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:18,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-07 00:49:18,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:18,514 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-07 00:49:18,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:18,519 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-07 00:49:18,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:18,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2021-12-07 00:49:18,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:18,526 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-07 00:49:18,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:18,528 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-07 00:49:18,528 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:49:18,528 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1356160340] [2021-12-07 00:49:18,528 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1356160340] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:49:18,528 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:49:18,529 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-07 00:49:18,529 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [973451792] [2021-12-07 00:49:18,529 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:49:18,529 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-07 00:49:18,529 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:49:18,529 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-07 00:49:18,530 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-07 00:49:18,530 INFO L87 Difference]: Start difference. First operand 1080 states and 1365 transitions. Second operand has 7 states, 7 states have (on average 9.857142857142858) internal successors, (69), 4 states have internal predecessors, (69), 4 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2021-12-07 00:49:18,738 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:49:18,738 INFO L93 Difference]: Finished difference Result 1843 states and 2319 transitions. [2021-12-07 00:49:18,738 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-12-07 00:49:18,738 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 9.857142857142858) internal successors, (69), 4 states have internal predecessors, (69), 4 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) Word has length 86 [2021-12-07 00:49:18,739 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 00:49:18,743 INFO L225 Difference]: With dead ends: 1843 [2021-12-07 00:49:18,743 INFO L226 Difference]: Without dead ends: 771 [2021-12-07 00:49:18,746 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2021-12-07 00:49:18,747 INFO L933 BasicCegarLoop]: 137 mSDtfsCounter, 276 mSDsluCounter, 227 mSDsCounter, 0 mSdLazyCounter, 204 mSolverCounterSat, 91 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 285 SdHoareTripleChecker+Valid, 364 SdHoareTripleChecker+Invalid, 295 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 91 IncrementalHoareTripleChecker+Valid, 204 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-07 00:49:18,747 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [285 Valid, 364 Invalid, 295 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [91 Valid, 204 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-07 00:49:18,748 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 771 states. [2021-12-07 00:49:18,777 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 771 to 735. [2021-12-07 00:49:18,778 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 735 states, 559 states have (on average 1.2146690518783543) internal successors, (679), 596 states have internal predecessors, (679), 95 states have call successors, (95), 72 states have call predecessors, (95), 80 states have return successors, (135), 94 states have call predecessors, (135), 95 states have call successors, (135) [2021-12-07 00:49:18,782 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 735 states to 735 states and 909 transitions. [2021-12-07 00:49:18,782 INFO L78 Accepts]: Start accepts. Automaton has 735 states and 909 transitions. Word has length 86 [2021-12-07 00:49:18,782 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 00:49:18,782 INFO L470 AbstractCegarLoop]: Abstraction has 735 states and 909 transitions. [2021-12-07 00:49:18,783 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 9.857142857142858) internal successors, (69), 4 states have internal predecessors, (69), 4 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2021-12-07 00:49:18,783 INFO L276 IsEmpty]: Start isEmpty. Operand 735 states and 909 transitions. [2021-12-07 00:49:18,784 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2021-12-07 00:49:18,784 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 00:49:18,784 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:49:18,784 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-07 00:49:18,784 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 00:49:18,785 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:49:18,785 INFO L85 PathProgramCache]: Analyzing trace with hash -1787594627, now seen corresponding path program 1 times [2021-12-07 00:49:18,785 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:49:18,785 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [968773636] [2021-12-07 00:49:18,785 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:49:18,785 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:49:18,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:18,837 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-07 00:49:18,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:18,845 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-07 00:49:18,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:18,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-07 00:49:18,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:18,864 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-07 00:49:18,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:18,869 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-12-07 00:49:18,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:18,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2021-12-07 00:49:18,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:18,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-07 00:49:18,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:18,881 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-07 00:49:18,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:18,884 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 16 proven. 11 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2021-12-07 00:49:18,884 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:49:18,884 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [968773636] [2021-12-07 00:49:18,884 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [968773636] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-07 00:49:18,884 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1619529601] [2021-12-07 00:49:18,884 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:49:18,884 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-07 00:49:18,884 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:49:18,885 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-07 00:49:18,886 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-07 00:49:18,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:18,964 INFO L263 TraceCheckSpWp]: Trace formula consists of 472 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-07 00:49:18,971 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-07 00:49:19,173 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 25 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-07 00:49:19,173 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-07 00:49:19,340 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 19 proven. 8 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2021-12-07 00:49:19,340 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1619529601] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-07 00:49:19,341 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-07 00:49:19,341 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2021-12-07 00:49:19,341 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1816147051] [2021-12-07 00:49:19,341 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-07 00:49:19,342 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-12-07 00:49:19,342 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:49:19,342 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-12-07 00:49:19,343 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2021-12-07 00:49:19,343 INFO L87 Difference]: Start difference. First operand 735 states and 909 transitions. Second operand has 15 states, 15 states have (on average 7.866666666666666) internal successors, (118), 10 states have internal predecessors, (118), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 6 states have call successors, (16) [2021-12-07 00:49:20,234 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:49:20,234 INFO L93 Difference]: Finished difference Result 1703 states and 2170 transitions. [2021-12-07 00:49:20,234 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2021-12-07 00:49:20,235 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 7.866666666666666) internal successors, (118), 10 states have internal predecessors, (118), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 6 states have call successors, (16) Word has length 96 [2021-12-07 00:49:20,235 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 00:49:20,240 INFO L225 Difference]: With dead ends: 1703 [2021-12-07 00:49:20,240 INFO L226 Difference]: Without dead ends: 1060 [2021-12-07 00:49:20,243 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 272 GetRequests, 217 SyntacticMatches, 1 SemanticMatches, 54 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 907 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=621, Invalid=2459, Unknown=0, NotChecked=0, Total=3080 [2021-12-07 00:49:20,244 INFO L933 BasicCegarLoop]: 240 mSDtfsCounter, 525 mSDsluCounter, 1283 mSDsCounter, 0 mSdLazyCounter, 1212 mSolverCounterSat, 258 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 533 SdHoareTripleChecker+Valid, 1523 SdHoareTripleChecker+Invalid, 1470 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 258 IncrementalHoareTripleChecker+Valid, 1212 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-12-07 00:49:20,244 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [533 Valid, 1523 Invalid, 1470 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [258 Valid, 1212 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-12-07 00:49:20,246 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1060 states. [2021-12-07 00:49:20,279 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1060 to 832. [2021-12-07 00:49:20,281 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 832 states, 624 states have (on average 1.1923076923076923) internal successors, (744), 673 states have internal predecessors, (744), 112 states have call successors, (112), 93 states have call predecessors, (112), 95 states have return successors, (138), 100 states have call predecessors, (138), 112 states have call successors, (138) [2021-12-07 00:49:20,284 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 832 states to 832 states and 994 transitions. [2021-12-07 00:49:20,285 INFO L78 Accepts]: Start accepts. Automaton has 832 states and 994 transitions. Word has length 96 [2021-12-07 00:49:20,285 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 00:49:20,285 INFO L470 AbstractCegarLoop]: Abstraction has 832 states and 994 transitions. [2021-12-07 00:49:20,286 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 7.866666666666666) internal successors, (118), 10 states have internal predecessors, (118), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 6 states have call successors, (16) [2021-12-07 00:49:20,286 INFO L276 IsEmpty]: Start isEmpty. Operand 832 states and 994 transitions. [2021-12-07 00:49:20,288 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 176 [2021-12-07 00:49:20,289 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 00:49:20,289 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:49:20,323 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-07 00:49:20,489 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-07 00:49:20,490 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 00:49:20,490 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:49:20,490 INFO L85 PathProgramCache]: Analyzing trace with hash 1860627955, now seen corresponding path program 1 times [2021-12-07 00:49:20,490 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:49:20,490 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [97622851] [2021-12-07 00:49:20,490 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:49:20,490 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:49:20,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:20,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-07 00:49:20,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:20,544 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-07 00:49:20,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:20,552 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-07 00:49:20,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:20,557 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-07 00:49:20,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:20,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2021-12-07 00:49:20,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:20,577 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-07 00:49:20,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:20,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-07 00:49:20,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:20,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-07 00:49:20,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:20,584 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2021-12-07 00:49:20,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:20,608 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-07 00:49:20,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:20,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-07 00:49:20,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:20,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 131 [2021-12-07 00:49:20,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:20,616 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 142 [2021-12-07 00:49:20,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:20,618 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 151 [2021-12-07 00:49:20,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:20,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 167 [2021-12-07 00:49:20,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:20,625 INFO L134 CoverageAnalysis]: Checked inductivity of 194 backedges. 82 proven. 0 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2021-12-07 00:49:20,625 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:49:20,625 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [97622851] [2021-12-07 00:49:20,625 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [97622851] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-07 00:49:20,625 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-07 00:49:20,625 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-07 00:49:20,626 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1776348040] [2021-12-07 00:49:20,626 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-07 00:49:20,626 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-07 00:49:20,626 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:49:20,627 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-07 00:49:20,627 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2021-12-07 00:49:20,627 INFO L87 Difference]: Start difference. First operand 832 states and 994 transitions. Second operand has 10 states, 10 states have (on average 8.9) internal successors, (89), 7 states have internal predecessors, (89), 4 states have call successors, (12), 5 states have call predecessors, (12), 2 states have return successors, (12), 4 states have call predecessors, (12), 4 states have call successors, (12) [2021-12-07 00:49:21,070 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:49:21,070 INFO L93 Difference]: Finished difference Result 2335 states and 2823 transitions. [2021-12-07 00:49:21,070 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2021-12-07 00:49:21,070 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 8.9) internal successors, (89), 7 states have internal predecessors, (89), 4 states have call successors, (12), 5 states have call predecessors, (12), 2 states have return successors, (12), 4 states have call predecessors, (12), 4 states have call successors, (12) Word has length 175 [2021-12-07 00:49:21,070 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 00:49:21,077 INFO L225 Difference]: With dead ends: 2335 [2021-12-07 00:49:21,078 INFO L226 Difference]: Without dead ends: 1511 [2021-12-07 00:49:21,080 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 70 GetRequests, 40 SyntacticMatches, 0 SemanticMatches, 30 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 207 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=211, Invalid=781, Unknown=0, NotChecked=0, Total=992 [2021-12-07 00:49:21,081 INFO L933 BasicCegarLoop]: 193 mSDtfsCounter, 439 mSDsluCounter, 558 mSDsCounter, 0 mSdLazyCounter, 666 mSolverCounterSat, 153 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 445 SdHoareTripleChecker+Valid, 751 SdHoareTripleChecker+Invalid, 819 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 153 IncrementalHoareTripleChecker+Valid, 666 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-07 00:49:21,081 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [445 Valid, 751 Invalid, 819 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [153 Valid, 666 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-07 00:49:21,083 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1511 states. [2021-12-07 00:49:21,142 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1511 to 1502. [2021-12-07 00:49:21,144 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1502 states, 1132 states have (on average 1.157243816254417) internal successors, (1310), 1212 states have internal predecessors, (1310), 200 states have call successors, (200), 172 states have call predecessors, (200), 169 states have return successors, (238), 174 states have call predecessors, (238), 200 states have call successors, (238) [2021-12-07 00:49:21,149 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1502 states to 1502 states and 1748 transitions. [2021-12-07 00:49:21,150 INFO L78 Accepts]: Start accepts. Automaton has 1502 states and 1748 transitions. Word has length 175 [2021-12-07 00:49:21,150 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 00:49:21,150 INFO L470 AbstractCegarLoop]: Abstraction has 1502 states and 1748 transitions. [2021-12-07 00:49:21,150 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 8.9) internal successors, (89), 7 states have internal predecessors, (89), 4 states have call successors, (12), 5 states have call predecessors, (12), 2 states have return successors, (12), 4 states have call predecessors, (12), 4 states have call successors, (12) [2021-12-07 00:49:21,150 INFO L276 IsEmpty]: Start isEmpty. Operand 1502 states and 1748 transitions. [2021-12-07 00:49:21,154 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 180 [2021-12-07 00:49:21,154 INFO L506 BasicCegarLoop]: Found error trace [2021-12-07 00:49:21,154 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:49:21,154 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-12-07 00:49:21,155 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-07 00:49:21,155 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-07 00:49:21,155 INFO L85 PathProgramCache]: Analyzing trace with hash -950913585, now seen corresponding path program 1 times [2021-12-07 00:49:21,155 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-07 00:49:21,155 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1895011535] [2021-12-07 00:49:21,155 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:49:21,155 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-07 00:49:21,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:21,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-07 00:49:21,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:21,197 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-07 00:49:21,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:21,210 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-07 00:49:21,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:21,215 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-07 00:49:21,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:21,218 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2021-12-07 00:49:21,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:21,250 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-07 00:49:21,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:21,253 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-07 00:49:21,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:21,256 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-07 00:49:21,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:21,263 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2021-12-07 00:49:21,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:21,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2021-12-07 00:49:21,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:21,272 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-07 00:49:21,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:21,274 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-07 00:49:21,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:21,276 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 135 [2021-12-07 00:49:21,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:21,278 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2021-12-07 00:49:21,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:21,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 155 [2021-12-07 00:49:21,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:21,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 171 [2021-12-07 00:49:21,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:21,286 INFO L134 CoverageAnalysis]: Checked inductivity of 194 backedges. 93 proven. 28 refuted. 0 times theorem prover too weak. 73 trivial. 0 not checked. [2021-12-07 00:49:21,286 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-07 00:49:21,286 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1895011535] [2021-12-07 00:49:21,286 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1895011535] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-07 00:49:21,287 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [891221875] [2021-12-07 00:49:21,287 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-07 00:49:21,287 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-07 00:49:21,287 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/bin/uautomizer-DrprNOufMa/z3 [2021-12-07 00:49:21,287 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-07 00:49:21,288 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-07 00:49:21,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-07 00:49:21,362 INFO L263 TraceCheckSpWp]: Trace formula consists of 690 conjuncts, 13 conjunts are in the unsatisfiable core [2021-12-07 00:49:21,367 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-07 00:49:21,604 INFO L134 CoverageAnalysis]: Checked inductivity of 194 backedges. 142 proven. 4 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2021-12-07 00:49:21,604 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-07 00:49:21,944 INFO L134 CoverageAnalysis]: Checked inductivity of 194 backedges. 82 proven. 42 refuted. 0 times theorem prover too weak. 70 trivial. 0 not checked. [2021-12-07 00:49:21,944 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [891221875] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-07 00:49:21,944 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-07 00:49:21,944 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 10, 11] total 26 [2021-12-07 00:49:21,945 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [902124017] [2021-12-07 00:49:21,945 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-07 00:49:21,945 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2021-12-07 00:49:21,945 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-07 00:49:21,946 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2021-12-07 00:49:21,946 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=123, Invalid=527, Unknown=0, NotChecked=0, Total=650 [2021-12-07 00:49:21,946 INFO L87 Difference]: Start difference. First operand 1502 states and 1748 transitions. Second operand has 26 states, 26 states have (on average 8.23076923076923) internal successors, (214), 22 states have internal predecessors, (214), 10 states have call successors, (37), 9 states have call predecessors, (37), 9 states have return successors, (33), 9 states have call predecessors, (33), 10 states have call successors, (33) [2021-12-07 00:49:22,755 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-07 00:49:22,756 INFO L93 Difference]: Finished difference Result 3309 states and 3957 transitions. [2021-12-07 00:49:22,756 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2021-12-07 00:49:22,756 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 8.23076923076923) internal successors, (214), 22 states have internal predecessors, (214), 10 states have call successors, (37), 9 states have call predecessors, (37), 9 states have return successors, (33), 9 states have call predecessors, (33), 10 states have call successors, (33) Word has length 179 [2021-12-07 00:49:22,756 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-07 00:49:22,757 INFO L225 Difference]: With dead ends: 3309 [2021-12-07 00:49:22,758 INFO L226 Difference]: Without dead ends: 0 [2021-12-07 00:49:22,764 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 441 GetRequests, 385 SyntacticMatches, 3 SemanticMatches, 53 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 601 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=613, Invalid=2357, Unknown=0, NotChecked=0, Total=2970 [2021-12-07 00:49:22,765 INFO L933 BasicCegarLoop]: 139 mSDtfsCounter, 671 mSDsluCounter, 503 mSDsCounter, 0 mSdLazyCounter, 1495 mSolverCounterSat, 256 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 677 SdHoareTripleChecker+Valid, 642 SdHoareTripleChecker+Invalid, 1751 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 256 IncrementalHoareTripleChecker+Valid, 1495 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-12-07 00:49:22,765 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [677 Valid, 642 Invalid, 1751 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [256 Valid, 1495 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-12-07 00:49:22,765 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-07 00:49:22,765 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-07 00:49:22,765 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-07 00:49:22,766 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-07 00:49:22,766 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 179 [2021-12-07 00:49:22,766 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-07 00:49:22,766 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-07 00:49:22,766 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 8.23076923076923) internal successors, (214), 22 states have internal predecessors, (214), 10 states have call successors, (37), 9 states have call predecessors, (37), 9 states have return successors, (33), 9 states have call predecessors, (33), 10 states have call successors, (33) [2021-12-07 00:49:22,767 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-07 00:49:22,767 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-07 00:49:22,768 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-07 00:49:22,802 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2021-12-07 00:49:22,969 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/bin/uautomizer-DrprNOufMa/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-07 00:49:22,971 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-07 00:49:32,272 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 160 167) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (< 1 ~waterLevel~0)) .cse0 .cse1 .cse2 (not (<= ~waterLevel~0 2))))) [2021-12-07 00:49:32,272 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 160 167) no Hoare annotation was computed. [2021-12-07 00:49:32,272 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 160 167) no Hoare annotation was computed. [2021-12-07 00:49:32,272 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 93 99) no Hoare annotation was computed. [2021-12-07 00:49:32,272 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 93 99) the Hoare annotation is: true [2021-12-07 00:49:32,272 INFO L858 garLoopResultBuilder]: For program point L930-1(lines 926 937) no Hoare annotation was computed. [2021-12-07 00:49:32,273 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 926 937) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~pumpRunning~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~pumpRunning~0 0))) (.cse1 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or (not (< 1 ~waterLevel~0)) .cse0 .cse1 .cse2 .cse3) (or (not (= |old(~methaneLevelCritical~0)| 0)) .cse0 .cse1 .cse2 (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse4 .cse0 .cse1 .cse3) (or .cse4 .cse1 .cse3 (not (= 0 ~systemActive~0))))) [2021-12-07 00:49:32,273 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 926 937) no Hoare annotation was computed. [2021-12-07 00:49:32,273 INFO L858 garLoopResultBuilder]: For program point L768(line 768) no Hoare annotation was computed. [2021-12-07 00:49:32,273 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 757 786) no Hoare annotation was computed. [2021-12-07 00:49:32,273 INFO L861 garLoopResultBuilder]: At program point L767-2(lines 767 781) the Hoare annotation is: true [2021-12-07 00:49:32,273 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 757 786) the Hoare annotation is: true [2021-12-07 00:49:32,273 INFO L861 garLoopResultBuilder]: At program point L763(line 763) the Hoare annotation is: true [2021-12-07 00:49:32,273 INFO L858 garLoopResultBuilder]: For program point L763-1(line 763) no Hoare annotation was computed. [2021-12-07 00:49:32,273 INFO L861 garLoopResultBuilder]: At program point L782(lines 757 786) the Hoare annotation is: true [2021-12-07 00:49:32,273 INFO L858 garLoopResultBuilder]: For program point L778(line 778) no Hoare annotation was computed. [2021-12-07 00:49:32,273 INFO L858 garLoopResultBuilder]: For program point L771(lines 771 775) no Hoare annotation was computed. [2021-12-07 00:49:32,273 INFO L861 garLoopResultBuilder]: At program point L771-1(lines 771 775) the Hoare annotation is: true [2021-12-07 00:49:32,273 INFO L854 garLoopResultBuilder]: At program point L861(lines 856 863) the Hoare annotation is: (let ((.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse3 .cse2 (not (= 0 ~systemActive~0))) (or .cse3 .cse0 .cse4) (or (not (<= |old(~waterLevel~0)| 1)) .cse3 .cse0) (or .cse0 .cse1 .cse4))) [2021-12-07 00:49:32,274 INFO L854 garLoopResultBuilder]: At program point L721(line 721) the Hoare annotation is: (let ((.cse6 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (and (= ~pumpRunning~0 0) .cse6 .cse7)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse2 .cse4 (not (< 1 |old(~waterLevel~0)|)) (and .cse5 .cse6 (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse2 .cse4 (and .cse5 .cse6 .cse7) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 .cse3 (not (= 0 ~systemActive~0)))))) [2021-12-07 00:49:32,274 INFO L858 garLoopResultBuilder]: For program point L721-1(line 721) no Hoare annotation was computed. [2021-12-07 00:49:32,274 INFO L858 garLoopResultBuilder]: For program point L73(lines 73 79) no Hoare annotation was computed. [2021-12-07 00:49:32,274 INFO L858 garLoopResultBuilder]: For program point L73-2(lines 69 91) no Hoare annotation was computed. [2021-12-07 00:49:32,274 INFO L858 garLoopResultBuilder]: For program point L135(lines 135 143) no Hoare annotation was computed. [2021-12-07 00:49:32,274 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 66 92) no Hoare annotation was computed. [2021-12-07 00:49:32,274 INFO L858 garLoopResultBuilder]: For program point L131(lines 131 148) no Hoare annotation was computed. [2021-12-07 00:49:32,274 INFO L858 garLoopResultBuilder]: For program point L738(lines 738 748) no Hoare annotation was computed. [2021-12-07 00:49:32,274 INFO L858 garLoopResultBuilder]: For program point L734(lines 734 751) no Hoare annotation was computed. [2021-12-07 00:49:32,274 INFO L854 garLoopResultBuilder]: At program point L734-1(lines 726 754) the Hoare annotation is: (let ((.cse9 (= ~methaneLevelCritical~0 0))) (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse23 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse16 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse5 (= ~pumpRunning~0 0)) (.cse17 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse18 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse26 (<= ~waterLevel~0 1)) (.cse25 (= 1 ~systemActive~0)) (.cse22 (not .cse9)) (.cse27 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse7 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| ~waterLevel~0)) (.cse19 (= |timeShift_processEnvironment_~tmp~1#1| ~methaneLevelCritical~0)) (.cse20 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse11 (and .cse16 .cse5 .cse17 .cse18 .cse26 .cse25 .cse22 .cse27 .cse7 .cse19 .cse20)) (.cse13 (not (= |old(~waterLevel~0)| 1))) (.cse14 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse21 (and .cse23 .cse16 .cse17 .cse18 .cse26 .cse27 .cse7 .cse19 .cse20)) (.cse12 (not (= |old(~waterLevel~0)| 2))) (.cse15 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and .cse23 .cse5 .cse17 .cse7 .cse1)) (.cse24 (not (= 0 ~systemActive~0))) (.cse2 (not .cse25)) (.cse10 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (not (< 1 |old(~waterLevel~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= 2 ~waterLevel~0) .cse1) .cse2 .cse3 .cse4) (let ((.cse6 (= 2 |timeShift_getWaterLevel_#res#1|))) (or .cse0 (and .cse5 .cse6 .cse7) .cse2 .cse8 (and (<= 1 ~pumpRunning~0) .cse6 .cse7) .cse3)) (or .cse9 .cse2 .cse10 .cse11 .cse12) (or .cse13 .cse9 .cse2 .cse10 .cse11 .cse14) (or .cse15 (and .cse16 .cse5 .cse17 .cse18 .cse7 .cse1 .cse19 .cse20) .cse9 .cse2 .cse10 .cse11 .cse14) (or .cse21 .cse2 .cse10 .cse22 (and .cse23 .cse16 .cse17 .cse18 .cse7 .cse1 .cse19 .cse20) .cse3 .cse14) (or .cse21 .cse13 .cse2 .cse10 .cse22 .cse14) (or .cse0 .cse12 (and .cse5 .cse17 .cse7 .cse1) .cse24) (or .cse21 .cse2 .cse10 .cse22 .cse12) (or .cse15 .cse0 .cse4 .cse24) (or .cse2 .cse10 .cse8 (= ~waterLevel~0 1) .cse3))))) [2021-12-07 00:49:32,274 INFO L858 garLoopResultBuilder]: For program point L739(lines 739 745) no Hoare annotation was computed. [2021-12-07 00:49:32,274 INFO L854 garLoopResultBuilder]: At program point L723(lines 716 725) the Hoare annotation is: (let ((.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (and (= ~pumpRunning~0 0) .cse7)) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7 (<= 1 ~switchedOnBeforeTS~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse4 .cse5 .cse2 (not (= |old(~waterLevel~0)| 2))) (or .cse4 .cse5 .cse6 (not (= 0 ~systemActive~0))) (or .cse0 .cse4 .cse5 .cse2) (or .cse1 .cse2 .cse3 (not (< 1 |old(~waterLevel~0)|)) .cse6)))) [2021-12-07 00:49:32,275 INFO L854 garLoopResultBuilder]: At program point L975(lines 970 978) the Hoare annotation is: (let ((.cse8 (= ~methaneLevelCritical~0 0))) (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse19 (not .cse8)) (.cse24 (= 1 ~systemActive~0)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse17 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse11 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse12 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse13 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse23 (<= ~waterLevel~0 1)) (.cse25 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse14 (= |timeShift_processEnvironment_~tmp~1#1| ~methaneLevelCritical~0)) (.cse15 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse5 (not (< 1 |old(~waterLevel~0)|))) (.cse18 (= ~waterLevel~0 1)) (.cse20 (and .cse6 .cse17 .cse11 .cse12 .cse8 .cse13 .cse23 .cse25 .cse14 .cse15)) (.cse21 (not (= |old(~waterLevel~0)| 1))) (.cse4 (not .cse24)) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (and .cse11 .cse0 .cse12 .cse13 .cse23 .cse24 .cse19 .cse25 .cse14 .cse15)) (.cse16 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse22 (and .cse0 .cse12 .cse2)) (.cse7 (not (<= |old(~waterLevel~0)| 2)))) (and (let ((.cse1 (= 2 |timeShift_getWaterLevel_#res#1|))) (or (and .cse0 .cse1 .cse2) .cse3 .cse4 .cse5 (and .cse6 .cse1 .cse2) .cse7)) (or .cse8 .cse4 .cse9 .cse10 (and .cse11 .cse0 .cse12 .cse13 .cse2 .cse14 .cse15) .cse7 .cse16) (or (and .cse17 .cse11 .cse12 .cse13 .cse14 .cse18 .cse15) .cse4 .cse9 .cse5 .cse19 .cse7) (or .cse8 .cse4 .cse9 .cse5 .cse7 (and .cse11 .cse0 .cse12 .cse13 .cse14 .cse18 .cse15)) (or .cse20 .cse21 .cse4 .cse9 .cse19 .cse16) (or .cse20 .cse4 .cse9 .cse19 (and .cse17 .cse11 .cse12 .cse13 .cse2 .cse14 .cse15) .cse7 .cse16) (or (not (<= |old(~waterLevel~0)| 1)) .cse3 .cse4 .cse22) (or .cse21 .cse8 .cse4 .cse9 .cse10 .cse16) (or .cse3 .cse22 .cse7 (not (= 0 ~systemActive~0))))))) [2021-12-07 00:49:32,275 INFO L854 garLoopResultBuilder]: At program point L141(line 141) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse6 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse7 (= |timeShift_processEnvironment_~tmp~1#1| ~methaneLevelCritical~0)) (.cse8 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (and (<= 1 ~pumpRunning~0) .cse3 .cse4 .cse5 .cse6 (<= ~waterLevel~0 1) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse7 .cse8)) (.cse11 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not (= 1 ~systemActive~0))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse0 .cse2 (not (= |old(~waterLevel~0)| 2))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse2) (or .cse2 (and .cse3 .cse4 .cse5 .cse6 (= |old(~waterLevel~0)| ~waterLevel~0) .cse7 .cse8) .cse9 .cse1 .cse10 .cse11) (or (not (= |old(~waterLevel~0)| 1)) .cse2 .cse9 .cse10 .cse11) (or (and .cse3 .cse4 .cse5 .cse6 .cse7 (= ~waterLevel~0 1) .cse8) .cse2 .cse9 (not (< 1 |old(~waterLevel~0)|)) .cse1)))) [2021-12-07 00:49:32,275 INFO L854 garLoopResultBuilder]: At program point L137(line 137) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse6 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse13 (= 1 ~systemActive~0)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse8 (= |timeShift_processEnvironment_~tmp~1#1| ~methaneLevelCritical~0)) (.cse9 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (not (<= |old(~waterLevel~0)| 1))) (.cse11 (and (<= 1 ~pumpRunning~0) .cse4 .cse5 .cse6 (<= ~waterLevel~0 1) .cse13 .cse7 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse8 .cse9)) (.cse2 (not .cse13)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse12 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse2 .cse3 (not (< 1 |old(~waterLevel~0)|)) .cse1 (and .cse4 .cse5 .cse6 .cse7 .cse8 (= ~waterLevel~0 1) .cse9)) (or .cse0 .cse2 (not (= |old(~waterLevel~0)| 2))) (or .cse10 .cse0 .cse2) (or .cse11 .cse10 .cse2 .cse3 (and .cse4 .cse5 .cse6 (= |old(~waterLevel~0)| ~waterLevel~0) .cse8 .cse9) .cse12) (or .cse11 (not (= |old(~waterLevel~0)| 1)) .cse2 .cse3 .cse12) (or .cse2 .cse3 .cse7 .cse1 .cse12)))) [2021-12-07 00:49:32,275 INFO L854 garLoopResultBuilder]: At program point L736(line 736) the Hoare annotation is: (let ((.cse0 (= ~methaneLevelCritical~0 0))) (let ((.cse21 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse7 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse23 (<= ~waterLevel~0 1)) (.cse24 (= 1 ~systemActive~0)) (.cse20 (not .cse0)) (.cse25 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse8 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| ~waterLevel~0)) (.cse9 (= |timeShift_processEnvironment_~tmp~1#1| ~methaneLevelCritical~0)) (.cse10 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse12 (not (<= |old(~waterLevel~0)| 1))) (.cse17 (and .cse4 .cse5 .cse6 .cse7 .cse23 .cse24 .cse20 .cse25 .cse8 .cse9 .cse10)) (.cse16 (not (= |old(~waterLevel~0)| 1))) (.cse18 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse15 (not (= 0 ~systemActive~0))) (.cse19 (and .cse21 .cse4 .cse6 .cse7 .cse23 .cse25 .cse8 .cse9 .cse10)) (.cse22 (not (= |old(~waterLevel~0)| 2))) (.cse13 (not (= |old(~pumpRunning~0)| 0))) (.cse14 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (not .cse24)) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (< 1 |old(~waterLevel~0)|))) (.cse11 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) .cse11) (or .cse12 .cse13 (and .cse5 .cse6 .cse8 .cse14) .cse15) (or .cse16 .cse0 .cse1 .cse2 .cse17 .cse18) (or .cse12 (and .cse4 .cse5 .cse6 .cse7 .cse8 .cse14 .cse9 .cse10) .cse0 .cse1 .cse2 .cse17 .cse18) (or .cse19 .cse1 .cse2 .cse20 (and .cse21 .cse4 .cse6 .cse7 .cse8 .cse14 .cse9 .cse10) .cse11 .cse18) (or .cse19 .cse16 .cse1 .cse2 .cse20 .cse18) (or .cse13 .cse22 .cse15) (or .cse19 .cse1 .cse2 .cse20 .cse22) (or .cse13 .cse1 .cse11 (and .cse5 .cse6 .cse23 .cse8 .cse14)) (or .cse1 .cse2 .cse3 (= ~waterLevel~0 1) .cse11))))) [2021-12-07 00:49:32,275 INFO L858 garLoopResultBuilder]: For program point L736-1(line 736) no Hoare annotation was computed. [2021-12-07 00:49:32,275 INFO L858 garLoopResultBuilder]: For program point L860(line 860) no Hoare annotation was computed. [2021-12-07 00:49:32,275 INFO L854 garLoopResultBuilder]: At program point L146(line 146) the Hoare annotation is: (let ((.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse3 .cse2 (not (= 0 ~systemActive~0))) (or .cse3 .cse4 .cse0 .cse5) (or (not (<= |old(~waterLevel~0)| 1)) .cse3 .cse4 .cse0) (or .cse0 .cse1 .cse5))) [2021-12-07 00:49:32,276 INFO L854 garLoopResultBuilder]: At program point L146-1(lines 127 151) the Hoare annotation is: (let ((.cse12 (= ~methaneLevelCritical~0 0))) (let ((.cse15 (not .cse12)) (.cse23 (= 1 ~systemActive~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse16 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse8 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse22 (<= ~waterLevel~0 1)) (.cse24 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse9 (= |timeShift_processEnvironment_~tmp~1#1| ~methaneLevelCritical~0)) (.cse11 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse14 (not (< 1 |old(~waterLevel~0)|))) (.cse10 (= ~waterLevel~0 1)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse18 (and .cse3 .cse16 .cse6 .cse12 .cse8 .cse22 .cse24 .cse9 .cse11)) (.cse17 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse7 .cse4)) (.cse21 (not (<= |old(~waterLevel~0)| 1))) (.cse2 (not .cse23)) (.cse13 (not (<= 1 |old(~pumpRunning~0)|))) (.cse20 (and .cse6 .cse7 .cse8 .cse22 .cse23 .cse15 .cse24 .cse9 .cse11)) (.cse19 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4) .cse5) (or (and .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) .cse12 .cse2 .cse13 .cse14 .cse5) (or .cse2 .cse13 .cse14 .cse15 .cse5 (and .cse16 .cse6 .cse8 .cse9 .cse10 .cse11)) (or .cse0 .cse5 (not (= 0 ~systemActive~0))) (or .cse17 .cse2 .cse13 .cse15 .cse18 .cse19) (or .cse2 .cse13 .cse15 (and .cse16 .cse6 .cse8 .cse4 .cse9 .cse11) .cse5 .cse18 .cse19) (or .cse17 .cse12 .cse2 .cse13 .cse20 .cse19) (or .cse21 .cse0 .cse1 .cse2) (or .cse21 .cse12 .cse2 .cse13 (and .cse6 .cse7 .cse8 .cse4 .cse9 .cse11) .cse20 .cse19))))) [2021-12-07 00:49:32,276 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 66 92) the Hoare annotation is: (let ((.cse6 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (and (= ~pumpRunning~0 0) .cse6 .cse7)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse2 .cse4 (not (< 1 |old(~waterLevel~0)|)) (and .cse5 .cse6 (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse2 .cse4 (and .cse5 .cse6 .cse7) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 .cse3 (not (= 0 ~systemActive~0)))))) [2021-12-07 00:49:32,276 INFO L854 garLoopResultBuilder]: At program point L943(lines 938 946) the Hoare annotation is: (let ((.cse11 (= ~methaneLevelCritical~0 0))) (let ((.cse7 (not .cse11)) (.cse15 (<= 1 ~pumpRunning~0)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse16 (<= ~waterLevel~0 1)) (.cse17 (= 1 ~systemActive~0)) (.cse18 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse6 (not (= |old(~waterLevel~0)| 1))) (.cse8 (and .cse15 .cse2 .cse11 .cse3 .cse16 .cse17 .cse18 .cse4)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (not (= |old(~pumpRunning~0)| 0))) (.cse14 (not (<= |old(~waterLevel~0)| 1))) (.cse13 (and .cse2 .cse3 (= |old(~waterLevel~0)| ~waterLevel~0) .cse4)) (.cse0 (not .cse17)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse12 (and .cse15 .cse2 .cse3 .cse16 .cse17 .cse7 .cse18 .cse4)) (.cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) (and .cse2 .cse3 (= ~waterLevel~0 1) .cse4) .cse5) (or .cse6 .cse0 .cse1 .cse7 .cse8 .cse9) (or .cse10 .cse5 (not (= 0 ~systemActive~0))) (or .cse6 .cse11 .cse0 .cse1 .cse12 .cse9) (or .cse13 .cse0 .cse1 .cse7 .cse8 .cse5 .cse9) (or .cse10 .cse0 (not (= |old(~waterLevel~0)| 2))) (or .cse14 .cse10 .cse0) (or .cse14 .cse13 .cse11 .cse0 .cse1 .cse12 .cse9))))) [2021-12-07 00:49:32,276 INFO L854 garLoopResultBuilder]: At program point L175(lines 168 178) the Hoare annotation is: (let ((.cse5 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse8 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse4 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5 .cse6) .cse7 (and .cse2 .cse3 .cse4 (= |old(~waterLevel~0)| ~waterLevel~0) .cse6) .cse8) (or .cse9 .cse7 (not (= 0 ~systemActive~0))) (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse5 .cse8) (or .cse9 .cse0 (not (= |old(~waterLevel~0)| 2))) (or (not (<= |old(~waterLevel~0)| 1)) .cse9 .cse0) (or .cse0 (and .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse6) .cse1 (not (< 1 |old(~waterLevel~0)|)) .cse7))) [2021-12-07 00:49:32,276 INFO L858 garLoopResultBuilder]: For program point L80-1(lines 80 86) no Hoare annotation was computed. [2021-12-07 00:49:32,276 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 66 92) no Hoare annotation was computed. [2021-12-07 00:49:32,276 INFO L858 garLoopResultBuilder]: For program point L906(lines 906 910) no Hoare annotation was computed. [2021-12-07 00:49:32,276 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 860) no Hoare annotation was computed. [2021-12-07 00:49:32,276 INFO L854 garLoopResultBuilder]: At program point L906-2(lines 902 913) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 0))) (let ((.cse14 (<= 1 ~pumpRunning~0)) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse15 (= 1 ~systemActive~0)) (.cse11 (not .cse2)) (.cse16 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse13 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse5 (and .cse14 .cse12 .cse15 .cse11 .cse16 .cse13)) (.cse8 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse1 (and .cse12 (= |old(~waterLevel~0)| ~waterLevel~0) .cse13)) (.cse3 (not .cse15)) (.cse10 (and .cse14 .cse12 .cse2 (<= ~waterLevel~0 1) .cse15 .cse16 .cse13)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse7 .cse8 (not (= 0 ~systemActive~0))) (or .cse7 .cse3 (not (= |old(~waterLevel~0)| 2))) (or .cse0 .cse7 .cse3) (or .cse9 .cse3 .cse10 .cse4 .cse11 .cse6) (or .cse9 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse3 .cse4 (not (< 1 |old(~waterLevel~0)|)) (and .cse12 (= ~waterLevel~0 1) .cse13) .cse8) (or .cse0 .cse1 .cse3 .cse10 .cse4 .cse11 .cse6))))) [2021-12-07 00:49:32,276 INFO L861 garLoopResultBuilder]: At program point L333(lines 270 337) the Hoare annotation is: true [2021-12-07 00:49:32,277 INFO L858 garLoopResultBuilder]: For program point L300(lines 300 306) no Hoare annotation was computed. [2021-12-07 00:49:32,277 INFO L858 garLoopResultBuilder]: For program point L300-1(lines 300 306) no Hoare annotation was computed. [2021-12-07 00:49:32,277 INFO L854 garLoopResultBuilder]: At program point L713(lines 708 715) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-07 00:49:32,277 INFO L854 garLoopResultBuilder]: At program point L263(lines 258 265) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2))) (or (and .cse0 (< 1 ~waterLevel~0) .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)))) [2021-12-07 00:49:32,277 INFO L854 garLoopResultBuilder]: At program point L292(line 292) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse1 (= 2 ~waterLevel~0)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (<= ~waterLevel~0 1)) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse3) (and .cse0 .cse1 .cse5 .cse2) (and .cse6 .cse1 .cse5 .cse2) (and .cse6 (= ~methaneLevelCritical~0 0) .cse4 .cse5 .cse2 (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 .cse4 .cse5 .cse2))) [2021-12-07 00:49:32,277 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-07 00:49:32,277 INFO L854 garLoopResultBuilder]: At program point L895(lines 890 898) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-07 00:49:32,277 INFO L854 garLoopResultBuilder]: At program point L255(lines 243 257) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (<= ~waterLevel~0 2) (= 0 ~systemActive~0)) [2021-12-07 00:49:32,277 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-07 00:49:32,277 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-07 00:49:32,277 INFO L854 garLoopResultBuilder]: At program point L887(lines 883 889) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-07 00:49:32,277 INFO L858 garLoopResultBuilder]: For program point L247(lines 247 253) no Hoare annotation was computed. [2021-12-07 00:49:32,277 INFO L858 garLoopResultBuilder]: For program point L247-1(lines 247 253) no Hoare annotation was computed. [2021-12-07 00:49:32,277 INFO L858 garLoopResultBuilder]: For program point L842(lines 842 849) no Hoare annotation was computed. [2021-12-07 00:49:32,278 INFO L854 garLoopResultBuilder]: At program point L330(lines 279 331) the Hoare annotation is: false [2021-12-07 00:49:32,278 INFO L858 garLoopResultBuilder]: For program point L842-2(lines 842 849) no Hoare annotation was computed. [2021-12-07 00:49:32,278 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-07 00:49:32,278 INFO L858 garLoopResultBuilder]: For program point L318(lines 318 324) no Hoare annotation was computed. [2021-12-07 00:49:32,278 INFO L854 garLoopResultBuilder]: At program point L318-2(lines 310 325) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2))) (or (and .cse0 (< 1 ~waterLevel~0) .cse1 .cse2 .cse3) (and .cse4 .cse2 .cse3 (= 0 ~systemActive~0)) (and .cse4 .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)))) [2021-12-07 00:49:32,278 INFO L861 garLoopResultBuilder]: At program point L826(lines 818 828) the Hoare annotation is: true [2021-12-07 00:49:32,278 INFO L858 garLoopResultBuilder]: For program point L281(lines 280 329) no Hoare annotation was computed. [2021-12-07 00:49:32,278 INFO L858 garLoopResultBuilder]: For program point L310(lines 310 325) no Hoare annotation was computed. [2021-12-07 00:49:32,278 INFO L861 garLoopResultBuilder]: At program point L851(lines 832 854) the Hoare annotation is: true [2021-12-07 00:49:32,278 INFO L854 garLoopResultBuilder]: At program point L880(lines 876 882) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-07 00:49:32,278 INFO L854 garLoopResultBuilder]: At program point L302(line 302) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (< 1 ~waterLevel~0) .cse1 .cse2 .cse3) (and .cse4 .cse2 .cse3 (= 0 ~systemActive~0)) (and .cse4 .cse1 .cse2 .cse3) (and .cse0 (= ~methaneLevelCritical~0 0) (<= ~waterLevel~0 1) .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)))) [2021-12-07 00:49:32,278 INFO L854 garLoopResultBuilder]: At program point L327(lines 280 329) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse1 (= 2 ~waterLevel~0)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (<= ~waterLevel~0 1)) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse3) (and .cse0 .cse1 .cse5 .cse2) (and .cse6 .cse1 .cse5 .cse2) (and .cse6 (= ~methaneLevelCritical~0 0) .cse4 .cse5 .cse2 (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 .cse4 .cse5 .cse2))) [2021-12-07 00:49:32,278 INFO L858 garLoopResultBuilder]: For program point L290(lines 290 296) no Hoare annotation was computed. [2021-12-07 00:49:32,278 INFO L858 garLoopResultBuilder]: For program point L290-1(lines 290 296) no Hoare annotation was computed. [2021-12-07 00:49:32,279 INFO L858 garLoopResultBuilder]: For program point L282(lines 282 286) no Hoare annotation was computed. [2021-12-07 00:49:32,279 INFO L854 garLoopResultBuilder]: At program point L249(line 249) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2))) (or (and .cse0 (< 1 ~waterLevel~0) .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)))) [2021-12-07 00:49:32,279 INFO L854 garLoopResultBuilder]: At program point L815(lines 811 817) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-07 00:49:32,279 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 101 125) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-07 00:49:32,279 INFO L854 garLoopResultBuilder]: At program point L157(lines 152 159) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 1)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (<= 1 ~pumpRunning~0) .cse2 .cse0 (not (= 2 ~waterLevel~0))) (or .cse2 .cse0 .cse1))) [2021-12-07 00:49:32,279 INFO L854 garLoopResultBuilder]: At program point L120(line 120) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-07 00:49:32,279 INFO L858 garLoopResultBuilder]: For program point L983(lines 983 989) no Hoare annotation was computed. [2021-12-07 00:49:32,279 INFO L858 garLoopResultBuilder]: For program point L120-1(lines 101 125) no Hoare annotation was computed. [2021-12-07 00:49:32,279 INFO L854 garLoopResultBuilder]: At program point L988(lines 979 992) the Hoare annotation is: (let ((.cse5 (<= ~waterLevel~0 1))) (let ((.cse4 (not .cse5)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (and (or .cse0 .cse1 (and .cse2 (not .cse3)) .cse4) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse4 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 .cse5 (and .cse2 .cse3) (not (<= ~waterLevel~0 2)))))) [2021-12-07 00:49:32,279 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 101 125) no Hoare annotation was computed. [2021-12-07 00:49:32,279 INFO L854 garLoopResultBuilder]: At program point L115(line 115) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)) (not (<= ~waterLevel~0 2))) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 (and (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~2#1| 0)) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)))) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-07 00:49:32,280 INFO L854 garLoopResultBuilder]: At program point L239(lines 224 242) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse1 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~2#1| 0)) .cse2 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)) .cse0 (not (<= ~waterLevel~0 2)) (and .cse1 .cse2 (= 2 ~waterLevel~0)))))) [2021-12-07 00:49:32,280 INFO L858 garLoopResultBuilder]: For program point L109(lines 109 117) no Hoare annotation was computed. [2021-12-07 00:49:32,280 INFO L858 garLoopResultBuilder]: For program point L105(lines 105 122) no Hoare annotation was computed. [2021-12-07 00:49:32,280 INFO L858 garLoopResultBuilder]: For program point L233(lines 233 237) no Hoare annotation was computed. [2021-12-07 00:49:32,280 INFO L858 garLoopResultBuilder]: For program point L233-2(lines 233 237) no Hoare annotation was computed. [2021-12-07 00:49:32,280 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 914 925) no Hoare annotation was computed. [2021-12-07 00:49:32,280 INFO L858 garLoopResultBuilder]: For program point L918-1(lines 914 925) no Hoare annotation was computed. [2021-12-07 00:49:32,280 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 914 925) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse4 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 ~pumpRunning~0))) (.cse1 (not (= ~pumpRunning~0 0))) (.cse6 (not (= |old(~waterLevel~0)| 2))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse2) (or .cse1 .cse4 .cse6 .cse2) (or .cse0 .cse1 .cse4 .cse2) (or .cse0 .cse4 (not (= ~methaneLevelCritical~0 0)) .cse5 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse1 .cse6 .cse2 .cse3))) [2021-12-07 00:49:32,280 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 179 187) no Hoare annotation was computed. [2021-12-07 00:49:32,280 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 179 187) the Hoare annotation is: true [2021-12-07 00:49:32,280 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 179 187) no Hoare annotation was computed. [2021-12-07 00:49:32,282 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-07 00:49:32,283 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-07 00:49:32,324 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 07.12 12:49:32 BoogieIcfgContainer [2021-12-07 00:49:32,324 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-07 00:49:32,324 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-07 00:49:32,325 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-07 00:49:32,325 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-07 00:49:32,325 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 12:49:15" (3/4) ... [2021-12-07 00:49:32,327 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-07 00:49:32,332 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-07 00:49:32,332 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-07 00:49:32,332 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-07 00:49:32,333 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-07 00:49:32,333 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-07 00:49:32,333 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-07 00:49:32,333 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-07 00:49:32,333 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-12-07 00:49:32,342 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 51 nodes and edges [2021-12-07 00:49:32,342 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-07 00:49:32,343 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-07 00:49:32,343 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-07 00:49:32,344 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-07 00:49:32,345 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-07 00:49:32,345 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-07 00:49:32,370 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) == 2))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) [2021-12-07 00:49:32,370 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS))) [2021-12-07 00:49:32,371 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(\old(pumpRunning) == 0) || (2 == waterLevel && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && 2 == \result) && tmp == waterLevel)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || ((1 <= pumpRunning && 2 == \result) && tmp == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2))) && (((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(waterLevel) <= 1) || (((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && \result == methaneLevelCritical) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) || (((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) [2021-12-07 00:49:32,371 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && ((((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || (((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive))) && ((((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2021-12-07 00:49:32,371 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) == 2)) [2021-12-07 00:49:32,372 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && ((((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || ((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || ((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && ((((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && waterLevel == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && waterLevel == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel))) && (((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) [2021-12-07 00:49:32,372 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && ((((((!(\old(waterLevel) <= 1) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2021-12-07 00:49:32,372 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || waterLevel + 1 <= \old(waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && ((((!(1 == systemActive) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) [2021-12-07 00:49:32,372 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(waterLevel <= 1)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || waterLevel <= 1) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) [2021-12-07 00:49:32,373 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (((((pumpRunning == \old(pumpRunning) && !(tmp == 0)) && pumpRunning == 0) && !(\result == 0)) && \result == 0) && tmp___0 == 0)) || !(1 == systemActive)) || !(waterLevel <= 2)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == waterLevel)) [2021-12-07 00:49:32,373 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((1 <= pumpRunning || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(2 == waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) [2021-12-07 00:49:32,401 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/bin/uautomizer-DrprNOufMa/witness.graphml [2021-12-07 00:49:32,401 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-07 00:49:32,402 INFO L158 Benchmark]: Toolchain (without parser) took 17190.57ms. Allocated memory was 140.5MB in the beginning and 169.9MB in the end (delta: 29.4MB). Free memory was 103.0MB in the beginning and 106.3MB in the end (delta: -3.3MB). Peak memory consumption was 27.1MB. Max. memory is 16.1GB. [2021-12-07 00:49:32,402 INFO L158 Benchmark]: CDTParser took 0.13ms. Allocated memory is still 140.5MB. Free memory is still 120.2MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-07 00:49:32,402 INFO L158 Benchmark]: CACSL2BoogieTranslator took 350.94ms. Allocated memory is still 140.5MB. Free memory was 102.8MB in the beginning and 107.6MB in the end (delta: -4.8MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-12-07 00:49:32,402 INFO L158 Benchmark]: Boogie Procedure Inliner took 42.49ms. Allocated memory is still 140.5MB. Free memory was 107.6MB in the beginning and 104.9MB in the end (delta: 2.7MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2021-12-07 00:49:32,403 INFO L158 Benchmark]: Boogie Preprocessor took 25.50ms. Allocated memory is still 140.5MB. Free memory was 104.9MB in the beginning and 103.6MB in the end (delta: 1.3MB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-07 00:49:32,403 INFO L158 Benchmark]: RCFGBuilder took 339.88ms. Allocated memory is still 140.5MB. Free memory was 103.4MB in the beginning and 86.6MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-07 00:49:32,403 INFO L158 Benchmark]: TraceAbstraction took 16350.02ms. Allocated memory was 140.5MB in the beginning and 169.9MB in the end (delta: 29.4MB). Free memory was 86.0MB in the beginning and 113.7MB in the end (delta: -27.7MB). Peak memory consumption was 79.9MB. Max. memory is 16.1GB. [2021-12-07 00:49:32,404 INFO L158 Benchmark]: Witness Printer took 76.51ms. Allocated memory is still 169.9MB. Free memory was 113.7MB in the beginning and 106.3MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-07 00:49:32,406 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13ms. Allocated memory is still 140.5MB. Free memory is still 120.2MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 350.94ms. Allocated memory is still 140.5MB. Free memory was 102.8MB in the beginning and 107.6MB in the end (delta: -4.8MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 42.49ms. Allocated memory is still 140.5MB. Free memory was 107.6MB in the beginning and 104.9MB in the end (delta: 2.7MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 25.50ms. Allocated memory is still 140.5MB. Free memory was 104.9MB in the beginning and 103.6MB in the end (delta: 1.3MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 339.88ms. Allocated memory is still 140.5MB. Free memory was 103.4MB in the beginning and 86.6MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 16350.02ms. Allocated memory was 140.5MB in the beginning and 169.9MB in the end (delta: 29.4MB). Free memory was 86.0MB in the beginning and 113.7MB in the end (delta: -27.7MB). Peak memory consumption was 79.9MB. Max. memory is 16.1GB. * Witness Printer took 76.51ms. Allocated memory is still 169.9MB. Free memory was 113.7MB in the beginning and 106.3MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 860]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 98 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 16.3s, OverallIterations: 12, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 9.3s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3155 SdHoareTripleChecker+Valid, 2.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3094 mSDsluCounter, 6447 SdHoareTripleChecker+Invalid, 1.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4780 mSDsCounter, 1106 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4812 IncrementalHoareTripleChecker+Invalid, 5918 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1106 mSolverCounterUnsat, 1667 mSDtfsCounter, 4812 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 944 GetRequests, 720 SyntacticMatches, 5 SemanticMatches, 219 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2066 ImplicationChecksByTransitivity, 1.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1502occurred in iteration=11, InterpolantAutomatonStates: 197, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 12 MinimizatonAttempts, 536 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 46 LocationsWithAnnotation, 3887 PreInvPairs, 4507 NumberOfFragments, 4367 HoareAnnotationTreeSize, 3887 FomulaSimplifications, 10572 FormulaSimplificationTreeSizeReduction, 1.1s HoareSimplificationTime, 46 FomulaSimplificationsInter, 58985 FormulaSimplificationTreeSizeReductionInter, 8.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.8s InterpolantComputationTime, 1167 NumberOfCodeBlocks, 1167 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 1426 ConstructedInterpolants, 0 QuantifiedInterpolants, 2884 SizeOfPredicates, 6 NumberOfNonLiveVariables, 1162 ConjunctsInSsa, 21 ConjunctsInUnsatCore, 16 InterpolantComputations, 10 PerfectInterpolantSequences, 828/930 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 876]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 716]: Loop Invariant Derived loop invariant: (((((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) == 2))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 811]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 970]: Loop Invariant Derived loop invariant: ((((((((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && ((((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || ((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || ((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && ((((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && waterLevel == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && waterLevel == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel))) && (((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) - InvariantResult [Line: 890]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 168]: Loop Invariant Derived loop invariant: (((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || waterLevel + 1 <= \old(waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && ((((!(1 == systemActive) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 832]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 979]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(waterLevel <= 1)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || waterLevel <= 1) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) - InvariantResult [Line: 726]: Loop Invariant Derived loop invariant: (((((((((((((!(\old(pumpRunning) == 0) || (2 == waterLevel && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && 2 == \result) && tmp == waterLevel)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || ((1 <= pumpRunning && 2 == \result) && tmp == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2))) && (((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(waterLevel) <= 1) || (((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && \result == methaneLevelCritical) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 2)) || (((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 757]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 818]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 279]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 243]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && splverifierCounter == 0) && waterLevel <= 2) && 0 == systemActive - InvariantResult [Line: 902]: Loop Invariant Derived loop invariant: ((((((((((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 280]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && 2 == waterLevel) && splverifierCounter == 0) && 0 == systemActive) || (((pumpRunning == 0 && waterLevel <= 1) && splverifierCounter == 0) && 0 == systemActive)) || (((pumpRunning == 0 && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || (((1 <= pumpRunning && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) && 1 <= switchedOnBeforeTS)) || (((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 224]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (((((pumpRunning == \old(pumpRunning) && !(tmp == 0)) && pumpRunning == 0) && !(\result == 0)) && \result == 0) && tmp___0 == 0)) || !(1 == systemActive)) || !(waterLevel <= 2)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == waterLevel)) - InvariantResult [Line: 152]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((1 <= pumpRunning || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(2 == waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) - InvariantResult [Line: 883]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 856]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) == 2)) - InvariantResult [Line: 938]: Loop Invariant Derived loop invariant: ((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && ((((((!(\old(waterLevel) <= 1) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 258]: Loop Invariant Derived loop invariant: (((((1 <= pumpRunning && 1 < waterLevel) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) || (((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2)) || ((((1 <= pumpRunning && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: (((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && ((((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || (((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive))) && ((((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 767]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 270]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 708]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 RESULT: Ultimate proved your program to be correct! [2021-12-07 00:49:32,450 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_21012c19-b4fb-4661-a72e-9d18a27e97f4/bin/uautomizer-DrprNOufMa/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE