./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 73b8e020dd9d30fdd676c81009d4f1b850aa716d63ef29ce3d475a261546f853 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-02 21:01:57,140 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-02 21:01:57,143 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-02 21:01:57,208 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-02 21:01:57,209 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-02 21:01:57,214 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-02 21:01:57,217 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-02 21:01:57,220 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-02 21:01:57,223 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-02 21:01:57,229 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-02 21:01:57,230 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-02 21:01:57,233 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-02 21:01:57,233 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-02 21:01:57,236 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-02 21:01:57,238 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-02 21:01:57,241 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-02 21:01:57,243 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-02 21:01:57,244 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-02 21:01:57,246 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-02 21:01:57,254 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-02 21:01:57,256 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-02 21:01:57,257 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-02 21:01:57,261 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-02 21:01:57,262 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-02 21:01:57,268 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-02 21:01:57,268 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-02 21:01:57,269 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-02 21:01:57,270 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-02 21:01:57,271 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-02 21:01:57,272 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-02 21:01:57,273 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-02 21:01:57,274 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-02 21:01:57,277 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-02 21:01:57,279 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-02 21:01:57,280 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-02 21:01:57,281 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-02 21:01:57,282 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-02 21:01:57,282 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-02 21:01:57,282 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-02 21:01:57,283 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-02 21:01:57,284 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-02 21:01:57,285 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-02 21:01:57,324 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-02 21:01:57,324 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-02 21:01:57,325 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-02 21:01:57,325 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-02 21:01:57,326 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-02 21:01:57,327 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-02 21:01:57,328 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-02 21:01:57,328 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-02 21:01:57,328 INFO L138 SettingsManager]: * Use SBE=true [2022-11-02 21:01:57,328 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-02 21:01:57,330 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-02 21:01:57,330 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-02 21:01:57,330 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-02 21:01:57,330 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-02 21:01:57,331 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-02 21:01:57,331 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-02 21:01:57,331 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-02 21:01:57,331 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-02 21:01:57,331 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-02 21:01:57,332 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-02 21:01:57,332 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-02 21:01:57,332 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-02 21:01:57,332 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-02 21:01:57,333 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-02 21:01:57,333 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-02 21:01:57,333 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-02 21:01:57,335 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-02 21:01:57,335 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-02 21:01:57,335 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-02 21:01:57,336 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-02 21:01:57,336 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-02 21:01:57,336 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-02 21:01:57,344 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-02 21:01:57,344 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 73b8e020dd9d30fdd676c81009d4f1b850aa716d63ef29ce3d475a261546f853 [2022-11-02 21:01:57,659 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-02 21:01:57,682 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-02 21:01:57,686 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-02 21:01:57,687 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-02 21:01:57,688 INFO L275 PluginConnector]: CDTParser initialized [2022-11-02 21:01:57,689 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/../../sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c [2022-11-02 21:01:57,771 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/data/6bdfac2c5/f6a2f922e08c47aa8590d118f6a65cb4/FLAGceb46af51 [2022-11-02 21:01:58,374 INFO L306 CDTParser]: Found 1 translation units. [2022-11-02 21:01:58,374 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c [2022-11-02 21:01:58,399 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/data/6bdfac2c5/f6a2f922e08c47aa8590d118f6a65cb4/FLAGceb46af51 [2022-11-02 21:01:58,624 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/data/6bdfac2c5/f6a2f922e08c47aa8590d118f6a65cb4 [2022-11-02 21:01:58,628 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-02 21:01:58,631 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-02 21:01:58,634 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-02 21:01:58,634 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-02 21:01:58,639 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-02 21:01:58,640 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 09:01:58" (1/1) ... [2022-11-02 21:01:58,642 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@49dd8371 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:01:58, skipping insertion in model container [2022-11-02 21:01:58,643 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 09:01:58" (1/1) ... [2022-11-02 21:01:58,651 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-02 21:01:58,715 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-02 21:01:59,076 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c[15211,15224] [2022-11-02 21:01:59,097 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-02 21:01:59,117 INFO L203 MainTranslator]: Completed pre-run [2022-11-02 21:01:59,226 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c[15211,15224] [2022-11-02 21:01:59,243 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-02 21:01:59,272 INFO L208 MainTranslator]: Completed translation [2022-11-02 21:01:59,272 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:01:59 WrapperNode [2022-11-02 21:01:59,272 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-02 21:01:59,274 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-02 21:01:59,274 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-02 21:01:59,274 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-02 21:01:59,281 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:01:59" (1/1) ... [2022-11-02 21:01:59,307 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:01:59" (1/1) ... [2022-11-02 21:01:59,350 INFO L138 Inliner]: procedures = 57, calls = 159, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 267 [2022-11-02 21:01:59,351 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-02 21:01:59,352 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-02 21:01:59,352 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-02 21:01:59,353 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-02 21:01:59,361 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:01:59" (1/1) ... [2022-11-02 21:01:59,362 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:01:59" (1/1) ... [2022-11-02 21:01:59,378 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:01:59" (1/1) ... [2022-11-02 21:01:59,379 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:01:59" (1/1) ... [2022-11-02 21:01:59,384 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:01:59" (1/1) ... [2022-11-02 21:01:59,388 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:01:59" (1/1) ... [2022-11-02 21:01:59,390 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:01:59" (1/1) ... [2022-11-02 21:01:59,391 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:01:59" (1/1) ... [2022-11-02 21:01:59,394 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-02 21:01:59,395 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-02 21:01:59,395 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-02 21:01:59,395 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-02 21:01:59,407 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:01:59" (1/1) ... [2022-11-02 21:01:59,413 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-02 21:01:59,425 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 21:01:59,444 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-02 21:01:59,456 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-02 21:01:59,487 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-02 21:01:59,488 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-02 21:01:59,488 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-02 21:01:59,488 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-02 21:01:59,488 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-02 21:01:59,488 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-02 21:01:59,489 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-02 21:01:59,489 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-02 21:01:59,489 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-02 21:01:59,489 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-11-02 21:01:59,489 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-11-02 21:01:59,490 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-11-02 21:01:59,490 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-11-02 21:01:59,490 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-11-02 21:01:59,490 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-11-02 21:01:59,490 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-02 21:01:59,490 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-02 21:01:59,491 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-02 21:01:59,491 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-02 21:01:59,491 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-02 21:01:59,571 INFO L235 CfgBuilder]: Building ICFG [2022-11-02 21:01:59,572 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-02 21:02:00,075 INFO L276 CfgBuilder]: Performing block encoding [2022-11-02 21:02:00,085 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-02 21:02:00,092 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-02 21:02:00,095 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 09:02:00 BoogieIcfgContainer [2022-11-02 21:02:00,096 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-02 21:02:00,130 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-02 21:02:00,131 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-02 21:02:00,135 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-02 21:02:00,135 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.11 09:01:58" (1/3) ... [2022-11-02 21:02:00,136 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1f6bdb64 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.11 09:02:00, skipping insertion in model container [2022-11-02 21:02:00,136 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 09:01:59" (2/3) ... [2022-11-02 21:02:00,137 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1f6bdb64 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.11 09:02:00, skipping insertion in model container [2022-11-02 21:02:00,137 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 09:02:00" (3/3) ... [2022-11-02 21:02:00,139 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product46.cil.c [2022-11-02 21:02:00,161 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-02 21:02:00,161 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-02 21:02:00,256 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-02 21:02:00,276 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@12350c77, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-02 21:02:00,276 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-02 21:02:00,286 INFO L276 IsEmpty]: Start isEmpty. Operand has 99 states, 75 states have (on average 1.36) internal successors, (102), 83 states have internal predecessors, (102), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2022-11-02 21:02:00,300 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-02 21:02:00,300 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:02:00,301 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:02:00,302 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:02:00,308 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:02:00,309 INFO L85 PathProgramCache]: Analyzing trace with hash -1607314381, now seen corresponding path program 1 times [2022-11-02 21:02:00,320 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:02:00,321 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [534036806] [2022-11-02 21:02:00,321 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:02:00,322 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:02:00,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:00,569 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-02 21:02:00,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:00,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-02 21:02:00,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:00,596 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 21:02:00,597 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:02:00,597 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [534036806] [2022-11-02 21:02:00,598 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [534036806] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:02:00,609 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:02:00,609 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-02 21:02:00,611 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2057816945] [2022-11-02 21:02:00,612 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:02:00,617 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-02 21:02:00,617 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:02:00,656 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-02 21:02:00,658 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-02 21:02:00,662 INFO L87 Difference]: Start difference. First operand has 99 states, 75 states have (on average 1.36) internal successors, (102), 83 states have internal predecessors, (102), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-02 21:02:00,747 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:02:00,747 INFO L93 Difference]: Finished difference Result 189 states and 254 transitions. [2022-11-02 21:02:00,749 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-02 21:02:00,751 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-11-02 21:02:00,752 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:02:00,766 INFO L225 Difference]: With dead ends: 189 [2022-11-02 21:02:00,766 INFO L226 Difference]: Without dead ends: 90 [2022-11-02 21:02:00,773 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-02 21:02:00,778 INFO L413 NwaCegarLoop]: 124 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 124 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-02 21:02:00,779 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 124 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-02 21:02:00,802 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90 states. [2022-11-02 21:02:00,849 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90 to 90. [2022-11-02 21:02:00,851 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 68 states have (on average 1.2941176470588236) internal successors, (88), 75 states have internal predecessors, (88), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-02 21:02:00,862 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 115 transitions. [2022-11-02 21:02:00,865 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 115 transitions. Word has length 32 [2022-11-02 21:02:00,866 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:02:00,868 INFO L495 AbstractCegarLoop]: Abstraction has 90 states and 115 transitions. [2022-11-02 21:02:00,869 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-02 21:02:00,870 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 115 transitions. [2022-11-02 21:02:00,877 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-02 21:02:00,877 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:02:00,877 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:02:00,878 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-02 21:02:00,879 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:02:00,881 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:02:00,881 INFO L85 PathProgramCache]: Analyzing trace with hash -824221923, now seen corresponding path program 1 times [2022-11-02 21:02:00,881 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:02:00,882 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2071172933] [2022-11-02 21:02:00,882 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:02:00,882 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:02:00,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:01,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 21:02:01,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:01,034 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-02 21:02:01,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:01,038 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 21:02:01,038 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:02:01,038 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2071172933] [2022-11-02 21:02:01,039 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2071172933] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:02:01,039 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:02:01,039 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-02 21:02:01,039 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2132497717] [2022-11-02 21:02:01,040 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:02:01,041 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-02 21:02:01,042 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:02:01,042 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-02 21:02:01,042 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 21:02:01,043 INFO L87 Difference]: Start difference. First operand 90 states and 115 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-02 21:02:01,094 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:02:01,097 INFO L93 Difference]: Finished difference Result 144 states and 184 transitions. [2022-11-02 21:02:01,098 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-02 21:02:01,099 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2022-11-02 21:02:01,100 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:02:01,102 INFO L225 Difference]: With dead ends: 144 [2022-11-02 21:02:01,103 INFO L226 Difference]: Without dead ends: 81 [2022-11-02 21:02:01,107 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 21:02:01,109 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 13 mSDsluCounter, 85 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 187 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-02 21:02:01,131 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 187 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-02 21:02:01,133 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2022-11-02 21:02:01,141 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 81. [2022-11-02 21:02:01,152 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 69 states have internal predecessors, (81), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-02 21:02:01,153 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 103 transitions. [2022-11-02 21:02:01,154 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 103 transitions. Word has length 33 [2022-11-02 21:02:01,154 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:02:01,154 INFO L495 AbstractCegarLoop]: Abstraction has 81 states and 103 transitions. [2022-11-02 21:02:01,155 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-02 21:02:01,155 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 103 transitions. [2022-11-02 21:02:01,156 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-02 21:02:01,156 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:02:01,157 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:02:01,157 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-02 21:02:01,157 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:02:01,158 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:02:01,158 INFO L85 PathProgramCache]: Analyzing trace with hash 534456794, now seen corresponding path program 1 times [2022-11-02 21:02:01,158 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:02:01,159 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1974440987] [2022-11-02 21:02:01,159 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:02:01,159 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:02:01,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:01,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-02 21:02:01,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:01,363 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-11-02 21:02:01,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:01,371 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 21:02:01,372 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:02:01,372 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1974440987] [2022-11-02 21:02:01,372 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1974440987] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:02:01,375 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:02:01,375 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-02 21:02:01,376 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [585561789] [2022-11-02 21:02:01,376 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:02:01,376 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-02 21:02:01,377 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:02:01,377 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-02 21:02:01,377 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-02 21:02:01,378 INFO L87 Difference]: Start difference. First operand 81 states and 103 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-02 21:02:01,486 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:02:01,489 INFO L93 Difference]: Finished difference Result 154 states and 199 transitions. [2022-11-02 21:02:01,490 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-02 21:02:01,490 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2022-11-02 21:02:01,491 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:02:01,494 INFO L225 Difference]: With dead ends: 154 [2022-11-02 21:02:01,495 INFO L226 Difference]: Without dead ends: 81 [2022-11-02 21:02:01,496 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-02 21:02:01,500 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 126 mSDsluCounter, 158 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 126 SdHoareTripleChecker+Valid, 254 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-02 21:02:01,502 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [126 Valid, 254 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-02 21:02:01,504 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2022-11-02 21:02:01,513 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 81. [2022-11-02 21:02:01,517 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 62 states have (on average 1.2903225806451613) internal successors, (80), 69 states have internal predecessors, (80), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-02 21:02:01,520 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 102 transitions. [2022-11-02 21:02:01,520 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 102 transitions. Word has length 38 [2022-11-02 21:02:01,522 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:02:01,522 INFO L495 AbstractCegarLoop]: Abstraction has 81 states and 102 transitions. [2022-11-02 21:02:01,522 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-02 21:02:01,522 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 102 transitions. [2022-11-02 21:02:01,529 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-11-02 21:02:01,529 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:02:01,530 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:02:01,531 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-02 21:02:01,531 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:02:01,532 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:02:01,532 INFO L85 PathProgramCache]: Analyzing trace with hash -216434858, now seen corresponding path program 1 times [2022-11-02 21:02:01,532 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:02:01,532 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [508736534] [2022-11-02 21:02:01,532 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:02:01,533 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:02:01,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:01,734 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-02 21:02:01,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:01,744 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-02 21:02:01,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:01,775 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 21:02:01,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:01,779 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-11-02 21:02:01,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:01,782 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 21:02:01,786 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:02:01,786 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [508736534] [2022-11-02 21:02:01,786 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [508736534] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:02:01,787 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:02:01,787 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-02 21:02:01,787 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [521052106] [2022-11-02 21:02:01,787 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:02:01,789 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-02 21:02:01,789 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:02:01,790 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-02 21:02:01,790 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-02 21:02:01,791 INFO L87 Difference]: Start difference. First operand 81 states and 102 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-02 21:02:02,079 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:02:02,080 INFO L93 Difference]: Finished difference Result 238 states and 300 transitions. [2022-11-02 21:02:02,080 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-02 21:02:02,081 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 48 [2022-11-02 21:02:02,081 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:02:02,082 INFO L225 Difference]: With dead ends: 238 [2022-11-02 21:02:02,082 INFO L226 Difference]: Without dead ends: 165 [2022-11-02 21:02:02,084 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-11-02 21:02:02,096 INFO L413 NwaCegarLoop]: 132 mSDtfsCounter, 187 mSDsluCounter, 175 mSDsCounter, 0 mSdLazyCounter, 104 mSolverCounterSat, 54 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 190 SdHoareTripleChecker+Valid, 307 SdHoareTripleChecker+Invalid, 158 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 54 IncrementalHoareTripleChecker+Valid, 104 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-02 21:02:02,096 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [190 Valid, 307 Invalid, 158 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [54 Valid, 104 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-02 21:02:02,097 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 165 states. [2022-11-02 21:02:02,132 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 165 to 159. [2022-11-02 21:02:02,133 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 159 states, 122 states have (on average 1.2540983606557377) internal successors, (153), 130 states have internal predecessors, (153), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-11-02 21:02:02,137 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 159 states to 159 states and 194 transitions. [2022-11-02 21:02:02,138 INFO L78 Accepts]: Start accepts. Automaton has 159 states and 194 transitions. Word has length 48 [2022-11-02 21:02:02,138 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:02:02,138 INFO L495 AbstractCegarLoop]: Abstraction has 159 states and 194 transitions. [2022-11-02 21:02:02,139 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-02 21:02:02,139 INFO L276 IsEmpty]: Start isEmpty. Operand 159 states and 194 transitions. [2022-11-02 21:02:02,141 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-11-02 21:02:02,141 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:02:02,142 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:02:02,142 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-02 21:02:02,143 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:02:02,144 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:02:02,145 INFO L85 PathProgramCache]: Analyzing trace with hash 1219044606, now seen corresponding path program 1 times [2022-11-02 21:02:02,149 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:02:02,149 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1104425172] [2022-11-02 21:02:02,149 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:02:02,149 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:02:02,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:02,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-02 21:02:02,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:02,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-02 21:02:02,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:02,375 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:02:02,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:02,387 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-11-02 21:02:02,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:02,426 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-02 21:02:02,426 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:02:02,427 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1104425172] [2022-11-02 21:02:02,427 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1104425172] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:02:02,427 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:02:02,427 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-02 21:02:02,431 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1248027938] [2022-11-02 21:02:02,431 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:02:02,432 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-02 21:02:02,432 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:02:02,433 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-02 21:02:02,433 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-02 21:02:02,433 INFO L87 Difference]: Start difference. First operand 159 states and 194 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-11-02 21:02:02,808 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:02:02,809 INFO L93 Difference]: Finished difference Result 322 states and 394 transitions. [2022-11-02 21:02:02,809 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-02 21:02:02,810 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) Word has length 54 [2022-11-02 21:02:02,812 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:02:02,820 INFO L225 Difference]: With dead ends: 322 [2022-11-02 21:02:02,820 INFO L226 Difference]: Without dead ends: 171 [2022-11-02 21:02:02,822 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-11-02 21:02:02,828 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 120 mSDsluCounter, 348 mSDsCounter, 0 mSdLazyCounter, 210 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 127 SdHoareTripleChecker+Valid, 450 SdHoareTripleChecker+Invalid, 245 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 210 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-02 21:02:02,829 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [127 Valid, 450 Invalid, 245 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 210 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-02 21:02:02,830 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 171 states. [2022-11-02 21:02:02,856 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 171 to 157. [2022-11-02 21:02:02,857 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 120 states have (on average 1.225) internal successors, (147), 128 states have internal predecessors, (147), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-11-02 21:02:02,858 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 188 transitions. [2022-11-02 21:02:02,859 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 188 transitions. Word has length 54 [2022-11-02 21:02:02,859 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:02:02,859 INFO L495 AbstractCegarLoop]: Abstraction has 157 states and 188 transitions. [2022-11-02 21:02:02,860 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-11-02 21:02:02,860 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 188 transitions. [2022-11-02 21:02:02,861 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-02 21:02:02,861 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:02:02,862 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:02:02,862 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-02 21:02:02,862 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:02:02,863 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:02:02,863 INFO L85 PathProgramCache]: Analyzing trace with hash 175038302, now seen corresponding path program 1 times [2022-11-02 21:02:02,863 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:02:02,863 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2055237150] [2022-11-02 21:02:02,864 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:02:02,864 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:02:02,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:03,032 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-02 21:02:03,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:03,038 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-02 21:02:03,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:03,090 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:02:03,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:03,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-11-02 21:02:03,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:03,099 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 21:02:03,099 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:02:03,099 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2055237150] [2022-11-02 21:02:03,099 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2055237150] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:02:03,100 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:02:03,100 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-02 21:02:03,100 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1178314607] [2022-11-02 21:02:03,100 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:02:03,102 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-02 21:02:03,102 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:02:03,103 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-02 21:02:03,103 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-02 21:02:03,103 INFO L87 Difference]: Start difference. First operand 157 states and 188 transitions. Second operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-02 21:02:03,312 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:02:03,312 INFO L93 Difference]: Finished difference Result 316 states and 385 transitions. [2022-11-02 21:02:03,313 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-02 21:02:03,313 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 60 [2022-11-02 21:02:03,314 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:02:03,315 INFO L225 Difference]: With dead ends: 316 [2022-11-02 21:02:03,315 INFO L226 Difference]: Without dead ends: 167 [2022-11-02 21:02:03,316 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-02 21:02:03,316 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 69 mSDsluCounter, 268 mSDsCounter, 0 mSdLazyCounter, 121 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 359 SdHoareTripleChecker+Invalid, 144 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 121 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-02 21:02:03,317 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [74 Valid, 359 Invalid, 144 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-02 21:02:03,317 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167 states. [2022-11-02 21:02:03,332 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167 to 160. [2022-11-02 21:02:03,333 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 160 states, 123 states have (on average 1.2195121951219512) internal successors, (150), 131 states have internal predecessors, (150), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-11-02 21:02:03,334 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 160 states to 160 states and 191 transitions. [2022-11-02 21:02:03,334 INFO L78 Accepts]: Start accepts. Automaton has 160 states and 191 transitions. Word has length 60 [2022-11-02 21:02:03,334 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:02:03,335 INFO L495 AbstractCegarLoop]: Abstraction has 160 states and 191 transitions. [2022-11-02 21:02:03,335 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-02 21:02:03,335 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 191 transitions. [2022-11-02 21:02:03,336 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-02 21:02:03,336 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:02:03,336 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:02:03,336 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-02 21:02:03,336 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:02:03,337 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:02:03,337 INFO L85 PathProgramCache]: Analyzing trace with hash 2098266336, now seen corresponding path program 1 times [2022-11-02 21:02:03,337 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:02:03,337 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [567953384] [2022-11-02 21:02:03,337 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:02:03,338 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:02:03,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:03,474 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-02 21:02:03,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:03,482 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-02 21:02:03,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:03,527 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:02:03,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:03,531 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-11-02 21:02:03,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:03,534 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 21:02:03,534 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:02:03,535 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [567953384] [2022-11-02 21:02:03,535 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [567953384] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:02:03,535 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:02:03,535 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-02 21:02:03,535 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1206161343] [2022-11-02 21:02:03,536 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:02:03,536 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-02 21:02:03,536 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:02:03,537 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-02 21:02:03,537 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-02 21:02:03,537 INFO L87 Difference]: Start difference. First operand 160 states and 191 transitions. Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-02 21:02:03,764 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:02:03,764 INFO L93 Difference]: Finished difference Result 325 states and 395 transitions. [2022-11-02 21:02:03,765 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-02 21:02:03,765 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 60 [2022-11-02 21:02:03,766 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:02:03,767 INFO L225 Difference]: With dead ends: 325 [2022-11-02 21:02:03,767 INFO L226 Difference]: Without dead ends: 173 [2022-11-02 21:02:03,771 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=80, Unknown=0, NotChecked=0, Total=110 [2022-11-02 21:02:03,772 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 112 mSDsluCounter, 304 mSDsCounter, 0 mSdLazyCounter, 166 mSolverCounterSat, 30 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 118 SdHoareTripleChecker+Valid, 395 SdHoareTripleChecker+Invalid, 196 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 166 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-02 21:02:03,773 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [118 Valid, 395 Invalid, 196 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 166 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-02 21:02:03,774 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 173 states. [2022-11-02 21:02:03,805 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 173 to 162. [2022-11-02 21:02:03,806 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 162 states, 125 states have (on average 1.216) internal successors, (152), 133 states have internal predecessors, (152), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-11-02 21:02:03,807 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 162 states to 162 states and 193 transitions. [2022-11-02 21:02:03,808 INFO L78 Accepts]: Start accepts. Automaton has 162 states and 193 transitions. Word has length 60 [2022-11-02 21:02:03,808 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:02:03,808 INFO L495 AbstractCegarLoop]: Abstraction has 162 states and 193 transitions. [2022-11-02 21:02:03,808 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-02 21:02:03,809 INFO L276 IsEmpty]: Start isEmpty. Operand 162 states and 193 transitions. [2022-11-02 21:02:03,810 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-02 21:02:03,810 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:02:03,811 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:02:03,811 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-02 21:02:03,811 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:02:03,812 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:02:03,812 INFO L85 PathProgramCache]: Analyzing trace with hash -810497566, now seen corresponding path program 1 times [2022-11-02 21:02:03,812 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:02:03,812 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1391355574] [2022-11-02 21:02:03,813 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:02:03,813 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:02:03,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:03,916 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-02 21:02:03,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:03,925 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-02 21:02:03,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:03,952 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:02:03,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:03,960 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-11-02 21:02:03,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:03,964 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 21:02:03,965 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:02:03,965 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1391355574] [2022-11-02 21:02:03,965 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1391355574] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:02:03,965 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:02:03,966 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-02 21:02:03,966 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1921806240] [2022-11-02 21:02:03,966 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:02:03,967 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-02 21:02:03,967 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:02:03,967 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-02 21:02:03,967 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-02 21:02:03,968 INFO L87 Difference]: Start difference. First operand 162 states and 193 transitions. Second operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-02 21:02:04,213 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:02:04,213 INFO L93 Difference]: Finished difference Result 448 states and 559 transitions. [2022-11-02 21:02:04,214 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-02 21:02:04,214 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 60 [2022-11-02 21:02:04,214 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:02:04,218 INFO L225 Difference]: With dead ends: 448 [2022-11-02 21:02:04,218 INFO L226 Difference]: Without dead ends: 294 [2022-11-02 21:02:04,219 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-02 21:02:04,220 INFO L413 NwaCegarLoop]: 142 mSDtfsCounter, 216 mSDsluCounter, 165 mSDsCounter, 0 mSdLazyCounter, 153 mSolverCounterSat, 68 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 224 SdHoareTripleChecker+Valid, 307 SdHoareTripleChecker+Invalid, 221 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 68 IncrementalHoareTripleChecker+Valid, 153 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-02 21:02:04,220 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [224 Valid, 307 Invalid, 221 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [68 Valid, 153 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-02 21:02:04,221 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2022-11-02 21:02:04,250 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 292. [2022-11-02 21:02:04,251 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 292 states, 223 states have (on average 1.201793721973094) internal successors, (268), 235 states have internal predecessors, (268), 36 states have call successors, (36), 31 states have call predecessors, (36), 32 states have return successors, (51), 36 states have call predecessors, (51), 36 states have call successors, (51) [2022-11-02 21:02:04,253 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 292 states to 292 states and 355 transitions. [2022-11-02 21:02:04,254 INFO L78 Accepts]: Start accepts. Automaton has 292 states and 355 transitions. Word has length 60 [2022-11-02 21:02:04,254 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:02:04,254 INFO L495 AbstractCegarLoop]: Abstraction has 292 states and 355 transitions. [2022-11-02 21:02:04,255 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-02 21:02:04,255 INFO L276 IsEmpty]: Start isEmpty. Operand 292 states and 355 transitions. [2022-11-02 21:02:04,255 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2022-11-02 21:02:04,256 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:02:04,256 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:02:04,256 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-02 21:02:04,256 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:02:04,256 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:02:04,257 INFO L85 PathProgramCache]: Analyzing trace with hash -1779897540, now seen corresponding path program 1 times [2022-11-02 21:02:04,257 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:02:04,257 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1061389587] [2022-11-02 21:02:04,257 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:02:04,257 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:02:04,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:04,542 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 21:02:04,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:04,597 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-02 21:02:04,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:04,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-11-02 21:02:04,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:04,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:02:04,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:04,647 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-11-02 21:02:04,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:04,652 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 21:02:04,652 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:02:04,652 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1061389587] [2022-11-02 21:02:04,653 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1061389587] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 21:02:04,653 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 21:02:04,653 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-02 21:02:04,653 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [423466685] [2022-11-02 21:02:04,653 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 21:02:04,655 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-02 21:02:04,655 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:02:04,655 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-02 21:02:04,656 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-11-02 21:02:04,657 INFO L87 Difference]: Start difference. First operand 292 states and 355 transitions. Second operand has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-02 21:02:05,617 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:02:05,618 INFO L93 Difference]: Finished difference Result 864 states and 1087 transitions. [2022-11-02 21:02:05,618 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-11-02 21:02:05,618 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 64 [2022-11-02 21:02:05,621 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:02:05,626 INFO L225 Difference]: With dead ends: 864 [2022-11-02 21:02:05,626 INFO L226 Difference]: Without dead ends: 631 [2022-11-02 21:02:05,628 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 206 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=187, Invalid=743, Unknown=0, NotChecked=0, Total=930 [2022-11-02 21:02:05,631 INFO L413 NwaCegarLoop]: 151 mSDtfsCounter, 605 mSDsluCounter, 555 mSDsCounter, 0 mSdLazyCounter, 694 mSolverCounterSat, 194 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 612 SdHoareTripleChecker+Valid, 706 SdHoareTripleChecker+Invalid, 888 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 194 IncrementalHoareTripleChecker+Valid, 694 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-02 21:02:05,631 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [612 Valid, 706 Invalid, 888 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [194 Valid, 694 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-02 21:02:05,633 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 631 states. [2022-11-02 21:02:05,710 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 631 to 542. [2022-11-02 21:02:05,712 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 542 states, 414 states have (on average 1.1956521739130435) internal successors, (495), 438 states have internal predecessors, (495), 66 states have call successors, (66), 55 states have call predecessors, (66), 61 states have return successors, (90), 66 states have call predecessors, (90), 66 states have call successors, (90) [2022-11-02 21:02:05,717 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 542 states to 542 states and 651 transitions. [2022-11-02 21:02:05,717 INFO L78 Accepts]: Start accepts. Automaton has 542 states and 651 transitions. Word has length 64 [2022-11-02 21:02:05,717 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:02:05,718 INFO L495 AbstractCegarLoop]: Abstraction has 542 states and 651 transitions. [2022-11-02 21:02:05,718 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-02 21:02:05,718 INFO L276 IsEmpty]: Start isEmpty. Operand 542 states and 651 transitions. [2022-11-02 21:02:05,723 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2022-11-02 21:02:05,724 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:02:05,724 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:02:05,724 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-02 21:02:05,725 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:02:05,725 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:02:05,725 INFO L85 PathProgramCache]: Analyzing trace with hash 2079059227, now seen corresponding path program 1 times [2022-11-02 21:02:05,726 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:02:05,726 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1880432851] [2022-11-02 21:02:05,727 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:02:05,727 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:02:05,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:05,929 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 21:02:05,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:05,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-02 21:02:05,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:05,973 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:02:05,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:05,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-02 21:02:05,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:06,008 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:02:06,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:06,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-11-02 21:02:06,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:06,031 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2022-11-02 21:02:06,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:06,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-11-02 21:02:06,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:06,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 21:02:06,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:06,044 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2022-11-02 21:02:06,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:06,047 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 18 proven. 9 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-02 21:02:06,048 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:02:06,048 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1880432851] [2022-11-02 21:02:06,048 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1880432851] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-02 21:02:06,048 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1488275218] [2022-11-02 21:02:06,049 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:02:06,049 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 21:02:06,049 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 21:02:06,054 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-02 21:02:06,064 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-02 21:02:06,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:06,236 INFO L263 TraceCheckSpWp]: Trace formula consists of 501 conjuncts, 8 conjunts are in the unsatisfiable core [2022-11-02 21:02:06,245 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 21:02:06,544 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 29 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 21:02:06,544 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-02 21:02:06,867 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 19 proven. 8 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-02 21:02:06,868 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1488275218] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-02 21:02:06,868 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-02 21:02:06,868 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 6, 6] total 16 [2022-11-02 21:02:06,869 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1940733226] [2022-11-02 21:02:06,869 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-02 21:02:06,870 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2022-11-02 21:02:06,870 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:02:06,870 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2022-11-02 21:02:06,870 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2022-11-02 21:02:06,871 INFO L87 Difference]: Start difference. First operand 542 states and 651 transitions. Second operand has 16 states, 16 states have (on average 7.875) internal successors, (126), 11 states have internal predecessors, (126), 5 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 5 states have call successors, (20) [2022-11-02 21:02:08,422 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:02:08,422 INFO L93 Difference]: Finished difference Result 1212 states and 1496 transitions. [2022-11-02 21:02:08,423 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2022-11-02 21:02:08,423 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 7.875) internal successors, (126), 11 states have internal predecessors, (126), 5 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 5 states have call successors, (20) Word has length 108 [2022-11-02 21:02:08,424 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:02:08,427 INFO L225 Difference]: With dead ends: 1212 [2022-11-02 21:02:08,427 INFO L226 Difference]: Without dead ends: 727 [2022-11-02 21:02:08,429 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 291 GetRequests, 243 SyntacticMatches, 4 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 508 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=361, Invalid=1709, Unknown=0, NotChecked=0, Total=2070 [2022-11-02 21:02:08,430 INFO L413 NwaCegarLoop]: 233 mSDtfsCounter, 495 mSDsluCounter, 1311 mSDsCounter, 0 mSdLazyCounter, 1241 mSolverCounterSat, 249 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 496 SdHoareTripleChecker+Valid, 1544 SdHoareTripleChecker+Invalid, 1490 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 249 IncrementalHoareTripleChecker+Valid, 1241 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-02 21:02:08,431 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [496 Valid, 1544 Invalid, 1490 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [249 Valid, 1241 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-11-02 21:02:08,432 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 727 states. [2022-11-02 21:02:08,505 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 727 to 614. [2022-11-02 21:02:08,506 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 614 states, 464 states have (on average 1.1939655172413792) internal successors, (554), 496 states have internal predecessors, (554), 77 states have call successors, (77), 66 states have call predecessors, (77), 72 states have return successors, (101), 74 states have call predecessors, (101), 77 states have call successors, (101) [2022-11-02 21:02:08,509 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 614 states to 614 states and 732 transitions. [2022-11-02 21:02:08,509 INFO L78 Accepts]: Start accepts. Automaton has 614 states and 732 transitions. Word has length 108 [2022-11-02 21:02:08,510 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:02:08,510 INFO L495 AbstractCegarLoop]: Abstraction has 614 states and 732 transitions. [2022-11-02 21:02:08,510 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 7.875) internal successors, (126), 11 states have internal predecessors, (126), 5 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 5 states have call successors, (20) [2022-11-02 21:02:08,511 INFO L276 IsEmpty]: Start isEmpty. Operand 614 states and 732 transitions. [2022-11-02 21:02:08,514 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 193 [2022-11-02 21:02:08,514 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:02:08,514 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:02:08,555 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-02 21:02:08,738 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 21:02:08,739 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:02:08,739 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:02:08,739 INFO L85 PathProgramCache]: Analyzing trace with hash -2082434884, now seen corresponding path program 1 times [2022-11-02 21:02:08,739 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:02:08,739 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1571629843] [2022-11-02 21:02:08,740 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:02:08,740 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:02:08,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:08,982 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 21:02:08,983 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:08,994 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-02 21:02:08,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:09,007 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:02:09,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:09,014 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-02 21:02:09,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:09,020 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:02:09,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:09,022 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-11-02 21:02:09,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:09,032 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:02:09,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:09,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 21:02:09,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:09,037 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-02 21:02:09,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:09,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 21:02:09,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:09,041 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2022-11-02 21:02:09,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:09,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:02:09,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:09,089 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 21:02:09,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:09,114 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 151 [2022-11-02 21:02:09,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:09,116 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 160 [2022-11-02 21:02:09,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:09,123 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:02:09,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:09,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 184 [2022-11-02 21:02:09,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:09,128 INFO L134 CoverageAnalysis]: Checked inductivity of 218 backedges. 86 proven. 3 refuted. 0 times theorem prover too weak. 129 trivial. 0 not checked. [2022-11-02 21:02:09,128 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:02:09,128 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1571629843] [2022-11-02 21:02:09,129 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1571629843] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-02 21:02:09,129 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [304487953] [2022-11-02 21:02:09,129 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:02:09,129 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 21:02:09,129 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 21:02:09,130 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-02 21:02:09,157 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-02 21:02:09,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:09,298 INFO L263 TraceCheckSpWp]: Trace formula consists of 725 conjuncts, 13 conjunts are in the unsatisfiable core [2022-11-02 21:02:09,304 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 21:02:09,626 INFO L134 CoverageAnalysis]: Checked inductivity of 218 backedges. 158 proven. 4 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2022-11-02 21:02:09,626 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-02 21:02:10,260 INFO L134 CoverageAnalysis]: Checked inductivity of 218 backedges. 81 proven. 39 refuted. 0 times theorem prover too weak. 98 trivial. 0 not checked. [2022-11-02 21:02:10,260 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [304487953] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-02 21:02:10,261 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-02 21:02:10,261 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 10, 11] total 26 [2022-11-02 21:02:10,261 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [355203417] [2022-11-02 21:02:10,261 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-02 21:02:10,262 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-11-02 21:02:10,262 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:02:10,263 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-11-02 21:02:10,264 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=116, Invalid=534, Unknown=0, NotChecked=0, Total=650 [2022-11-02 21:02:10,264 INFO L87 Difference]: Start difference. First operand 614 states and 732 transitions. Second operand has 26 states, 26 states have (on average 7.6923076923076925) internal successors, (200), 21 states have internal predecessors, (200), 9 states have call successors, (31), 8 states have call predecessors, (31), 10 states have return successors, (34), 9 states have call predecessors, (34), 9 states have call successors, (34) [2022-11-02 21:02:13,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:02:13,220 INFO L93 Difference]: Finished difference Result 1795 states and 2235 transitions. [2022-11-02 21:02:13,221 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2022-11-02 21:02:13,221 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 7.6923076923076925) internal successors, (200), 21 states have internal predecessors, (200), 9 states have call successors, (31), 8 states have call predecessors, (31), 10 states have return successors, (34), 9 states have call predecessors, (34), 9 states have call successors, (34) Word has length 192 [2022-11-02 21:02:13,221 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:02:13,227 INFO L225 Difference]: With dead ends: 1795 [2022-11-02 21:02:13,227 INFO L226 Difference]: Without dead ends: 1189 [2022-11-02 21:02:13,231 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 486 GetRequests, 410 SyntacticMatches, 4 SemanticMatches, 72 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1328 ImplicationChecksByTransitivity, 1.4s TimeCoverageRelationStatistics Valid=976, Invalid=4426, Unknown=0, NotChecked=0, Total=5402 [2022-11-02 21:02:13,232 INFO L413 NwaCegarLoop]: 179 mSDtfsCounter, 1464 mSDsluCounter, 1251 mSDsCounter, 0 mSdLazyCounter, 2287 mSolverCounterSat, 609 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1464 SdHoareTripleChecker+Valid, 1430 SdHoareTripleChecker+Invalid, 2896 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 609 IncrementalHoareTripleChecker+Valid, 2287 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-11-02 21:02:13,232 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1464 Valid, 1430 Invalid, 2896 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [609 Valid, 2287 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2022-11-02 21:02:13,234 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1189 states. [2022-11-02 21:02:13,375 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1189 to 1089. [2022-11-02 21:02:13,377 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1089 states, 829 states have (on average 1.1399276236429432) internal successors, (945), 874 states have internal predecessors, (945), 138 states have call successors, (138), 121 states have call predecessors, (138), 121 states have return successors, (160), 127 states have call predecessors, (160), 138 states have call successors, (160) [2022-11-02 21:02:13,382 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1089 states to 1089 states and 1243 transitions. [2022-11-02 21:02:13,384 INFO L78 Accepts]: Start accepts. Automaton has 1089 states and 1243 transitions. Word has length 192 [2022-11-02 21:02:13,386 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:02:13,387 INFO L495 AbstractCegarLoop]: Abstraction has 1089 states and 1243 transitions. [2022-11-02 21:02:13,387 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 7.6923076923076925) internal successors, (200), 21 states have internal predecessors, (200), 9 states have call successors, (31), 8 states have call predecessors, (31), 10 states have return successors, (34), 9 states have call predecessors, (34), 9 states have call successors, (34) [2022-11-02 21:02:13,387 INFO L276 IsEmpty]: Start isEmpty. Operand 1089 states and 1243 transitions. [2022-11-02 21:02:13,395 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 213 [2022-11-02 21:02:13,395 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:02:13,396 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:02:13,439 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-02 21:02:13,622 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 21:02:13,623 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:02:13,623 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:02:13,623 INFO L85 PathProgramCache]: Analyzing trace with hash 940649722, now seen corresponding path program 1 times [2022-11-02 21:02:13,623 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:02:13,624 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1986601726] [2022-11-02 21:02:13,624 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:02:13,624 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:02:13,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:13,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 21:02:13,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:13,959 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-02 21:02:13,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:13,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:02:13,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:13,997 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-02 21:02:14,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:14,013 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:02:14,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:14,018 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-11-02 21:02:14,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:14,069 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:02:14,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:14,072 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 21:02:14,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:14,075 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-02 21:02:14,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:14,080 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 21:02:14,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:14,083 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-11-02 21:02:14,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:14,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2022-11-02 21:02:14,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:14,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-11-02 21:02:14,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:14,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:02:14,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:14,123 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 21:02:14,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:14,126 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-02 21:02:14,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:14,128 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 160 [2022-11-02 21:02:14,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:14,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 171 [2022-11-02 21:02:14,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:14,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 180 [2022-11-02 21:02:14,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:14,141 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:02:14,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:14,144 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 204 [2022-11-02 21:02:14,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:14,148 INFO L134 CoverageAnalysis]: Checked inductivity of 264 backedges. 100 proven. 44 refuted. 0 times theorem prover too weak. 120 trivial. 0 not checked. [2022-11-02 21:02:14,148 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:02:14,149 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1986601726] [2022-11-02 21:02:14,149 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1986601726] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-02 21:02:14,149 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1131131823] [2022-11-02 21:02:14,149 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:02:14,150 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 21:02:14,150 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 21:02:14,151 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-02 21:02:14,170 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-02 21:02:14,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:14,337 INFO L263 TraceCheckSpWp]: Trace formula consists of 774 conjuncts, 10 conjunts are in the unsatisfiable core [2022-11-02 21:02:14,347 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 21:02:14,543 INFO L134 CoverageAnalysis]: Checked inductivity of 264 backedges. 200 proven. 9 refuted. 0 times theorem prover too weak. 55 trivial. 0 not checked. [2022-11-02 21:02:14,544 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-02 21:02:15,079 INFO L134 CoverageAnalysis]: Checked inductivity of 264 backedges. 104 proven. 54 refuted. 0 times theorem prover too weak. 106 trivial. 0 not checked. [2022-11-02 21:02:15,079 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1131131823] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-02 21:02:15,079 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-02 21:02:15,080 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 8, 8] total 23 [2022-11-02 21:02:15,080 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [31491937] [2022-11-02 21:02:15,080 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-02 21:02:15,081 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-02 21:02:15,081 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:02:15,081 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-02 21:02:15,082 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=70, Invalid=436, Unknown=0, NotChecked=0, Total=506 [2022-11-02 21:02:15,082 INFO L87 Difference]: Start difference. First operand 1089 states and 1243 transitions. Second operand has 23 states, 23 states have (on average 9.391304347826088) internal successors, (216), 16 states have internal predecessors, (216), 6 states have call successors, (45), 8 states have call predecessors, (45), 11 states have return successors, (39), 9 states have call predecessors, (39), 6 states have call successors, (39) [2022-11-02 21:02:17,270 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:02:17,270 INFO L93 Difference]: Finished difference Result 2130 states and 2461 transitions. [2022-11-02 21:02:17,271 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-11-02 21:02:17,271 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 9.391304347826088) internal successors, (216), 16 states have internal predecessors, (216), 6 states have call successors, (45), 8 states have call predecessors, (45), 11 states have return successors, (39), 9 states have call predecessors, (39), 6 states have call successors, (39) Word has length 212 [2022-11-02 21:02:17,272 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:02:17,278 INFO L225 Difference]: With dead ends: 2130 [2022-11-02 21:02:17,278 INFO L226 Difference]: Without dead ends: 1147 [2022-11-02 21:02:17,284 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 520 GetRequests, 470 SyntacticMatches, 1 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 491 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=426, Invalid=2124, Unknown=0, NotChecked=0, Total=2550 [2022-11-02 21:02:17,285 INFO L413 NwaCegarLoop]: 144 mSDtfsCounter, 538 mSDsluCounter, 422 mSDsCounter, 0 mSdLazyCounter, 1974 mSolverCounterSat, 237 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 538 SdHoareTripleChecker+Valid, 566 SdHoareTripleChecker+Invalid, 2211 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 237 IncrementalHoareTripleChecker+Valid, 1974 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-11-02 21:02:17,285 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [538 Valid, 566 Invalid, 2211 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [237 Valid, 1974 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2022-11-02 21:02:17,287 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1147 states. [2022-11-02 21:02:17,442 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1147 to 1085. [2022-11-02 21:02:17,445 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1085 states, 827 states have (on average 1.1293833131801694) internal successors, (934), 870 states have internal predecessors, (934), 132 states have call successors, (132), 123 states have call predecessors, (132), 125 states have return successors, (154), 125 states have call predecessors, (154), 132 states have call successors, (154) [2022-11-02 21:02:17,449 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1085 states to 1085 states and 1220 transitions. [2022-11-02 21:02:17,450 INFO L78 Accepts]: Start accepts. Automaton has 1085 states and 1220 transitions. Word has length 212 [2022-11-02 21:02:17,450 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:02:17,451 INFO L495 AbstractCegarLoop]: Abstraction has 1085 states and 1220 transitions. [2022-11-02 21:02:17,451 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 9.391304347826088) internal successors, (216), 16 states have internal predecessors, (216), 6 states have call successors, (45), 8 states have call predecessors, (45), 11 states have return successors, (39), 9 states have call predecessors, (39), 6 states have call successors, (39) [2022-11-02 21:02:17,451 INFO L276 IsEmpty]: Start isEmpty. Operand 1085 states and 1220 transitions. [2022-11-02 21:02:17,456 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 214 [2022-11-02 21:02:17,456 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:02:17,457 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:02:17,503 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-02 21:02:17,670 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-02 21:02:17,671 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:02:17,671 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:02:17,671 INFO L85 PathProgramCache]: Analyzing trace with hash 1948196260, now seen corresponding path program 1 times [2022-11-02 21:02:17,672 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:02:17,672 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [132481188] [2022-11-02 21:02:17,672 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:02:17,672 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:02:17,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:17,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 21:02:17,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:17,925 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-02 21:02:17,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:17,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:02:17,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:17,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-02 21:02:17,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:17,947 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:02:17,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:17,950 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-11-02 21:02:17,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:17,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:02:17,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:17,959 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 21:02:17,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:17,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-02 21:02:17,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:17,963 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 21:02:17,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:17,965 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-11-02 21:02:17,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:17,973 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-11-02 21:02:17,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:17,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 123 [2022-11-02 21:02:17,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:17,995 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:02:17,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:17,997 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 21:02:17,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:17,999 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-02 21:02:18,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:18,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2022-11-02 21:02:18,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:18,005 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 172 [2022-11-02 21:02:18,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:18,008 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2022-11-02 21:02:18,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:18,056 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:02:18,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:18,086 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 205 [2022-11-02 21:02:18,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:18,089 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 90 proven. 3 refuted. 0 times theorem prover too weak. 172 trivial. 0 not checked. [2022-11-02 21:02:18,089 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:02:18,089 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [132481188] [2022-11-02 21:02:18,089 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [132481188] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-02 21:02:18,090 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2019425441] [2022-11-02 21:02:18,090 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:02:18,090 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 21:02:18,090 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 21:02:18,091 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-02 21:02:18,119 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-02 21:02:18,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:18,269 INFO L263 TraceCheckSpWp]: Trace formula consists of 774 conjuncts, 18 conjunts are in the unsatisfiable core [2022-11-02 21:02:18,277 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 21:02:18,616 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 142 proven. 26 refuted. 0 times theorem prover too weak. 97 trivial. 0 not checked. [2022-11-02 21:02:18,616 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-02 21:02:19,503 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 103 proven. 45 refuted. 0 times theorem prover too weak. 117 trivial. 0 not checked. [2022-11-02 21:02:19,504 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2019425441] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-02 21:02:19,504 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-02 21:02:19,504 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 8, 13] total 29 [2022-11-02 21:02:19,509 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1948760634] [2022-11-02 21:02:19,509 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-02 21:02:19,514 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-11-02 21:02:19,514 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:02:19,515 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-11-02 21:02:19,516 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=118, Invalid=694, Unknown=0, NotChecked=0, Total=812 [2022-11-02 21:02:19,516 INFO L87 Difference]: Start difference. First operand 1085 states and 1220 transitions. Second operand has 29 states, 29 states have (on average 8.862068965517242) internal successors, (257), 23 states have internal predecessors, (257), 13 states have call successors, (47), 12 states have call predecessors, (47), 15 states have return successors, (48), 14 states have call predecessors, (48), 13 states have call successors, (48) [2022-11-02 21:02:24,610 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:02:24,610 INFO L93 Difference]: Finished difference Result 2414 states and 2767 transitions. [2022-11-02 21:02:24,611 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 65 states. [2022-11-02 21:02:24,611 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 29 states have (on average 8.862068965517242) internal successors, (257), 23 states have internal predecessors, (257), 13 states have call successors, (47), 12 states have call predecessors, (47), 15 states have return successors, (48), 14 states have call predecessors, (48), 13 states have call successors, (48) Word has length 213 [2022-11-02 21:02:24,612 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:02:24,619 INFO L225 Difference]: With dead ends: 2414 [2022-11-02 21:02:24,620 INFO L226 Difference]: Without dead ends: 1441 [2022-11-02 21:02:24,631 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 563 GetRequests, 465 SyntacticMatches, 8 SemanticMatches, 90 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2230 ImplicationChecksByTransitivity, 1.9s TimeCoverageRelationStatistics Valid=1427, Invalid=6945, Unknown=0, NotChecked=0, Total=8372 [2022-11-02 21:02:24,635 INFO L413 NwaCegarLoop]: 358 mSDtfsCounter, 2087 mSDsluCounter, 1013 mSDsCounter, 0 mSdLazyCounter, 4646 mSolverCounterSat, 1047 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2087 SdHoareTripleChecker+Valid, 1371 SdHoareTripleChecker+Invalid, 5693 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1047 IncrementalHoareTripleChecker+Valid, 4646 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.2s IncrementalHoareTripleChecker+Time [2022-11-02 21:02:24,637 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2087 Valid, 1371 Invalid, 5693 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1047 Valid, 4646 Invalid, 0 Unknown, 0 Unchecked, 3.2s Time] [2022-11-02 21:02:24,640 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1441 states. [2022-11-02 21:02:24,824 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1441 to 1289. [2022-11-02 21:02:24,826 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1289 states, 984 states have (on average 1.125) internal successors, (1107), 1020 states have internal predecessors, (1107), 160 states have call successors, (160), 151 states have call predecessors, (160), 144 states have return successors, (176), 144 states have call predecessors, (176), 160 states have call successors, (176) [2022-11-02 21:02:24,833 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1289 states to 1289 states and 1443 transitions. [2022-11-02 21:02:24,834 INFO L78 Accepts]: Start accepts. Automaton has 1289 states and 1443 transitions. Word has length 213 [2022-11-02 21:02:24,835 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:02:24,835 INFO L495 AbstractCegarLoop]: Abstraction has 1289 states and 1443 transitions. [2022-11-02 21:02:24,836 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 29 states have (on average 8.862068965517242) internal successors, (257), 23 states have internal predecessors, (257), 13 states have call successors, (47), 12 states have call predecessors, (47), 15 states have return successors, (48), 14 states have call predecessors, (48), 13 states have call successors, (48) [2022-11-02 21:02:24,836 INFO L276 IsEmpty]: Start isEmpty. Operand 1289 states and 1443 transitions. [2022-11-02 21:02:24,845 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 269 [2022-11-02 21:02:24,845 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 21:02:24,846 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:02:24,881 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-02 21:02:25,061 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-11-02 21:02:25,061 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 21:02:25,062 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 21:02:25,062 INFO L85 PathProgramCache]: Analyzing trace with hash 648735380, now seen corresponding path program 1 times [2022-11-02 21:02:25,062 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 21:02:25,062 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [424433134] [2022-11-02 21:02:25,062 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:02:25,063 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 21:02:25,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:25,842 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 21:02:25,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:25,856 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-02 21:02:25,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:25,896 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:02:25,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:25,907 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-02 21:02:25,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:25,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:02:25,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:25,914 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-11-02 21:02:25,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:26,005 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:02:26,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:26,007 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 21:02:26,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:26,025 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-02 21:02:26,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:26,033 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 21:02:26,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:26,036 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-11-02 21:02:26,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:26,060 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-11-02 21:02:26,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:26,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 123 [2022-11-02 21:02:26,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:26,132 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:02:26,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:26,136 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 21:02:26,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:26,140 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-02 21:02:26,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:26,143 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2022-11-02 21:02:26,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:26,186 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 167 [2022-11-02 21:02:26,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:26,189 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 174 [2022-11-02 21:02:26,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:26,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 21:02:26,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:26,210 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-02 21:02:26,212 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:26,215 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:02:26,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:26,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-02 21:02:26,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:26,221 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 216 [2022-11-02 21:02:26,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:26,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 227 [2022-11-02 21:02:26,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:26,258 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2022-11-02 21:02:26,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:26,265 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 21:02:26,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:26,268 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 260 [2022-11-02 21:02:26,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:26,271 INFO L134 CoverageAnalysis]: Checked inductivity of 452 backedges. 90 proven. 139 refuted. 0 times theorem prover too weak. 223 trivial. 0 not checked. [2022-11-02 21:02:26,271 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 21:02:26,271 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [424433134] [2022-11-02 21:02:26,271 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [424433134] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-02 21:02:26,271 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [765873560] [2022-11-02 21:02:26,272 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 21:02:26,272 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 21:02:26,272 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 21:02:26,273 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-02 21:02:26,290 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-02 21:02:26,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 21:02:26,466 INFO L263 TraceCheckSpWp]: Trace formula consists of 914 conjuncts, 30 conjunts are in the unsatisfiable core [2022-11-02 21:02:26,472 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 21:02:26,889 INFO L134 CoverageAnalysis]: Checked inductivity of 452 backedges. 159 proven. 91 refuted. 0 times theorem prover too weak. 202 trivial. 0 not checked. [2022-11-02 21:02:26,889 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-02 21:02:28,089 INFO L134 CoverageAnalysis]: Checked inductivity of 452 backedges. 100 proven. 138 refuted. 0 times theorem prover too weak. 214 trivial. 0 not checked. [2022-11-02 21:02:28,089 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [765873560] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-02 21:02:28,089 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-02 21:02:28,090 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 11, 16] total 31 [2022-11-02 21:02:28,090 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [246129758] [2022-11-02 21:02:28,090 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-02 21:02:28,093 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-02 21:02:28,093 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 21:02:28,093 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-02 21:02:28,094 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=165, Invalid=765, Unknown=0, NotChecked=0, Total=930 [2022-11-02 21:02:28,095 INFO L87 Difference]: Start difference. First operand 1289 states and 1443 transitions. Second operand has 31 states, 31 states have (on average 10.161290322580646) internal successors, (315), 27 states have internal predecessors, (315), 18 states have call successors, (58), 13 states have call predecessors, (58), 20 states have return successors, (61), 18 states have call predecessors, (61), 18 states have call successors, (61) [2022-11-02 21:02:30,772 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 21:02:30,772 INFO L93 Difference]: Finished difference Result 2028 states and 2287 transitions. [2022-11-02 21:02:30,773 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 40 states. [2022-11-02 21:02:30,773 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 31 states have (on average 10.161290322580646) internal successors, (315), 27 states have internal predecessors, (315), 18 states have call successors, (58), 13 states have call predecessors, (58), 20 states have return successors, (61), 18 states have call predecessors, (61), 18 states have call successors, (61) Word has length 268 [2022-11-02 21:02:30,774 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 21:02:30,775 INFO L225 Difference]: With dead ends: 2028 [2022-11-02 21:02:30,775 INFO L226 Difference]: Without dead ends: 0 [2022-11-02 21:02:30,781 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 652 GetRequests, 573 SyntacticMatches, 15 SemanticMatches, 64 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 897 ImplicationChecksByTransitivity, 1.6s TimeCoverageRelationStatistics Valid=908, Invalid=3382, Unknown=0, NotChecked=0, Total=4290 [2022-11-02 21:02:30,782 INFO L413 NwaCegarLoop]: 196 mSDtfsCounter, 1230 mSDsluCounter, 664 mSDsCounter, 0 mSdLazyCounter, 2279 mSolverCounterSat, 454 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1232 SdHoareTripleChecker+Valid, 860 SdHoareTripleChecker+Invalid, 2733 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 454 IncrementalHoareTripleChecker+Valid, 2279 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2022-11-02 21:02:30,782 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1232 Valid, 860 Invalid, 2733 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [454 Valid, 2279 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2022-11-02 21:02:30,783 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-02 21:02:30,783 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-02 21:02:30,783 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 21:02:30,783 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-02 21:02:30,784 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 268 [2022-11-02 21:02:30,784 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 21:02:30,784 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-02 21:02:30,785 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 31 states have (on average 10.161290322580646) internal successors, (315), 27 states have internal predecessors, (315), 18 states have call successors, (58), 13 states have call predecessors, (58), 20 states have return successors, (61), 18 states have call predecessors, (61), 18 states have call successors, (61) [2022-11-02 21:02:30,785 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-02 21:02:30,785 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-02 21:02:30,789 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-02 21:02:30,833 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-02 21:02:31,003 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-11-02 21:02:31,006 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-02 21:02:51,064 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 748 754) no Hoare annotation was computed. [2022-11-02 21:02:51,064 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 748 754) the Hoare annotation is: true [2022-11-02 21:02:51,064 INFO L899 garLoopResultBuilder]: For program point L607-1(lines 603 614) no Hoare annotation was computed. [2022-11-02 21:02:51,065 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 603 614) the Hoare annotation is: (let ((.cse8 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse4 (not (<= ~waterLevel~0 1))) (.cse1 (not (= ~pumpRunning~0 0))) (.cse6 (not (= 2 ~waterLevel~0))) (.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse2 (not (<= 0 ~waterLevel~0))) (.cse3 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse7 (not (<= 1 ~pumpRunning~0))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse6 .cse3 .cse7 .cse5) (or .cse1 .cse6 .cse3 .cse8 .cse5) (or .cse1 .cse2 .cse3 .cse8 .cse4 .cse5) (or .cse0 .cse1 .cse6 .cse3 .cse5) (or .cse0 .cse2 .cse3 .cse7 (not (<= ~waterLevel~0 2)) .cse5 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-02 21:02:51,065 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 603 614) no Hoare annotation was computed. [2022-11-02 21:02:51,065 INFO L899 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2022-11-02 21:02:51,066 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 721 747) no Hoare annotation was computed. [2022-11-02 21:02:51,066 INFO L895 garLoopResultBuilder]: At program point L69(lines 62 71) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse6 .cse12)) (.cse2 (not (<= 0 |old(~waterLevel~0)|))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse10 (not (<= |old(~waterLevel~0)| 2))) (.cse11 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse8 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse12 (<= 1 ~switchedOnBeforeTS~0))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (= |old(~waterLevel~0)| 2))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (<= |old(~waterLevel~0)| 0))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse3 (and .cse6 (= ~waterLevel~0 1)) .cse4) (or .cse0 .cse1 .cse3 .cse7 .cse4) (or .cse8 .cse9 .cse5 .cse4 .cse10 (not (<= 2 |old(~waterLevel~0)|))) (or .cse8 .cse9 .cse2 .cse3 .cse4 .cse10 .cse11) (or .cse0 .cse1 .cse5 .cse7 .cse4) (or .cse8 .cse9 .cse2 .cse5 .cse4 .cse10 .cse11) (or .cse8 .cse9 .cse3 .cse7 .cse4)))) [2022-11-02 21:02:51,067 INFO L895 garLoopResultBuilder]: At program point L837(lines 832 839) the Hoare annotation is: (let ((.cse15 (= ~methaneLevelCritical~0 0))) (let ((.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse8 (not (<= 2 |old(~waterLevel~0)|))) (.cse14 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse15)) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (<= 0 |old(~waterLevel~0)|))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (= ~pumpRunning~0 0)) (.cse11 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse12 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= 0 ~systemActive~0)) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (<= |old(~waterLevel~0)| 0))) (.cse13 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5 .cse3 .cse6) (or .cse0 .cse5 .cse3 .cse7 .cse8) (or .cse9 .cse5 .cse2 .cse3 (and .cse10 .cse11 (= ~waterLevel~0 1) .cse12)) (or .cse9 .cse4 .cse1 .cse3 .cse7 .cse13) (or .cse9 .cse1 .cse3 .cse7 .cse8) (or .cse14 .cse15 .cse9 .cse5 .cse3 .cse7 (and .cse10 .cse11 (<= ~waterLevel~0 0) .cse12 (<= 0 ~waterLevel~0)) .cse13) (or .cse0 .cse14 .cse5 .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse4 .cse1 .cse3) (or .cse15 .cse9 .cse4 .cse5 (and .cse10 .cse11 (= |old(~waterLevel~0)| ~waterLevel~0) .cse12) .cse3 .cse7 .cse6 .cse13)))) [2022-11-02 21:02:51,067 INFO L895 garLoopResultBuilder]: At program point L796(line 796) the Hoare annotation is: (let ((.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (not (<= |old(~waterLevel~0)| 0))) (.cse8 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse11 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse12 (<= 1 ~switchedOnBeforeTS~0)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse13 (not (= |old(~waterLevel~0)| 1))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= 0 |old(~waterLevel~0)|))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse3 .cse7 .cse8) (or .cse0 .cse5 .cse6 .cse3 .cse9) (or .cse4 (and .cse10 .cse11 (= ~waterLevel~0 1) .cse12) .cse1 .cse2 .cse3) (or .cse0 .cse6 .cse3 .cse7 (not (<= 2 |old(~waterLevel~0)|))) (or .cse13 .cse4 .cse1 (and .cse10 .cse11 (<= ~waterLevel~0 0) .cse12 (<= 0 ~waterLevel~0)) .cse3 .cse7 .cse8) (or .cse4 .cse5 .cse1 .cse3 .cse7 .cse9 .cse8 (and .cse10 .cse11 (= |old(~waterLevel~0)| ~waterLevel~0) .cse12)) (or .cse4 .cse6 .cse2 .cse3) (or .cse0 .cse13 .cse6 .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse5 .cse1 .cse3))) [2022-11-02 21:02:51,068 INFO L895 garLoopResultBuilder]: At program point L788(line 788) the Hoare annotation is: (let ((.cse10 (= ~methaneLevelCritical~0 0)) (.cse16 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse17 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse9 (and .cse16 (= |old(~waterLevel~0)| ~waterLevel~0) .cse17)) (.cse6 (not (<= |old(~waterLevel~0)| 0))) (.cse8 (not (<= 2 |old(~waterLevel~0)|))) (.cse15 (and .cse16 (= ~waterLevel~0 1) .cse17)) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse13 (not (= |old(~waterLevel~0)| 1))) (.cse11 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse14 (and .cse16 (<= ~waterLevel~0 0) .cse17 (<= 0 ~waterLevel~0))) (.cse12 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= 0 |old(~waterLevel~0)|))) (.cse1 (not .cse10)) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5 .cse3 .cse6) (or .cse0 .cse5 .cse3 .cse7 .cse8) (or .cse9 .cse10 .cse11 .cse4 .cse5 .cse3 .cse7 .cse6 .cse12) (or .cse13 .cse11 .cse1 .cse3 .cse14 .cse12) (or .cse9 .cse11 .cse4 .cse1 .cse3 .cse6 .cse12) (or .cse11 .cse1 .cse15 .cse3 .cse7 .cse8) (or .cse11 .cse5 .cse15 .cse2 .cse3) (or .cse0 .cse13 .cse5 .cse3) (or .cse13 .cse10 .cse11 .cse5 .cse3 .cse7 .cse14 .cse12) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse4 .cse1 .cse3)))) [2022-11-02 21:02:51,068 INFO L899 garLoopResultBuilder]: For program point L788-1(line 788) no Hoare annotation was computed. [2022-11-02 21:02:51,068 INFO L895 garLoopResultBuilder]: At program point L82(line 82) the Hoare annotation is: (let ((.cse16 (= ~pumpRunning~0 0)) (.cse1 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse2 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse18 (not (<= 2 |old(~waterLevel~0)|))) (.cse14 (not (= |old(~waterLevel~0)| 1))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (= 0 ~systemActive~0)) (.cse11 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse19 (and (or .cse6 .cse9 .cse18 (= |old(~switchedOnBeforeTS~0)| 0)) (or .cse14 .cse6 .cse9 .cse11))) (.cse20 (<= ~waterLevel~0 0)) (.cse21 (<= 0 ~waterLevel~0)) (.cse12 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 0 |old(~waterLevel~0)|))) (.cse22 (and .cse16 .cse1 .cse2 .cse4)) (.cse10 (not (<= |old(~waterLevel~0)| 0))) (.cse15 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse17 (= ~waterLevel~0 1)) (.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse13 (not (= |old(~waterLevel~0)| 2)))) (and (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (or .cse12 .cse8 .cse13 .cse9) (or .cse12 .cse14 .cse15 .cse9 (and .cse16 .cse1 .cse2 .cse17)) (or .cse12 .cse15 .cse9 (not (<= |old(~waterLevel~0)| 2)) .cse18) (or .cse6 .cse8 .cse13 .cse9 (and .cse0 .cse1 .cse2 .cse3 .cse17 .cse5)) (or .cse19 .cse14 .cse8 (and .cse0 .cse1 .cse2 .cse3 .cse20 .cse5 .cse21)) (or (not (<= |old(~waterLevel~0)| 1)) .cse12 .cse7 .cse8 .cse22 .cse9) (or .cse6 .cse7 .cse15 (and .cse16 .cse1 .cse2 .cse3 .cse4 .cse5) .cse9 .cse10 .cse11) (or .cse19 .cse14 (and .cse16 .cse1 .cse2 .cse3 .cse20 .cse5 .cse21) .cse15) (or .cse12 .cse7 .cse15 .cse22 .cse9 .cse10) (or .cse6 .cse15 (and .cse16 .cse1 .cse2 .cse3 .cse17 .cse5) .cse13 .cse9)))) [2022-11-02 21:02:51,069 INFO L899 garLoopResultBuilder]: For program point L82-1(line 82) no Hoare annotation was computed. [2022-11-02 21:02:51,069 INFO L895 garLoopResultBuilder]: At program point L652(lines 647 655) the Hoare annotation is: (let ((.cse12 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse19 (not (= |old(~waterLevel~0)| 1))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= 0 ~systemActive~0)) (.cse24 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse22 (= ~pumpRunning~0 0)) (.cse16 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse17 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (and .cse22 .cse16 .cse17)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse20 (<= ~waterLevel~0 0)) (.cse21 (<= 0 ~waterLevel~0)) (.cse18 (and (or .cse9 .cse3 .cse5 (= |old(~switchedOnBeforeTS~0)| 0)) (or .cse19 .cse9 .cse3 .cse24))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (and .cse22 .cse12 .cse17)) (.cse6 (not (<= 0 |old(~waterLevel~0)|))) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse23 (not (<= |old(~waterLevel~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse13 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse14 (= ~waterLevel~0 1)) (.cse15 (<= 1 ~switchedOnBeforeTS~0)) (.cse10 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or (not (<= |old(~waterLevel~0)| 1)) .cse1 .cse6 .cse7 .cse8 .cse3) (or .cse9 .cse8 .cse10 .cse3 (and .cse11 .cse12 .cse13 .cse14 .cse15)) (or .cse0 .cse1 .cse8 (and (<= 1 ~pumpRunning~0) .cse16 .cse17) .cse3 .cse4 .cse5) (or .cse18 .cse19 .cse8 (and .cse11 .cse12 .cse13 .cse20 .cse15 .cse21)) (or .cse1 (and .cse22 .cse12 .cse14) .cse19 .cse2 .cse3) (or (and .cse22 .cse12 .cse13 .cse20 .cse15 .cse21) .cse18 .cse19 .cse2) (or .cse9 .cse6 .cse2 .cse3 (and .cse22 .cse12 .cse13 .cse17 .cse15) .cse23 .cse24) (or .cse1 .cse6 .cse7 .cse2 .cse3 .cse23) (or .cse9 .cse6 .cse8 .cse3 (and .cse11 .cse12 .cse13 .cse17 .cse15) .cse23 .cse24) (or .cse9 .cse2 (and .cse22 .cse12 .cse13 .cse14 .cse15) .cse10 .cse3)))) [2022-11-02 21:02:51,069 INFO L899 garLoopResultBuilder]: For program point L710(line 710) no Hoare annotation was computed. [2022-11-02 21:02:51,070 INFO L895 garLoopResultBuilder]: At program point L801(line 801) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse6 (not (<= 0 |old(~waterLevel~0)|))) (.cse11 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse10 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (= |old(~waterLevel~0)| 2))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse6 .cse7 .cse3 (not (<= |old(~waterLevel~0)| 0))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse6 .cse2 .cse3) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse7 (and .cse8 (= ~waterLevel~0 1)) .cse3) (or .cse0 .cse1 .cse7 .cse9 .cse3) (or .cse10 .cse6 .cse7 .cse3 .cse4 .cse11) (or .cse10 .cse6 .cse2 .cse3 .cse4 .cse11) (or .cse10 .cse2 .cse3 .cse4 .cse5) (or .cse10 .cse7 .cse9 .cse3)))) [2022-11-02 21:02:51,071 INFO L895 garLoopResultBuilder]: At program point L801-1(lines 782 806) the Hoare annotation is: (let ((.cse20 (= ~methaneLevelCritical~0 0)) (.cse8 (= ~pumpRunning~0 0)) (.cse19 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse10 (not (= |old(~waterLevel~0)| 2))) (.cse9 (= ~waterLevel~0 1)) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse15 (<= ~waterLevel~0 0)) (.cse16 (<= 0 ~waterLevel~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse8 .cse19)) (.cse6 (not .cse20)) (.cse11 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= 0 |old(~waterLevel~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse13 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse14 (<= 1 ~switchedOnBeforeTS~0)) (.cse4 (= 0 ~systemActive~0)) (.cse17 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= |old(~waterLevel~0)| 0))) (.cse18 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse6 .cse4) (or .cse0 .cse7 .cse3 (and .cse8 .cse9) .cse4) (or .cse0 .cse1 .cse3 .cse10 .cse4) (or .cse11 (and .cse12 .cse13 .cse9 .cse14) .cse6 .cse10 .cse4) (or .cse11 .cse3 .cse10 .cse4 (and .cse8 .cse13 .cse9 .cse14)) (or .cse7 .cse11 .cse6 (and .cse12 .cse13 .cse15 .cse14 .cse16) .cse4 .cse17 .cse18) (or .cse11 .cse2 .cse6 .cse4 .cse17 .cse5 .cse18 (and .cse12 .cse13 .cse19 .cse14)) (or .cse7 .cse20 .cse11 .cse3 .cse4 .cse17 (and .cse8 .cse13 .cse15 .cse14 .cse16) .cse18) (or .cse0 .cse1 .cse6 (and (<= 1 ~pumpRunning~0) .cse19) .cse4 .cse17 (not (<= 2 |old(~waterLevel~0)|))) (or .cse20 .cse11 .cse2 .cse3 (and .cse8 .cse13 .cse19 .cse14) .cse4 .cse17 .cse5 .cse18)))) [2022-11-02 21:02:51,071 INFO L899 garLoopResultBuilder]: For program point L735-1(lines 735 741) no Hoare annotation was computed. [2022-11-02 21:02:51,071 INFO L899 garLoopResultBuilder]: For program point L583(lines 583 587) no Hoare annotation was computed. [2022-11-02 21:02:51,071 INFO L895 garLoopResultBuilder]: At program point L711(lines 706 713) the Hoare annotation is: (let ((.cse8 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= 0 |old(~waterLevel~0)|))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse3 .cse7 .cse8) (or .cse0 .cse5 .cse6 .cse3 (not (<= |old(~waterLevel~0)| 0))) (or .cse0 .cse6 .cse3 .cse7 .cse9) (or .cse4 .cse5 .cse1 .cse3 .cse7 .cse8) (or .cse4 .cse1 .cse3 .cse7 .cse9) (or .cse4 .cse6 .cse2 .cse3) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse6 .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse5 .cse1 .cse3))) [2022-11-02 21:02:51,072 INFO L895 garLoopResultBuilder]: At program point L583-2(lines 579 590) the Hoare annotation is: (let ((.cse10 (= ~methaneLevelCritical~0 0)) (.cse16 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse17 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse9 (and .cse16 (= |old(~waterLevel~0)| ~waterLevel~0) .cse17)) (.cse6 (not (<= |old(~waterLevel~0)| 0))) (.cse8 (not (<= 2 |old(~waterLevel~0)|))) (.cse15 (and .cse16 (= ~waterLevel~0 1) .cse17)) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse13 (not (= |old(~waterLevel~0)| 1))) (.cse11 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse14 (and .cse16 (<= ~waterLevel~0 0) .cse17 (<= 0 ~waterLevel~0))) (.cse12 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= 0 |old(~waterLevel~0)|))) (.cse1 (not .cse10)) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5 .cse3 .cse6) (or .cse0 .cse5 .cse3 .cse7 .cse8) (or .cse9 .cse10 .cse11 .cse4 .cse5 .cse3 .cse7 .cse6 .cse12) (or .cse13 .cse11 .cse1 .cse3 .cse14 .cse12) (or .cse9 .cse11 .cse4 .cse1 .cse3 .cse6 .cse12) (or .cse11 .cse1 .cse15 .cse3 .cse7 .cse8) (or .cse11 .cse5 .cse15 .cse2 .cse3) (or .cse0 .cse13 .cse5 .cse3) (or .cse13 .cse10 .cse11 .cse5 .cse3 .cse7 .cse14 .cse12) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse4 .cse1 .cse3)))) [2022-11-02 21:02:51,072 INFO L895 garLoopResultBuilder]: At program point L67(line 67) the Hoare annotation is: (let ((.cse15 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= 0 ~systemActive~0)) (.cse13 (= ~pumpRunning~0 0)) (.cse14 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse16 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse11 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse12 (and .cse13 .cse14 .cse16)) (.cse9 (not (<= 0 |old(~waterLevel~0)|))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (and .cse15 .cse13 .cse14 .cse16 (not .cse3))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse10 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (and .cse15 .cse14 .cse16)) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse2 .cse3 .cse8) (or .cse0 .cse9 .cse1 .cse3 .cse10 .cse4 .cse11) (or .cse0 .cse9 .cse7 .cse3 .cse10 .cse4 .cse11) (or .cse12 .cse5 .cse9 .cse1 .cse3 (not (<= |old(~waterLevel~0)| 0))) (or (and .cse13 .cse14 (= ~waterLevel~0 1)) .cse5 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse3) (or .cse12 (not (<= |old(~waterLevel~0)| 1)) .cse5 .cse9 .cse7 .cse3) (or .cse5 .cse6 .cse1 .cse3 .cse10 .cse8) (or .cse0 .cse7 .cse3 .cse10 .cse4 .cse8)))) [2022-11-02 21:02:51,073 INFO L899 garLoopResultBuilder]: For program point L67-1(line 67) no Hoare annotation was computed. [2022-11-02 21:02:51,073 INFO L899 garLoopResultBuilder]: For program point L728(lines 728 734) no Hoare annotation was computed. [2022-11-02 21:02:51,073 INFO L899 garLoopResultBuilder]: For program point L728-2(lines 724 746) no Hoare annotation was computed. [2022-11-02 21:02:51,073 INFO L899 garLoopResultBuilder]: For program point L790(lines 790 798) no Hoare annotation was computed. [2022-11-02 21:02:51,073 INFO L899 garLoopResultBuilder]: For program point L84(lines 84 94) no Hoare annotation was computed. [2022-11-02 21:02:51,073 INFO L899 garLoopResultBuilder]: For program point L786(lines 786 803) no Hoare annotation was computed. [2022-11-02 21:02:51,074 INFO L899 garLoopResultBuilder]: For program point L80(lines 80 97) no Hoare annotation was computed. [2022-11-02 21:02:51,075 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 721 747) the Hoare annotation is: (let ((.cse15 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= 0 ~systemActive~0)) (.cse13 (= ~pumpRunning~0 0)) (.cse14 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse16 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse11 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse12 (and .cse13 .cse14 .cse16)) (.cse9 (not (<= 0 |old(~waterLevel~0)|))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (and .cse15 .cse13 .cse14 .cse16 (not .cse3))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse10 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (and .cse15 .cse14 .cse16)) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse2 .cse3 .cse8) (or .cse0 .cse9 .cse1 .cse3 .cse10 .cse4 .cse11) (or .cse0 .cse9 .cse7 .cse3 .cse10 .cse4 .cse11) (or .cse12 .cse5 .cse9 .cse1 .cse3 (not (<= |old(~waterLevel~0)| 0))) (or (and .cse13 .cse14 (= ~waterLevel~0 1)) .cse5 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse3) (or .cse12 (not (<= |old(~waterLevel~0)| 1)) .cse5 .cse9 .cse7 .cse3) (or .cse5 .cse6 .cse1 .cse3 .cse10 .cse8) (or .cse0 .cse7 .cse3 .cse10 .cse4 .cse8)))) [2022-11-02 21:02:51,076 INFO L895 garLoopResultBuilder]: At program point L80-1(lines 72 100) the Hoare annotation is: (let ((.cse12 (= 0 ~systemActive~0))) (let ((.cse25 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse26 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)) (.cse18 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse6 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse19 (<= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|)) (.cse23 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse10 (not .cse12))) (let ((.cse16 (= ~waterLevel~0 1)) (.cse0 (not (= |old(~waterLevel~0)| 1))) (.cse24 (not (<= |old(~waterLevel~0)| 2))) (.cse8 (<= ~waterLevel~0 0)) (.cse11 (<= 0 ~waterLevel~0)) (.cse7 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse22 (not (<= |old(~waterLevel~0)| 0))) (.cse13 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse20 (not (<= 0 |old(~waterLevel~0)|))) (.cse21 (and .cse18 .cse4 .cse5 .cse6 .cse19 .cse23 .cse10)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse17 (not (= ~methaneLevelCritical~0 0))) (.cse14 (and .cse18 .cse4 .cse25 .cse23 .cse10 .cse26)) (.cse15 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) .cse12 .cse13) (or .cse3 .cse2 .cse14 .cse15 .cse12) (or .cse1 (and .cse3 .cse4 .cse5 .cse6 .cse7 .cse16 .cse9 .cse10) .cse2 .cse15 .cse12) (or .cse1 .cse17 .cse15 .cse12 (and .cse18 .cse3 .cse5 .cse6 .cse7 .cse19 .cse16 .cse9 .cse10)) (or .cse3 .cse20 .cse2 .cse21 .cse12 .cse22) (or .cse1 .cse20 .cse17 (and .cse18 .cse3 .cse5 .cse6 .cse7 .cse19 .cse23 .cse9 .cse10) .cse12 .cse24 .cse22 .cse13) (or .cse3 .cse0 (and .cse18 .cse4 .cse5 .cse6 .cse19 .cse16 .cse10) .cse2 .cse12) (or .cse0 .cse1 .cse17 .cse12 .cse24 (and .cse18 .cse3 .cse5 .cse6 .cse7 .cse19 .cse8 .cse9 .cse10 .cse11) .cse13) (or (and .cse3 .cse4 .cse5 .cse6 .cse7 .cse23 .cse9 .cse10) .cse1 .cse20 .cse2 .cse12 .cse22 .cse13) (or (not (<= |old(~waterLevel~0)| 1)) .cse3 .cse20 .cse17 .cse21 .cse12) (or .cse3 .cse17 (and (<= 1 ~pumpRunning~0) .cse25 .cse23 .cse26) .cse14 .cse15 .cse12))))) [2022-11-02 21:02:51,076 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 721 747) no Hoare annotation was computed. [2022-11-02 21:02:51,076 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 710) no Hoare annotation was computed. [2022-11-02 21:02:51,077 INFO L902 garLoopResultBuilder]: At program point L129(lines 104 133) the Hoare annotation is: true [2022-11-02 21:02:51,077 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 104 133) no Hoare annotation was computed. [2022-11-02 21:02:51,077 INFO L899 garLoopResultBuilder]: For program point L125(line 125) no Hoare annotation was computed. [2022-11-02 21:02:51,078 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 104 133) the Hoare annotation is: true [2022-11-02 21:02:51,079 INFO L899 garLoopResultBuilder]: For program point L118(lines 118 122) no Hoare annotation was computed. [2022-11-02 21:02:51,079 INFO L902 garLoopResultBuilder]: At program point L118-1(lines 118 122) the Hoare annotation is: true [2022-11-02 21:02:51,079 INFO L899 garLoopResultBuilder]: For program point L115(line 115) no Hoare annotation was computed. [2022-11-02 21:02:51,079 INFO L902 garLoopResultBuilder]: At program point L114-2(lines 114 128) the Hoare annotation is: true [2022-11-02 21:02:51,079 INFO L902 garLoopResultBuilder]: At program point L110(line 110) the Hoare annotation is: true [2022-11-02 21:02:51,080 INFO L899 garLoopResultBuilder]: For program point L110-1(line 110) no Hoare annotation was computed. [2022-11-02 21:02:51,080 INFO L895 garLoopResultBuilder]: At program point L956(line 956) the Hoare annotation is: (let ((.cse6 (<= 0 ~waterLevel~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse10 (< 1 ~waterLevel~0)) (.cse9 (<= ~waterLevel~0 2)) (.cse0 (= ~pumpRunning~0 0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 1) .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse3 .cse9 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5 .cse6) (and .cse0 .cse8 .cse2 .cse3 (<= ~waterLevel~0 0) .cse4 .cse5 .cse6) (and .cse0 .cse8 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse5) (and .cse0 .cse1 .cse2 .cse10 .cse3 .cse9 .cse4 .cse5) (and .cse7 .cse8 .cse2 .cse10 .cse3 .cse9 .cse4 .cse5) (and .cse0 (= 2 ~waterLevel~0) .cse8 .cse2 .cse3 .cse4 .cse5))) [2022-11-02 21:02:51,080 INFO L902 garLoopResultBuilder]: At program point L985(lines 924 989) the Hoare annotation is: true [2022-11-02 21:02:51,080 INFO L899 garLoopResultBuilder]: For program point L944(lines 944 950) no Hoare annotation was computed. [2022-11-02 21:02:51,080 INFO L899 garLoopResultBuilder]: For program point L944-1(lines 944 950) no Hoare annotation was computed. [2022-11-02 21:02:51,081 INFO L899 garLoopResultBuilder]: For program point L936(lines 936 940) no Hoare annotation was computed. [2022-11-02 21:02:51,081 INFO L899 garLoopResultBuilder]: For program point L193(lines 193 200) no Hoare annotation was computed. [2022-11-02 21:02:51,081 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-02 21:02:51,081 INFO L899 garLoopResultBuilder]: For program point L193-2(lines 193 200) no Hoare annotation was computed. [2022-11-02 21:02:51,082 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-02 21:02:51,082 INFO L895 garLoopResultBuilder]: At program point L701(lines 696 704) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-02 21:02:51,082 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-02 21:02:51,082 INFO L895 garLoopResultBuilder]: At program point L920(lines 915 922) the Hoare annotation is: (let ((.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse11 (< 1 ~waterLevel~0)) (.cse4 (<= ~waterLevel~0 2)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse8 (<= 0 ~waterLevel~0)) (.cse10 (= ~pumpRunning~0 0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse7 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse9 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse10 .cse1 .cse2 .cse3 .cse5 (= ~waterLevel~0 1) .cse7) (and .cse10 .cse9 .cse2 (<= ~waterLevel~0 1) .cse3 .cse5 .cse7 .cse8) (and .cse0 .cse1 .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5 .cse7) (and .cse10 .cse1 .cse2 .cse11 .cse3 .cse4 .cse5 .cse7) (and .cse0 .cse9 .cse2 .cse11 .cse3 .cse4 .cse5 .cse7) (and .cse10 .cse1 .cse2 .cse3 (<= ~waterLevel~0 0) .cse5 .cse7 .cse8) (and .cse10 (= 2 ~waterLevel~0) .cse9 .cse2 .cse3 .cse5 .cse7))) [2022-11-02 21:02:51,083 INFO L895 garLoopResultBuilder]: At program point L982(lines 933 983) the Hoare annotation is: false [2022-11-02 21:02:51,083 INFO L895 garLoopResultBuilder]: At program point L693(lines 689 695) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-02 21:02:51,083 INFO L902 garLoopResultBuilder]: At program point L177(lines 169 179) the Hoare annotation is: true [2022-11-02 21:02:51,083 INFO L902 garLoopResultBuilder]: At program point L202(lines 183 205) the Hoare annotation is: true [2022-11-02 21:02:51,083 INFO L895 garLoopResultBuilder]: At program point L165(lines 161 167) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~1#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-02 21:02:51,083 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-02 21:02:51,084 INFO L899 garLoopResultBuilder]: For program point L954(lines 954 960) no Hoare annotation was computed. [2022-11-02 21:02:51,084 INFO L899 garLoopResultBuilder]: For program point L954-1(lines 954 960) no Hoare annotation was computed. [2022-11-02 21:02:51,084 INFO L895 garLoopResultBuilder]: At program point L979(lines 934 981) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse12 (= ~waterLevel~0 1)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse11 (<= 1 ~methaneLevelCritical~0)) (.cse4 (<= ~waterLevel~0 0)) (.cse8 (<= 0 ~waterLevel~0)) (.cse10 (= ~pumpRunning~0 0)) (.cse9 (= 2 ~waterLevel~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse7 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse9 .cse1 .cse2 .cse3 .cse5 .cse7) (and .cse10 .cse11 .cse9 .cse2 .cse3 .cse5 .cse7) (and .cse10 .cse1 .cse2 .cse3 .cse4 .cse5 .cse7 .cse8) (and .cse10 .cse11 .cse2 .cse3 .cse5 .cse12 .cse7) (and .cse10 .cse1 .cse2 .cse3 .cse5 .cse12 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse5 .cse12 .cse6 .cse7) (and .cse10 .cse11 .cse2 .cse3 .cse4 .cse5 .cse7 .cse8) (and .cse10 .cse9 .cse1 .cse2 .cse3 .cse5 .cse7))) [2022-11-02 21:02:51,085 INFO L895 garLoopResultBuilder]: At program point L946(line 946) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse9 (<= ~waterLevel~0 0)) (.cse6 (<= 0 ~waterLevel~0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse12 (= ~waterLevel~0 1)) (.cse10 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse11 (= 2 ~waterLevel~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 1) .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse3 .cse9 .cse4 .cse10 .cse5 .cse6) (and .cse7 .cse11 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse11 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse8 .cse2 .cse3 .cse9 .cse4 .cse5 .cse6) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse12 .cse5) (and .cse7 .cse8 .cse2 .cse3 .cse4 .cse12 .cse10 .cse5) (and .cse0 .cse11 .cse8 .cse2 .cse3 .cse4 .cse5))) [2022-11-02 21:02:51,085 INFO L895 garLoopResultBuilder]: At program point L686(lines 682 688) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-02 21:02:51,085 INFO L895 garLoopResultBuilder]: At program point L59(lines 54 61) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~1#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-02 21:02:51,085 INFO L899 garLoopResultBuilder]: For program point L972(lines 972 976) no Hoare annotation was computed. [2022-11-02 21:02:51,086 INFO L895 garLoopResultBuilder]: At program point L972-2(lines 964 977) the Hoare annotation is: (let ((.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse11 (< 1 ~waterLevel~0)) (.cse4 (<= ~waterLevel~0 2)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse8 (<= 0 ~waterLevel~0)) (.cse10 (= ~pumpRunning~0 0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse7 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse9 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse10 .cse1 .cse2 .cse3 .cse5 (= ~waterLevel~0 1) .cse7) (and .cse10 .cse9 .cse2 (<= ~waterLevel~0 1) .cse3 .cse5 .cse7 .cse8) (and .cse0 .cse1 .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5 .cse7) (and .cse10 .cse1 .cse2 .cse11 .cse3 .cse4 .cse5 .cse7) (and .cse0 .cse9 .cse2 .cse11 .cse3 .cse4 .cse5 .cse7) (and .cse10 .cse1 .cse2 .cse3 (<= ~waterLevel~0 0) .cse5 .cse7 .cse8) (and .cse10 (= 2 ~waterLevel~0) .cse9 .cse2 .cse3 .cse5 .cse7))) [2022-11-02 21:02:51,086 INFO L899 garLoopResultBuilder]: For program point L935(lines 934 981) no Hoare annotation was computed. [2022-11-02 21:02:51,087 INFO L899 garLoopResultBuilder]: For program point L964(lines 964 977) no Hoare annotation was computed. [2022-11-02 21:02:51,087 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 591 602) no Hoare annotation was computed. [2022-11-02 21:02:51,090 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 591 602) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (<= 0 |old(~waterLevel~0)|))) (.cse7 (not (<= 1 ~pumpRunning~0))) (.cse12 (not (<= |old(~waterLevel~0)| 0))) (.cse11 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0)) (.cse10 (= ~waterLevel~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse2 .cse3 .cse4 .cse5) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse8 .cse1 .cse2 .cse3) (or .cse9 .cse6 .cse7 .cse3 .cse10 .cse11) (or .cse0 .cse8 .cse6 .cse2 .cse3 .cse12) (or .cse8 .cse6 .cse7 .cse2 .cse3 .cse12 .cse11) (or .cse0 .cse6 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse9 .cse6 .cse3 .cse10))) [2022-11-02 21:02:51,090 INFO L899 garLoopResultBuilder]: For program point L595-1(lines 591 602) no Hoare annotation was computed. [2022-11-02 21:02:51,090 INFO L899 garLoopResultBuilder]: For program point L764(lines 764 772) no Hoare annotation was computed. [2022-11-02 21:02:51,090 INFO L895 garLoopResultBuilder]: At program point L665(lines 656 669) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0))) (let ((.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (<= ~waterLevel~0 0))) (.cse8 (not (= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (and .cse1 (not (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0)))) (.cse5 (not (<= 0 ~waterLevel~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2 (not (<= ~waterLevel~0 2)) .cse3) (or .cse0 .cse4 .cse5 .cse6 .cse3 .cse7) (or .cse8 .cse0 .cse6 .cse3 .cse7) (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse6 .cse3) (or .cse0 .cse4 .cse5 .cse2 .cse3 .cse7) (or .cse8 .cse0 .cse2 .cse3 .cse7) (or .cse5 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 (not (<= ~waterLevel~0 1)) .cse3 (not (<= 1 ~switchedOnBeforeTS~0)))))) [2022-11-02 21:02:51,091 INFO L899 garLoopResultBuilder]: For program point L760(lines 760 777) no Hoare annotation was computed. [2022-11-02 21:02:51,091 INFO L899 garLoopResultBuilder]: For program point L822(lines 822 828) no Hoare annotation was computed. [2022-11-02 21:02:51,092 INFO L895 garLoopResultBuilder]: At program point L820(line 820) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (<= 0 ~waterLevel~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= ~waterLevel~0 1))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2 (not (<= ~waterLevel~0 2)) .cse3) (or .cse0 .cse4 .cse2 .cse5 .cse3) (or .cse0 .cse4 .cse6 .cse5 .cse3) (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse6 .cse3) (or .cse4 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse5 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-02 21:02:51,092 INFO L895 garLoopResultBuilder]: At program point L822-2(lines 815 831) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (<= ~waterLevel~0 2))) (.cse3 (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~7#1| ~methaneLevelCritical~0)) (.cse5 (not (<= 0 ~waterLevel~0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (<= ~waterLevel~0 1))) (.cse4 (= 0 ~systemActive~0))) (and (or (not (< 1 ~waterLevel~0)) .cse0 .cse1 .cse2 (and (<= 1 ~pumpRunning~0) .cse3) .cse4) (or .cse0 .cse5 .cse1 .cse6 .cse4) (or .cse0 .cse5 .cse7 .cse6 .cse4) (or .cse0 (not (<= 2 ~waterLevel~0)) .cse7 .cse2 (and (= ~pumpRunning~0 0) .cse3) .cse4) (or .cse5 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse6 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-02 21:02:51,092 INFO L899 garLoopResultBuilder]: For program point L820-1(line 820) no Hoare annotation was computed. [2022-11-02 21:02:51,093 INFO L895 garLoopResultBuilder]: At program point L911(lines 896 914) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse3 (= 0 ~systemActive~0))) (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 (not (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~8#1| 0)) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0) (not .cse3))) (.cse6 (not (<= 0 ~waterLevel~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= ~waterLevel~0 1)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 (not (<= 2 ~waterLevel~0)) .cse5 (not (<= ~waterLevel~0 2)) .cse3) (or .cse0 .cse1 (not (<= ~waterLevel~0 0)) .cse6 .cse2 .cse3) (or .cse0 .cse4 (not (= 2 ~waterLevel~0)) .cse2 .cse3) (or .cse0 .cse1 .cse6 .cse5 .cse7 .cse3) (or .cse6 (not (<= 1 |old(~pumpRunning~0)|)) .cse5 .cse7 .cse3 (not (<= 1 ~switchedOnBeforeTS~0)))))) [2022-11-02 21:02:51,093 INFO L895 garLoopResultBuilder]: At program point L812(lines 807 814) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (<= ~waterLevel~0 2))) (.cse4 (not (<= 0 ~waterLevel~0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= ~waterLevel~0 1))) (.cse3 (= 0 ~systemActive~0))) (and (or (not (< 1 ~waterLevel~0)) .cse0 .cse1 .cse2 (and (<= 1 ~pumpRunning~0) (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~7#1| ~methaneLevelCritical~0)) .cse3) (or .cse0 .cse4 .cse1 .cse5 .cse3) (or .cse0 .cse4 .cse6 .cse5 .cse3) (or .cse0 (not (<= 2 ~waterLevel~0)) .cse6 .cse2 .cse3) (or .cse4 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse5 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-02 21:02:51,093 INFO L899 garLoopResultBuilder]: For program point L905(lines 905 909) no Hoare annotation was computed. [2022-11-02 21:02:51,093 INFO L899 garLoopResultBuilder]: For program point L905-2(lines 905 909) no Hoare annotation was computed. [2022-11-02 21:02:51,099 INFO L895 garLoopResultBuilder]: At program point L775(line 775) the Hoare annotation is: (let ((.cse3 (not (<= ~waterLevel~0 1))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= ~waterLevel~0 2))) (.cse1 (not (<= 0 ~waterLevel~0))) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0)) (.cse9 (not (<= 1 ~switchedOnBeforeTS~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse3 .cse4) (or .cse0 (not (<= 2 ~waterLevel~0)) .cse5 .cse6 .cse4) (or (not (< 1 ~waterLevel~0)) .cse0 .cse2 .cse6 .cse4) (or .cse7 (not (<= ~waterLevel~0 0)) .cse1 .cse8 .cse2 .cse4 .cse9) (or (not (= ~waterLevel~0 1)) .cse7 .cse8 .cse2 .cse4 .cse9))) [2022-11-02 21:02:51,099 INFO L899 garLoopResultBuilder]: For program point L775-1(lines 756 780) no Hoare annotation was computed. [2022-11-02 21:02:51,099 INFO L899 garLoopResultBuilder]: For program point L660(lines 660 666) no Hoare annotation was computed. [2022-11-02 21:02:51,100 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 756 780) the Hoare annotation is: (let ((.cse4 (not (<= ~waterLevel~0 0))) (.cse5 (not (<= 0 ~waterLevel~0))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse10 (not (= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2 (not (<= ~waterLevel~0 2)) .cse3) (or .cse0 .cse1 .cse4 .cse5 .cse6 .cse3) (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse6 .cse3) (or .cse7 .cse4 .cse5 .cse8 .cse2 .cse3 .cse9) (or .cse0 .cse1 .cse4 .cse5 .cse2 .cse3) (or .cse10 .cse0 .cse1 .cse6 .cse3) (or .cse10 .cse7 .cse8 .cse2 .cse3 .cse9) (or .cse10 .cse0 .cse1 .cse2 .cse3))) [2022-11-02 21:02:51,100 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 756 780) no Hoare annotation was computed. [2022-11-02 21:02:51,100 INFO L895 garLoopResultBuilder]: At program point L770(line 770) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0))) (let ((.cse1 (not (<= ~waterLevel~0 0))) (.cse2 (not (<= 0 ~waterLevel~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__methaneQuery_~tmp~5#1| 0) (not .cse4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse0 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse7 .cse4 .cse5) (or .cse2 (not (<= 1 |old(~pumpRunning~0)|)) .cse3 (not (<= ~waterLevel~0 1)) .cse4 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (< 1 ~waterLevel~0)) .cse0 .cse7 (not (<= ~waterLevel~0 2)) .cse4 .cse5) (or .cse0 (not (= 2 ~waterLevel~0)) .cse3 .cse4 .cse5) (or .cse6 .cse0 .cse7 .cse4 .cse5)))) [2022-11-02 21:02:51,100 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 851 859) no Hoare annotation was computed. [2022-11-02 21:02:51,101 INFO L902 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 851 859) the Hoare annotation is: true [2022-11-02 21:02:51,101 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 851 859) no Hoare annotation was computed. [2022-11-02 21:02:51,101 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 840 850) the Hoare annotation is: true [2022-11-02 21:02:51,102 INFO L895 garLoopResultBuilder]: At program point L620(lines 615 623) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 0))) (.cse1 (not (<= 0 ~waterLevel~0))) (.cse9 (not (= ~pumpRunning~0 0))) (.cse10 (not (<= 2 ~waterLevel~0))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse11 (not (<= ~waterLevel~0 2))) (.cse7 (not (= ~waterLevel~0 1))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (<= 1 ~pumpRunning~0))) (.cse4 (= 0 ~systemActive~0)) (.cse5 (= |isMethaneAlarm_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse6 (not (<= 1 ~switchedOnBeforeTS~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse7 .cse8 .cse3 .cse4 .cse5 .cse6) (or .cse9 .cse10 .cse2 .cse11 .cse4 .cse5) (or .cse0 .cse1 .cse8 .cse3 .cse4 .cse5 .cse6) (or .cse9 .cse10 .cse8 .cse11 .cse4 .cse5) (or .cse7 .cse2 .cse3 .cse4 .cse5 .cse6))) [2022-11-02 21:02:51,102 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 840 850) no Hoare annotation was computed. [2022-11-02 21:02:51,102 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 840 850) no Hoare annotation was computed. [2022-11-02 21:02:51,106 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 21:02:51,108 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-02 21:02:51,189 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.11 09:02:51 BoogieIcfgContainer [2022-11-02 21:02:51,193 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-02 21:02:51,194 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-02 21:02:51,194 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-02 21:02:51,194 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-02 21:02:51,195 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 09:02:00" (3/4) ... [2022-11-02 21:02:51,199 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-02 21:02:51,205 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-02 21:02:51,205 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-02 21:02:51,205 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-02 21:02:51,205 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-02 21:02:51,206 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-02 21:02:51,206 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-11-02 21:02:51,206 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-11-02 21:02:51,206 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-11-02 21:02:51,220 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 51 nodes and edges [2022-11-02 21:02:51,220 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-11-02 21:02:51,221 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-11-02 21:02:51,221 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-02 21:02:51,222 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-11-02 21:02:51,222 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-02 21:02:51,223 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-02 21:02:51,250 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-11-02 21:02:51,251 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-11-02 21:02:51,251 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-11-02 21:02:51,251 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel) || ((((((1 <= pumpRunning && 2 == waterLevel) && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 2 == waterLevel) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && waterLevel == 1) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && waterLevel == 1) && !(0 == systemActive))) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((pumpRunning == 0 && 2 == waterLevel) && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) [2022-11-02 21:02:51,253 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) || 0 == systemActive) [2022-11-02 21:02:51,254 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || methaneLevelCritical == 0) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-11-02 21:02:51,254 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel) || ((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && waterLevel == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel <= 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel)) || (((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && 1 < waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && 1 < waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((pumpRunning == 0 && 2 == waterLevel) && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) [2022-11-02 21:02:51,255 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) && tmp == 2)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || ((((((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && waterLevel == \result) && tmp == waterLevel) && tmp == methaneLevelCritical) && pumpRunning <= tmp___0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)))) && (((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && waterLevel == \result) && tmp == waterLevel) && tmp == methaneLevelCritical) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && waterLevel == 1) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((((((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && waterLevel == \result) && tmp == waterLevel) && tmp == methaneLevelCritical) && pumpRunning <= tmp___0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) && tmp == 2)) || !(\old(waterLevel) == 2)) || 0 == systemActive) [2022-11-02 21:02:51,256 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && ((((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS))) && (((((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((methaneLevelCritical == 0 || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) [2022-11-02 21:02:51,256 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-11-02 21:02:51,257 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || ((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && waterLevel == \result) && waterLevel == 1)) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((((((pumpRunning == 0 && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((((pumpRunning == 0 && waterLevel == \result) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || ((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2)) || 0 == systemActive) [2022-11-02 21:02:51,257 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((((((methaneLevelCritical == 0 || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) [2022-11-02 21:02:51,257 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(waterLevel <= 0) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS)) && (((((!(waterLevel == 1) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(pumpRunning == 0) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive) || \result == methaneLevelCritical)) && ((((((!(waterLevel <= 0) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(pumpRunning == 0) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) || \result == methaneLevelCritical)) && (((((!(waterLevel == 1) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS)) [2022-11-02 21:02:51,258 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2022-11-02 21:02:51,258 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && tmp == methaneLevelCritical)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || (pumpRunning == 0 && tmp == methaneLevelCritical)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2022-11-02 21:02:51,258 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && tmp == methaneLevelCritical)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2022-11-02 21:02:51,258 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && !(tmp == 0)) && \result == 0) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && !(tmp == 0)) && \result == 0) && !(0 == systemActive))) || !(waterLevel <= 0)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && !(tmp == 0)) && \result == 0) && !(0 == systemActive))) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2022-11-02 21:02:51,289 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/witness.graphml [2022-11-02 21:02:51,289 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-02 21:02:51,290 INFO L158 Benchmark]: Toolchain (without parser) took 52659.71ms. Allocated memory was 88.1MB in the beginning and 383.8MB in the end (delta: 295.7MB). Free memory was 64.3MB in the beginning and 246.5MB in the end (delta: -182.3MB). Peak memory consumption was 113.5MB. Max. memory is 16.1GB. [2022-11-02 21:02:51,291 INFO L158 Benchmark]: CDTParser took 0.26ms. Allocated memory is still 88.1MB. Free memory was 62.8MB in the beginning and 62.8MB in the end (delta: 44.3kB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-02 21:02:51,291 INFO L158 Benchmark]: CACSL2BoogieTranslator took 639.00ms. Allocated memory is still 88.1MB. Free memory was 64.1MB in the beginning and 54.6MB in the end (delta: 9.5MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-11-02 21:02:51,291 INFO L158 Benchmark]: Boogie Procedure Inliner took 77.63ms. Allocated memory is still 88.1MB. Free memory was 54.4MB in the beginning and 51.9MB in the end (delta: 2.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-02 21:02:51,292 INFO L158 Benchmark]: Boogie Preprocessor took 42.07ms. Allocated memory is still 88.1MB. Free memory was 51.9MB in the beginning and 50.3MB in the end (delta: 1.7MB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-02 21:02:51,292 INFO L158 Benchmark]: RCFGBuilder took 701.73ms. Allocated memory was 88.1MB in the beginning and 107.0MB in the end (delta: 18.9MB). Free memory was 50.2MB in the beginning and 81.2MB in the end (delta: -30.9MB). Peak memory consumption was 23.6MB. Max. memory is 16.1GB. [2022-11-02 21:02:51,292 INFO L158 Benchmark]: TraceAbstraction took 51062.80ms. Allocated memory was 107.0MB in the beginning and 383.8MB in the end (delta: 276.8MB). Free memory was 82.5MB in the beginning and 252.8MB in the end (delta: -170.3MB). Peak memory consumption was 234.5MB. Max. memory is 16.1GB. [2022-11-02 21:02:51,293 INFO L158 Benchmark]: Witness Printer took 95.97ms. Allocated memory is still 383.8MB. Free memory was 252.8MB in the beginning and 246.5MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-02 21:02:51,295 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.26ms. Allocated memory is still 88.1MB. Free memory was 62.8MB in the beginning and 62.8MB in the end (delta: 44.3kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 639.00ms. Allocated memory is still 88.1MB. Free memory was 64.1MB in the beginning and 54.6MB in the end (delta: 9.5MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 77.63ms. Allocated memory is still 88.1MB. Free memory was 54.4MB in the beginning and 51.9MB in the end (delta: 2.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 42.07ms. Allocated memory is still 88.1MB. Free memory was 51.9MB in the beginning and 50.3MB in the end (delta: 1.7MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 701.73ms. Allocated memory was 88.1MB in the beginning and 107.0MB in the end (delta: 18.9MB). Free memory was 50.2MB in the beginning and 81.2MB in the end (delta: -30.9MB). Peak memory consumption was 23.6MB. Max. memory is 16.1GB. * TraceAbstraction took 51062.80ms. Allocated memory was 107.0MB in the beginning and 383.8MB in the end (delta: 276.8MB). Free memory was 82.5MB in the beginning and 252.8MB in the end (delta: -170.3MB). Peak memory consumption was 234.5MB. Max. memory is 16.1GB. * Witness Printer took 95.97ms. Allocated memory is still 383.8MB. Free memory was 252.8MB in the beginning and 246.5MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 710]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 99 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 50.9s, OverallIterations: 14, TraceHistogramMax: 9, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 17.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 20.1s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 7304 SdHoareTripleChecker+Valid, 10.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 7262 mSDsluCounter, 8860 SdHoareTripleChecker+Invalid, 8.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 6719 mSDsCounter, 3009 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 13885 IncrementalHoareTripleChecker+Invalid, 16894 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 3009 mSolverCounterUnsat, 2141 mSDtfsCounter, 13885 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 2677 GetRequests, 2249 SyntacticMatches, 33 SemanticMatches, 395 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5697 ImplicationChecksByTransitivity, 7.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1289occurred in iteration=13, InterpolantAutomatonStates: 305, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.9s AutomataMinimizationTime, 14 MinimizatonAttempts, 556 StatesRemovedByMinimization, 10 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 46 LocationsWithAnnotation, 3046 PreInvPairs, 3391 NumberOfFragments, 6862 HoareAnnotationTreeSize, 3046 FomulaSimplifications, 7887 FormulaSimplificationTreeSizeReduction, 1.9s HoareSimplificationTime, 46 FomulaSimplificationsInter, 66994 FormulaSimplificationTreeSizeReductionInter, 18.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 0.8s SatisfiabilityAnalysisTime, 9.6s InterpolantComputationTime, 2435 NumberOfCodeBlocks, 2435 NumberOfCodeBlocksAsserted, 19 NumberOfCheckSat, 3404 ConstructedInterpolants, 0 QuantifiedInterpolants, 8375 SizeOfPredicates, 13 NumberOfNonLiveVariables, 3688 ConjunctsInSsa, 79 ConjunctsInUnsatCore, 24 InterpolantComputations, 9 PerfectInterpolantSequences, 3117/3738 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 933]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 832]: Loop Invariant Derived loop invariant: (((((((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((((((methaneLevelCritical == 0 || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 114]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 815]: Loop Invariant Derived loop invariant: ((((((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && tmp == methaneLevelCritical)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || (pumpRunning == 0 && tmp == methaneLevelCritical)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 579]: Loop Invariant Derived loop invariant: ((((((((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || methaneLevelCritical == 0) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 706]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 104]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 934]: Loop Invariant Derived loop invariant: (((((((((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel) || ((((((1 <= pumpRunning && 2 == waterLevel) && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 2 == waterLevel) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && waterLevel == 1) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && waterLevel == 1) && !(0 == systemActive))) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((pumpRunning == 0 && 2 == waterLevel) && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) - InvariantResult [Line: 183]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: ((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) || 0 == systemActive) - InvariantResult [Line: 647]: Loop Invariant Derived loop invariant: ((((((((((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || ((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && waterLevel == \result) && waterLevel == 1)) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((((((pumpRunning == 0 && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((((pumpRunning == 0 && waterLevel == \result) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || ((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2)) || 0 == systemActive) - InvariantResult [Line: 169]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 689]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 915]: Loop Invariant Derived loop invariant: (((((((((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel) || ((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && waterLevel == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel <= 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel)) || (((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && 1 < waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && 1 < waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((pumpRunning == 0 && 2 == waterLevel) && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) - InvariantResult [Line: 696]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 72]: Loop Invariant Derived loop invariant: ((((((((((((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) && tmp == 2)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || ((((((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && waterLevel == \result) && tmp == waterLevel) && tmp == methaneLevelCritical) && pumpRunning <= tmp___0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)))) && (((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && waterLevel == \result) && tmp == waterLevel) && tmp == methaneLevelCritical) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && waterLevel == 1) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((((((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && waterLevel == \result) && tmp == waterLevel) && tmp == methaneLevelCritical) && pumpRunning <= tmp___0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) && tmp == 2)) || !(\old(waterLevel) == 2)) || 0 == systemActive) - InvariantResult [Line: 807]: Loop Invariant Derived loop invariant: ((((((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && tmp == methaneLevelCritical)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: ((((((((((!(waterLevel <= 0) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS)) && (((((!(waterLevel == 1) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(pumpRunning == 0) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive) || \result == methaneLevelCritical)) && ((((((!(waterLevel <= 0) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(pumpRunning == 0) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) || \result == methaneLevelCritical)) && (((((!(waterLevel == 1) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 896]: Loop Invariant Derived loop invariant: ((((((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && !(tmp == 0)) && \result == 0) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && !(tmp == 0)) && \result == 0) && !(0 == systemActive))) || !(waterLevel <= 0)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && !(tmp == 0)) && \result == 0) && !(0 == systemActive))) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 924]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 682]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 782]: Loop Invariant Derived loop invariant: ((((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && ((((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS))) && (((((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((methaneLevelCritical == 0 || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) RESULT: Ultimate proved your program to be correct! [2022-11-02 21:02:51,370 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c42dcd-e5af-415c-be1d-6edae6539be8/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE