./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product60.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8393723b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product60.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash a218bb67596641a4ce71d6987e627686ed630ab4299f0e9b54dfa98d78549c82 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-8393723 [2022-11-18 21:04:02,693 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-18 21:04:02,695 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-18 21:04:02,739 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-18 21:04:02,740 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-18 21:04:02,744 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-18 21:04:02,745 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-18 21:04:02,749 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-18 21:04:02,752 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-18 21:04:02,754 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-18 21:04:02,755 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-18 21:04:02,758 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-18 21:04:02,759 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-18 21:04:02,764 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-18 21:04:02,766 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-18 21:04:02,767 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-18 21:04:02,769 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-18 21:04:02,771 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-18 21:04:02,772 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-18 21:04:02,777 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-18 21:04:02,781 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-18 21:04:02,782 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-18 21:04:02,785 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-18 21:04:02,786 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-18 21:04:02,792 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-18 21:04:02,796 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-18 21:04:02,797 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-18 21:04:02,798 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-18 21:04:02,799 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-18 21:04:02,800 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-18 21:04:02,800 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-18 21:04:02,801 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-18 21:04:02,803 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-18 21:04:02,804 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-18 21:04:02,806 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-18 21:04:02,806 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-18 21:04:02,807 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-18 21:04:02,807 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-18 21:04:02,808 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-18 21:04:02,808 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-18 21:04:02,809 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-18 21:04:02,810 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-18 21:04:02,849 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-18 21:04:02,849 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-18 21:04:02,850 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-18 21:04:02,850 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-18 21:04:02,851 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-18 21:04:02,851 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-18 21:04:02,852 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-18 21:04:02,852 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-18 21:04:02,852 INFO L138 SettingsManager]: * Use SBE=true [2022-11-18 21:04:02,853 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-18 21:04:02,854 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-18 21:04:02,854 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-18 21:04:02,854 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-18 21:04:02,854 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-18 21:04:02,855 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-18 21:04:02,855 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-18 21:04:02,855 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-18 21:04:02,855 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-18 21:04:02,855 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-18 21:04:02,856 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-18 21:04:02,856 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-18 21:04:02,856 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-18 21:04:02,856 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-18 21:04:02,856 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-18 21:04:02,857 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-18 21:04:02,857 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-18 21:04:02,858 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-18 21:04:02,859 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-18 21:04:02,859 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-18 21:04:02,859 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-18 21:04:02,859 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-18 21:04:02,859 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-18 21:04:02,860 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-18 21:04:02,860 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> a218bb67596641a4ce71d6987e627686ed630ab4299f0e9b54dfa98d78549c82 [2022-11-18 21:04:03,188 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-18 21:04:03,227 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-18 21:04:03,229 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-18 21:04:03,231 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-18 21:04:03,232 INFO L275 PluginConnector]: CDTParser initialized [2022-11-18 21:04:03,233 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/../../sv-benchmarks/c/product-lines/minepump_spec2_product60.cil.c [2022-11-18 21:04:03,298 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/data/f0cffdbda/64ab581f80c949208143d7f48367d50a/FLAG227312b7f [2022-11-18 21:04:03,845 INFO L306 CDTParser]: Found 1 translation units. [2022-11-18 21:04:03,846 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/sv-benchmarks/c/product-lines/minepump_spec2_product60.cil.c [2022-11-18 21:04:03,862 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/data/f0cffdbda/64ab581f80c949208143d7f48367d50a/FLAG227312b7f [2022-11-18 21:04:04,170 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/data/f0cffdbda/64ab581f80c949208143d7f48367d50a [2022-11-18 21:04:04,173 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-18 21:04:04,174 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-18 21:04:04,176 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-18 21:04:04,176 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-18 21:04:04,180 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-18 21:04:04,181 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 09:04:04" (1/1) ... [2022-11-18 21:04:04,182 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2a1b75 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:04:04, skipping insertion in model container [2022-11-18 21:04:04,182 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 09:04:04" (1/1) ... [2022-11-18 21:04:04,190 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-18 21:04:04,251 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-18 21:04:04,493 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/sv-benchmarks/c/product-lines/minepump_spec2_product60.cil.c[3241,3254] [2022-11-18 21:04:04,584 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-18 21:04:04,594 INFO L203 MainTranslator]: Completed pre-run [2022-11-18 21:04:04,621 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/sv-benchmarks/c/product-lines/minepump_spec2_product60.cil.c[3241,3254] [2022-11-18 21:04:04,719 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-18 21:04:04,741 INFO L208 MainTranslator]: Completed translation [2022-11-18 21:04:04,744 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:04:04 WrapperNode [2022-11-18 21:04:04,744 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-18 21:04:04,745 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-18 21:04:04,746 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-18 21:04:04,746 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-18 21:04:04,753 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:04:04" (1/1) ... [2022-11-18 21:04:04,775 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:04:04" (1/1) ... [2022-11-18 21:04:04,821 INFO L138 Inliner]: procedures = 59, calls = 104, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 226 [2022-11-18 21:04:04,821 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-18 21:04:04,822 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-18 21:04:04,823 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-18 21:04:04,823 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-18 21:04:04,832 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:04:04" (1/1) ... [2022-11-18 21:04:04,832 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:04:04" (1/1) ... [2022-11-18 21:04:04,844 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:04:04" (1/1) ... [2022-11-18 21:04:04,844 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:04:04" (1/1) ... [2022-11-18 21:04:04,847 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:04:04" (1/1) ... [2022-11-18 21:04:04,852 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:04:04" (1/1) ... [2022-11-18 21:04:04,853 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:04:04" (1/1) ... [2022-11-18 21:04:04,855 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:04:04" (1/1) ... [2022-11-18 21:04:04,857 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-18 21:04:04,858 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-18 21:04:04,858 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-18 21:04:04,858 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-18 21:04:04,859 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:04:04" (1/1) ... [2022-11-18 21:04:04,865 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-18 21:04:04,887 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 21:04:04,902 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-18 21:04:04,907 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-18 21:04:04,943 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-18 21:04:04,944 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-18 21:04:04,944 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-18 21:04:04,944 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-18 21:04:04,944 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-18 21:04:04,944 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-18 21:04:04,944 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-18 21:04:04,944 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-18 21:04:04,945 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-18 21:04:04,945 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-18 21:04:04,945 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-18 21:04:04,945 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-18 21:04:04,945 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-18 21:04:04,945 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-18 21:04:04,945 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-18 21:04:04,945 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-18 21:04:04,946 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-18 21:04:04,946 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-18 21:04:04,946 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-18 21:04:04,946 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-18 21:04:05,036 INFO L235 CfgBuilder]: Building ICFG [2022-11-18 21:04:05,039 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-18 21:04:05,423 INFO L276 CfgBuilder]: Performing block encoding [2022-11-18 21:04:05,430 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-18 21:04:05,430 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-18 21:04:05,432 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 09:04:05 BoogieIcfgContainer [2022-11-18 21:04:05,432 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-18 21:04:05,434 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-18 21:04:05,434 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-18 21:04:05,444 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-18 21:04:05,445 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 18.11 09:04:04" (1/3) ... [2022-11-18 21:04:05,445 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7fe4d40e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 09:04:05, skipping insertion in model container [2022-11-18 21:04:05,445 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:04:04" (2/3) ... [2022-11-18 21:04:05,446 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7fe4d40e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 09:04:05, skipping insertion in model container [2022-11-18 21:04:05,446 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 09:04:05" (3/3) ... [2022-11-18 21:04:05,447 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product60.cil.c [2022-11-18 21:04:05,466 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-18 21:04:05,466 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-18 21:04:05,546 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-18 21:04:05,557 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@3fdc635d, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-18 21:04:05,558 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-18 21:04:05,562 INFO L276 IsEmpty]: Start isEmpty. Operand has 101 states, 77 states have (on average 1.3766233766233766) internal successors, (106), 86 states have internal predecessors, (106), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2022-11-18 21:04:05,575 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-18 21:04:05,575 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:04:05,577 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:04:05,578 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:04:05,585 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:04:05,585 INFO L85 PathProgramCache]: Analyzing trace with hash 1691208954, now seen corresponding path program 1 times [2022-11-18 21:04:05,596 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:04:05,596 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [294439126] [2022-11-18 21:04:05,597 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:04:05,598 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:04:05,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:05,920 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-18 21:04:05,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:05,944 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 21:04:05,946 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:04:05,947 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [294439126] [2022-11-18 21:04:05,948 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [294439126] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:04:05,948 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:04:05,948 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-18 21:04:05,951 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2089318485] [2022-11-18 21:04:05,951 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:04:05,956 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-18 21:04:05,957 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:04:05,994 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-18 21:04:05,996 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-18 21:04:05,999 INFO L87 Difference]: Start difference. First operand has 101 states, 77 states have (on average 1.3766233766233766) internal successors, (106), 86 states have internal predecessors, (106), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 21:04:06,055 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:04:06,055 INFO L93 Difference]: Finished difference Result 193 states and 262 transitions. [2022-11-18 21:04:06,056 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-18 21:04:06,058 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-11-18 21:04:06,058 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:04:06,067 INFO L225 Difference]: With dead ends: 193 [2022-11-18 21:04:06,067 INFO L226 Difference]: Without dead ends: 92 [2022-11-18 21:04:06,071 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-18 21:04:06,075 INFO L413 NwaCegarLoop]: 128 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 128 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 21:04:06,076 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 128 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 21:04:06,095 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92 states. [2022-11-18 21:04:06,132 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92 to 92. [2022-11-18 21:04:06,134 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 92 states, 70 states have (on average 1.3142857142857143) internal successors, (92), 78 states have internal predecessors, (92), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-18 21:04:06,147 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 92 states to 92 states and 119 transitions. [2022-11-18 21:04:06,154 INFO L78 Accepts]: Start accepts. Automaton has 92 states and 119 transitions. Word has length 25 [2022-11-18 21:04:06,154 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:04:06,154 INFO L495 AbstractCegarLoop]: Abstraction has 92 states and 119 transitions. [2022-11-18 21:04:06,155 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 21:04:06,155 INFO L276 IsEmpty]: Start isEmpty. Operand 92 states and 119 transitions. [2022-11-18 21:04:06,157 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-18 21:04:06,157 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:04:06,158 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:04:06,158 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-18 21:04:06,158 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:04:06,159 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:04:06,159 INFO L85 PathProgramCache]: Analyzing trace with hash 356391721, now seen corresponding path program 1 times [2022-11-18 21:04:06,159 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:04:06,160 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [144482196] [2022-11-18 21:04:06,160 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:04:06,160 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:04:06,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:06,253 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-11-18 21:04:06,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:06,259 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 21:04:06,259 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:04:06,260 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [144482196] [2022-11-18 21:04:06,260 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [144482196] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:04:06,260 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:04:06,260 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-18 21:04:06,261 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1351012870] [2022-11-18 21:04:06,261 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:04:06,262 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 21:04:06,262 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:04:06,263 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 21:04:06,263 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:04:06,264 INFO L87 Difference]: Start difference. First operand 92 states and 119 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 21:04:06,283 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:04:06,284 INFO L93 Difference]: Finished difference Result 144 states and 186 transitions. [2022-11-18 21:04:06,284 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 21:04:06,285 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-11-18 21:04:06,285 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:04:06,286 INFO L225 Difference]: With dead ends: 144 [2022-11-18 21:04:06,286 INFO L226 Difference]: Without dead ends: 83 [2022-11-18 21:04:06,287 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:04:06,289 INFO L413 NwaCegarLoop]: 106 mSDtfsCounter, 17 mSDsluCounter, 84 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 190 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 21:04:06,289 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 190 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 21:04:06,290 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 83 states. [2022-11-18 21:04:06,299 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 83 to 83. [2022-11-18 21:04:06,300 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 83 states, 64 states have (on average 1.328125) internal successors, (85), 72 states have internal predecessors, (85), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-18 21:04:06,301 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 83 states to 83 states and 107 transitions. [2022-11-18 21:04:06,301 INFO L78 Accepts]: Start accepts. Automaton has 83 states and 107 transitions. Word has length 26 [2022-11-18 21:04:06,302 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:04:06,302 INFO L495 AbstractCegarLoop]: Abstraction has 83 states and 107 transitions. [2022-11-18 21:04:06,302 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 21:04:06,302 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 107 transitions. [2022-11-18 21:04:06,303 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-18 21:04:06,304 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:04:06,304 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:04:06,304 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-18 21:04:06,304 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:04:06,305 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:04:06,305 INFO L85 PathProgramCache]: Analyzing trace with hash 1826063129, now seen corresponding path program 1 times [2022-11-18 21:04:06,305 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:04:06,305 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1976864556] [2022-11-18 21:04:06,306 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:04:06,306 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:04:06,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:06,517 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 21:04:06,519 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:06,522 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 21:04:06,523 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:04:06,523 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1976864556] [2022-11-18 21:04:06,523 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1976864556] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:04:06,524 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:04:06,524 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-18 21:04:06,524 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1245110048] [2022-11-18 21:04:06,524 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:04:06,525 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-18 21:04:06,525 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:04:06,526 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-18 21:04:06,526 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-18 21:04:06,527 INFO L87 Difference]: Start difference. First operand 83 states and 107 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 21:04:06,630 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:04:06,637 INFO L93 Difference]: Finished difference Result 201 states and 263 transitions. [2022-11-18 21:04:06,638 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-18 21:04:06,638 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-11-18 21:04:06,638 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:04:06,640 INFO L225 Difference]: With dead ends: 201 [2022-11-18 21:04:06,640 INFO L226 Difference]: Without dead ends: 126 [2022-11-18 21:04:06,641 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-18 21:04:06,642 INFO L413 NwaCegarLoop]: 121 mSDtfsCounter, 172 mSDsluCounter, 242 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 172 SdHoareTripleChecker+Valid, 363 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 21:04:06,645 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [172 Valid, 363 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 21:04:06,646 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 126 states. [2022-11-18 21:04:06,665 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 126 to 123. [2022-11-18 21:04:06,666 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 123 states, 94 states have (on average 1.351063829787234) internal successors, (127), 105 states have internal predecessors, (127), 16 states have call successors, (16), 12 states have call predecessors, (16), 12 states have return successors, (17), 12 states have call predecessors, (17), 16 states have call successors, (17) [2022-11-18 21:04:06,669 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 123 states to 123 states and 160 transitions. [2022-11-18 21:04:06,670 INFO L78 Accepts]: Start accepts. Automaton has 123 states and 160 transitions. Word has length 31 [2022-11-18 21:04:06,670 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:04:06,670 INFO L495 AbstractCegarLoop]: Abstraction has 123 states and 160 transitions. [2022-11-18 21:04:06,671 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 21:04:06,671 INFO L276 IsEmpty]: Start isEmpty. Operand 123 states and 160 transitions. [2022-11-18 21:04:06,672 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-11-18 21:04:06,673 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:04:06,673 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:04:06,673 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-18 21:04:06,673 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:04:06,674 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:04:06,674 INFO L85 PathProgramCache]: Analyzing trace with hash 1496608149, now seen corresponding path program 1 times [2022-11-18 21:04:06,674 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:04:06,675 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [852359538] [2022-11-18 21:04:06,675 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:04:06,675 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:04:06,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:06,768 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-18 21:04:06,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:06,773 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 21:04:06,774 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:04:06,774 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [852359538] [2022-11-18 21:04:06,774 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [852359538] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:04:06,775 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:04:06,775 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-18 21:04:06,775 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [772461598] [2022-11-18 21:04:06,775 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:04:06,776 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-18 21:04:06,776 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:04:06,776 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-18 21:04:06,777 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-18 21:04:06,777 INFO L87 Difference]: Start difference. First operand 123 states and 160 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 21:04:06,881 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:04:06,882 INFO L93 Difference]: Finished difference Result 283 states and 379 transitions. [2022-11-18 21:04:06,882 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-18 21:04:06,882 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2022-11-18 21:04:06,887 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:04:06,888 INFO L225 Difference]: With dead ends: 283 [2022-11-18 21:04:06,889 INFO L226 Difference]: Without dead ends: 168 [2022-11-18 21:04:06,890 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-18 21:04:06,891 INFO L413 NwaCegarLoop]: 109 mSDtfsCounter, 85 mSDsluCounter, 285 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 85 SdHoareTripleChecker+Valid, 394 SdHoareTripleChecker+Invalid, 37 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-18 21:04:06,896 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [85 Valid, 394 Invalid, 37 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-18 21:04:06,897 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 168 states. [2022-11-18 21:04:06,933 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 168 to 158. [2022-11-18 21:04:06,934 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 158 states, 121 states have (on average 1.2892561983471074) internal successors, (156), 132 states have internal predecessors, (156), 19 states have call successors, (19), 17 states have call predecessors, (19), 17 states have return successors, (25), 18 states have call predecessors, (25), 19 states have call successors, (25) [2022-11-18 21:04:06,936 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 158 states to 158 states and 200 transitions. [2022-11-18 21:04:06,936 INFO L78 Accepts]: Start accepts. Automaton has 158 states and 200 transitions. Word has length 34 [2022-11-18 21:04:06,938 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:04:06,938 INFO L495 AbstractCegarLoop]: Abstraction has 158 states and 200 transitions. [2022-11-18 21:04:06,938 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 21:04:06,939 INFO L276 IsEmpty]: Start isEmpty. Operand 158 states and 200 transitions. [2022-11-18 21:04:06,943 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-18 21:04:06,943 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:04:06,943 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:04:06,944 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-18 21:04:06,944 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:04:06,944 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:04:06,944 INFO L85 PathProgramCache]: Analyzing trace with hash 1570330873, now seen corresponding path program 1 times [2022-11-18 21:04:06,945 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:04:06,945 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1939093447] [2022-11-18 21:04:06,945 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:04:06,945 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:04:06,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:07,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 21:04:07,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:07,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 21:04:07,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:07,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-11-18 21:04:07,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:07,133 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-18 21:04:07,133 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:04:07,133 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1939093447] [2022-11-18 21:04:07,134 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1939093447] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:04:07,134 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:04:07,134 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 21:04:07,134 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1486114778] [2022-11-18 21:04:07,135 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:04:07,135 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 21:04:07,135 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:04:07,136 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 21:04:07,136 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-18 21:04:07,136 INFO L87 Difference]: Start difference. First operand 158 states and 200 transitions. Second operand has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-18 21:04:07,348 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:04:07,348 INFO L93 Difference]: Finished difference Result 341 states and 444 transitions. [2022-11-18 21:04:07,348 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 21:04:07,349 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 53 [2022-11-18 21:04:07,349 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:04:07,356 INFO L225 Difference]: With dead ends: 341 [2022-11-18 21:04:07,356 INFO L226 Difference]: Without dead ends: 191 [2022-11-18 21:04:07,359 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-18 21:04:07,365 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 68 mSDsluCounter, 291 mSDsCounter, 0 mSdLazyCounter, 129 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 71 SdHoareTripleChecker+Valid, 379 SdHoareTripleChecker+Invalid, 151 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 129 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-18 21:04:07,366 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [71 Valid, 379 Invalid, 151 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 129 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-18 21:04:07,369 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 191 states. [2022-11-18 21:04:07,407 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 191 to 184. [2022-11-18 21:04:07,407 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 184 states, 142 states have (on average 1.2746478873239437) internal successors, (181), 153 states have internal predecessors, (181), 21 states have call successors, (21), 17 states have call predecessors, (21), 20 states have return successors, (30), 22 states have call predecessors, (30), 21 states have call successors, (30) [2022-11-18 21:04:07,410 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 184 states to 184 states and 232 transitions. [2022-11-18 21:04:07,410 INFO L78 Accepts]: Start accepts. Automaton has 184 states and 232 transitions. Word has length 53 [2022-11-18 21:04:07,412 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:04:07,412 INFO L495 AbstractCegarLoop]: Abstraction has 184 states and 232 transitions. [2022-11-18 21:04:07,412 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-18 21:04:07,412 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 232 transitions. [2022-11-18 21:04:07,416 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-18 21:04:07,417 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:04:07,418 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:04:07,418 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-18 21:04:07,418 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:04:07,418 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:04:07,419 INFO L85 PathProgramCache]: Analyzing trace with hash -801408389, now seen corresponding path program 1 times [2022-11-18 21:04:07,419 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:04:07,419 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1991088910] [2022-11-18 21:04:07,419 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:04:07,419 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:04:07,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:07,555 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 21:04:07,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:07,615 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 21:04:07,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:07,618 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-11-18 21:04:07,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:07,620 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-18 21:04:07,621 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:04:07,621 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1991088910] [2022-11-18 21:04:07,621 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1991088910] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:04:07,621 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:04:07,621 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-18 21:04:07,621 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [962312620] [2022-11-18 21:04:07,622 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:04:07,622 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-18 21:04:07,622 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:04:07,623 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-18 21:04:07,623 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-18 21:04:07,623 INFO L87 Difference]: Start difference. First operand 184 states and 232 transitions. Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 6 states have internal predecessors, (44), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-18 21:04:07,857 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:04:07,857 INFO L93 Difference]: Finished difference Result 373 states and 483 transitions. [2022-11-18 21:04:07,858 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-18 21:04:07,858 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 6 states have internal predecessors, (44), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 53 [2022-11-18 21:04:07,858 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:04:07,861 INFO L225 Difference]: With dead ends: 373 [2022-11-18 21:04:07,861 INFO L226 Difference]: Without dead ends: 197 [2022-11-18 21:04:07,863 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=80, Unknown=0, NotChecked=0, Total=110 [2022-11-18 21:04:07,868 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 120 mSDsluCounter, 327 mSDsCounter, 0 mSdLazyCounter, 172 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 124 SdHoareTripleChecker+Valid, 415 SdHoareTripleChecker+Invalid, 203 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 172 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 21:04:07,868 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [124 Valid, 415 Invalid, 203 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 172 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 21:04:07,869 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 197 states. [2022-11-18 21:04:07,899 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 197 to 186. [2022-11-18 21:04:07,899 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 186 states, 144 states have (on average 1.2708333333333333) internal successors, (183), 155 states have internal predecessors, (183), 21 states have call successors, (21), 17 states have call predecessors, (21), 20 states have return successors, (30), 22 states have call predecessors, (30), 21 states have call successors, (30) [2022-11-18 21:04:07,901 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 186 states to 186 states and 234 transitions. [2022-11-18 21:04:07,901 INFO L78 Accepts]: Start accepts. Automaton has 186 states and 234 transitions. Word has length 53 [2022-11-18 21:04:07,901 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:04:07,901 INFO L495 AbstractCegarLoop]: Abstraction has 186 states and 234 transitions. [2022-11-18 21:04:07,902 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 6 states have internal predecessors, (44), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-18 21:04:07,902 INFO L276 IsEmpty]: Start isEmpty. Operand 186 states and 234 transitions. [2022-11-18 21:04:07,903 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-18 21:04:07,903 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:04:07,903 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:04:07,903 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-18 21:04:07,903 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:04:07,904 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:04:07,904 INFO L85 PathProgramCache]: Analyzing trace with hash 584795005, now seen corresponding path program 1 times [2022-11-18 21:04:07,904 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:04:07,904 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [689591460] [2022-11-18 21:04:07,905 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:04:07,905 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:04:07,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:07,981 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 21:04:07,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:08,013 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 21:04:08,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:08,016 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-11-18 21:04:08,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:08,019 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-18 21:04:08,019 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:04:08,019 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [689591460] [2022-11-18 21:04:08,020 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [689591460] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:04:08,020 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:04:08,020 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-18 21:04:08,020 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [913715170] [2022-11-18 21:04:08,020 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:04:08,021 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-18 21:04:08,021 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:04:08,021 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-18 21:04:08,022 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-18 21:04:08,022 INFO L87 Difference]: Start difference. First operand 186 states and 234 transitions. Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-18 21:04:08,307 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:04:08,308 INFO L93 Difference]: Finished difference Result 557 states and 730 transitions. [2022-11-18 21:04:08,308 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 21:04:08,308 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 53 [2022-11-18 21:04:08,309 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:04:08,311 INFO L225 Difference]: With dead ends: 557 [2022-11-18 21:04:08,311 INFO L226 Difference]: Without dead ends: 379 [2022-11-18 21:04:08,312 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-18 21:04:08,313 INFO L413 NwaCegarLoop]: 137 mSDtfsCounter, 222 mSDsluCounter, 189 mSDsCounter, 0 mSdLazyCounter, 155 mSolverCounterSat, 61 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 228 SdHoareTripleChecker+Valid, 326 SdHoareTripleChecker+Invalid, 216 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 61 IncrementalHoareTripleChecker+Valid, 155 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 21:04:08,313 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [228 Valid, 326 Invalid, 216 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [61 Valid, 155 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 21:04:08,314 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 379 states. [2022-11-18 21:04:08,351 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 379 to 377. [2022-11-18 21:04:08,352 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 377 states, 289 states have (on average 1.2491349480968859) internal successors, (361), 308 states have internal predecessors, (361), 45 states have call successors, (45), 42 states have call predecessors, (45), 42 states have return successors, (71), 44 states have call predecessors, (71), 45 states have call successors, (71) [2022-11-18 21:04:08,354 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 377 states to 377 states and 477 transitions. [2022-11-18 21:04:08,355 INFO L78 Accepts]: Start accepts. Automaton has 377 states and 477 transitions. Word has length 53 [2022-11-18 21:04:08,355 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:04:08,355 INFO L495 AbstractCegarLoop]: Abstraction has 377 states and 477 transitions. [2022-11-18 21:04:08,355 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-18 21:04:08,355 INFO L276 IsEmpty]: Start isEmpty. Operand 377 states and 477 transitions. [2022-11-18 21:04:08,357 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-11-18 21:04:08,357 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:04:08,357 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:04:08,357 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-18 21:04:08,357 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:04:08,358 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:04:08,358 INFO L85 PathProgramCache]: Analyzing trace with hash -2002712797, now seen corresponding path program 1 times [2022-11-18 21:04:08,358 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:04:08,358 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1317674498] [2022-11-18 21:04:08,358 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:04:08,359 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:04:08,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:08,465 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-18 21:04:08,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:08,477 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-18 21:04:08,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:08,589 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 21:04:08,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:08,604 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-11-18 21:04:08,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:08,612 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-18 21:04:08,613 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:04:08,613 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1317674498] [2022-11-18 21:04:08,613 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1317674498] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:04:08,613 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:04:08,613 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-11-18 21:04:08,613 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [169833318] [2022-11-18 21:04:08,614 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:04:08,614 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-11-18 21:04:08,614 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:04:08,614 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-18 21:04:08,615 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=88, Unknown=0, NotChecked=0, Total=110 [2022-11-18 21:04:08,615 INFO L87 Difference]: Start difference. First operand 377 states and 477 transitions. Second operand has 11 states, 11 states have (on average 4.181818181818182) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-18 21:04:09,453 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:04:09,454 INFO L93 Difference]: Finished difference Result 1220 states and 1619 transitions. [2022-11-18 21:04:09,454 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-11-18 21:04:09,455 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 4.181818181818182) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2022-11-18 21:04:09,457 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:04:09,462 INFO L225 Difference]: With dead ends: 1220 [2022-11-18 21:04:09,463 INFO L226 Difference]: Without dead ends: 851 [2022-11-18 21:04:09,465 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 190 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=210, Invalid=720, Unknown=0, NotChecked=0, Total=930 [2022-11-18 21:04:09,466 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 391 mSDsluCounter, 533 mSDsCounter, 0 mSdLazyCounter, 656 mSolverCounterSat, 134 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 399 SdHoareTripleChecker+Valid, 617 SdHoareTripleChecker+Invalid, 790 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 134 IncrementalHoareTripleChecker+Valid, 656 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-18 21:04:09,467 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [399 Valid, 617 Invalid, 790 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [134 Valid, 656 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-18 21:04:09,469 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 851 states. [2022-11-18 21:04:09,594 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 851 to 793. [2022-11-18 21:04:09,596 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 793 states, 599 states have (on average 1.2170283806343907) internal successors, (729), 645 states have internal predecessors, (729), 101 states have call successors, (101), 82 states have call predecessors, (101), 92 states have return successors, (181), 99 states have call predecessors, (181), 101 states have call successors, (181) [2022-11-18 21:04:09,603 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 793 states to 793 states and 1011 transitions. [2022-11-18 21:04:09,603 INFO L78 Accepts]: Start accepts. Automaton has 793 states and 1011 transitions. Word has length 57 [2022-11-18 21:04:09,603 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:04:09,603 INFO L495 AbstractCegarLoop]: Abstraction has 793 states and 1011 transitions. [2022-11-18 21:04:09,604 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 4.181818181818182) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-18 21:04:09,604 INFO L276 IsEmpty]: Start isEmpty. Operand 793 states and 1011 transitions. [2022-11-18 21:04:09,607 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 101 [2022-11-18 21:04:09,608 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:04:09,608 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:04:09,608 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-18 21:04:09,608 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:04:09,609 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:04:09,609 INFO L85 PathProgramCache]: Analyzing trace with hash 984940751, now seen corresponding path program 1 times [2022-11-18 21:04:09,609 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:04:09,609 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1159057827] [2022-11-18 21:04:09,610 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:04:09,610 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:04:09,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:09,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-18 21:04:09,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:09,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 21:04:09,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:09,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-18 21:04:09,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:09,755 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 21:04:09,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:09,757 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-18 21:04:09,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:09,765 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-18 21:04:09,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:09,769 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-11-18 21:04:09,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:09,773 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 21:04:09,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:09,774 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2022-11-18 21:04:09,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:09,778 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 17 proven. 1 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-11-18 21:04:09,778 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:04:09,778 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1159057827] [2022-11-18 21:04:09,779 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1159057827] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 21:04:09,779 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [66482488] [2022-11-18 21:04:09,779 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:04:09,779 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 21:04:09,780 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 21:04:09,783 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 21:04:09,810 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-18 21:04:09,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:09,910 INFO L263 TraceCheckSpWp]: Trace formula consists of 349 conjuncts, 7 conjunts are in the unsatisfiable core [2022-11-18 21:04:09,923 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 21:04:10,049 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-18 21:04:10,049 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 21:04:10,050 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [66482488] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:04:10,050 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-18 21:04:10,050 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 7 [2022-11-18 21:04:10,050 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [589769187] [2022-11-18 21:04:10,051 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:04:10,051 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 21:04:10,051 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:04:10,052 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 21:04:10,052 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-18 21:04:10,052 INFO L87 Difference]: Start difference. First operand 793 states and 1011 transitions. Second operand has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-18 21:04:10,157 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:04:10,157 INFO L93 Difference]: Finished difference Result 1184 states and 1552 transitions. [2022-11-18 21:04:10,158 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 21:04:10,158 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 100 [2022-11-18 21:04:10,158 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:04:10,165 INFO L225 Difference]: With dead ends: 1184 [2022-11-18 21:04:10,165 INFO L226 Difference]: Without dead ends: 1182 [2022-11-18 21:04:10,166 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 122 GetRequests, 117 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-18 21:04:10,167 INFO L413 NwaCegarLoop]: 117 mSDtfsCounter, 55 mSDsluCounter, 96 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 55 SdHoareTripleChecker+Valid, 213 SdHoareTripleChecker+Invalid, 7 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 21:04:10,167 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [55 Valid, 213 Invalid, 7 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 21:04:10,169 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1182 states. [2022-11-18 21:04:10,301 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1182 to 1070. [2022-11-18 21:04:10,303 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1070 states, 805 states have (on average 1.2285714285714286) internal successors, (989), 874 states have internal predecessors, (989), 144 states have call successors, (144), 112 states have call predecessors, (144), 120 states have return successors, (291), 126 states have call predecessors, (291), 144 states have call successors, (291) [2022-11-18 21:04:10,311 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1070 states to 1070 states and 1424 transitions. [2022-11-18 21:04:10,312 INFO L78 Accepts]: Start accepts. Automaton has 1070 states and 1424 transitions. Word has length 100 [2022-11-18 21:04:10,313 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:04:10,313 INFO L495 AbstractCegarLoop]: Abstraction has 1070 states and 1424 transitions. [2022-11-18 21:04:10,313 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-18 21:04:10,317 INFO L276 IsEmpty]: Start isEmpty. Operand 1070 states and 1424 transitions. [2022-11-18 21:04:10,331 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 143 [2022-11-18 21:04:10,331 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:04:10,332 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:04:10,342 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-11-18 21:04:10,538 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2022-11-18 21:04:10,539 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:04:10,539 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:04:10,539 INFO L85 PathProgramCache]: Analyzing trace with hash 1042607335, now seen corresponding path program 1 times [2022-11-18 21:04:10,541 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:04:10,541 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1063085946] [2022-11-18 21:04:10,541 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:04:10,542 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:04:10,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:10,758 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-18 21:04:10,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:10,769 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 21:04:10,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:10,796 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-18 21:04:10,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:10,815 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 21:04:10,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:10,819 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-18 21:04:10,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:10,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-18 21:04:10,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:10,840 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-11-18 21:04:10,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:10,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-18 21:04:10,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:10,907 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 21:04:10,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:10,909 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 21:04:10,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:10,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-11-18 21:04:10,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:10,914 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 21:04:10,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:10,915 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2022-11-18 21:04:10,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:10,917 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 46 proven. 25 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-18 21:04:10,917 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:04:10,917 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1063085946] [2022-11-18 21:04:10,918 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1063085946] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 21:04:10,918 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1472998785] [2022-11-18 21:04:10,918 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:04:10,918 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 21:04:10,918 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 21:04:10,919 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 21:04:10,950 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-18 21:04:11,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:11,054 INFO L263 TraceCheckSpWp]: Trace formula consists of 457 conjuncts, 7 conjunts are in the unsatisfiable core [2022-11-18 21:04:11,074 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 21:04:11,259 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 68 proven. 28 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-18 21:04:11,259 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-18 21:04:11,569 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 48 proven. 24 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-11-18 21:04:11,570 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1472998785] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-18 21:04:11,570 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-18 21:04:11,570 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 12 [2022-11-18 21:04:11,570 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1152987733] [2022-11-18 21:04:11,570 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-18 21:04:11,573 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-11-18 21:04:11,573 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:04:11,574 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-11-18 21:04:11,574 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-11-18 21:04:11,574 INFO L87 Difference]: Start difference. First operand 1070 states and 1424 transitions. Second operand has 12 states, 12 states have (on average 11.583333333333334) internal successors, (139), 9 states have internal predecessors, (139), 6 states have call successors, (29), 10 states have call predecessors, (29), 5 states have return successors, (21), 6 states have call predecessors, (21), 5 states have call successors, (21) [2022-11-18 21:04:12,675 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:04:12,675 INFO L93 Difference]: Finished difference Result 2625 states and 3660 transitions. [2022-11-18 21:04:12,676 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2022-11-18 21:04:12,676 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 11.583333333333334) internal successors, (139), 9 states have internal predecessors, (139), 6 states have call successors, (29), 10 states have call predecessors, (29), 5 states have return successors, (21), 6 states have call predecessors, (21), 5 states have call successors, (21) Word has length 142 [2022-11-18 21:04:12,677 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:04:12,687 INFO L225 Difference]: With dead ends: 2625 [2022-11-18 21:04:12,687 INFO L226 Difference]: Without dead ends: 1727 [2022-11-18 21:04:12,692 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 343 GetRequests, 308 SyntacticMatches, 6 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 215 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=300, Invalid=630, Unknown=0, NotChecked=0, Total=930 [2022-11-18 21:04:12,693 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 597 mSDsluCounter, 208 mSDsCounter, 0 mSdLazyCounter, 579 mSolverCounterSat, 259 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 600 SdHoareTripleChecker+Valid, 265 SdHoareTripleChecker+Invalid, 838 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 259 IncrementalHoareTripleChecker+Valid, 579 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-18 21:04:12,695 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [600 Valid, 265 Invalid, 838 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [259 Valid, 579 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-18 21:04:12,697 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1727 states. [2022-11-18 21:04:12,911 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1727 to 1497. [2022-11-18 21:04:12,914 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1497 states, 1120 states have (on average 1.2366071428571428) internal successors, (1385), 1218 states have internal predecessors, (1385), 205 states have call successors, (205), 163 states have call predecessors, (205), 171 states have return successors, (433), 169 states have call predecessors, (433), 205 states have call successors, (433) [2022-11-18 21:04:12,926 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1497 states to 1497 states and 2023 transitions. [2022-11-18 21:04:12,926 INFO L78 Accepts]: Start accepts. Automaton has 1497 states and 2023 transitions. Word has length 142 [2022-11-18 21:04:12,927 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:04:12,927 INFO L495 AbstractCegarLoop]: Abstraction has 1497 states and 2023 transitions. [2022-11-18 21:04:12,927 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 11.583333333333334) internal successors, (139), 9 states have internal predecessors, (139), 6 states have call successors, (29), 10 states have call predecessors, (29), 5 states have return successors, (21), 6 states have call predecessors, (21), 5 states have call successors, (21) [2022-11-18 21:04:12,927 INFO L276 IsEmpty]: Start isEmpty. Operand 1497 states and 2023 transitions. [2022-11-18 21:04:12,936 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 143 [2022-11-18 21:04:12,936 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:04:12,936 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:04:12,946 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-18 21:04:13,142 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-18 21:04:13,143 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:04:13,143 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:04:13,143 INFO L85 PathProgramCache]: Analyzing trace with hash -343596059, now seen corresponding path program 1 times [2022-11-18 21:04:13,144 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:04:13,144 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2144892739] [2022-11-18 21:04:13,144 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:04:13,144 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:04:13,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:13,369 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-18 21:04:13,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:13,379 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 21:04:13,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:13,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-18 21:04:13,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:13,410 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 21:04:13,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:13,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-18 21:04:13,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:13,425 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-18 21:04:13,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:13,429 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-11-18 21:04:13,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:13,538 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-18 21:04:13,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:13,541 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 21:04:13,542 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:13,543 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 21:04:13,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:13,546 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-11-18 21:04:13,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:13,548 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 21:04:13,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:13,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2022-11-18 21:04:13,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:13,552 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 59 proven. 12 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-18 21:04:13,553 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:04:13,553 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2144892739] [2022-11-18 21:04:13,555 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2144892739] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 21:04:13,555 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1564695825] [2022-11-18 21:04:13,555 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:04:13,556 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 21:04:13,556 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 21:04:13,557 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 21:04:13,574 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-18 21:04:13,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:13,675 INFO L263 TraceCheckSpWp]: Trace formula consists of 459 conjuncts, 11 conjunts are in the unsatisfiable core [2022-11-18 21:04:13,679 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 21:04:13,948 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 82 proven. 16 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-18 21:04:13,949 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-18 21:04:14,236 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 60 proven. 12 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-11-18 21:04:14,236 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1564695825] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-18 21:04:14,236 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-18 21:04:14,236 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 9, 8] total 18 [2022-11-18 21:04:14,236 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2125300975] [2022-11-18 21:04:14,237 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-18 21:04:14,237 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-11-18 21:04:14,237 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:04:14,238 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-11-18 21:04:14,238 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=67, Invalid=239, Unknown=0, NotChecked=0, Total=306 [2022-11-18 21:04:14,239 INFO L87 Difference]: Start difference. First operand 1497 states and 2023 transitions. Second operand has 18 states, 18 states have (on average 8.11111111111111) internal successors, (146), 15 states have internal predecessors, (146), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2022-11-18 21:04:16,859 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:04:16,859 INFO L93 Difference]: Finished difference Result 4251 states and 6104 transitions. [2022-11-18 21:04:16,860 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2022-11-18 21:04:16,860 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 8.11111111111111) internal successors, (146), 15 states have internal predecessors, (146), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) Word has length 142 [2022-11-18 21:04:16,860 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:04:16,883 INFO L225 Difference]: With dead ends: 4251 [2022-11-18 21:04:16,883 INFO L226 Difference]: Without dead ends: 2922 [2022-11-18 21:04:16,891 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 358 GetRequests, 304 SyntacticMatches, 5 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 605 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=628, Invalid=1922, Unknown=0, NotChecked=0, Total=2550 [2022-11-18 21:04:16,892 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 1000 mSDsluCounter, 418 mSDsCounter, 0 mSdLazyCounter, 1684 mSolverCounterSat, 516 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1005 SdHoareTripleChecker+Valid, 504 SdHoareTripleChecker+Invalid, 2200 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 516 IncrementalHoareTripleChecker+Valid, 1684 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-11-18 21:04:16,892 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1005 Valid, 504 Invalid, 2200 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [516 Valid, 1684 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2022-11-18 21:04:16,896 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2922 states. [2022-11-18 21:04:17,172 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2922 to 2363. [2022-11-18 21:04:17,205 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2363 states, 1762 states have (on average 1.2275822928490352) internal successors, (2163), 1898 states have internal predecessors, (2163), 325 states have call successors, (325), 273 states have call predecessors, (325), 275 states have return successors, (640), 268 states have call predecessors, (640), 325 states have call successors, (640) [2022-11-18 21:04:17,224 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2363 states to 2363 states and 3128 transitions. [2022-11-18 21:04:17,225 INFO L78 Accepts]: Start accepts. Automaton has 2363 states and 3128 transitions. Word has length 142 [2022-11-18 21:04:17,225 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:04:17,226 INFO L495 AbstractCegarLoop]: Abstraction has 2363 states and 3128 transitions. [2022-11-18 21:04:17,226 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 8.11111111111111) internal successors, (146), 15 states have internal predecessors, (146), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2022-11-18 21:04:17,226 INFO L276 IsEmpty]: Start isEmpty. Operand 2363 states and 3128 transitions. [2022-11-18 21:04:17,237 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 146 [2022-11-18 21:04:17,238 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:04:17,238 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:04:17,252 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-18 21:04:17,444 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 21:04:17,444 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:04:17,444 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:04:17,445 INFO L85 PathProgramCache]: Analyzing trace with hash 1175266739, now seen corresponding path program 1 times [2022-11-18 21:04:17,445 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:04:17,445 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1997003074] [2022-11-18 21:04:17,445 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:04:17,445 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:04:17,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:17,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-18 21:04:17,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:17,509 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-18 21:04:17,513 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:17,534 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-18 21:04:17,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:17,543 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 21:04:17,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:17,545 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-18 21:04:17,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:17,554 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-11-18 21:04:17,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:17,556 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 72 [2022-11-18 21:04:17,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:17,565 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-18 21:04:17,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:17,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 21:04:17,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:17,570 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 21:04:17,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:17,573 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 125 [2022-11-18 21:04:17,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:17,577 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 21:04:17,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:17,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 135 [2022-11-18 21:04:17,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:17,582 INFO L134 CoverageAnalysis]: Checked inductivity of 99 backedges. 45 proven. 9 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-11-18 21:04:17,583 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:04:17,583 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1997003074] [2022-11-18 21:04:17,583 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1997003074] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 21:04:17,583 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1783640283] [2022-11-18 21:04:17,583 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:04:17,583 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 21:04:17,584 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 21:04:17,585 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 21:04:17,624 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-18 21:04:17,729 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:17,731 INFO L263 TraceCheckSpWp]: Trace formula consists of 468 conjuncts, 3 conjunts are in the unsatisfiable core [2022-11-18 21:04:17,736 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 21:04:17,755 INFO L134 CoverageAnalysis]: Checked inductivity of 99 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 77 trivial. 0 not checked. [2022-11-18 21:04:17,755 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 21:04:17,756 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1783640283] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:04:17,756 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-18 21:04:17,756 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [8] total 8 [2022-11-18 21:04:17,756 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1060191178] [2022-11-18 21:04:17,757 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:04:17,757 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 21:04:17,757 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:04:17,758 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 21:04:17,758 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-11-18 21:04:17,758 INFO L87 Difference]: Start difference. First operand 2363 states and 3128 transitions. Second operand has 3 states, 3 states have (on average 26.0) internal successors, (78), 3 states have internal predecessors, (78), 3 states have call successors, (9), 3 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 3 states have call successors, (9) [2022-11-18 21:04:18,019 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:04:18,019 INFO L93 Difference]: Finished difference Result 4742 states and 6272 transitions. [2022-11-18 21:04:18,022 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 21:04:18,023 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 26.0) internal successors, (78), 3 states have internal predecessors, (78), 3 states have call successors, (9), 3 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 3 states have call successors, (9) Word has length 145 [2022-11-18 21:04:18,023 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:04:18,038 INFO L225 Difference]: With dead ends: 4742 [2022-11-18 21:04:18,038 INFO L226 Difference]: Without dead ends: 2387 [2022-11-18 21:04:18,047 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 174 GetRequests, 168 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-11-18 21:04:18,048 INFO L413 NwaCegarLoop]: 133 mSDtfsCounter, 37 mSDsluCounter, 101 mSDsCounter, 0 mSdLazyCounter, 5 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 234 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 5 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 21:04:18,048 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 234 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 5 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 21:04:18,052 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2387 states. [2022-11-18 21:04:18,326 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2387 to 2276. [2022-11-18 21:04:18,330 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2276 states, 1706 states have (on average 1.2186400937866355) internal successors, (2079), 1827 states have internal predecessors, (2079), 302 states have call successors, (302), 257 states have call predecessors, (302), 267 states have return successors, (577), 260 states have call predecessors, (577), 302 states have call successors, (577) [2022-11-18 21:04:18,341 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2276 states to 2276 states and 2958 transitions. [2022-11-18 21:04:18,342 INFO L78 Accepts]: Start accepts. Automaton has 2276 states and 2958 transitions. Word has length 145 [2022-11-18 21:04:18,342 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:04:18,342 INFO L495 AbstractCegarLoop]: Abstraction has 2276 states and 2958 transitions. [2022-11-18 21:04:18,342 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 26.0) internal successors, (78), 3 states have internal predecessors, (78), 3 states have call successors, (9), 3 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 3 states have call successors, (9) [2022-11-18 21:04:18,343 INFO L276 IsEmpty]: Start isEmpty. Operand 2276 states and 2958 transitions. [2022-11-18 21:04:18,351 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 147 [2022-11-18 21:04:18,351 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:04:18,351 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:04:18,363 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-18 21:04:18,557 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 21:04:18,557 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:04:18,557 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:04:18,557 INFO L85 PathProgramCache]: Analyzing trace with hash -1208818945, now seen corresponding path program 1 times [2022-11-18 21:04:18,558 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:04:18,558 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1540230355] [2022-11-18 21:04:18,558 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:04:18,558 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:04:18,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:18,708 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-18 21:04:18,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:18,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-18 21:04:18,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:18,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-18 21:04:18,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:18,789 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-18 21:04:18,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:18,895 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 21:04:18,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:18,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-18 21:04:18,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:18,915 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2022-11-18 21:04:18,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:18,917 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-11-18 21:04:18,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:18,925 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-18 21:04:18,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:18,928 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 21:04:18,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:18,930 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 21:04:18,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:18,931 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 126 [2022-11-18 21:04:18,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:18,933 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 21:04:18,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:18,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 136 [2022-11-18 21:04:18,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:18,937 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 48 proven. 20 refuted. 0 times theorem prover too weak. 37 trivial. 0 not checked. [2022-11-18 21:04:18,937 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:04:18,937 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1540230355] [2022-11-18 21:04:18,937 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1540230355] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 21:04:18,937 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [88220390] [2022-11-18 21:04:18,938 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:04:18,938 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 21:04:18,938 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 21:04:18,943 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 21:04:18,968 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-18 21:04:19,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:19,066 INFO L263 TraceCheckSpWp]: Trace formula consists of 470 conjuncts, 8 conjunts are in the unsatisfiable core [2022-11-18 21:04:19,071 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 21:04:19,213 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 43 proven. 0 refuted. 0 times theorem prover too weak. 62 trivial. 0 not checked. [2022-11-18 21:04:19,213 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 21:04:19,213 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [88220390] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:04:19,213 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-18 21:04:19,213 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [15] total 19 [2022-11-18 21:04:19,214 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [431680981] [2022-11-18 21:04:19,214 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:04:19,214 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-18 21:04:19,214 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:04:19,215 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-18 21:04:19,215 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=49, Invalid=293, Unknown=0, NotChecked=0, Total=342 [2022-11-18 21:04:19,216 INFO L87 Difference]: Start difference. First operand 2276 states and 2958 transitions. Second operand has 7 states, 7 states have (on average 11.428571428571429) internal successors, (80), 6 states have internal predecessors, (80), 3 states have call successors, (10), 3 states have call predecessors, (10), 4 states have return successors, (10), 4 states have call predecessors, (10), 3 states have call successors, (10) [2022-11-18 21:04:19,565 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:04:19,565 INFO L93 Difference]: Finished difference Result 4536 states and 5918 transitions. [2022-11-18 21:04:19,566 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 21:04:19,566 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 11.428571428571429) internal successors, (80), 6 states have internal predecessors, (80), 3 states have call successors, (10), 3 states have call predecessors, (10), 4 states have return successors, (10), 4 states have call predecessors, (10), 3 states have call successors, (10) Word has length 146 [2022-11-18 21:04:19,566 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:04:19,578 INFO L225 Difference]: With dead ends: 4536 [2022-11-18 21:04:19,579 INFO L226 Difference]: Without dead ends: 2268 [2022-11-18 21:04:19,590 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 185 GetRequests, 167 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 41 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=55, Invalid=325, Unknown=0, NotChecked=0, Total=380 [2022-11-18 21:04:19,591 INFO L413 NwaCegarLoop]: 192 mSDtfsCounter, 81 mSDsluCounter, 368 mSDsCounter, 0 mSdLazyCounter, 120 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 83 SdHoareTripleChecker+Valid, 560 SdHoareTripleChecker+Invalid, 121 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 120 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-18 21:04:19,591 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [83 Valid, 560 Invalid, 121 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 120 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-18 21:04:19,594 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2268 states. [2022-11-18 21:04:19,845 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2268 to 2091. [2022-11-18 21:04:19,850 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2091 states, 1575 states have (on average 1.2019047619047618) internal successors, (1893), 1677 states have internal predecessors, (1893), 274 states have call successors, (274), 234 states have call predecessors, (274), 241 states have return successors, (444), 241 states have call predecessors, (444), 274 states have call successors, (444) [2022-11-18 21:04:19,858 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2091 states to 2091 states and 2611 transitions. [2022-11-18 21:04:19,858 INFO L78 Accepts]: Start accepts. Automaton has 2091 states and 2611 transitions. Word has length 146 [2022-11-18 21:04:19,859 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:04:19,859 INFO L495 AbstractCegarLoop]: Abstraction has 2091 states and 2611 transitions. [2022-11-18 21:04:19,859 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 11.428571428571429) internal successors, (80), 6 states have internal predecessors, (80), 3 states have call successors, (10), 3 states have call predecessors, (10), 4 states have return successors, (10), 4 states have call predecessors, (10), 3 states have call successors, (10) [2022-11-18 21:04:19,859 INFO L276 IsEmpty]: Start isEmpty. Operand 2091 states and 2611 transitions. [2022-11-18 21:04:19,866 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 143 [2022-11-18 21:04:19,867 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:04:19,867 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:04:19,880 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-18 21:04:20,074 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-11-18 21:04:20,075 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:04:20,075 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:04:20,075 INFO L85 PathProgramCache]: Analyzing trace with hash -1075563485, now seen corresponding path program 2 times [2022-11-18 21:04:20,075 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:04:20,075 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1421173680] [2022-11-18 21:04:20,076 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:04:20,076 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:04:20,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:20,197 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-18 21:04:20,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:20,208 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-18 21:04:20,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:20,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-18 21:04:20,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:20,224 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 21:04:20,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:20,226 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-18 21:04:20,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:20,233 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-18 21:04:20,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:20,235 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-11-18 21:04:20,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:20,277 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-18 21:04:20,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:20,279 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 21:04:20,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:20,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 21:04:20,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:20,283 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-11-18 21:04:20,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:20,286 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 21:04:20,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:20,288 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2022-11-18 21:04:20,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:04:20,289 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 46 proven. 0 refuted. 0 times theorem prover too weak. 55 trivial. 0 not checked. [2022-11-18 21:04:20,290 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:04:20,290 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1421173680] [2022-11-18 21:04:20,290 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1421173680] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:04:20,290 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:04:20,290 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-11-18 21:04:20,291 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1162848334] [2022-11-18 21:04:20,291 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:04:20,291 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-11-18 21:04:20,292 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:04:20,292 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-18 21:04:20,292 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=89, Unknown=0, NotChecked=0, Total=110 [2022-11-18 21:04:20,293 INFO L87 Difference]: Start difference. First operand 2091 states and 2611 transitions. Second operand has 11 states, 11 states have (on average 8.090909090909092) internal successors, (89), 7 states have internal predecessors, (89), 2 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-18 21:04:21,063 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:04:21,064 INFO L93 Difference]: Finished difference Result 2704 states and 3326 transitions. [2022-11-18 21:04:21,064 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-18 21:04:21,065 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 8.090909090909092) internal successors, (89), 7 states have internal predecessors, (89), 2 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 142 [2022-11-18 21:04:21,065 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:04:21,066 INFO L225 Difference]: With dead ends: 2704 [2022-11-18 21:04:21,066 INFO L226 Difference]: Without dead ends: 0 [2022-11-18 21:04:21,073 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 44 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=80, Invalid=300, Unknown=0, NotChecked=0, Total=380 [2022-11-18 21:04:21,074 INFO L413 NwaCegarLoop]: 34 mSDtfsCounter, 263 mSDsluCounter, 165 mSDsCounter, 0 mSdLazyCounter, 678 mSolverCounterSat, 89 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 264 SdHoareTripleChecker+Valid, 199 SdHoareTripleChecker+Invalid, 767 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 89 IncrementalHoareTripleChecker+Valid, 678 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-18 21:04:21,075 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [264 Valid, 199 Invalid, 767 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [89 Valid, 678 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-18 21:04:21,075 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-18 21:04:21,075 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-18 21:04:21,076 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-18 21:04:21,076 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-18 21:04:21,076 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 142 [2022-11-18 21:04:21,076 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:04:21,077 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-18 21:04:21,077 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 8.090909090909092) internal successors, (89), 7 states have internal predecessors, (89), 2 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-18 21:04:21,077 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-18 21:04:21,077 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-18 21:04:21,080 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-18 21:04:21,081 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-11-18 21:04:21,083 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-18 21:04:31,396 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 862 869) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2))) [2022-11-18 21:04:31,396 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 862 869) no Hoare annotation was computed. [2022-11-18 21:04:31,396 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 862 869) no Hoare annotation was computed. [2022-11-18 21:04:31,396 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 777 783) no Hoare annotation was computed. [2022-11-18 21:04:31,396 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 777 783) the Hoare annotation is: true [2022-11-18 21:04:31,397 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 84 95) the Hoare annotation is: (let ((.cse1 (not (= ~pumpRunning~0 0))) (.cse2 (not (<= 1 ~waterLevel~0))) (.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse3 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse2 .cse3 (not (<= 1 |old(~methaneLevelCritical~0)|)) .cse4) (or .cse0 .cse3 (not (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0) .cse4))) [2022-11-18 21:04:31,397 INFO L899 garLoopResultBuilder]: For program point L88-1(lines 84 95) no Hoare annotation was computed. [2022-11-18 21:04:31,397 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 84 95) no Hoare annotation was computed. [2022-11-18 21:04:31,397 INFO L899 garLoopResultBuilder]: For program point L64(lines 64 68) no Hoare annotation was computed. [2022-11-18 21:04:31,397 INFO L895 garLoopResultBuilder]: At program point L960(lines 945 963) the Hoare annotation is: (let ((.cse6 (= 0 ~systemActive~0))) (let ((.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse5 (not .cse6)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse9 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse10 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse11 (let ((.cse14 (= ~waterLevel~0 0))) (or (and (not .cse14) (= |timeShift_isLowWaterLevel_~tmp~9#1| 0)) (and (= |timeShift_isLowWaterLevel_~tmp~9#1| 1) .cse14)))) (.cse12 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse13 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse2 .cse3 .cse5) (or .cse1 .cse3 .cse6 (and .cse7 .cse8 (= ~methAndRunningLastTime~0 0) .cse9 .cse10 .cse11 .cse12) .cse13) (or .cse0 .cse2 .cse4 .cse5) (or .cse4 (and .cse7 .cse8 .cse9 .cse10 .cse11 .cse12) .cse6 .cse13)))) [2022-11-18 21:04:31,398 INFO L895 garLoopResultBuilder]: At program point L64-2(lines 60 71) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse9 (not .cse5)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 (and .cse6 .cse7) .cse8) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse2 .cse3 .cse9) (or .cse0 .cse2 .cse4 .cse9) (or (and .cse6 (= ~methAndRunningLastTime~0 0) .cse7) .cse1 .cse3 .cse5 .cse8)))) [2022-11-18 21:04:31,398 INFO L895 garLoopResultBuilder]: At program point L886(lines 881 889) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |timeShift_isPumpRunning_#res#1| 0))) (let ((.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse2 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse9 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 1 |old(~waterLevel~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (and .cse0 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (.cse10 (not .cse4))) (and (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse0 .cse1 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (= |timeShift_isLowWaterLevel_~tmp~9#1| 0) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse2 .cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) .cse4 .cse5) (or .cse6 .cse2 .cse7 .cse3 .cse8) (or .cse9 .cse4 .cse5) (or .cse6 .cse2 .cse7 .cse9) (or .cse6 .cse7 .cse9 .cse10) (or .cse6 .cse7 .cse3 .cse8 .cse10)))) [2022-11-18 21:04:31,398 INFO L899 garLoopResultBuilder]: For program point L1010(lines 1010 1016) no Hoare annotation was computed. [2022-11-18 21:04:31,399 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 753 776) no Hoare annotation was computed. [2022-11-18 21:04:31,399 INFO L895 garLoopResultBuilder]: At program point L156(lines 151 159) the Hoare annotation is: (let ((.cse9 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse5 (not .cse9)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse8 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse10 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse2 .cse3 .cse5) (or .cse0 .cse2 .cse4 .cse5) (or .cse1 .cse3 (and .cse6 .cse7 (= ~methAndRunningLastTime~0 0) .cse8) .cse9 .cse10) (or .cse4 .cse9 (and .cse6 .cse7 .cse8) .cse10)))) [2022-11-18 21:04:31,399 INFO L895 garLoopResultBuilder]: At program point L825(line 825) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not .cse5)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse2 .cse3 .cse7) (or .cse0 .cse2 .cse4 .cse7) (or .cse1 .cse3 .cse5 .cse6)))) [2022-11-18 21:04:31,399 INFO L895 garLoopResultBuilder]: At program point L821(line 821) the Hoare annotation is: (let ((.cse6 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not .cse6)) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (let ((.cse9 (= ~waterLevel~0 0))) (or (and (not .cse9) (= |timeShift_isLowWaterLevel_~tmp~9#1| 0)) (and (= |timeShift_isLowWaterLevel_~tmp~9#1| 1) .cse9))) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse7) (or .cse0 .cse1 .cse2 .cse5) (or .cse0 .cse2 .cse3 .cse8) (or .cse0 .cse2 .cse5 .cse8) (or .cse4 .cse1 .cse3 .cse6 .cse7)))) [2022-11-18 21:04:31,400 INFO L895 garLoopResultBuilder]: At program point L1003(line 1003) the Hoare annotation is: (let ((.cse24 (= ~waterLevel~0 0))) (let ((.cse14 (= 0 ~systemActive~0)) (.cse15 (= ~pumpRunning~0 0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse21 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse16 (= ~methaneLevelCritical~0 0)) (.cse23 (not .cse24))) (let ((.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse11 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse12 (<= 1 |timeShift_processEnvironment_~tmp~6#1|)) (.cse13 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse19 (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse23) (and (= |timeShift_isLowWaterSensorDry_#res#1| 1) .cse24))) (.cse10 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse20 (or (and .cse23 (= |timeShift_isLowWaterLevel_~tmp~9#1| 0)) (and (= |timeShift_isLowWaterLevel_~tmp~9#1| 1) .cse24))) (.cse2 (not .cse16)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (and .cse15 .cse3 .cse21)) (.cse18 (not .cse14))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse6 .cse7) (let ((.cse9 (let ((.cse17 (<= 1 ~waterLevel~0))) (or (and .cse8 .cse15 .cse16 .cse17 .cse10 .cse18) (and .cse19 .cse15 .cse16 .cse17 .cse10 .cse20 .cse18))))) (or (and .cse8 .cse9) .cse2 (and (<= 2 ~waterLevel~0) .cse10) (and .cse9 .cse11 .cse12 .cse13) .cse14 .cse4)) (or (and .cse15 .cse21 (= ~waterLevel~0 1)) .cse0 .cse1 (not (= |old(~waterLevel~0)| 1)) .cse2) (let ((.cse22 (or (and .cse8 .cse15 .cse10) (and .cse19 .cse15 .cse10 .cse20)))) (or .cse1 .cse6 (and .cse11 .cse12 .cse22 .cse13) .cse14 (and .cse8 .cse22) .cse4)) (or .cse0 .cse5 .cse2 .cse7 .cse18) (or .cse0 .cse5 .cse6 .cse7 .cse18))))) [2022-11-18 21:04:31,400 INFO L899 garLoopResultBuilder]: For program point L1003-1(line 1003) no Hoare annotation was computed. [2022-11-18 21:04:31,400 INFO L899 garLoopResultBuilder]: For program point L165(line 165) no Hoare annotation was computed. [2022-11-18 21:04:31,400 INFO L895 garLoopResultBuilder]: At program point L830(line 830) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse8 (not .cse3)) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse11 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (<= 1 |old(~waterLevel~0)|))) (.cse7 (not (<= 1 ~methaneLevelCritical~0)))) (and (or (and .cse0 .cse1 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse8) (or .cse9 .cse7 (and .cse0 .cse1) .cse3 .cse4) (or .cse5 .cse9 .cse6 .cse7 .cse10) (or .cse5 .cse6 .cse2 .cse8) (or .cse5 .cse9 .cse6 .cse2 (and .cse10 .cse11)) (or .cse5 .cse1 .cse9 .cse6 .cse2) (or (and .cse1 .cse11) .cse5 .cse9 .cse6 .cse7)))) [2022-11-18 21:04:31,401 INFO L895 garLoopResultBuilder]: At program point L830-1(lines 811 835) the Hoare annotation is: (let ((.cse23 (= ~waterLevel~0 0))) (let ((.cse22 (not .cse23)) (.cse16 (= ~methaneLevelCritical~0 0)) (.cse15 (= 0 ~systemActive~0))) (let ((.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse18 (not .cse15)) (.cse8 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not .cse16)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse12 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse13 (<= 1 |timeShift_processEnvironment_~tmp~6#1|)) (.cse14 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse19 (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse22) (and (= |timeShift_isLowWaterSensorDry_#res#1| 1) .cse23))) (.cse7 (= ~pumpRunning~0 0)) (.cse11 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse20 (or (and .cse22 (= |timeShift_isLowWaterLevel_~tmp~9#1| 0)) (and (= |timeShift_isLowWaterLevel_~tmp~9#1| 1) .cse23)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse6 (and .cse7 .cse3 .cse8)) (let ((.cse10 (let ((.cse17 (<= 1 ~waterLevel~0))) (or (and .cse9 .cse7 .cse16 .cse17 .cse11 .cse18) (and .cse19 .cse7 .cse16 .cse17 .cse11 .cse20 .cse18))))) (or (and .cse9 .cse10) .cse2 (and (<= 2 ~waterLevel~0) .cse11) (and .cse10 .cse12 .cse13 .cse14) .cse15 .cse4)) (or .cse0 .cse5 .cse6 .cse18) (or .cse0 .cse5 .cse2 .cse18) (or (and .cse7 .cse8 (= ~waterLevel~0 1)) .cse0 .cse1 (not (= |old(~waterLevel~0)| 1)) .cse2) (let ((.cse21 (or (and .cse9 .cse7 .cse11) (and .cse19 .cse7 .cse11 .cse20)))) (or .cse1 .cse6 (and .cse12 .cse13 .cse21 .cse14) .cse15 (and .cse9 .cse21) .cse4)))))) [2022-11-18 21:04:31,401 INFO L899 garLoopResultBuilder]: For program point L764-1(lines 764 770) no Hoare annotation was computed. [2022-11-18 21:04:31,401 INFO L899 garLoopResultBuilder]: For program point L954(lines 954 958) no Hoare annotation was computed. [2022-11-18 21:04:31,401 INFO L899 garLoopResultBuilder]: For program point L954-2(lines 954 958) no Hoare annotation was computed. [2022-11-18 21:04:31,401 INFO L895 garLoopResultBuilder]: At program point L166(lines 161 168) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not .cse5)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse2 .cse3 .cse7) (or .cse0 .cse2 .cse4 .cse7) (or .cse1 .cse3 .cse5 .cse6)))) [2022-11-18 21:04:31,402 INFO L899 garLoopResultBuilder]: For program point L757-1(lines 756 775) no Hoare annotation was computed. [2022-11-18 21:04:31,402 INFO L899 garLoopResultBuilder]: For program point L819(lines 819 827) no Hoare annotation was computed. [2022-11-18 21:04:31,402 INFO L899 garLoopResultBuilder]: For program point L1009(lines 1009 1019) no Hoare annotation was computed. [2022-11-18 21:04:31,402 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 753 776) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0)) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse11 (= ~pumpRunning~0 0)) (.cse13 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (let ((.cse4 (and .cse11 .cse13 (= ~waterLevel~0 1))) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse12 .cse13)) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (<= 1 |old(~waterLevel~0)|))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (not .cse2))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse5 .cse9 .cse0 .cse1 .cse10) (or .cse4 .cse5 .cse6 .cse7 .cse1) (or .cse6 .cse8 .cse0 .cse2 .cse3) (or .cse5 .cse9 .cse8 (and .cse11 .cse12 .cse13) .cse10)))) [2022-11-18 21:04:31,402 INFO L899 garLoopResultBuilder]: For program point L815(lines 815 832) no Hoare annotation was computed. [2022-11-18 21:04:31,403 INFO L899 garLoopResultBuilder]: For program point L1005(lines 1005 1022) no Hoare annotation was computed. [2022-11-18 21:04:31,403 INFO L895 garLoopResultBuilder]: At program point L1005-1(lines 997 1025) the Hoare annotation is: (let ((.cse24 (= ~waterLevel~0 0))) (let ((.cse18 (= 0 ~systemActive~0)) (.cse20 (= ~methaneLevelCritical~0 0)) (.cse23 (not .cse24))) (let ((.cse4 (not (<= 1 |old(~waterLevel~0)|))) (.cse13 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse14 (<= 1 |timeShift_processEnvironment_~tmp~6#1|)) (.cse17 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse12 (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse23) (and (= |timeShift_isLowWaterSensorDry_#res#1| 1) .cse24))) (.cse15 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse16 (or (and .cse23 (= |timeShift_isLowWaterLevel_~tmp~9#1| 0)) (and (= |timeShift_isLowWaterLevel_~tmp~9#1| 1) .cse24))) (.cse9 (not (<= 2 |old(~waterLevel~0)|))) (.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse22 (not (= |old(~waterLevel~0)| 1))) (.cse8 (not .cse20)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse10 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~10#1| 0)) (.cse6 (not .cse18))) (and (or .cse0 (and .cse1 .cse2 .cse3) .cse4 .cse5 .cse6) (or .cse0 .cse7 .cse8 .cse3 .cse9) (or .cse0 (and .cse1 .cse2 .cse10 .cse3) .cse4 .cse8 .cse6) (or (and .cse11 .cse1 .cse6) .cse7 .cse5 (and .cse12 .cse1 .cse2 .cse13 .cse14 .cse15 .cse16 .cse17 .cse6) .cse18 .cse9) (let ((.cse19 (let ((.cse21 (<= 1 ~waterLevel~0))) (or (and .cse11 .cse1 .cse2 .cse20 .cse10 .cse21 .cse15 .cse6) (and .cse12 .cse1 .cse2 .cse20 .cse10 .cse21 .cse15 .cse16 .cse6))))) (or (and .cse19 .cse13 .cse14 .cse17) (and .cse2 .cse10 (<= 2 ~waterLevel~0) .cse15) (and .cse11 .cse19) .cse8 .cse18 .cse9)) (or .cse0 .cse7 (and .cse2 .cse3) .cse5 .cse9) (or (and .cse11 .cse2 .cse3) .cse0 .cse7 .cse22 .cse5) (or .cse0 .cse7 .cse22 .cse8 (and .cse1 .cse2 .cse10 (= ~waterLevel~0 1) .cse6) .cse18))))) [2022-11-18 21:04:31,403 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 753 776) no Hoare annotation was computed. [2022-11-18 21:04:31,403 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 165) no Hoare annotation was computed. [2022-11-18 21:04:31,404 INFO L899 garLoopResultBuilder]: For program point L193(line 193) no Hoare annotation was computed. [2022-11-18 21:04:31,404 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 172 201) no Hoare annotation was computed. [2022-11-18 21:04:31,404 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 172 201) the Hoare annotation is: true [2022-11-18 21:04:31,404 INFO L899 garLoopResultBuilder]: For program point L186(lines 186 190) no Hoare annotation was computed. [2022-11-18 21:04:31,404 INFO L902 garLoopResultBuilder]: At program point L186-1(lines 186 190) the Hoare annotation is: true [2022-11-18 21:04:31,404 INFO L899 garLoopResultBuilder]: For program point L183(line 183) no Hoare annotation was computed. [2022-11-18 21:04:31,404 INFO L902 garLoopResultBuilder]: At program point L182-2(lines 182 196) the Hoare annotation is: true [2022-11-18 21:04:31,405 INFO L902 garLoopResultBuilder]: At program point L178(line 178) the Hoare annotation is: true [2022-11-18 21:04:31,405 INFO L899 garLoopResultBuilder]: For program point L178-1(line 178) no Hoare annotation was computed. [2022-11-18 21:04:31,405 INFO L902 garLoopResultBuilder]: At program point L197(lines 172 201) the Hoare annotation is: true [2022-11-18 21:04:31,405 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 96 104) the Hoare annotation is: true [2022-11-18 21:04:31,405 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 96 104) no Hoare annotation was computed. [2022-11-18 21:04:31,405 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 96 104) no Hoare annotation was computed. [2022-11-18 21:04:31,406 INFO L902 garLoopResultBuilder]: At program point L374(lines 311 378) the Hoare annotation is: true [2022-11-18 21:04:31,406 INFO L899 garLoopResultBuilder]: For program point L341(lines 341 347) no Hoare annotation was computed. [2022-11-18 21:04:31,406 INFO L899 garLoopResultBuilder]: For program point L341-1(lines 341 347) no Hoare annotation was computed. [2022-11-18 21:04:31,406 INFO L895 garLoopResultBuilder]: At program point L304(lines 299 307) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-18 21:04:31,406 INFO L895 garLoopResultBuilder]: At program point L333(line 333) the Hoare annotation is: (let ((.cse4 (<= 2 ~waterLevel~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse0 (= ~methAndRunningLastTime~0 0)) (.cse7 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (not (= 0 ~systemActive~0))) (and .cse6 .cse0 .cse7 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse0 .cse1 .cse2 .cse3 .cse5 (<= 1 ~waterLevel~0)) (and .cse6 .cse0 .cse7 .cse2 .cse3 .cse5 (= ~waterLevel~0 1)))) [2022-11-18 21:04:31,406 INFO L895 garLoopResultBuilder]: At program point L296(lines 292 298) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-18 21:04:31,407 INFO L895 garLoopResultBuilder]: At program point L994(lines 989 996) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-18 21:04:31,407 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-18 21:04:31,407 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-18 21:04:31,407 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-18 21:04:31,407 INFO L895 garLoopResultBuilder]: At program point L371(lines 320 372) the Hoare annotation is: false [2022-11-18 21:04:31,407 INFO L895 garLoopResultBuilder]: At program point L970(line 970) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (<= 2 ~waterLevel~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3 .cse4) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-11-18 21:04:31,408 INFO L895 garLoopResultBuilder]: At program point L231(lines 227 233) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-18 21:04:31,408 INFO L899 garLoopResultBuilder]: For program point L359(lines 359 365) no Hoare annotation was computed. [2022-11-18 21:04:31,408 INFO L895 garLoopResultBuilder]: At program point L359-2(lines 351 366) the Hoare annotation is: (let ((.cse6 (= 0 ~systemActive~0))) (let ((.cse9 (<= 2 ~waterLevel~0)) (.cse10 (not .cse6)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= 1 ~waterLevel~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse3 .cse9 .cse4 .cse10) (and .cse1 .cse2 .cse3 .cse9 .cse4 .cse10) (and .cse0 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse7 .cse8 .cse2 .cse3 .cse4 (= ~waterLevel~0 1)) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6)))) [2022-11-18 21:04:31,408 INFO L899 garLoopResultBuilder]: For program point L260(lines 260 267) no Hoare annotation was computed. [2022-11-18 21:04:31,408 INFO L899 garLoopResultBuilder]: For program point L322(lines 321 370) no Hoare annotation was computed. [2022-11-18 21:04:31,409 INFO L899 garLoopResultBuilder]: For program point L260-2(lines 260 267) no Hoare annotation was computed. [2022-11-18 21:04:31,409 INFO L895 garLoopResultBuilder]: At program point L289(lines 285 291) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-18 21:04:31,409 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-18 21:04:31,409 INFO L899 garLoopResultBuilder]: For program point L351(lines 351 366) no Hoare annotation was computed. [2022-11-18 21:04:31,409 INFO L895 garLoopResultBuilder]: At program point L343(line 343) the Hoare annotation is: (let ((.cse4 (<= 2 ~waterLevel~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse0 (= ~methAndRunningLastTime~0 0)) (.cse7 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (not (= 0 ~systemActive~0))) (and .cse6 .cse0 .cse7 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse0 .cse1 .cse2 .cse3 .cse5 (<= 1 ~waterLevel~0)) (and .cse6 .cse0 .cse7 .cse2 .cse3 .cse5 (= ~waterLevel~0 1)))) [2022-11-18 21:04:31,409 INFO L902 garLoopResultBuilder]: At program point L244(lines 236 246) the Hoare annotation is: true [2022-11-18 21:04:31,410 INFO L895 garLoopResultBuilder]: At program point L368(lines 321 370) the Hoare annotation is: (let ((.cse4 (<= 2 ~waterLevel~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse0 (= ~methAndRunningLastTime~0 0)) (.cse7 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (not (= 0 ~systemActive~0))) (and .cse6 .cse0 .cse7 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse0 .cse1 .cse2 .cse3 .cse5 (<= 1 ~waterLevel~0)) (and .cse6 .cse0 .cse7 .cse2 .cse3 .cse5 (= ~waterLevel~0 1)))) [2022-11-18 21:04:31,410 INFO L902 garLoopResultBuilder]: At program point L269(lines 250 272) the Hoare annotation is: true [2022-11-18 21:04:31,410 INFO L899 garLoopResultBuilder]: For program point L331(lines 331 337) no Hoare annotation was computed. [2022-11-18 21:04:31,410 INFO L899 garLoopResultBuilder]: For program point L331-1(lines 331 337) no Hoare annotation was computed. [2022-11-18 21:04:31,410 INFO L899 garLoopResultBuilder]: For program point L323(lines 323 327) no Hoare annotation was computed. [2022-11-18 21:04:31,411 INFO L895 garLoopResultBuilder]: At program point L984(lines 979 986) the Hoare annotation is: (let ((.cse4 (<= 2 ~waterLevel~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse8 (= ~pumpRunning~0 0)) (.cse0 (= ~methAndRunningLastTime~0 0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse8 .cse0 .cse1 .cse2 .cse3 .cse5 (= ~waterLevel~0 1) .cse6) (and .cse8 .cse0 .cse7 .cse2 .cse3 .cse5 (<= 1 ~waterLevel~0) .cse6))) [2022-11-18 21:04:31,411 INFO L895 garLoopResultBuilder]: At program point L976(lines 964 978) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= 1 ~waterLevel~0)) (.cse5 (= 0 ~systemActive~0))) (or (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-11-18 21:04:31,411 INFO L899 garLoopResultBuilder]: For program point L968(lines 968 974) no Hoare annotation was computed. [2022-11-18 21:04:31,411 INFO L899 garLoopResultBuilder]: For program point L968-1(lines 968 974) no Hoare annotation was computed. [2022-11-18 21:04:31,411 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 785 809) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (<= 1 ~waterLevel~0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse3))) [2022-11-18 21:04:31,412 INFO L895 garLoopResultBuilder]: At program point L799(line 799) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0) (not .cse3)))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 .cse3 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2 .cse3)))) [2022-11-18 21:04:31,412 INFO L899 garLoopResultBuilder]: For program point L793(lines 793 801) no Hoare annotation was computed. [2022-11-18 21:04:31,412 INFO L899 garLoopResultBuilder]: For program point L789(lines 789 806) no Hoare annotation was computed. [2022-11-18 21:04:31,412 INFO L899 garLoopResultBuilder]: For program point L141(lines 141 147) no Hoare annotation was computed. [2022-11-18 21:04:31,412 INFO L895 garLoopResultBuilder]: At program point L841(lines 836 843) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse1 (<= 2 ~waterLevel~0) (not (= ~methaneLevelCritical~0 0)) .cse2))) [2022-11-18 21:04:31,412 INFO L895 garLoopResultBuilder]: At program point L804(line 804) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2))) [2022-11-18 21:04:31,413 INFO L899 garLoopResultBuilder]: For program point L804-1(lines 785 809) no Hoare annotation was computed. [2022-11-18 21:04:31,413 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 785 809) no Hoare annotation was computed. [2022-11-18 21:04:31,413 INFO L899 garLoopResultBuilder]: For program point L852(lines 852 858) no Hoare annotation was computed. [2022-11-18 21:04:31,413 INFO L895 garLoopResultBuilder]: At program point L146(lines 137 150) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (and .cse5 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)))) (.cse3 (and .cse5 (<= 2 ~waterLevel~0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse3 .cse4) (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4 (not (= ~methAndRunningLastTime~0 0)))))) [2022-11-18 21:04:31,413 INFO L895 garLoopResultBuilder]: At program point L852-2(lines 845 861) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse3 (<= 2 ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0)) (and (= ~pumpRunning~0 0) .cse3 (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~7#1|) (= |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1| ~methaneLevelCritical~0))) (or .cse0 .cse1 .cse3 (not (= ~methaneLevelCritical~0 0)) .cse2))) [2022-11-18 21:04:31,414 INFO L895 garLoopResultBuilder]: At program point L941(lines 926 944) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0)) (.cse5 (= ~pumpRunning~0 0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (and .cse5 (<= 2 ~waterLevel~0))) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 0)) .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (not .cse4)))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2 .cse3 .cse4) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 .cse3 .cse4 (not (= ~methAndRunningLastTime~0 0)))))) [2022-11-18 21:04:31,414 INFO L895 garLoopResultBuilder]: At program point L877(lines 870 880) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse4 (= 0 ~systemActive~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (<= 2 ~waterLevel~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) (and .cse2 .cse3) .cse4) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse4 (and .cse2 .cse3 (= |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1| ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))))) [2022-11-18 21:04:31,414 INFO L895 garLoopResultBuilder]: At program point L875(line 875) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse2 (<= 2 ~waterLevel~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (= 0 ~systemActive~0)) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 (not (<= 1 ~waterLevel~0)) (not (= ~methaneLevelCritical~0 0)) (and .cse1 .cse2) .cse3) (or .cse0 .cse1 (not .cse2) .cse4 .cse3 .cse5) (or (not (= ~waterLevel~0 1)) .cse0 .cse4 .cse3 .cse5))) [2022-11-18 21:04:31,414 INFO L899 garLoopResultBuilder]: For program point L875-1(line 875) no Hoare annotation was computed. [2022-11-18 21:04:31,414 INFO L899 garLoopResultBuilder]: For program point L935(lines 935 939) no Hoare annotation was computed. [2022-11-18 21:04:31,414 INFO L899 garLoopResultBuilder]: For program point L935-2(lines 935 939) no Hoare annotation was computed. [2022-11-18 21:04:31,415 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 72 83) no Hoare annotation was computed. [2022-11-18 21:04:31,415 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 72 83) no Hoare annotation was computed. [2022-11-18 21:04:31,415 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 72 83) the Hoare annotation is: (let ((.cse3 (not (= ~pumpRunning~0 0))) (.cse4 (not (<= 1 |old(~waterLevel~0)|))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (= 0 ~systemActive~0) .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 .cse4 (not (<= 1 ~methaneLevelCritical~0)) .cse1 .cse2) (or .cse3 .cse4 .cse0 .cse1 .cse2))) [2022-11-18 21:04:31,418 INFO L444 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:04:31,421 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-18 21:04:31,479 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 18.11 09:04:31 BoogieIcfgContainer [2022-11-18 21:04:31,489 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-18 21:04:31,490 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-18 21:04:31,490 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-18 21:04:31,490 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-18 21:04:31,490 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 09:04:05" (3/4) ... [2022-11-18 21:04:31,493 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-18 21:04:31,500 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-18 21:04:31,500 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-18 21:04:31,500 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-18 21:04:31,500 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-18 21:04:31,500 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-18 21:04:31,500 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-18 21:04:31,502 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-18 21:04:31,502 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-18 21:04:31,514 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 25 nodes and edges [2022-11-18 21:04:31,515 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-18 21:04:31,515 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-18 21:04:31,515 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-18 21:04:31,516 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-18 21:04:31,544 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-11-18 21:04:31,544 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-11-18 21:04:31,545 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-11-18 21:04:31,545 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) [2022-11-18 21:04:31,547 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && (((!(methaneLevelCritical == 0) || 0 == systemActive) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-11-18 21:04:31,548 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((((((pumpRunning == \old(pumpRunning) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || ((((((((\result == 0 && !(waterLevel == 0)) || (\result == 1 && waterLevel == 0)) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && !(0 == systemActive)))) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && \old(waterLevel) <= waterLevel + 1)) || (((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || ((((((((\result == 0 && !(waterLevel == 0)) || (\result == 1 && waterLevel == 0)) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && !(0 == systemActive))) && 1 <= \result) && 1 <= tmp) && 1 <= tmp___0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((((pumpRunning == 0 && \old(methAndRunningLastTime) == methAndRunningLastTime) && waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || (((1 <= \result && 1 <= tmp) && (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) <= waterLevel + 1) || (((((\result == 0 && !(waterLevel == 0)) || (\result == 1 && waterLevel == 0)) && pumpRunning == 0) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))))) && 1 <= tmp___0)) || 0 == systemActive) || (pumpRunning == \old(pumpRunning) && (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) <= waterLevel + 1) || (((((\result == 0 && !(waterLevel == 0)) || (\result == 1 && waterLevel == 0)) && pumpRunning == 0) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0)))))) || !(2 <= \old(waterLevel))) [2022-11-18 21:04:31,550 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((methAndRunningLastTime == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || (((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && !(0 == systemActive)) [2022-11-18 21:04:31,551 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(0 == systemActive)) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || ((((((((((\result == 0 && !(waterLevel == 0)) || (\result == 1 && waterLevel == 0)) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && 1 <= tmp___0) && !(0 == systemActive))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((((((((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || ((((((((((\result == 0 && !(waterLevel == 0)) || (\result == 1 && waterLevel == 0)) && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && !(0 == systemActive))) && 1 <= \result) && 1 <= tmp) && 1 <= tmp___0) || (((methAndRunningLastTime == 0 && tmp == 0) && 2 <= waterLevel) && \old(waterLevel) <= waterLevel + 1)) || (pumpRunning == \old(pumpRunning) && ((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || ((((((((((\result == 0 && !(waterLevel == 0)) || (\result == 1 && waterLevel == 0)) && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && !(0 == systemActive))))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0) && waterLevel == 1) && !(0 == systemActive))) || 0 == systemActive) [2022-11-18 21:04:31,551 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == 0 && 2 <= waterLevel) && \result == methaneLevelCritical)) || !(methAndRunningLastTime == 0)) [2022-11-18 21:04:31,552 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive) [2022-11-18 21:04:31,552 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((\result == 0 && pumpRunning == 0) && \result == 0) && 1 <= \result) && 1 <= tmp) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(0 == systemActive)) [2022-11-18 21:04:31,552 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(methaneLevelCritical == 0) || 0 == systemActive) || ((pumpRunning == \old(pumpRunning) && \result == 0) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) [2022-11-18 21:04:31,552 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) || (((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical == tmp) && \result == methaneLevelCritical)) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-11-18 21:04:31,553 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-11-18 21:04:31,553 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-11-18 21:04:31,553 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((((((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && 1 <= tmp___0)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(methaneLevelCritical == 0) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && 1 <= tmp___0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-11-18 21:04:31,553 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && ((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-11-18 21:04:31,554 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || (((((pumpRunning == \old(pumpRunning) && !(tmp == 0)) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || 0 == systemActive) && ((((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || (((((pumpRunning == \old(pumpRunning) && !(tmp == 0)) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-11-18 21:04:31,605 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/witness.graphml [2022-11-18 21:04:31,606 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-18 21:04:31,606 INFO L158 Benchmark]: Toolchain (without parser) took 27432.15ms. Allocated memory was 107.0MB in the beginning and 408.9MB in the end (delta: 302.0MB). Free memory was 64.7MB in the beginning and 340.9MB in the end (delta: -276.2MB). Peak memory consumption was 24.4MB. Max. memory is 16.1GB. [2022-11-18 21:04:31,607 INFO L158 Benchmark]: CDTParser took 0.28ms. Allocated memory is still 107.0MB. Free memory is still 82.3MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-18 21:04:31,608 INFO L158 Benchmark]: CACSL2BoogieTranslator took 568.44ms. Allocated memory is still 107.0MB. Free memory was 64.5MB in the beginning and 74.4MB in the end (delta: -9.9MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-11-18 21:04:31,608 INFO L158 Benchmark]: Boogie Procedure Inliner took 76.40ms. Allocated memory is still 107.0MB. Free memory was 74.1MB in the beginning and 72.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-18 21:04:31,608 INFO L158 Benchmark]: Boogie Preprocessor took 34.86ms. Allocated memory is still 107.0MB. Free memory was 72.0MB in the beginning and 70.1MB in the end (delta: 1.9MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-18 21:04:31,609 INFO L158 Benchmark]: RCFGBuilder took 574.13ms. Allocated memory is still 107.0MB. Free memory was 70.1MB in the beginning and 52.7MB in the end (delta: 17.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-11-18 21:04:31,609 INFO L158 Benchmark]: TraceAbstraction took 26055.34ms. Allocated memory was 107.0MB in the beginning and 408.9MB in the end (delta: 302.0MB). Free memory was 52.0MB in the beginning and 347.2MB in the end (delta: -295.3MB). Peak memory consumption was 222.5MB. Max. memory is 16.1GB. [2022-11-18 21:04:31,610 INFO L158 Benchmark]: Witness Printer took 116.15ms. Allocated memory is still 408.9MB. Free memory was 347.2MB in the beginning and 340.9MB in the end (delta: 6.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-18 21:04:31,616 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.28ms. Allocated memory is still 107.0MB. Free memory is still 82.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 568.44ms. Allocated memory is still 107.0MB. Free memory was 64.5MB in the beginning and 74.4MB in the end (delta: -9.9MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 76.40ms. Allocated memory is still 107.0MB. Free memory was 74.1MB in the beginning and 72.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 34.86ms. Allocated memory is still 107.0MB. Free memory was 72.0MB in the beginning and 70.1MB in the end (delta: 1.9MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 574.13ms. Allocated memory is still 107.0MB. Free memory was 70.1MB in the beginning and 52.7MB in the end (delta: 17.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 26055.34ms. Allocated memory was 107.0MB in the beginning and 408.9MB in the end (delta: 302.0MB). Free memory was 52.0MB in the beginning and 347.2MB in the end (delta: -295.3MB). Peak memory consumption was 222.5MB. Max. memory is 16.1GB. * Witness Printer took 116.15ms. Allocated memory is still 408.9MB. Free memory was 347.2MB in the beginning and 340.9MB in the end (delta: 6.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 165]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 101 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 25.9s, OverallIterations: 14, TraceHistogramMax: 4, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 7.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 10.3s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3144 SdHoareTripleChecker+Valid, 3.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3108 mSDsluCounter, 4787 SdHoareTripleChecker+Invalid, 3.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3307 mSDsCounter, 1148 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4221 IncrementalHoareTripleChecker+Invalid, 5369 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1148 mSolverCounterUnsat, 1480 mSDtfsCounter, 4221 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1352 GetRequests, 1153 SyntacticMatches, 11 SemanticMatches, 188 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1113 ImplicationChecksByTransitivity, 2.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=2363occurred in iteration=11, InterpolantAutomatonStates: 155, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.6s AutomataMinimizationTime, 14 MinimizatonAttempts, 1280 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 47 LocationsWithAnnotation, 5720 PreInvPairs, 6224 NumberOfFragments, 3967 HoareAnnotationTreeSize, 5720 FomulaSimplifications, 7934 FormulaSimplificationTreeSizeReduction, 1.7s HoareSimplificationTime, 47 FomulaSimplificationsInter, 30233 FormulaSimplificationTreeSizeReductionInter, 8.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 4.2s InterpolantComputationTime, 1824 NumberOfCodeBlocks, 1824 NumberOfCodeBlocksAsserted, 19 NumberOfCheckSat, 2087 ConstructedInterpolants, 0 QuantifiedInterpolants, 3885 SizeOfPredicates, 9 NumberOfNonLiveVariables, 2203 ConjunctsInSsa, 36 ConjunctsInUnsatCore, 21 InterpolantComputations, 12 PerfectInterpolantSequences, 1042/1189 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 285]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 870]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == 0 && 2 <= waterLevel) && \result == methaneLevelCritical)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 321]: Loop Invariant Derived loop invariant: ((((((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) - InvariantResult [Line: 236]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 227]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && ((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 836]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 989]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 945]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((((((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && 1 <= tmp___0)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(methaneLevelCritical == 0) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && 1 <= tmp___0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 881]: Loop Invariant Derived loop invariant: ((((((((((((((((\result == 0 && pumpRunning == 0) && \result == 0) && 1 <= \result) && 1 <= tmp) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(0 == systemActive)) - InvariantResult [Line: 292]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 172]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 182]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 60]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && (((!(methaneLevelCritical == 0) || 0 == systemActive) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 926]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || (((((pumpRunning == \old(pumpRunning) && !(tmp == 0)) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || 0 == systemActive) && ((((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || (((((pumpRunning == \old(pumpRunning) && !(tmp == 0)) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(methaneLevelCritical == 0) || 0 == systemActive) || ((pumpRunning == \old(pumpRunning) && \result == 0) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 845]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) || (((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical == tmp) && \result == methaneLevelCritical)) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 250]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 137]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 299]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 320]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 979]: Loop Invariant Derived loop invariant: ((((((((methAndRunningLastTime == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || (((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && !(0 == systemActive)) - InvariantResult [Line: 964]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive) - InvariantResult [Line: 997]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(0 == systemActive)) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || ((((((((((\result == 0 && !(waterLevel == 0)) || (\result == 1 && waterLevel == 0)) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && 1 <= tmp___0) && !(0 == systemActive))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((((((((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || ((((((((((\result == 0 && !(waterLevel == 0)) || (\result == 1 && waterLevel == 0)) && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && !(0 == systemActive))) && 1 <= \result) && 1 <= tmp) && 1 <= tmp___0) || (((methAndRunningLastTime == 0 && tmp == 0) && 2 <= waterLevel) && \old(waterLevel) <= waterLevel + 1)) || (pumpRunning == \old(pumpRunning) && ((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || ((((((((((\result == 0 && !(waterLevel == 0)) || (\result == 1 && waterLevel == 0)) && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && !(0 == systemActive))))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0) && waterLevel == 1) && !(0 == systemActive))) || 0 == systemActive) - InvariantResult [Line: 311]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 811]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((((((pumpRunning == \old(pumpRunning) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || ((((((((\result == 0 && !(waterLevel == 0)) || (\result == 1 && waterLevel == 0)) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && !(0 == systemActive)))) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && \old(waterLevel) <= waterLevel + 1)) || (((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || ((((((((\result == 0 && !(waterLevel == 0)) || (\result == 1 && waterLevel == 0)) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && !(0 == systemActive))) && 1 <= \result) && 1 <= tmp) && 1 <= tmp___0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((((pumpRunning == 0 && \old(methAndRunningLastTime) == methAndRunningLastTime) && waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || (((1 <= \result && 1 <= tmp) && (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) <= waterLevel + 1) || (((((\result == 0 && !(waterLevel == 0)) || (\result == 1 && waterLevel == 0)) && pumpRunning == 0) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))))) && 1 <= tmp___0)) || 0 == systemActive) || (pumpRunning == \old(pumpRunning) && (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) <= waterLevel + 1) || (((((\result == 0 && !(waterLevel == 0)) || (\result == 1 && waterLevel == 0)) && pumpRunning == 0) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0)))))) || !(2 <= \old(waterLevel))) RESULT: Ultimate proved your program to be correct! [2022-11-18 21:04:31,662 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_acc7965f-253f-4aa8-94cf-189f5cda740e/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE