./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version dbf71c69 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/bin/uautomizer-J5u9QxTXDZ/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/bin/uautomizer-J5u9QxTXDZ/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/bin/uautomizer-J5u9QxTXDZ/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/bin/uautomizer-J5u9QxTXDZ/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/bin/uautomizer-J5u9QxTXDZ/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/bin/uautomizer-J5u9QxTXDZ --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 3ab30b3db91b0e47e6f9b2ed9ba465facc49148e5cdc1cad78e4808ba0c7de84 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-dbf71c6-m [2022-10-17 10:56:00,171 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-10-17 10:56:00,174 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-10-17 10:56:00,226 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-10-17 10:56:00,227 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-10-17 10:56:00,231 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-10-17 10:56:00,234 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-10-17 10:56:00,238 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-10-17 10:56:00,241 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-10-17 10:56:00,246 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-10-17 10:56:00,247 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-10-17 10:56:00,250 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-10-17 10:56:00,250 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-10-17 10:56:00,252 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-10-17 10:56:00,254 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-10-17 10:56:00,256 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-10-17 10:56:00,258 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-10-17 10:56:00,259 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-10-17 10:56:00,261 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-10-17 10:56:00,270 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-10-17 10:56:00,272 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-10-17 10:56:00,273 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-10-17 10:56:00,277 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-10-17 10:56:00,278 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-10-17 10:56:00,287 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-10-17 10:56:00,288 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-10-17 10:56:00,288 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-10-17 10:56:00,290 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-10-17 10:56:00,290 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-10-17 10:56:00,293 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-10-17 10:56:00,293 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-10-17 10:56:00,294 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-10-17 10:56:00,296 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-10-17 10:56:00,297 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-10-17 10:56:00,298 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-10-17 10:56:00,317 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-10-17 10:56:00,318 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-10-17 10:56:00,318 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-10-17 10:56:00,318 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-10-17 10:56:00,319 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-10-17 10:56:00,320 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-10-17 10:56:00,321 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/bin/uautomizer-J5u9QxTXDZ/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-10-17 10:56:00,379 INFO L113 SettingsManager]: Loading preferences was successful [2022-10-17 10:56:00,380 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-10-17 10:56:00,380 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-10-17 10:56:00,381 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-10-17 10:56:00,381 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-10-17 10:56:00,382 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-10-17 10:56:00,382 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-10-17 10:56:00,383 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-10-17 10:56:00,383 INFO L138 SettingsManager]: * Use SBE=true [2022-10-17 10:56:00,383 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-10-17 10:56:00,384 INFO L138 SettingsManager]: * sizeof long=4 [2022-10-17 10:56:00,385 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-10-17 10:56:00,385 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-10-17 10:56:00,385 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-10-17 10:56:00,385 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-10-17 10:56:00,386 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-10-17 10:56:00,386 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-10-17 10:56:00,386 INFO L138 SettingsManager]: * sizeof long double=12 [2022-10-17 10:56:00,386 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-10-17 10:56:00,386 INFO L138 SettingsManager]: * Use constant arrays=true [2022-10-17 10:56:00,387 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-10-17 10:56:00,387 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-10-17 10:56:00,387 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-10-17 10:56:00,388 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-10-17 10:56:00,388 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-17 10:56:00,388 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-10-17 10:56:00,390 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-10-17 10:56:00,390 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-10-17 10:56:00,390 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-10-17 10:56:00,390 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-10-17 10:56:00,391 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-10-17 10:56:00,391 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-10-17 10:56:00,391 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-10-17 10:56:00,392 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/bin/uautomizer-J5u9QxTXDZ/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/bin/uautomizer-J5u9QxTXDZ Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 3ab30b3db91b0e47e6f9b2ed9ba465facc49148e5cdc1cad78e4808ba0c7de84 [2022-10-17 10:56:00,672 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-10-17 10:56:00,693 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-10-17 10:56:00,696 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-10-17 10:56:00,697 INFO L271 PluginConnector]: Initializing CDTParser... [2022-10-17 10:56:00,698 INFO L275 PluginConnector]: CDTParser initialized [2022-10-17 10:56:00,699 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/bin/uautomizer-J5u9QxTXDZ/../../sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c [2022-10-17 10:56:00,778 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/bin/uautomizer-J5u9QxTXDZ/data/2e262787c/1fc566d0cf8b4abc8b1046244a0e2aaf/FLAG0711c2456 [2022-10-17 10:56:01,332 INFO L306 CDTParser]: Found 1 translation units. [2022-10-17 10:56:01,333 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c [2022-10-17 10:56:01,344 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/bin/uautomizer-J5u9QxTXDZ/data/2e262787c/1fc566d0cf8b4abc8b1046244a0e2aaf/FLAG0711c2456 [2022-10-17 10:56:01,658 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/bin/uautomizer-J5u9QxTXDZ/data/2e262787c/1fc566d0cf8b4abc8b1046244a0e2aaf [2022-10-17 10:56:01,662 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-10-17 10:56:01,664 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-10-17 10:56:01,667 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-10-17 10:56:01,667 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-10-17 10:56:01,670 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-10-17 10:56:01,671 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.10 10:56:01" (1/1) ... [2022-10-17 10:56:01,673 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6a94bea2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:56:01, skipping insertion in model container [2022-10-17 10:56:01,673 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.10 10:56:01" (1/1) ... [2022-10-17 10:56:01,680 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-10-17 10:56:01,741 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-10-17 10:56:02,027 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c[5071,5084] [2022-10-17 10:56:02,123 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-17 10:56:02,148 INFO L203 MainTranslator]: Completed pre-run [2022-10-17 10:56:02,180 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c[5071,5084] [2022-10-17 10:56:02,231 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-17 10:56:02,252 INFO L208 MainTranslator]: Completed translation [2022-10-17 10:56:02,253 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:56:02 WrapperNode [2022-10-17 10:56:02,253 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-10-17 10:56:02,255 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-10-17 10:56:02,255 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-10-17 10:56:02,255 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-10-17 10:56:02,263 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:56:02" (1/1) ... [2022-10-17 10:56:02,289 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:56:02" (1/1) ... [2022-10-17 10:56:02,339 INFO L138 Inliner]: procedures = 55, calls = 156, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 256 [2022-10-17 10:56:02,343 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-10-17 10:56:02,344 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-10-17 10:56:02,344 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-10-17 10:56:02,345 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-10-17 10:56:02,353 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:56:02" (1/1) ... [2022-10-17 10:56:02,354 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:56:02" (1/1) ... [2022-10-17 10:56:02,369 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:56:02" (1/1) ... [2022-10-17 10:56:02,382 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:56:02" (1/1) ... [2022-10-17 10:56:02,388 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:56:02" (1/1) ... [2022-10-17 10:56:02,393 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:56:02" (1/1) ... [2022-10-17 10:56:02,395 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:56:02" (1/1) ... [2022-10-17 10:56:02,397 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:56:02" (1/1) ... [2022-10-17 10:56:02,400 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-10-17 10:56:02,401 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-10-17 10:56:02,401 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-10-17 10:56:02,401 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-10-17 10:56:02,416 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:56:02" (1/1) ... [2022-10-17 10:56:02,422 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-17 10:56:02,434 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/bin/uautomizer-J5u9QxTXDZ/z3 [2022-10-17 10:56:02,447 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/bin/uautomizer-J5u9QxTXDZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-10-17 10:56:02,472 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/bin/uautomizer-J5u9QxTXDZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-10-17 10:56:02,498 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-10-17 10:56:02,498 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-10-17 10:56:02,498 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-10-17 10:56:02,498 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-10-17 10:56:02,499 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-10-17 10:56:02,499 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-10-17 10:56:02,499 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-10-17 10:56:02,499 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-10-17 10:56:02,499 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-10-17 10:56:02,499 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-10-17 10:56:02,499 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-10-17 10:56:02,499 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-10-17 10:56:02,500 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-10-17 10:56:02,500 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-10-17 10:56:02,500 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-10-17 10:56:02,500 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-10-17 10:56:02,500 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-10-17 10:56:02,500 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-10-17 10:56:02,584 INFO L235 CfgBuilder]: Building ICFG [2022-10-17 10:56:02,587 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-10-17 10:56:03,027 INFO L276 CfgBuilder]: Performing block encoding [2022-10-17 10:56:03,035 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-10-17 10:56:03,035 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-10-17 10:56:03,038 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.10 10:56:03 BoogieIcfgContainer [2022-10-17 10:56:03,038 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-10-17 10:56:03,041 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-10-17 10:56:03,041 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-10-17 10:56:03,045 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-10-17 10:56:03,045 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.10 10:56:01" (1/3) ... [2022-10-17 10:56:03,046 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@485bfd1b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.10 10:56:03, skipping insertion in model container [2022-10-17 10:56:03,046 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.10 10:56:02" (2/3) ... [2022-10-17 10:56:03,046 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@485bfd1b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.10 10:56:03, skipping insertion in model container [2022-10-17 10:56:03,046 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.10 10:56:03" (3/3) ... [2022-10-17 10:56:03,048 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product37.cil.c [2022-10-17 10:56:03,066 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-10-17 10:56:03,066 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-10-17 10:56:03,121 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-10-17 10:56:03,128 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@5f97ed29, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-10-17 10:56:03,129 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-10-17 10:56:03,134 INFO L276 IsEmpty]: Start isEmpty. Operand has 90 states, 69 states have (on average 1.3768115942028984) internal successors, (95), 77 states have internal predecessors, (95), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2022-10-17 10:56:03,145 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-10-17 10:56:03,146 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:56:03,146 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:56:03,147 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:56:03,152 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:56:03,153 INFO L85 PathProgramCache]: Analyzing trace with hash 1723855951, now seen corresponding path program 1 times [2022-10-17 10:56:03,162 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:56:03,162 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [801961502] [2022-10-17 10:56:03,163 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:56:03,163 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:56:03,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:03,504 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-10-17 10:56:03,513 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:03,527 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-17 10:56:03,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:03,541 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-10-17 10:56:03,552 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:56:03,552 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [801961502] [2022-10-17 10:56:03,553 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [801961502] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:56:03,554 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:56:03,554 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-10-17 10:56:03,556 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2054710350] [2022-10-17 10:56:03,556 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:56:03,562 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-10-17 10:56:03,563 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:56:03,599 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-10-17 10:56:03,600 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-10-17 10:56:03,604 INFO L87 Difference]: Start difference. First operand has 90 states, 69 states have (on average 1.3768115942028984) internal successors, (95), 77 states have internal predecessors, (95), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-10-17 10:56:03,661 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:56:03,662 INFO L93 Difference]: Finished difference Result 171 states and 232 transitions. [2022-10-17 10:56:03,665 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-10-17 10:56:03,667 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-10-17 10:56:03,667 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:56:03,678 INFO L225 Difference]: With dead ends: 171 [2022-10-17 10:56:03,678 INFO L226 Difference]: Without dead ends: 81 [2022-10-17 10:56:03,683 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-10-17 10:56:03,688 INFO L413 NwaCegarLoop]: 113 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 113 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-17 10:56:03,689 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 113 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-17 10:56:03,707 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2022-10-17 10:56:03,739 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 81. [2022-10-17 10:56:03,742 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 69 states have internal predecessors, (81), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-10-17 10:56:03,746 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 104 transitions. [2022-10-17 10:56:03,747 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 104 transitions. Word has length 32 [2022-10-17 10:56:03,748 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:56:03,748 INFO L495 AbstractCegarLoop]: Abstraction has 81 states and 104 transitions. [2022-10-17 10:56:03,748 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-10-17 10:56:03,748 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 104 transitions. [2022-10-17 10:56:03,751 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-10-17 10:56:03,751 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:56:03,751 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:56:03,752 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-10-17 10:56:03,752 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:56:03,753 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:56:03,753 INFO L85 PathProgramCache]: Analyzing trace with hash 1706700211, now seen corresponding path program 1 times [2022-10-17 10:56:03,753 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:56:03,753 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [512252855] [2022-10-17 10:56:03,754 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:56:03,754 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:56:03,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:03,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-10-17 10:56:03,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:03,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-10-17 10:56:03,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:03,935 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-10-17 10:56:03,935 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:56:03,936 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [512252855] [2022-10-17 10:56:03,936 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [512252855] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:56:03,936 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:56:03,937 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-10-17 10:56:03,937 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1038311589] [2022-10-17 10:56:03,937 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:56:03,939 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-10-17 10:56:03,940 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:56:03,941 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-10-17 10:56:03,942 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-10-17 10:56:03,942 INFO L87 Difference]: Start difference. First operand 81 states and 104 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-10-17 10:56:03,992 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:56:03,995 INFO L93 Difference]: Finished difference Result 154 states and 203 transitions. [2022-10-17 10:56:03,996 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-10-17 10:56:03,997 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2022-10-17 10:56:03,997 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:56:04,000 INFO L225 Difference]: With dead ends: 154 [2022-10-17 10:56:04,000 INFO L226 Difference]: Without dead ends: 81 [2022-10-17 10:56:04,007 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-10-17 10:56:04,011 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 81 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 81 SdHoareTripleChecker+Valid, 102 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-17 10:56:04,012 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [81 Valid, 102 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-17 10:56:04,014 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2022-10-17 10:56:04,028 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 81. [2022-10-17 10:56:04,036 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 62 states have (on average 1.2903225806451613) internal successors, (80), 69 states have internal predecessors, (80), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-10-17 10:56:04,038 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 103 transitions. [2022-10-17 10:56:04,038 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 103 transitions. Word has length 37 [2022-10-17 10:56:04,040 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:56:04,041 INFO L495 AbstractCegarLoop]: Abstraction has 81 states and 103 transitions. [2022-10-17 10:56:04,041 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-10-17 10:56:04,041 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 103 transitions. [2022-10-17 10:56:04,045 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-10-17 10:56:04,048 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:56:04,049 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:56:04,049 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-10-17 10:56:04,049 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:56:04,050 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:56:04,050 INFO L85 PathProgramCache]: Analyzing trace with hash -734632956, now seen corresponding path program 1 times [2022-10-17 10:56:04,051 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:56:04,051 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [445276077] [2022-10-17 10:56:04,051 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:56:04,051 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:56:04,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:04,214 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-10-17 10:56:04,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:04,220 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-10-17 10:56:04,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:04,235 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-10-17 10:56:04,236 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:56:04,236 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [445276077] [2022-10-17 10:56:04,236 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [445276077] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:56:04,236 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:56:04,237 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-10-17 10:56:04,237 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1193123887] [2022-10-17 10:56:04,237 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:56:04,238 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-10-17 10:56:04,238 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:56:04,238 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-10-17 10:56:04,239 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-10-17 10:56:04,239 INFO L87 Difference]: Start difference. First operand 81 states and 103 transitions. Second operand has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-10-17 10:56:04,251 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:56:04,257 INFO L93 Difference]: Finished difference Result 127 states and 161 transitions. [2022-10-17 10:56:04,258 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-10-17 10:56:04,258 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 39 [2022-10-17 10:56:04,258 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:56:04,259 INFO L225 Difference]: With dead ends: 127 [2022-10-17 10:56:04,259 INFO L226 Difference]: Without dead ends: 72 [2022-10-17 10:56:04,261 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-10-17 10:56:04,264 INFO L413 NwaCegarLoop]: 90 mSDtfsCounter, 12 mSDsluCounter, 74 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 164 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-17 10:56:04,267 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 164 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-17 10:56:04,268 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 72 states. [2022-10-17 10:56:04,277 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 72 to 72. [2022-10-17 10:56:04,279 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 72 states, 56 states have (on average 1.3035714285714286) internal successors, (73), 63 states have internal predecessors, (73), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-10-17 10:56:04,280 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 72 states to 72 states and 91 transitions. [2022-10-17 10:56:04,280 INFO L78 Accepts]: Start accepts. Automaton has 72 states and 91 transitions. Word has length 39 [2022-10-17 10:56:04,280 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:56:04,280 INFO L495 AbstractCegarLoop]: Abstraction has 72 states and 91 transitions. [2022-10-17 10:56:04,281 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-10-17 10:56:04,281 INFO L276 IsEmpty]: Start isEmpty. Operand 72 states and 91 transitions. [2022-10-17 10:56:04,286 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-10-17 10:56:04,286 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:56:04,286 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:56:04,287 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-10-17 10:56:04,287 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:56:04,287 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:56:04,287 INFO L85 PathProgramCache]: Analyzing trace with hash 2032099452, now seen corresponding path program 1 times [2022-10-17 10:56:04,288 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:56:04,290 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1612935647] [2022-10-17 10:56:04,291 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:56:04,291 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:56:04,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:04,437 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-10-17 10:56:04,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:04,444 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-10-17 10:56:04,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:04,454 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-10-17 10:56:04,455 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:56:04,455 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1612935647] [2022-10-17 10:56:04,455 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1612935647] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:56:04,455 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:56:04,455 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-10-17 10:56:04,456 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1856457998] [2022-10-17 10:56:04,456 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:56:04,457 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-10-17 10:56:04,457 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:56:04,458 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-10-17 10:56:04,458 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-10-17 10:56:04,458 INFO L87 Difference]: Start difference. First operand 72 states and 91 transitions. Second operand has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-10-17 10:56:04,502 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:56:04,502 INFO L93 Difference]: Finished difference Result 183 states and 238 transitions. [2022-10-17 10:56:04,502 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-10-17 10:56:04,503 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 43 [2022-10-17 10:56:04,503 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:56:04,504 INFO L225 Difference]: With dead ends: 183 [2022-10-17 10:56:04,505 INFO L226 Difference]: Without dead ends: 119 [2022-10-17 10:56:04,505 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-10-17 10:56:04,506 INFO L413 NwaCegarLoop]: 110 mSDtfsCounter, 54 mSDsluCounter, 63 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 173 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-10-17 10:56:04,507 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [54 Valid, 173 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-10-17 10:56:04,508 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 119 states. [2022-10-17 10:56:04,523 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 119 to 117. [2022-10-17 10:56:04,523 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 117 states, 90 states have (on average 1.288888888888889) internal successors, (116), 97 states have internal predecessors, (116), 14 states have call successors, (14), 12 states have call predecessors, (14), 12 states have return successors, (18), 14 states have call predecessors, (18), 14 states have call successors, (18) [2022-10-17 10:56:04,525 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 117 states to 117 states and 148 transitions. [2022-10-17 10:56:04,525 INFO L78 Accepts]: Start accepts. Automaton has 117 states and 148 transitions. Word has length 43 [2022-10-17 10:56:04,525 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:56:04,525 INFO L495 AbstractCegarLoop]: Abstraction has 117 states and 148 transitions. [2022-10-17 10:56:04,526 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-10-17 10:56:04,526 INFO L276 IsEmpty]: Start isEmpty. Operand 117 states and 148 transitions. [2022-10-17 10:56:04,527 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-10-17 10:56:04,527 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:56:04,527 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:56:04,527 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-10-17 10:56:04,527 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:56:04,528 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:56:04,528 INFO L85 PathProgramCache]: Analyzing trace with hash -870205615, now seen corresponding path program 1 times [2022-10-17 10:56:04,528 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:56:04,528 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1631361762] [2022-10-17 10:56:04,529 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:56:04,529 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:56:04,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:04,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-10-17 10:56:04,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:04,618 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-10-17 10:56:04,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:04,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-10-17 10:56:04,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:04,667 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-10-17 10:56:04,667 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:56:04,668 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1631361762] [2022-10-17 10:56:04,668 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1631361762] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:56:04,673 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:56:04,674 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-17 10:56:04,675 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1910226157] [2022-10-17 10:56:04,675 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:56:04,676 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-17 10:56:04,676 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:56:04,677 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-17 10:56:04,677 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-10-17 10:56:04,677 INFO L87 Difference]: Start difference. First operand 117 states and 148 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-10-17 10:56:04,859 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:56:04,859 INFO L93 Difference]: Finished difference Result 258 states and 334 transitions. [2022-10-17 10:56:04,860 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-17 10:56:04,860 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2022-10-17 10:56:04,860 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:56:04,862 INFO L225 Difference]: With dead ends: 258 [2022-10-17 10:56:04,862 INFO L226 Difference]: Without dead ends: 149 [2022-10-17 10:56:04,863 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-10-17 10:56:04,864 INFO L413 NwaCegarLoop]: 93 mSDtfsCounter, 63 mSDsluCounter, 282 mSDsCounter, 0 mSdLazyCounter, 109 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 375 SdHoareTripleChecker+Invalid, 128 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 109 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:56:04,865 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 375 Invalid, 128 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 109 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:56:04,866 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 149 states. [2022-10-17 10:56:04,883 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 149 to 144. [2022-10-17 10:56:04,884 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 144 states, 112 states have (on average 1.2857142857142858) internal successors, (144), 119 states have internal predecessors, (144), 16 states have call successors, (16), 12 states have call predecessors, (16), 15 states have return successors, (23), 17 states have call predecessors, (23), 16 states have call successors, (23) [2022-10-17 10:56:04,885 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 144 states to 144 states and 183 transitions. [2022-10-17 10:56:04,886 INFO L78 Accepts]: Start accepts. Automaton has 144 states and 183 transitions. Word has length 51 [2022-10-17 10:56:04,886 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:56:04,886 INFO L495 AbstractCegarLoop]: Abstraction has 144 states and 183 transitions. [2022-10-17 10:56:04,886 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-10-17 10:56:04,887 INFO L276 IsEmpty]: Start isEmpty. Operand 144 states and 183 transitions. [2022-10-17 10:56:04,888 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-10-17 10:56:04,888 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:56:04,888 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:56:04,888 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-10-17 10:56:04,889 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:56:04,889 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:56:04,889 INFO L85 PathProgramCache]: Analyzing trace with hash 1735817939, now seen corresponding path program 1 times [2022-10-17 10:56:04,889 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:56:04,890 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1247958991] [2022-10-17 10:56:04,890 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:56:04,890 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:56:04,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:04,971 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-10-17 10:56:04,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:04,978 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-10-17 10:56:04,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:05,026 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-10-17 10:56:05,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:05,031 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-10-17 10:56:05,032 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:56:05,032 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1247958991] [2022-10-17 10:56:05,032 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1247958991] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:56:05,032 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:56:05,032 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-17 10:56:05,033 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [979602114] [2022-10-17 10:56:05,033 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:56:05,033 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-17 10:56:05,034 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:56:05,034 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-17 10:56:05,035 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-10-17 10:56:05,035 INFO L87 Difference]: Start difference. First operand 144 states and 183 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-10-17 10:56:05,214 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:56:05,214 INFO L93 Difference]: Finished difference Result 293 states and 383 transitions. [2022-10-17 10:56:05,215 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-17 10:56:05,215 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 51 [2022-10-17 10:56:05,215 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:56:05,219 INFO L225 Difference]: With dead ends: 293 [2022-10-17 10:56:05,219 INFO L226 Difference]: Without dead ends: 157 [2022-10-17 10:56:05,220 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=34, Invalid=56, Unknown=0, NotChecked=0, Total=90 [2022-10-17 10:56:05,223 INFO L413 NwaCegarLoop]: 94 mSDtfsCounter, 137 mSDsluCounter, 198 mSDsCounter, 0 mSdLazyCounter, 94 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 140 SdHoareTripleChecker+Valid, 292 SdHoareTripleChecker+Invalid, 129 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 94 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-10-17 10:56:05,225 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [140 Valid, 292 Invalid, 129 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 94 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-10-17 10:56:05,227 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 157 states. [2022-10-17 10:56:05,264 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 157 to 146. [2022-10-17 10:56:05,265 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 146 states, 114 states have (on average 1.280701754385965) internal successors, (146), 121 states have internal predecessors, (146), 16 states have call successors, (16), 12 states have call predecessors, (16), 15 states have return successors, (23), 17 states have call predecessors, (23), 16 states have call successors, (23) [2022-10-17 10:56:05,268 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 146 states to 146 states and 185 transitions. [2022-10-17 10:56:05,268 INFO L78 Accepts]: Start accepts. Automaton has 146 states and 185 transitions. Word has length 51 [2022-10-17 10:56:05,269 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:56:05,269 INFO L495 AbstractCegarLoop]: Abstraction has 146 states and 185 transitions. [2022-10-17 10:56:05,269 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-10-17 10:56:05,269 INFO L276 IsEmpty]: Start isEmpty. Operand 146 states and 185 transitions. [2022-10-17 10:56:05,271 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-10-17 10:56:05,271 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:56:05,272 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:56:05,272 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-10-17 10:56:05,272 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:56:05,272 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:56:05,272 INFO L85 PathProgramCache]: Analyzing trace with hash -2136447531, now seen corresponding path program 1 times [2022-10-17 10:56:05,273 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:56:05,273 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1487080310] [2022-10-17 10:56:05,273 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:56:05,273 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:56:05,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:05,444 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-10-17 10:56:05,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:05,452 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-10-17 10:56:05,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:05,472 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-10-17 10:56:05,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:05,475 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-10-17 10:56:05,476 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:56:05,476 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1487080310] [2022-10-17 10:56:05,476 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1487080310] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:56:05,476 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:56:05,476 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-10-17 10:56:05,477 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1567372772] [2022-10-17 10:56:05,477 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:56:05,478 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-17 10:56:05,478 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:56:05,479 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-17 10:56:05,479 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-10-17 10:56:05,479 INFO L87 Difference]: Start difference. First operand 146 states and 185 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-10-17 10:56:05,711 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:56:05,711 INFO L93 Difference]: Finished difference Result 421 states and 552 transitions. [2022-10-17 10:56:05,711 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-17 10:56:05,711 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2022-10-17 10:56:05,712 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:56:05,718 INFO L225 Difference]: With dead ends: 421 [2022-10-17 10:56:05,718 INFO L226 Difference]: Without dead ends: 283 [2022-10-17 10:56:05,719 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-10-17 10:56:05,723 INFO L413 NwaCegarLoop]: 145 mSDtfsCounter, 208 mSDsluCounter, 164 mSDsCounter, 0 mSdLazyCounter, 150 mSolverCounterSat, 61 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 215 SdHoareTripleChecker+Valid, 309 SdHoareTripleChecker+Invalid, 211 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 61 IncrementalHoareTripleChecker+Valid, 150 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-10-17 10:56:05,727 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [215 Valid, 309 Invalid, 211 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [61 Valid, 150 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-10-17 10:56:05,729 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 283 states. [2022-10-17 10:56:05,759 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 283 to 275. [2022-10-17 10:56:05,760 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 275 states, 211 states have (on average 1.2559241706161137) internal successors, (265), 222 states have internal predecessors, (265), 34 states have call successors, (34), 28 states have call predecessors, (34), 29 states have return successors, (53), 34 states have call predecessors, (53), 34 states have call successors, (53) [2022-10-17 10:56:05,762 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 275 states to 275 states and 352 transitions. [2022-10-17 10:56:05,763 INFO L78 Accepts]: Start accepts. Automaton has 275 states and 352 transitions. Word has length 51 [2022-10-17 10:56:05,763 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:56:05,763 INFO L495 AbstractCegarLoop]: Abstraction has 275 states and 352 transitions. [2022-10-17 10:56:05,763 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-10-17 10:56:05,763 INFO L276 IsEmpty]: Start isEmpty. Operand 275 states and 352 transitions. [2022-10-17 10:56:05,764 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-10-17 10:56:05,764 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:56:05,764 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:56:05,764 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-10-17 10:56:05,765 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:56:05,765 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:56:05,765 INFO L85 PathProgramCache]: Analyzing trace with hash -1858186128, now seen corresponding path program 1 times [2022-10-17 10:56:05,765 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:56:05,765 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [442173302] [2022-10-17 10:56:05,765 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:56:05,766 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:56:05,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:05,876 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-10-17 10:56:05,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:05,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-10-17 10:56:05,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:05,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-10-17 10:56:05,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:05,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-10-17 10:56:05,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:05,925 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-10-17 10:56:05,925 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:56:05,926 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [442173302] [2022-10-17 10:56:05,926 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [442173302] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:56:05,926 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:56:05,926 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-10-17 10:56:05,926 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2147092356] [2022-10-17 10:56:05,926 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:56:05,927 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-10-17 10:56:05,927 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:56:05,927 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-10-17 10:56:05,927 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-10-17 10:56:05,927 INFO L87 Difference]: Start difference. First operand 275 states and 352 transitions. Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-10-17 10:56:06,193 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:56:06,193 INFO L93 Difference]: Finished difference Result 558 states and 727 transitions. [2022-10-17 10:56:06,194 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-10-17 10:56:06,194 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) Word has length 53 [2022-10-17 10:56:06,194 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:56:06,197 INFO L225 Difference]: With dead ends: 558 [2022-10-17 10:56:06,197 INFO L226 Difference]: Without dead ends: 291 [2022-10-17 10:56:06,199 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-10-17 10:56:06,199 INFO L413 NwaCegarLoop]: 94 mSDtfsCounter, 105 mSDsluCounter, 329 mSDsCounter, 0 mSdLazyCounter, 194 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 111 SdHoareTripleChecker+Valid, 423 SdHoareTripleChecker+Invalid, 226 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 194 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-10-17 10:56:06,200 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [111 Valid, 423 Invalid, 226 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 194 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-10-17 10:56:06,201 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 291 states. [2022-10-17 10:56:06,235 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 291 to 271. [2022-10-17 10:56:06,235 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 271 states, 207 states have (on average 1.2222222222222223) internal successors, (253), 218 states have internal predecessors, (253), 34 states have call successors, (34), 28 states have call predecessors, (34), 29 states have return successors, (53), 34 states have call predecessors, (53), 34 states have call successors, (53) [2022-10-17 10:56:06,238 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 271 states to 271 states and 340 transitions. [2022-10-17 10:56:06,238 INFO L78 Accepts]: Start accepts. Automaton has 271 states and 340 transitions. Word has length 53 [2022-10-17 10:56:06,238 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:56:06,239 INFO L495 AbstractCegarLoop]: Abstraction has 271 states and 340 transitions. [2022-10-17 10:56:06,239 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-10-17 10:56:06,239 INFO L276 IsEmpty]: Start isEmpty. Operand 271 states and 340 transitions. [2022-10-17 10:56:06,240 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-10-17 10:56:06,240 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:56:06,241 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:56:06,241 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-10-17 10:56:06,241 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:56:06,241 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:56:06,242 INFO L85 PathProgramCache]: Analyzing trace with hash -2030829189, now seen corresponding path program 1 times [2022-10-17 10:56:06,242 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:56:06,242 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [590331735] [2022-10-17 10:56:06,242 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:56:06,242 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:56:06,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:06,454 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-10-17 10:56:06,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:06,503 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-10-17 10:56:06,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:06,520 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-10-17 10:56:06,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:06,538 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-10-17 10:56:06,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:06,548 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-10-17 10:56:06,548 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:56:06,548 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [590331735] [2022-10-17 10:56:06,549 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [590331735] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:56:06,549 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:56:06,549 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-10-17 10:56:06,549 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [632790562] [2022-10-17 10:56:06,549 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:56:06,550 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-10-17 10:56:06,550 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:56:06,551 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-10-17 10:56:06,551 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-10-17 10:56:06,552 INFO L87 Difference]: Start difference. First operand 271 states and 340 transitions. Second operand has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-10-17 10:56:07,376 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:56:07,377 INFO L93 Difference]: Finished difference Result 858 states and 1130 transitions. [2022-10-17 10:56:07,377 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-10-17 10:56:07,377 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 55 [2022-10-17 10:56:07,378 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:56:07,384 INFO L225 Difference]: With dead ends: 858 [2022-10-17 10:56:07,384 INFO L226 Difference]: Without dead ends: 645 [2022-10-17 10:56:07,386 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 43 GetRequests, 10 SyntacticMatches, 1 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 262 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=215, Invalid=907, Unknown=0, NotChecked=0, Total=1122 [2022-10-17 10:56:07,388 INFO L413 NwaCegarLoop]: 160 mSDtfsCounter, 468 mSDsluCounter, 674 mSDsCounter, 0 mSdLazyCounter, 734 mSolverCounterSat, 176 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 475 SdHoareTripleChecker+Valid, 834 SdHoareTripleChecker+Invalid, 910 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 176 IncrementalHoareTripleChecker+Valid, 734 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-10-17 10:56:07,388 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [475 Valid, 834 Invalid, 910 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [176 Valid, 734 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-10-17 10:56:07,390 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 645 states. [2022-10-17 10:56:07,462 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 645 to 524. [2022-10-17 10:56:07,464 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 524 states, 401 states have (on average 1.2194513715710724) internal successors, (489), 425 states have internal predecessors, (489), 65 states have call successors, (65), 49 states have call predecessors, (65), 57 states have return successors, (104), 67 states have call predecessors, (104), 65 states have call successors, (104) [2022-10-17 10:56:07,469 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 524 states to 524 states and 658 transitions. [2022-10-17 10:56:07,469 INFO L78 Accepts]: Start accepts. Automaton has 524 states and 658 transitions. Word has length 55 [2022-10-17 10:56:07,470 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:56:07,470 INFO L495 AbstractCegarLoop]: Abstraction has 524 states and 658 transitions. [2022-10-17 10:56:07,470 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-10-17 10:56:07,470 INFO L276 IsEmpty]: Start isEmpty. Operand 524 states and 658 transitions. [2022-10-17 10:56:07,471 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2022-10-17 10:56:07,472 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:56:07,472 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:56:07,472 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-10-17 10:56:07,476 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:56:07,476 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:56:07,476 INFO L85 PathProgramCache]: Analyzing trace with hash 309041265, now seen corresponding path program 1 times [2022-10-17 10:56:07,476 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:56:07,477 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1249628982] [2022-10-17 10:56:07,477 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:56:07,477 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:56:07,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:07,674 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-10-17 10:56:07,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:07,689 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:56:07,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:07,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-17 10:56:07,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:07,730 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-17 10:56:07,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:07,743 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-10-17 10:56:07,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:07,756 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-10-17 10:56:07,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:07,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-17 10:56:07,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:07,762 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-10-17 10:56:07,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:07,765 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 8 proven. 18 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-10-17 10:56:07,766 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:56:07,766 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1249628982] [2022-10-17 10:56:07,766 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1249628982] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-17 10:56:07,766 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [815739388] [2022-10-17 10:56:07,766 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:56:07,766 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:56:07,767 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/bin/uautomizer-J5u9QxTXDZ/z3 [2022-10-17 10:56:07,770 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-17 10:56:07,804 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-10-17 10:56:07,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:07,923 INFO L263 TraceCheckSpWp]: Trace formula consists of 466 conjuncts, 8 conjunts are in the unsatisfiable core [2022-10-17 10:56:07,931 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-17 10:56:08,137 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 24 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-17 10:56:08,138 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-10-17 10:56:08,359 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 18 proven. 8 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-10-17 10:56:08,359 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [815739388] provided 0 perfect and 2 imperfect interpolant sequences [2022-10-17 10:56:08,359 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-10-17 10:56:08,359 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2022-10-17 10:56:08,360 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [299205585] [2022-10-17 10:56:08,360 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-10-17 10:56:08,360 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-10-17 10:56:08,361 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:56:08,361 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-10-17 10:56:08,361 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2022-10-17 10:56:08,362 INFO L87 Difference]: Start difference. First operand 524 states and 658 transitions. Second operand has 15 states, 15 states have (on average 8.6) internal successors, (129), 10 states have internal predecessors, (129), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (17), 8 states have call predecessors, (17), 6 states have call successors, (17) [2022-10-17 10:56:09,452 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:56:09,452 INFO L93 Difference]: Finished difference Result 1146 states and 1483 transitions. [2022-10-17 10:56:09,453 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-10-17 10:56:09,453 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 8.6) internal successors, (129), 10 states have internal predecessors, (129), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (17), 8 states have call predecessors, (17), 6 states have call successors, (17) Word has length 94 [2022-10-17 10:56:09,453 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:56:09,459 INFO L225 Difference]: With dead ends: 1146 [2022-10-17 10:56:09,459 INFO L226 Difference]: Without dead ends: 678 [2022-10-17 10:56:09,462 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 256 GetRequests, 209 SyntacticMatches, 4 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 496 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=452, Invalid=1528, Unknown=0, NotChecked=0, Total=1980 [2022-10-17 10:56:09,463 INFO L413 NwaCegarLoop]: 208 mSDtfsCounter, 456 mSDsluCounter, 943 mSDsCounter, 0 mSdLazyCounter, 835 mSolverCounterSat, 241 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 460 SdHoareTripleChecker+Valid, 1151 SdHoareTripleChecker+Invalid, 1076 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 241 IncrementalHoareTripleChecker+Valid, 835 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-10-17 10:56:09,464 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [460 Valid, 1151 Invalid, 1076 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [241 Valid, 835 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-10-17 10:56:09,465 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 678 states. [2022-10-17 10:56:09,571 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 678 to 585. [2022-10-17 10:56:09,573 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 585 states, 441 states have (on average 1.2086167800453516) internal successors, (533), 473 states have internal predecessors, (533), 75 states have call successors, (75), 63 states have call predecessors, (75), 68 states have return successors, (100), 70 states have call predecessors, (100), 75 states have call successors, (100) [2022-10-17 10:56:09,578 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 585 states to 585 states and 708 transitions. [2022-10-17 10:56:09,579 INFO L78 Accepts]: Start accepts. Automaton has 585 states and 708 transitions. Word has length 94 [2022-10-17 10:56:09,580 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:56:09,580 INFO L495 AbstractCegarLoop]: Abstraction has 585 states and 708 transitions. [2022-10-17 10:56:09,580 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 8.6) internal successors, (129), 10 states have internal predecessors, (129), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (17), 8 states have call predecessors, (17), 6 states have call successors, (17) [2022-10-17 10:56:09,580 INFO L276 IsEmpty]: Start isEmpty. Operand 585 states and 708 transitions. [2022-10-17 10:56:09,586 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 169 [2022-10-17 10:56:09,586 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:56:09,586 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:56:09,623 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-10-17 10:56:09,801 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-10-17 10:56:09,802 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:56:09,802 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:56:09,802 INFO L85 PathProgramCache]: Analyzing trace with hash 1424558119, now seen corresponding path program 1 times [2022-10-17 10:56:09,802 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:56:09,802 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1796019242] [2022-10-17 10:56:09,803 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:56:09,803 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:56:09,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:09,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-10-17 10:56:09,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:09,949 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:56:09,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:09,959 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-17 10:56:09,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:09,964 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-17 10:56:09,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:09,969 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-10-17 10:56:09,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:09,980 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-17 10:56:09,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:09,984 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-10-17 10:56:09,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:09,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-17 10:56:09,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:09,987 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2022-10-17 10:56:09,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:10,031 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-17 10:56:10,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:10,033 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 125 [2022-10-17 10:56:10,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:10,037 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 135 [2022-10-17 10:56:10,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:10,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 144 [2022-10-17 10:56:10,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:10,043 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 160 [2022-10-17 10:56:10,045 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:10,049 INFO L134 CoverageAnalysis]: Checked inductivity of 188 backedges. 79 proven. 0 refuted. 0 times theorem prover too weak. 109 trivial. 0 not checked. [2022-10-17 10:56:10,050 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:56:10,050 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1796019242] [2022-10-17 10:56:10,050 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1796019242] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-17 10:56:10,050 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-17 10:56:10,050 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-10-17 10:56:10,051 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1518206986] [2022-10-17 10:56:10,051 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-17 10:56:10,052 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-10-17 10:56:10,052 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:56:10,052 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-10-17 10:56:10,053 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2022-10-17 10:56:10,053 INFO L87 Difference]: Start difference. First operand 585 states and 708 transitions. Second operand has 10 states, 10 states have (on average 8.6) internal successors, (86), 7 states have internal predecessors, (86), 3 states have call successors, (11), 5 states have call predecessors, (11), 2 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2022-10-17 10:56:10,798 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:56:10,799 INFO L93 Difference]: Finished difference Result 1594 states and 1958 transitions. [2022-10-17 10:56:10,799 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-10-17 10:56:10,799 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 8.6) internal successors, (86), 7 states have internal predecessors, (86), 3 states have call successors, (11), 5 states have call predecessors, (11), 2 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) Word has length 168 [2022-10-17 10:56:10,800 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:56:10,807 INFO L225 Difference]: With dead ends: 1594 [2022-10-17 10:56:10,807 INFO L226 Difference]: Without dead ends: 1017 [2022-10-17 10:56:10,810 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 66 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 30 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 207 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=211, Invalid=781, Unknown=0, NotChecked=0, Total=992 [2022-10-17 10:56:10,811 INFO L413 NwaCegarLoop]: 175 mSDtfsCounter, 372 mSDsluCounter, 557 mSDsCounter, 0 mSdLazyCounter, 641 mSolverCounterSat, 118 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 376 SdHoareTripleChecker+Valid, 732 SdHoareTripleChecker+Invalid, 759 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 118 IncrementalHoareTripleChecker+Valid, 641 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-10-17 10:56:10,811 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [376 Valid, 732 Invalid, 759 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [118 Valid, 641 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-10-17 10:56:10,813 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1017 states. [2022-10-17 10:56:10,944 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1017 to 1002. [2022-10-17 10:56:10,946 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1002 states, 759 states have (on average 1.1712779973649539) internal successors, (889), 805 states have internal predecessors, (889), 128 states have call successors, (128), 111 states have call predecessors, (128), 114 states have return successors, (164), 116 states have call predecessors, (164), 128 states have call successors, (164) [2022-10-17 10:56:10,953 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1002 states to 1002 states and 1181 transitions. [2022-10-17 10:56:10,953 INFO L78 Accepts]: Start accepts. Automaton has 1002 states and 1181 transitions. Word has length 168 [2022-10-17 10:56:10,954 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:56:10,954 INFO L495 AbstractCegarLoop]: Abstraction has 1002 states and 1181 transitions. [2022-10-17 10:56:10,954 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 8.6) internal successors, (86), 7 states have internal predecessors, (86), 3 states have call successors, (11), 5 states have call predecessors, (11), 2 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2022-10-17 10:56:10,955 INFO L276 IsEmpty]: Start isEmpty. Operand 1002 states and 1181 transitions. [2022-10-17 10:56:10,961 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 169 [2022-10-17 10:56:10,961 INFO L187 NwaCegarLoop]: Found error trace [2022-10-17 10:56:10,962 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:56:10,962 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-10-17 10:56:10,962 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-10-17 10:56:10,962 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-17 10:56:10,963 INFO L85 PathProgramCache]: Analyzing trace with hash 1551539399, now seen corresponding path program 1 times [2022-10-17 10:56:10,963 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-17 10:56:10,963 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [600694361] [2022-10-17 10:56:10,963 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:56:10,963 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-17 10:56:11,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:11,169 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-10-17 10:56:11,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:11,180 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-10-17 10:56:11,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:11,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-17 10:56:11,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:11,194 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-17 10:56:11,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:11,198 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-10-17 10:56:11,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:11,205 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-17 10:56:11,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:11,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-10-17 10:56:11,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:11,210 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-10-17 10:56:11,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:11,217 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2022-10-17 10:56:11,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:11,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2022-10-17 10:56:11,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:11,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-17 10:56:11,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:11,293 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 135 [2022-10-17 10:56:11,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:11,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 144 [2022-10-17 10:56:11,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:11,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 160 [2022-10-17 10:56:11,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:11,310 INFO L134 CoverageAnalysis]: Checked inductivity of 184 backedges. 66 proven. 5 refuted. 0 times theorem prover too weak. 113 trivial. 0 not checked. [2022-10-17 10:56:11,310 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-17 10:56:11,310 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [600694361] [2022-10-17 10:56:11,310 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [600694361] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-17 10:56:11,310 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1829739344] [2022-10-17 10:56:11,311 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-17 10:56:11,311 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:56:11,311 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/bin/uautomizer-J5u9QxTXDZ/z3 [2022-10-17 10:56:11,314 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-17 10:56:11,321 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-10-17 10:56:11,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-17 10:56:11,481 INFO L263 TraceCheckSpWp]: Trace formula consists of 665 conjuncts, 13 conjunts are in the unsatisfiable core [2022-10-17 10:56:11,495 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-17 10:56:11,712 INFO L134 CoverageAnalysis]: Checked inductivity of 184 backedges. 134 proven. 4 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2022-10-17 10:56:11,712 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-10-17 10:56:12,161 INFO L134 CoverageAnalysis]: Checked inductivity of 184 backedges. 77 proven. 39 refuted. 0 times theorem prover too weak. 68 trivial. 0 not checked. [2022-10-17 10:56:12,161 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1829739344] provided 0 perfect and 2 imperfect interpolant sequences [2022-10-17 10:56:12,161 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-10-17 10:56:12,162 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 10, 11] total 26 [2022-10-17 10:56:12,162 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [788706036] [2022-10-17 10:56:12,162 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-10-17 10:56:12,163 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-10-17 10:56:12,163 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-17 10:56:12,164 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-10-17 10:56:12,164 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=121, Invalid=529, Unknown=0, NotChecked=0, Total=650 [2022-10-17 10:56:12,165 INFO L87 Difference]: Start difference. First operand 1002 states and 1181 transitions. Second operand has 26 states, 26 states have (on average 7.961538461538462) internal successors, (207), 21 states have internal predecessors, (207), 9 states have call successors, (30), 10 states have call predecessors, (30), 9 states have return successors, (32), 8 states have call predecessors, (32), 9 states have call successors, (32) [2022-10-17 10:56:13,677 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-17 10:56:13,677 INFO L93 Difference]: Finished difference Result 2105 states and 2551 transitions. [2022-10-17 10:56:13,678 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-10-17 10:56:13,678 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 7.961538461538462) internal successors, (207), 21 states have internal predecessors, (207), 9 states have call successors, (30), 10 states have call predecessors, (30), 9 states have return successors, (32), 8 states have call predecessors, (32), 9 states have call successors, (32) Word has length 168 [2022-10-17 10:56:13,679 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-17 10:56:13,680 INFO L225 Difference]: With dead ends: 2105 [2022-10-17 10:56:13,680 INFO L226 Difference]: Without dead ends: 0 [2022-10-17 10:56:13,689 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 408 GetRequests, 353 SyntacticMatches, 5 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 531 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=557, Invalid=2095, Unknown=0, NotChecked=0, Total=2652 [2022-10-17 10:56:13,689 INFO L413 NwaCegarLoop]: 124 mSDtfsCounter, 851 mSDsluCounter, 395 mSDsCounter, 0 mSdLazyCounter, 1352 mSolverCounterSat, 326 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 854 SdHoareTripleChecker+Valid, 519 SdHoareTripleChecker+Invalid, 1678 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 326 IncrementalHoareTripleChecker+Valid, 1352 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-10-17 10:56:13,690 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [854 Valid, 519 Invalid, 1678 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [326 Valid, 1352 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-10-17 10:56:13,691 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-10-17 10:56:13,691 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-10-17 10:56:13,691 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-10-17 10:56:13,691 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-10-17 10:56:13,692 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 168 [2022-10-17 10:56:13,692 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-17 10:56:13,692 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-10-17 10:56:13,692 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 7.961538461538462) internal successors, (207), 21 states have internal predecessors, (207), 9 states have call successors, (30), 10 states have call predecessors, (30), 9 states have return successors, (32), 8 states have call predecessors, (32), 9 states have call successors, (32) [2022-10-17 10:56:13,693 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-10-17 10:56:13,693 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-10-17 10:56:13,696 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-10-17 10:56:13,731 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-10-17 10:56:13,917 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/bin/uautomizer-J5u9QxTXDZ/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-17 10:56:13,919 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-10-17 10:56:24,564 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 346 352) no Hoare annotation was computed. [2022-10-17 10:56:24,564 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 346 352) the Hoare annotation is: true [2022-10-17 10:56:24,565 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 83 94) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~pumpRunning~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or (not (= |old(~methaneLevelCritical~0)| 0)) .cse0 .cse1 .cse2 (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2 .cse3) (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 .cse3))) [2022-10-17 10:56:24,565 INFO L899 garLoopResultBuilder]: For program point L87-1(lines 83 94) no Hoare annotation was computed. [2022-10-17 10:56:24,565 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2022-10-17 10:56:24,565 INFO L899 garLoopResultBuilder]: For program point L184(lines 184 194) no Hoare annotation was computed. [2022-10-17 10:56:24,566 INFO L899 garLoopResultBuilder]: For program point L180(lines 180 197) no Hoare annotation was computed. [2022-10-17 10:56:24,567 INFO L895 garLoopResultBuilder]: At program point L180-1(lines 172 200) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0))) (let ((.cse16 (<= 1 ~pumpRunning~0)) (.cse19 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse20 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse21 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse8 (= ~pumpRunning~0 0)) (.cse22 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse14 (<= ~waterLevel~0 1)) (.cse23 (= 1 ~systemActive~0)) (.cse6 (not .cse1)) (.cse29 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse24 (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0)) (.cse25 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse27 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse0 (not (= |old(~waterLevel~0)| 1))) (.cse4 (and .cse20 .cse21 .cse8 .cse22 .cse14 .cse23 .cse6 .cse29 .cse24 .cse25 .cse27)) (.cse18 (not (< 1 |old(~waterLevel~0)|))) (.cse17 (not (<= |old(~waterLevel~0)| 2))) (.cse26 (= ~waterLevel~0 1)) (.cse28 (not (<= |old(~waterLevel~0)| 1))) (.cse2 (not .cse23)) (.cse13 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse15 (not (<= 2 |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1|))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (and .cse16 .cse19 .cse20 .cse21 .cse1 .cse22 .cse14 .cse23 .cse29 .cse24 .cse25 .cse27)) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse2 .cse3 .cse6 .cse7 .cse5) (let ((.cse9 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse10 (<= 2 ~waterLevel~0)) (.cse12 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse8 .cse9 .cse10 .cse11 .cse12) .cse2 (and .cse8 .cse13 .cse14 .cse11 .cse15) (and .cse16 .cse9 .cse10 .cse11 .cse12) .cse17)) (or .cse2 .cse3 .cse18 .cse6 (and .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27) .cse17) (or .cse28 .cse1 .cse2 (and .cse21 .cse8 .cse13 .cse22 .cse23 .cse24 .cse11 .cse27 .cse15) .cse3 .cse4 .cse5) (or .cse1 .cse2 .cse3 .cse18 .cse17 (and .cse20 .cse21 .cse8 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27)) (or .cse28 .cse2 (and .cse19 .cse21 .cse13 .cse22 .cse23 .cse24 .cse11 .cse27 .cse15) .cse3 .cse6 .cse7 .cse5))))) [2022-10-17 10:56:24,567 INFO L895 garLoopResultBuilder]: At program point L399(line 399) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse3 .cse4 .cse0 (not (= |old(~waterLevel~0)| 2))) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) .cse2) (or (not (<= |old(~waterLevel~0)| 1)) .cse3 .cse4 .cse0))) [2022-10-17 10:56:24,568 INFO L895 garLoopResultBuilder]: At program point L399-1(lines 380 404) the Hoare annotation is: (let ((.cse12 (= ~methaneLevelCritical~0 0))) (let ((.cse10 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse21 (= ~pumpRunning~0 0)) (.cse3 (not .cse12)) (.cse17 (<= 1 ~pumpRunning~0)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse8 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse23 (<= ~waterLevel~0 1)) (.cse22 (= 1 ~systemActive~0)) (.cse24 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse9 (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0)) (.cse11 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse14 (not (= |old(~waterLevel~0)| 2))) (.cse4 (and .cse17 .cse6 .cse7 .cse12 .cse8 .cse23 .cse22 .cse24 .cse9 .cse11)) (.cse18 (not (= |old(~waterLevel~0)| 1))) (.cse13 (and .cse7 .cse21 .cse8 .cse23 .cse22 .cse3 .cse24 .cse9 .cse11)) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse15 (not (= |old(~pumpRunning~0)| 0))) (.cse16 (and .cse21 .cse10)) (.cse1 (not .cse22)) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse19 (not (< 1 |old(~waterLevel~0)|))) (.cse20 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (and .cse6 .cse7 .cse8 .cse9 .cse10 .cse11)) (or .cse12 .cse1 .cse2 .cse13 .cse14) (or .cse15 .cse16 .cse1 (and .cse17 .cse10) .cse14) (or .cse18 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse18 .cse12 .cse1 .cse2 .cse13 .cse5) (or .cse1 .cse2 .cse19 .cse3 (and .cse6 .cse7 .cse8 .cse9 .cse11) .cse20) (or .cse0 .cse12 .cse1 .cse2 .cse13 (and .cse7 .cse21 .cse8 .cse9 .cse10 .cse11) .cse5) (or .cse0 .cse15 .cse16 .cse1) (or .cse1 .cse2 .cse19 (= ~waterLevel~0 1) .cse20))))) [2022-10-17 10:56:24,569 INFO L895 garLoopResultBuilder]: At program point L428(lines 421 431) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0))) (let ((.cse15 (<= 1 ~pumpRunning~0)) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse11 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse12 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse16 (<= ~waterLevel~0 1)) (.cse14 (= 1 ~systemActive~0)) (.cse8 (not .cse1)) (.cse17 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse13 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse4 (and .cse15 .cse10 .cse11 .cse12 .cse16 .cse14 .cse8 .cse17 .cse13)) (.cse7 (and .cse10 .cse11 .cse12 (= |old(~waterLevel~0)| ~waterLevel~0) .cse13)) (.cse0 (not (= |old(~waterLevel~0)| 1))) (.cse9 (and .cse15 .cse10 .cse11 .cse1 .cse12 .cse16 .cse14 .cse17 .cse13)) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not .cse14)) (.cse6 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse2 .cse3 .cse4 .cse6 .cse7 .cse5) (or .cse2 .cse3 .cse8 .cse6 .cse7 .cse9 .cse5) (or .cse0 .cse2 .cse3 .cse8 .cse9 .cse5) (or .cse2 (and .cse10 .cse11 .cse12 (= ~waterLevel~0 1) .cse13) .cse3 (not (< 1 |old(~waterLevel~0)|)) .cse6) (or (not (= |old(~pumpRunning~0)| 0)) .cse2 .cse6))))) [2022-10-17 10:56:24,569 INFO L899 garLoopResultBuilder]: For program point L333-1(lines 333 339) no Hoare annotation was computed. [2022-10-17 10:56:24,569 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 319 345) no Hoare annotation was computed. [2022-10-17 10:56:24,569 INFO L899 garLoopResultBuilder]: For program point L185(lines 185 191) no Hoare annotation was computed. [2022-10-17 10:56:24,569 INFO L899 garLoopResultBuilder]: For program point L309(line 309) no Hoare annotation was computed. [2022-10-17 10:56:24,570 INFO L895 garLoopResultBuilder]: At program point L169(lines 162 171) the Hoare annotation is: (let ((.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 0) .cse6)) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 (<= 1 ~switchedOnBeforeTS~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (not (= |old(~waterLevel~0)| 2))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2) (or .cse3 .cse2 .cse4 (not (< 1 |old(~waterLevel~0)|)) .cse5) (or .cse3 .cse2 .cse4 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2022-10-17 10:56:24,570 INFO L899 garLoopResultBuilder]: For program point L326(lines 326 332) no Hoare annotation was computed. [2022-10-17 10:56:24,570 INFO L899 garLoopResultBuilder]: For program point L326-2(lines 322 344) no Hoare annotation was computed. [2022-10-17 10:56:24,570 INFO L899 garLoopResultBuilder]: For program point L388(lines 388 396) no Hoare annotation was computed. [2022-10-17 10:56:24,571 INFO L895 garLoopResultBuilder]: At program point L132(lines 127 135) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0))) (let ((.cse22 (<= 1 ~pumpRunning~0)) (.cse18 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse9 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse10 (= ~pumpRunning~0 0)) (.cse11 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse19 (<= ~waterLevel~0 1)) (.cse23 (= 1 ~systemActive~0)) (.cse16 (not .cse1)) (.cse24 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse12 (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0)) (.cse13 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse4 (and .cse8 .cse9 .cse10 .cse11 .cse19 .cse23 .cse16 .cse24 .cse12 .cse13)) (.cse0 (not (= |old(~waterLevel~0)| 1))) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse17 (and .cse22 .cse18 .cse8 .cse9 .cse1 .cse11 .cse19 .cse23 .cse24 .cse12 .cse13)) (.cse14 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse15 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (not .cse23)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (< 1 |old(~waterLevel~0)|))) (.cse7 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse2 .cse3 .cse6 .cse7 (and .cse8 .cse9 .cse10 .cse11 .cse12 .cse13)) (or (not (<= |old(~waterLevel~0)| 1)) .cse1 .cse2 .cse3 (and .cse9 .cse10 .cse14 .cse11 .cse12 .cse15 .cse13) .cse4 .cse5) (or .cse0 .cse2 .cse3 .cse16 .cse17 .cse5) (or .cse2 .cse3 (and .cse18 .cse9 .cse14 .cse11 .cse12 .cse15 .cse13) .cse16 .cse17 .cse7 .cse5) (or .cse2 .cse3 .cse16 .cse17 (not (= |old(~waterLevel~0)| 2))) (let ((.cse20 (= 2 ~waterLevel~0)) (.cse21 (= 2 |timeShift_getWaterLevel_#res#1|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse2 (and .cse10 .cse14 .cse19 .cse15) (and .cse10 .cse20 .cse21 .cse15) .cse7 (and .cse22 .cse20 .cse21 .cse15))) (or .cse2 .cse3 .cse6 (= ~waterLevel~0 1) .cse7))))) [2022-10-17 10:56:24,571 INFO L899 garLoopResultBuilder]: For program point L384(lines 384 401) no Hoare annotation was computed. [2022-10-17 10:56:24,572 INFO L895 garLoopResultBuilder]: At program point L182(line 182) the Hoare annotation is: (let ((.cse15 (= ~methaneLevelCritical~0 0))) (let ((.cse19 (= ~pumpRunning~0 0)) (.cse2 (not .cse15)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse18 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse4 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse6 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse25 (<= ~waterLevel~0 1)) (.cse24 (= 1 ~systemActive~0)) (.cse26 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse7 (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0)) (.cse20 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse9 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse14 (not (= |old(~waterLevel~0)| 1))) (.cse22 (not (= |old(~waterLevel~0)| 2))) (.cse12 (and (<= 1 ~pumpRunning~0) .cse3 .cse18 .cse4 .cse15 .cse6 .cse25 .cse24 .cse26 .cse7 .cse20 .cse9)) (.cse16 (and .cse18 .cse4 .cse19 .cse6 .cse25 .cse24 .cse2 .cse26 .cse7 .cse20 .cse9)) (.cse10 (not (<= 2 |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1|))) (.cse13 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse23 (not (<= |old(~waterLevel~0)| 1))) (.cse21 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not .cse24)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse17 (not (< 1 |old(~waterLevel~0)|))) (.cse11 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) .cse11 .cse12 .cse13) (or .cse14 .cse15 .cse0 .cse1 .cse16 .cse13) (or .cse15 .cse0 .cse1 .cse17 (and .cse18 .cse4 .cse19 .cse6 .cse7 .cse20 .cse9) .cse11) (or .cse21 .cse0 .cse22) (or .cse14 .cse0 .cse1 .cse2 .cse12 .cse13) (or .cse0 .cse1 .cse2 .cse22 .cse12) (or .cse23 .cse15 .cse0 .cse1 .cse16 (and .cse4 .cse19 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) .cse13) (or .cse23 .cse21 (and .cse19 (< |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2) .cse5 .cse8) .cse0) (or .cse0 .cse1 .cse17 (= ~waterLevel~0 1) .cse11))))) [2022-10-17 10:56:24,572 INFO L895 garLoopResultBuilder]: At program point L310(lines 305 312) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse2))) [2022-10-17 10:56:24,573 INFO L899 garLoopResultBuilder]: For program point L182-1(line 182) no Hoare annotation was computed. [2022-10-17 10:56:24,573 INFO L895 garLoopResultBuilder]: At program point L100(lines 95 103) the Hoare annotation is: (let ((.cse10 (= ~methaneLevelCritical~0 0))) (let ((.cse7 (not .cse10)) (.cse14 (<= 1 ~pumpRunning~0)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse15 (<= ~waterLevel~0 1)) (.cse13 (= 1 ~systemActive~0)) (.cse16 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse6 (not (= |old(~waterLevel~0)| 1))) (.cse8 (and .cse14 .cse2 .cse10 .cse3 .cse15 .cse13 .cse16 .cse4)) (.cse12 (and .cse2 .cse3 (= |old(~waterLevel~0)| ~waterLevel~0) .cse4)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (and .cse14 .cse2 .cse3 .cse15 .cse13 .cse7 .cse16 .cse4)) (.cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not .cse13)) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) (and .cse2 .cse3 (= ~waterLevel~0 1) .cse4) .cse5) (or .cse6 .cse0 .cse1 .cse7 .cse8 .cse9) (or .cse6 .cse10 .cse0 .cse1 .cse11 .cse9) (or .cse12 .cse0 .cse1 .cse7 .cse8 .cse5 .cse9) (or .cse12 .cse10 .cse0 .cse1 .cse11 .cse5 .cse9) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse5))))) [2022-10-17 10:56:24,574 INFO L895 garLoopResultBuilder]: At program point L418(lines 413 420) the Hoare annotation is: (let ((.cse3 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse12 (= 1 ~systemActive~0)) (.cse9 (not (= ~methaneLevelCritical~0 0))) (.cse6 (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0)) (.cse7 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (not (< 1 |old(~waterLevel~0)|))) (.cse10 (and .cse3 .cse4 .cse5 (<= ~waterLevel~0 1) .cse12 .cse9 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse6 .cse7)) (.cse0 (not .cse12)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (not (<= |old(~waterLevel~0)| 2))) (.cse11 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5 .cse6 (= ~waterLevel~0 1) .cse7) .cse8) (or .cse0 .cse1 .cse2 .cse9 .cse8) (or .cse0 .cse1 .cse10 .cse8 (and .cse3 .cse4 .cse5 .cse6 (= |old(~waterLevel~0)| ~waterLevel~0) .cse7) .cse11) (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse10 .cse11) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse8) (or .cse0 .cse1 .cse9 .cse8 .cse11)))) [2022-10-17 10:56:24,574 INFO L899 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2022-10-17 10:56:24,574 INFO L895 garLoopResultBuilder]: At program point L63-2(lines 59 70) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (<= 1 ~switchedOnBeforeTS~0)) (.cse7 (= 1 ~systemActive~0))) (let ((.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not .cse7)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (and .cse0 (<= ~waterLevel~0 1) .cse7 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse1)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse2 .cse3 (not (< 1 |old(~waterLevel~0)|)) (and .cse0 (= ~waterLevel~0 1) .cse1) .cse5) (or (not (= |old(~pumpRunning~0)| 0)) .cse2 .cse5) (or (not (= |old(~waterLevel~0)| 1)) .cse2 .cse3 .cse4 .cse6)))) [2022-10-17 10:56:24,575 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 319 345) the Hoare annotation is: (let ((.cse0 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1))) (and (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (not (= |old(~pumpRunning~0)| 0)) .cse2 (not (<= |old(~waterLevel~0)| 2))) (or .cse2 .cse3 (not (= |old(~waterLevel~0)| 2)) .cse4) (or (not (<= |old(~waterLevel~0)| 1)) .cse2 .cse3 .cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2022-10-17 10:56:24,575 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 319 345) no Hoare annotation was computed. [2022-10-17 10:56:24,576 INFO L895 garLoopResultBuilder]: At program point L394(line 394) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse10 (= ~methaneLevelCritical~0 0)) (.cse6 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse11 (= 1 ~systemActive~0)) (.cse7 (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0)) (.cse8 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (and (<= 1 ~pumpRunning~0) .cse4 .cse5 .cse10 .cse6 (<= ~waterLevel~0 1) .cse11 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse7 .cse8)) (.cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not .cse11)) (.cse9 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5 .cse6 .cse7 (= |old(~waterLevel~0)| ~waterLevel~0) .cse8)) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) (and .cse4 .cse5 .cse6 .cse7 (= ~waterLevel~0 1) .cse8) .cse9) (or .cse10 .cse0 .cse1 .cse9 .cse3) (or .cse10 .cse0 .cse1 (not (= |old(~waterLevel~0)| 2))) (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse9)))) [2022-10-17 10:56:24,576 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 309) no Hoare annotation was computed. [2022-10-17 10:56:24,576 INFO L895 garLoopResultBuilder]: At program point L167(line 167) the Hoare annotation is: (let ((.cse0 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1))) (and (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (not (= |old(~pumpRunning~0)| 0)) .cse2 (not (<= |old(~waterLevel~0)| 2))) (or .cse2 .cse3 (not (= |old(~waterLevel~0)| 2)) .cse4) (or (not (<= |old(~waterLevel~0)| 1)) .cse2 .cse3 .cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2022-10-17 10:56:24,576 INFO L899 garLoopResultBuilder]: For program point L167-1(line 167) no Hoare annotation was computed. [2022-10-17 10:56:24,577 INFO L899 garLoopResultBuilder]: For program point L225(line 225) no Hoare annotation was computed. [2022-10-17 10:56:24,577 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 204 233) no Hoare annotation was computed. [2022-10-17 10:56:24,577 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 204 233) the Hoare annotation is: true [2022-10-17 10:56:24,577 INFO L899 garLoopResultBuilder]: For program point L218(lines 218 222) no Hoare annotation was computed. [2022-10-17 10:56:24,577 INFO L902 garLoopResultBuilder]: At program point L218-1(lines 218 222) the Hoare annotation is: true [2022-10-17 10:56:24,577 INFO L899 garLoopResultBuilder]: For program point L215(line 215) no Hoare annotation was computed. [2022-10-17 10:56:24,577 INFO L902 garLoopResultBuilder]: At program point L214-2(lines 214 228) the Hoare annotation is: true [2022-10-17 10:56:24,578 INFO L902 garLoopResultBuilder]: At program point L210(line 210) the Hoare annotation is: true [2022-10-17 10:56:24,578 INFO L899 garLoopResultBuilder]: For program point L210-1(line 210) no Hoare annotation was computed. [2022-10-17 10:56:24,578 INFO L902 garLoopResultBuilder]: At program point L229(lines 204 233) the Hoare annotation is: true [2022-10-17 10:56:24,578 INFO L899 garLoopResultBuilder]: For program point L291-2(lines 291 298) no Hoare annotation was computed. [2022-10-17 10:56:24,578 INFO L895 garLoopResultBuilder]: At program point L159(lines 154 161) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-10-17 10:56:24,579 INFO L899 garLoopResultBuilder]: For program point L543(lines 543 547) no Hoare annotation was computed. [2022-10-17 10:56:24,579 INFO L895 garLoopResultBuilder]: At program point L543-2(lines 537 548) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2))) (or (and .cse0 (< 1 ~waterLevel~0) .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)))) [2022-10-17 10:56:24,579 INFO L902 garLoopResultBuilder]: At program point L275(lines 267 277) the Hoare annotation is: true [2022-10-17 10:56:24,579 INFO L899 garLoopResultBuilder]: For program point L527(lines 527 533) no Hoare annotation was computed. [2022-10-17 10:56:24,579 INFO L899 garLoopResultBuilder]: For program point L527-1(lines 527 533) no Hoare annotation was computed. [2022-10-17 10:56:24,579 INFO L902 garLoopResultBuilder]: At program point L556(lines 497 560) the Hoare annotation is: true [2022-10-17 10:56:24,580 INFO L902 garLoopResultBuilder]: At program point L300(lines 281 303) the Hoare annotation is: true [2022-10-17 10:56:24,580 INFO L895 garLoopResultBuilder]: At program point L263(lines 259 265) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-10-17 10:56:24,580 INFO L895 garLoopResultBuilder]: At program point L519(line 519) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3) (and .cse4 (= ~methaneLevelCritical~0 0) .cse5 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 .cse5 .cse2 .cse3))) [2022-10-17 10:56:24,580 INFO L895 garLoopResultBuilder]: At program point L577(lines 573 579) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-10-17 10:56:24,580 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-10-17 10:56:24,581 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-10-17 10:56:24,581 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-10-17 10:56:24,581 INFO L895 garLoopResultBuilder]: At program point L553(lines 506 554) the Hoare annotation is: false [2022-10-17 10:56:24,581 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-10-17 10:56:24,581 INFO L899 garLoopResultBuilder]: For program point L508(lines 507 552) no Hoare annotation was computed. [2022-10-17 10:56:24,581 INFO L899 garLoopResultBuilder]: For program point L537(lines 537 548) no Hoare annotation was computed. [2022-10-17 10:56:24,582 INFO L895 garLoopResultBuilder]: At program point L529(line 529) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0 2)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (< 1 ~waterLevel~0) .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3) (and .cse0 (= ~methaneLevelCritical~0 0) (<= ~waterLevel~0 1) .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)))) [2022-10-17 10:56:24,582 INFO L895 garLoopResultBuilder]: At program point L550(lines 507 552) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3) (and .cse4 (= ~methaneLevelCritical~0 0) .cse5 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 .cse5 .cse2 .cse3))) [2022-10-17 10:56:24,582 INFO L899 garLoopResultBuilder]: For program point L517(lines 517 523) no Hoare annotation was computed. [2022-10-17 10:56:24,582 INFO L899 garLoopResultBuilder]: For program point L517-1(lines 517 523) no Hoare annotation was computed. [2022-10-17 10:56:24,582 INFO L899 garLoopResultBuilder]: For program point L509(lines 509 513) no Hoare annotation was computed. [2022-10-17 10:56:24,583 INFO L895 garLoopResultBuilder]: At program point L592(lines 587 595) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-10-17 10:56:24,583 INFO L895 garLoopResultBuilder]: At program point L584(lines 580 586) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-10-17 10:56:24,583 INFO L899 garLoopResultBuilder]: For program point L291(lines 291 298) no Hoare annotation was computed. [2022-10-17 10:56:24,583 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 354 378) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-10-17 10:56:24,583 INFO L895 garLoopResultBuilder]: At program point L145(lines 136 149) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (let ((.cse1 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse1 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (and .cse1 (= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2)))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-10-17 10:56:24,584 INFO L895 garLoopResultBuilder]: At program point L368(line 368) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-10-17 10:56:24,584 INFO L895 garLoopResultBuilder]: At program point L492(lines 477 495) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (let ((.cse1 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse1 (= 2 ~waterLevel~0)) (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (not (<= ~waterLevel~0 2)))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-10-17 10:56:24,584 INFO L899 garLoopResultBuilder]: For program point L362(lines 362 370) no Hoare annotation was computed. [2022-10-17 10:56:24,584 INFO L899 garLoopResultBuilder]: For program point L358(lines 358 375) no Hoare annotation was computed. [2022-10-17 10:56:24,585 INFO L899 garLoopResultBuilder]: For program point L486(lines 486 490) no Hoare annotation was computed. [2022-10-17 10:56:24,585 INFO L899 garLoopResultBuilder]: For program point L486-2(lines 486 490) no Hoare annotation was computed. [2022-10-17 10:56:24,585 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 354 378) no Hoare annotation was computed. [2022-10-17 10:56:24,585 INFO L895 garLoopResultBuilder]: At program point L410(lines 405 412) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2))))) [2022-10-17 10:56:24,585 INFO L895 garLoopResultBuilder]: At program point L373(line 373) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-10-17 10:56:24,586 INFO L899 garLoopResultBuilder]: For program point L373-1(lines 354 378) no Hoare annotation was computed. [2022-10-17 10:56:24,586 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 146) no Hoare annotation was computed. [2022-10-17 10:56:24,586 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2022-10-17 10:56:24,586 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 71 82) no Hoare annotation was computed. [2022-10-17 10:56:24,586 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 71 82) the Hoare annotation is: (let ((.cse3 (not (= ~pumpRunning~0 0))) (.cse4 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 ~pumpRunning~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 .cse0 (not (= |old(~waterLevel~0)| 2)) .cse2) (or .cse4 .cse3 .cse0 .cse2) (or .cse4 .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-10-17 10:56:24,586 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 432 440) no Hoare annotation was computed. [2022-10-17 10:56:24,587 INFO L902 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 432 440) the Hoare annotation is: true [2022-10-17 10:56:24,587 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 432 440) no Hoare annotation was computed. [2022-10-17 10:56:24,590 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-17 10:56:24,592 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-10-17 10:56:24,640 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.10 10:56:24 BoogieIcfgContainer [2022-10-17 10:56:24,640 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-10-17 10:56:24,641 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-10-17 10:56:24,641 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-10-17 10:56:24,641 INFO L275 PluginConnector]: Witness Printer initialized [2022-10-17 10:56:24,641 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.10 10:56:03" (3/4) ... [2022-10-17 10:56:24,644 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-10-17 10:56:24,650 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-10-17 10:56:24,651 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-10-17 10:56:24,651 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-10-17 10:56:24,651 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-10-17 10:56:24,651 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-10-17 10:56:24,651 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-10-17 10:56:24,652 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-10-17 10:56:24,660 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 52 nodes and edges [2022-10-17 10:56:24,661 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-10-17 10:56:24,662 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-10-17 10:56:24,662 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-10-17 10:56:24,663 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-10-17 10:56:24,664 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-10-17 10:56:24,664 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-10-17 10:56:24,690 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2022-10-17 10:56:24,691 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2022-10-17 10:56:24,691 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((((\result <= waterLevel && methaneLevelCritical == \result) && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == 0 && 2 == \result) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(1 == systemActive)) || ((((pumpRunning == 0 && \result < 2) && waterLevel <= 1) && \old(waterLevel) == waterLevel) && !(2 <= tmp))) || ((((1 <= pumpRunning && 2 == \result) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result < 2) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(2 <= tmp))) || !(1 <= \old(pumpRunning))) || ((((((((((\result <= waterLevel && methaneLevelCritical == \result) && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || ((((((((\result <= waterLevel && methaneLevelCritical == \result) && pumpRunning == 0) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && ((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || ((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result < 2) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(2 <= tmp))) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2022-10-17 10:56:24,692 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) || (((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) && ((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || (((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) [2022-10-17 10:56:24,692 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-10-17 10:56:24,692 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((((\result <= waterLevel && methaneLevelCritical == \result) && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || (((((\result <= waterLevel && methaneLevelCritical == \result) && pumpRunning == 0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS))) && ((((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((methaneLevelCritical == \result && pumpRunning == 0) && \result < 2) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((((((((\result <= waterLevel && methaneLevelCritical == \result) && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result < 2) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(methaneLevelCritical == 0)) || ((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && \result < 2) && waterLevel <= 1) && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || (((1 <= pumpRunning && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) [2022-10-17 10:56:24,693 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-10-17 10:56:24,693 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && ((((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-10-17 10:56:24,693 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || (pumpRunning == 0 && 2 == waterLevel)) || !(waterLevel <= 2)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) [2022-10-17 10:56:24,694 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || (((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2022-10-17 10:56:24,694 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && 2 == waterLevel)) || (((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) || !(waterLevel <= 2)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) [2022-10-17 10:56:24,694 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= pumpRunning && 2 == waterLevel)) || !(waterLevel <= 2)) [2022-10-17 10:56:24,731 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/bin/uautomizer-J5u9QxTXDZ/witness.graphml [2022-10-17 10:56:24,731 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-10-17 10:56:24,732 INFO L158 Benchmark]: Toolchain (without parser) took 23068.26ms. Allocated memory was 86.0MB in the beginning and 283.1MB in the end (delta: 197.1MB). Free memory was 59.3MB in the beginning and 128.9MB in the end (delta: -69.6MB). Peak memory consumption was 127.2MB. Max. memory is 16.1GB. [2022-10-17 10:56:24,733 INFO L158 Benchmark]: CDTParser took 0.30ms. Allocated memory is still 86.0MB. Free memory was 56.2MB in the beginning and 56.1MB in the end (delta: 69.9kB). There was no memory consumed. Max. memory is 16.1GB. [2022-10-17 10:56:24,733 INFO L158 Benchmark]: CACSL2BoogieTranslator took 586.69ms. Allocated memory is still 86.0MB. Free memory was 59.1MB in the beginning and 53.0MB in the end (delta: 6.0MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-10-17 10:56:24,734 INFO L158 Benchmark]: Boogie Procedure Inliner took 88.86ms. Allocated memory is still 86.0MB. Free memory was 53.0MB in the beginning and 50.5MB in the end (delta: 2.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-10-17 10:56:24,734 INFO L158 Benchmark]: Boogie Preprocessor took 56.23ms. Allocated memory is still 86.0MB. Free memory was 50.5MB in the beginning and 48.8MB in the end (delta: 1.7MB). There was no memory consumed. Max. memory is 16.1GB. [2022-10-17 10:56:24,735 INFO L158 Benchmark]: RCFGBuilder took 637.03ms. Allocated memory was 86.0MB in the beginning and 134.2MB in the end (delta: 48.2MB). Free memory was 48.8MB in the beginning and 102.7MB in the end (delta: -53.9MB). Peak memory consumption was 17.5MB. Max. memory is 16.1GB. [2022-10-17 10:56:24,735 INFO L158 Benchmark]: TraceAbstraction took 21599.34ms. Allocated memory was 134.2MB in the beginning and 283.1MB in the end (delta: 148.9MB). Free memory was 102.0MB in the beginning and 135.2MB in the end (delta: -33.2MB). Peak memory consumption was 165.6MB. Max. memory is 16.1GB. [2022-10-17 10:56:24,736 INFO L158 Benchmark]: Witness Printer took 91.07ms. Allocated memory is still 283.1MB. Free memory was 135.2MB in the beginning and 128.9MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-10-17 10:56:24,738 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.30ms. Allocated memory is still 86.0MB. Free memory was 56.2MB in the beginning and 56.1MB in the end (delta: 69.9kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 586.69ms. Allocated memory is still 86.0MB. Free memory was 59.1MB in the beginning and 53.0MB in the end (delta: 6.0MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 88.86ms. Allocated memory is still 86.0MB. Free memory was 53.0MB in the beginning and 50.5MB in the end (delta: 2.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 56.23ms. Allocated memory is still 86.0MB. Free memory was 50.5MB in the beginning and 48.8MB in the end (delta: 1.7MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 637.03ms. Allocated memory was 86.0MB in the beginning and 134.2MB in the end (delta: 48.2MB). Free memory was 48.8MB in the beginning and 102.7MB in the end (delta: -53.9MB). Peak memory consumption was 17.5MB. Max. memory is 16.1GB. * TraceAbstraction took 21599.34ms. Allocated memory was 134.2MB in the beginning and 283.1MB in the end (delta: 148.9MB). Free memory was 102.0MB in the beginning and 135.2MB in the end (delta: -33.2MB). Peak memory consumption was 165.6MB. Max. memory is 16.1GB. * Witness Printer took 91.07ms. Allocated memory is still 283.1MB. Free memory was 135.2MB in the beginning and 128.9MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 309]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 90 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 21.5s, OverallIterations: 12, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 5.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 10.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2847 SdHoareTripleChecker+Valid, 2.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2807 mSDsluCounter, 5187 SdHoareTripleChecker+Invalid, 2.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3679 mSDsCounter, 1014 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4120 IncrementalHoareTripleChecker+Invalid, 5134 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1014 mSolverCounterUnsat, 1508 mSDtfsCounter, 4120 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 871 GetRequests, 669 SyntacticMatches, 10 SemanticMatches, 192 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1527 ImplicationChecksByTransitivity, 1.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1002occurred in iteration=11, InterpolantAutomatonStates: 167, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 12 MinimizatonAttempts, 275 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 42 LocationsWithAnnotation, 2247 PreInvPairs, 2664 NumberOfFragments, 3867 HoareAnnotationTreeSize, 2247 FomulaSimplifications, 3597 FormulaSimplificationTreeSizeReduction, 1.1s HoareSimplificationTime, 42 FomulaSimplificationsInter, 46220 FormulaSimplificationTreeSizeReductionInter, 9.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 3.4s InterpolantComputationTime, 1104 NumberOfCodeBlocks, 1104 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 1350 ConstructedInterpolants, 0 QuantifiedInterpolants, 2878 SizeOfPredicates, 6 NumberOfNonLiveVariables, 1131 ConjunctsInSsa, 21 ConjunctsInUnsatCore, 16 InterpolantComputations, 10 PerfectInterpolantSequences, 783/866 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || (pumpRunning == 0 && 2 == waterLevel)) || !(waterLevel <= 2)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 405]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= pumpRunning && 2 == waterLevel)) || !(waterLevel <= 2)) - InvariantResult [Line: 380]: Loop Invariant Derived loop invariant: (((((((((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) || (((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) && ((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || (((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 497]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 204]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 421]: Loop Invariant Derived loop invariant: (((((((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && ((((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 477]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && 2 == waterLevel)) || (((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) || !(waterLevel <= 2)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 214]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: ((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 580]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 305]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 172]: Loop Invariant Derived loop invariant: ((((((((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((((\result <= waterLevel && methaneLevelCritical == \result) && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == 0 && 2 == \result) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(1 == systemActive)) || ((((pumpRunning == 0 && \result < 2) && waterLevel <= 1) && \old(waterLevel) == waterLevel) && !(2 <= tmp))) || ((((1 <= pumpRunning && 2 == \result) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result < 2) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(2 <= tmp))) || !(1 <= \old(pumpRunning))) || ((((((((((\result <= waterLevel && methaneLevelCritical == \result) && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || ((((((((\result <= waterLevel && methaneLevelCritical == \result) && pumpRunning == 0) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && ((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || ((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result < 2) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(2 <= tmp))) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 154]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 267]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: (((((((((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((((\result <= waterLevel && methaneLevelCritical == \result) && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || (((((\result <= waterLevel && methaneLevelCritical == \result) && pumpRunning == 0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS))) && ((((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((methaneLevelCritical == \result && pumpRunning == 0) && \result < 2) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((((((((\result <= waterLevel && methaneLevelCritical == \result) && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result < 2) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(methaneLevelCritical == 0)) || ((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && \result < 2) && waterLevel <= 1) && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || (((1 <= pumpRunning && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 259]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 506]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 413]: Loop Invariant Derived loop invariant: ((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || (((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 573]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 587]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 281]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 507]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0) || (((1 <= pumpRunning && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) && 1 <= switchedOnBeforeTS)) || (((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) RESULT: Ultimate proved your program to be correct! [2022-10-17 10:56:24,809 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b89586f9-1a28-4f4f-848e-a4d754d27c5e/bin/uautomizer-J5u9QxTXDZ/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE