./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8393723b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash b18268074b12ff6db81668668ee2d33af663d931f7be534d8799200934e1992a --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-8393723 [2022-11-18 20:34:43,082 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-18 20:34:43,089 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-18 20:34:43,115 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-18 20:34:43,119 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-18 20:34:43,123 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-18 20:34:43,126 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-18 20:34:43,130 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-18 20:34:43,132 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-18 20:34:43,138 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-18 20:34:43,140 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-18 20:34:43,142 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-18 20:34:43,142 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-18 20:34:43,145 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-18 20:34:43,147 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-18 20:34:43,150 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-18 20:34:43,151 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-18 20:34:43,152 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-18 20:34:43,155 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-18 20:34:43,164 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-18 20:34:43,166 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-18 20:34:43,168 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-18 20:34:43,170 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-18 20:34:43,171 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-18 20:34:43,180 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-18 20:34:43,180 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-18 20:34:43,181 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-18 20:34:43,183 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-18 20:34:43,183 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-18 20:34:43,184 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-18 20:34:43,185 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-18 20:34:43,186 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-18 20:34:43,188 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-18 20:34:43,189 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-18 20:34:43,192 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-18 20:34:43,192 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-18 20:34:43,193 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-18 20:34:43,193 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-18 20:34:43,193 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-18 20:34:43,194 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-18 20:34:43,195 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-18 20:34:43,196 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-18 20:34:43,235 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-18 20:34:43,239 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-18 20:34:43,240 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-18 20:34:43,240 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-18 20:34:43,241 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-18 20:34:43,241 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-18 20:34:43,242 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-18 20:34:43,242 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-18 20:34:43,243 INFO L138 SettingsManager]: * Use SBE=true [2022-11-18 20:34:43,243 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-18 20:34:43,244 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-18 20:34:43,244 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-18 20:34:43,245 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-18 20:34:43,245 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-18 20:34:43,245 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-18 20:34:43,245 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-18 20:34:43,246 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-18 20:34:43,246 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-18 20:34:43,246 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-18 20:34:43,246 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-18 20:34:43,246 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-18 20:34:43,247 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-18 20:34:43,247 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-18 20:34:43,247 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-18 20:34:43,247 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-18 20:34:43,248 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-18 20:34:43,248 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-18 20:34:43,248 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-18 20:34:43,248 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-18 20:34:43,249 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-18 20:34:43,249 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-18 20:34:43,249 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-18 20:34:43,250 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-18 20:34:43,250 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> b18268074b12ff6db81668668ee2d33af663d931f7be534d8799200934e1992a [2022-11-18 20:34:43,634 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-18 20:34:43,657 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-18 20:34:43,661 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-18 20:34:43,662 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-18 20:34:43,663 INFO L275 PluginConnector]: CDTParser initialized [2022-11-18 20:34:43,665 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/../../sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c [2022-11-18 20:34:43,752 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/data/57356ed5a/b6a48f5891684e0088fd95b9ca2f9b5d/FLAG13198b7fd [2022-11-18 20:34:44,397 INFO L306 CDTParser]: Found 1 translation units. [2022-11-18 20:34:44,398 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c [2022-11-18 20:34:44,419 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/data/57356ed5a/b6a48f5891684e0088fd95b9ca2f9b5d/FLAG13198b7fd [2022-11-18 20:34:44,680 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/data/57356ed5a/b6a48f5891684e0088fd95b9ca2f9b5d [2022-11-18 20:34:44,683 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-18 20:34:44,684 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-18 20:34:44,688 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-18 20:34:44,688 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-18 20:34:44,703 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-18 20:34:44,704 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 08:34:44" (1/1) ... [2022-11-18 20:34:44,706 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@13647a0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:34:44, skipping insertion in model container [2022-11-18 20:34:44,706 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 08:34:44" (1/1) ... [2022-11-18 20:34:44,714 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-18 20:34:44,783 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-18 20:34:44,997 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c[2897,2910] [2022-11-18 20:34:45,115 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-18 20:34:45,128 INFO L203 MainTranslator]: Completed pre-run [2022-11-18 20:34:45,166 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c[2897,2910] [2022-11-18 20:34:45,269 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-18 20:34:45,294 INFO L208 MainTranslator]: Completed translation [2022-11-18 20:34:45,295 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:34:45 WrapperNode [2022-11-18 20:34:45,295 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-18 20:34:45,297 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-18 20:34:45,297 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-18 20:34:45,297 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-18 20:34:45,306 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:34:45" (1/1) ... [2022-11-18 20:34:45,339 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:34:45" (1/1) ... [2022-11-18 20:34:45,383 INFO L138 Inliner]: procedures = 60, calls = 109, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 243 [2022-11-18 20:34:45,384 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-18 20:34:45,385 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-18 20:34:45,385 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-18 20:34:45,386 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-18 20:34:45,395 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:34:45" (1/1) ... [2022-11-18 20:34:45,396 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:34:45" (1/1) ... [2022-11-18 20:34:45,408 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:34:45" (1/1) ... [2022-11-18 20:34:45,414 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:34:45" (1/1) ... [2022-11-18 20:34:45,419 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:34:45" (1/1) ... [2022-11-18 20:34:45,436 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:34:45" (1/1) ... [2022-11-18 20:34:45,437 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:34:45" (1/1) ... [2022-11-18 20:34:45,439 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:34:45" (1/1) ... [2022-11-18 20:34:45,441 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-18 20:34:45,446 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-18 20:34:45,446 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-18 20:34:45,447 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-18 20:34:45,448 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:34:45" (1/1) ... [2022-11-18 20:34:45,456 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-18 20:34:45,474 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 20:34:45,494 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-18 20:34:45,519 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-18 20:34:45,558 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-18 20:34:45,559 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-18 20:34:45,559 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-18 20:34:45,559 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-18 20:34:45,559 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-18 20:34:45,559 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-18 20:34:45,559 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-18 20:34:45,560 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-18 20:34:45,560 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-18 20:34:45,561 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-18 20:34:45,561 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-18 20:34:45,561 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-11-18 20:34:45,562 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-11-18 20:34:45,562 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-11-18 20:34:45,562 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-11-18 20:34:45,562 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-11-18 20:34:45,562 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-11-18 20:34:45,562 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-18 20:34:45,562 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-18 20:34:45,563 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-18 20:34:45,563 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-18 20:34:45,563 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-18 20:34:45,563 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-18 20:34:45,563 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-18 20:34:45,686 INFO L235 CfgBuilder]: Building ICFG [2022-11-18 20:34:45,689 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-18 20:34:46,088 INFO L276 CfgBuilder]: Performing block encoding [2022-11-18 20:34:46,096 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-18 20:34:46,108 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-18 20:34:46,110 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 08:34:46 BoogieIcfgContainer [2022-11-18 20:34:46,111 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-18 20:34:46,114 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-18 20:34:46,116 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-18 20:34:46,120 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-18 20:34:46,120 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 18.11 08:34:44" (1/3) ... [2022-11-18 20:34:46,121 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@220ab179 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 08:34:46, skipping insertion in model container [2022-11-18 20:34:46,121 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:34:45" (2/3) ... [2022-11-18 20:34:46,122 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@220ab179 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 08:34:46, skipping insertion in model container [2022-11-18 20:34:46,122 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 08:34:46" (3/3) ... [2022-11-18 20:34:46,124 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product63.cil.c [2022-11-18 20:34:46,144 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-18 20:34:46,145 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-18 20:34:46,231 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-18 20:34:46,240 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@166cd32e, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-18 20:34:46,240 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-18 20:34:46,255 INFO L276 IsEmpty]: Start isEmpty. Operand has 117 states, 86 states have (on average 1.3604651162790697) internal successors, (117), 97 states have internal predecessors, (117), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2022-11-18 20:34:46,273 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-18 20:34:46,273 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:34:46,274 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:34:46,275 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:34:46,282 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:34:46,283 INFO L85 PathProgramCache]: Analyzing trace with hash 2028778160, now seen corresponding path program 1 times [2022-11-18 20:34:46,293 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:34:46,293 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2112120966] [2022-11-18 20:34:46,294 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:34:46,295 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:34:46,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:46,584 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-18 20:34:46,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:46,598 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-18 20:34:46,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:46,603 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-18 20:34:46,604 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:34:46,605 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2112120966] [2022-11-18 20:34:46,605 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2112120966] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:34:46,606 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:34:46,606 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-18 20:34:46,608 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [417792562] [2022-11-18 20:34:46,609 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:34:46,613 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-18 20:34:46,613 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:34:46,642 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-18 20:34:46,643 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-18 20:34:46,646 INFO L87 Difference]: Start difference. First operand has 117 states, 86 states have (on average 1.3604651162790697) internal successors, (117), 97 states have internal predecessors, (117), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-18 20:34:46,688 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:34:46,689 INFO L93 Difference]: Finished difference Result 225 states and 304 transitions. [2022-11-18 20:34:46,692 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-18 20:34:46,694 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-11-18 20:34:46,695 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:34:46,713 INFO L225 Difference]: With dead ends: 225 [2022-11-18 20:34:46,713 INFO L226 Difference]: Without dead ends: 108 [2022-11-18 20:34:46,719 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-18 20:34:46,727 INFO L413 NwaCegarLoop]: 149 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 149 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 20:34:46,729 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 149 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 20:34:46,751 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108 states. [2022-11-18 20:34:46,807 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108 to 108. [2022-11-18 20:34:46,809 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 108 states, 79 states have (on average 1.3037974683544304) internal successors, (103), 89 states have internal predecessors, (103), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2022-11-18 20:34:46,821 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 108 states to 108 states and 140 transitions. [2022-11-18 20:34:46,828 INFO L78 Accepts]: Start accepts. Automaton has 108 states and 140 transitions. Word has length 32 [2022-11-18 20:34:46,829 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:34:46,829 INFO L495 AbstractCegarLoop]: Abstraction has 108 states and 140 transitions. [2022-11-18 20:34:46,831 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-18 20:34:46,833 INFO L276 IsEmpty]: Start isEmpty. Operand 108 states and 140 transitions. [2022-11-18 20:34:46,837 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-11-18 20:34:46,838 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:34:46,839 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:34:46,840 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-18 20:34:46,840 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:34:46,841 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:34:46,841 INFO L85 PathProgramCache]: Analyzing trace with hash -257998862, now seen corresponding path program 1 times [2022-11-18 20:34:46,842 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:34:46,842 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [332516329] [2022-11-18 20:34:46,843 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:34:46,843 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:34:46,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:47,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-18 20:34:47,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:47,099 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-11-18 20:34:47,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:47,111 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-18 20:34:47,120 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:34:47,120 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [332516329] [2022-11-18 20:34:47,121 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [332516329] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:34:47,121 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:34:47,122 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-18 20:34:47,122 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [963909105] [2022-11-18 20:34:47,124 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:34:47,126 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 20:34:47,128 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:34:47,129 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 20:34:47,130 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 20:34:47,131 INFO L87 Difference]: Start difference. First operand 108 states and 140 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 20:34:47,224 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:34:47,229 INFO L93 Difference]: Finished difference Result 307 states and 406 transitions. [2022-11-18 20:34:47,230 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 20:34:47,236 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2022-11-18 20:34:47,236 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:34:47,238 INFO L225 Difference]: With dead ends: 307 [2022-11-18 20:34:47,240 INFO L226 Difference]: Without dead ends: 207 [2022-11-18 20:34:47,242 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 20:34:47,246 INFO L413 NwaCegarLoop]: 170 mSDtfsCounter, 115 mSDsluCounter, 129 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 115 SdHoareTripleChecker+Valid, 299 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 20:34:47,247 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [115 Valid, 299 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 20:34:47,249 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 207 states. [2022-11-18 20:34:47,295 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 207 to 204. [2022-11-18 20:34:47,299 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 204 states, 147 states have (on average 1.3197278911564625) internal successors, (194), 166 states have internal predecessors, (194), 38 states have call successors, (38), 20 states have call predecessors, (38), 18 states have return successors, (36), 25 states have call predecessors, (36), 36 states have call successors, (36) [2022-11-18 20:34:47,304 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 204 states to 204 states and 268 transitions. [2022-11-18 20:34:47,305 INFO L78 Accepts]: Start accepts. Automaton has 204 states and 268 transitions. Word has length 37 [2022-11-18 20:34:47,305 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:34:47,307 INFO L495 AbstractCegarLoop]: Abstraction has 204 states and 268 transitions. [2022-11-18 20:34:47,307 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 20:34:47,307 INFO L276 IsEmpty]: Start isEmpty. Operand 204 states and 268 transitions. [2022-11-18 20:34:47,316 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-18 20:34:47,320 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:34:47,320 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:34:47,320 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-18 20:34:47,321 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:34:47,321 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:34:47,322 INFO L85 PathProgramCache]: Analyzing trace with hash 702056680, now seen corresponding path program 1 times [2022-11-18 20:34:47,322 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:34:47,323 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2025941006] [2022-11-18 20:34:47,323 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:34:47,323 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:34:47,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:47,549 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-18 20:34:47,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:47,552 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-11-18 20:34:47,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:47,582 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-18 20:34:47,583 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:34:47,583 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2025941006] [2022-11-18 20:34:47,585 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2025941006] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:34:47,585 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:34:47,586 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 20:34:47,587 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [511417151] [2022-11-18 20:34:47,587 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:34:47,587 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 20:34:47,589 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:34:47,589 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 20:34:47,590 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-18 20:34:47,590 INFO L87 Difference]: Start difference. First operand 204 states and 268 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 20:34:47,908 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:34:47,908 INFO L93 Difference]: Finished difference Result 538 states and 751 transitions. [2022-11-18 20:34:47,909 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-18 20:34:47,909 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 41 [2022-11-18 20:34:47,923 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:34:47,927 INFO L225 Difference]: With dead ends: 538 [2022-11-18 20:34:47,927 INFO L226 Difference]: Without dead ends: 342 [2022-11-18 20:34:47,929 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-11-18 20:34:47,930 INFO L413 NwaCegarLoop]: 158 mSDtfsCounter, 103 mSDsluCounter, 519 mSDsCounter, 0 mSdLazyCounter, 91 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 105 SdHoareTripleChecker+Valid, 677 SdHoareTripleChecker+Invalid, 103 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 91 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 20:34:47,931 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [105 Valid, 677 Invalid, 103 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 91 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 20:34:47,941 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 342 states. [2022-11-18 20:34:47,983 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 342 to 329. [2022-11-18 20:34:47,984 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 329 states, 240 states have (on average 1.2666666666666666) internal successors, (304), 259 states have internal predecessors, (304), 54 states have call successors, (54), 38 states have call predecessors, (54), 34 states have return successors, (70), 45 states have call predecessors, (70), 50 states have call successors, (70) [2022-11-18 20:34:47,987 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 329 states to 329 states and 428 transitions. [2022-11-18 20:34:47,987 INFO L78 Accepts]: Start accepts. Automaton has 329 states and 428 transitions. Word has length 41 [2022-11-18 20:34:47,987 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:34:47,987 INFO L495 AbstractCegarLoop]: Abstraction has 329 states and 428 transitions. [2022-11-18 20:34:47,988 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 20:34:47,988 INFO L276 IsEmpty]: Start isEmpty. Operand 329 states and 428 transitions. [2022-11-18 20:34:47,990 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2022-11-18 20:34:47,990 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:34:47,990 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:34:47,990 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-18 20:34:47,990 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:34:47,991 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:34:47,991 INFO L85 PathProgramCache]: Analyzing trace with hash 1444776659, now seen corresponding path program 1 times [2022-11-18 20:34:47,991 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:34:47,991 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [12050207] [2022-11-18 20:34:47,992 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:34:47,992 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:34:48,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:48,082 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-18 20:34:48,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:48,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-18 20:34:48,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:48,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:34:48,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:48,224 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:34:48,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:48,231 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-11-18 20:34:48,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:48,239 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-18 20:34:48,240 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:34:48,240 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [12050207] [2022-11-18 20:34:48,240 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [12050207] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:34:48,241 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:34:48,241 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 20:34:48,241 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [684394953] [2022-11-18 20:34:48,241 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:34:48,242 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 20:34:48,242 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:34:48,243 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 20:34:48,243 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-18 20:34:48,243 INFO L87 Difference]: Start difference. First operand 329 states and 428 transitions. Second operand has 6 states, 6 states have (on average 8.5) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-18 20:34:48,564 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:34:48,564 INFO L93 Difference]: Finished difference Result 746 states and 1031 transitions. [2022-11-18 20:34:48,568 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 20:34:48,568 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.5) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 64 [2022-11-18 20:34:48,569 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:34:48,576 INFO L225 Difference]: With dead ends: 746 [2022-11-18 20:34:48,578 INFO L226 Difference]: Without dead ends: 425 [2022-11-18 20:34:48,580 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-18 20:34:48,582 INFO L413 NwaCegarLoop]: 116 mSDtfsCounter, 86 mSDsluCounter, 383 mSDsCounter, 0 mSdLazyCounter, 174 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 91 SdHoareTripleChecker+Valid, 499 SdHoareTripleChecker+Invalid, 208 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 174 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 20:34:48,585 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [91 Valid, 499 Invalid, 208 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 174 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 20:34:48,587 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 425 states. [2022-11-18 20:34:48,661 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 425 to 389. [2022-11-18 20:34:48,662 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 389 states, 286 states have (on average 1.2517482517482517) internal successors, (358), 305 states have internal predecessors, (358), 58 states have call successors, (58), 38 states have call predecessors, (58), 44 states have return successors, (92), 57 states have call predecessors, (92), 54 states have call successors, (92) [2022-11-18 20:34:48,669 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 389 states to 389 states and 508 transitions. [2022-11-18 20:34:48,669 INFO L78 Accepts]: Start accepts. Automaton has 389 states and 508 transitions. Word has length 64 [2022-11-18 20:34:48,670 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:34:48,670 INFO L495 AbstractCegarLoop]: Abstraction has 389 states and 508 transitions. [2022-11-18 20:34:48,670 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.5) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-18 20:34:48,670 INFO L276 IsEmpty]: Start isEmpty. Operand 389 states and 508 transitions. [2022-11-18 20:34:48,672 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-18 20:34:48,672 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:34:48,673 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:34:48,673 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-18 20:34:48,673 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:34:48,673 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:34:48,674 INFO L85 PathProgramCache]: Analyzing trace with hash 968830382, now seen corresponding path program 1 times [2022-11-18 20:34:48,674 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:34:48,674 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1505790987] [2022-11-18 20:34:48,674 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:34:48,674 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:34:48,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:48,770 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 20:34:48,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:48,795 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-18 20:34:48,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:48,815 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:34:48,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:48,823 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:34:48,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:48,829 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-11-18 20:34:48,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:48,833 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-18 20:34:48,834 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:34:48,834 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1505790987] [2022-11-18 20:34:48,834 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1505790987] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:34:48,834 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:34:48,834 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-18 20:34:48,835 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [238900619] [2022-11-18 20:34:48,836 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:34:48,836 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-18 20:34:48,837 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:34:48,837 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-18 20:34:48,837 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-18 20:34:48,838 INFO L87 Difference]: Start difference. First operand 389 states and 508 transitions. Second operand has 4 states, 4 states have (on average 11.5) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (7), 3 states have call predecessors, (7), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-18 20:34:49,001 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:34:49,001 INFO L93 Difference]: Finished difference Result 657 states and 826 transitions. [2022-11-18 20:34:49,002 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-18 20:34:49,002 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.5) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (7), 3 states have call predecessors, (7), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 60 [2022-11-18 20:34:49,002 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:34:49,005 INFO L225 Difference]: With dead ends: 657 [2022-11-18 20:34:49,005 INFO L226 Difference]: Without dead ends: 355 [2022-11-18 20:34:49,007 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-18 20:34:49,013 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 83 mSDsluCounter, 122 mSDsCounter, 0 mSdLazyCounter, 78 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 94 SdHoareTripleChecker+Valid, 226 SdHoareTripleChecker+Invalid, 98 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 78 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-18 20:34:49,014 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [94 Valid, 226 Invalid, 98 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 78 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-18 20:34:49,016 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 355 states. [2022-11-18 20:34:49,054 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 355 to 353. [2022-11-18 20:34:49,055 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 353 states, 262 states have (on average 1.2595419847328244) internal successors, (330), 281 states have internal predecessors, (330), 46 states have call successors, (46), 34 states have call predecessors, (46), 44 states have return successors, (68), 49 states have call predecessors, (68), 46 states have call successors, (68) [2022-11-18 20:34:49,058 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 353 states to 353 states and 444 transitions. [2022-11-18 20:34:49,059 INFO L78 Accepts]: Start accepts. Automaton has 353 states and 444 transitions. Word has length 60 [2022-11-18 20:34:49,059 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:34:49,059 INFO L495 AbstractCegarLoop]: Abstraction has 353 states and 444 transitions. [2022-11-18 20:34:49,059 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 11.5) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (7), 3 states have call predecessors, (7), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-18 20:34:49,060 INFO L276 IsEmpty]: Start isEmpty. Operand 353 states and 444 transitions. [2022-11-18 20:34:49,061 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2022-11-18 20:34:49,062 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:34:49,062 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:34:49,062 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-18 20:34:49,063 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:34:49,063 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:34:49,063 INFO L85 PathProgramCache]: Analyzing trace with hash -1463987243, now seen corresponding path program 1 times [2022-11-18 20:34:49,063 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:34:49,064 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1419274263] [2022-11-18 20:34:49,064 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:34:49,064 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:34:49,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:49,180 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-18 20:34:49,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:49,186 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-18 20:34:49,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:49,223 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:34:49,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:49,262 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:34:49,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:49,268 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-11-18 20:34:49,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:49,274 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-18 20:34:49,275 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:34:49,275 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1419274263] [2022-11-18 20:34:49,275 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1419274263] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:34:49,275 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:34:49,276 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-18 20:34:49,276 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [432616911] [2022-11-18 20:34:49,276 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:34:49,278 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-18 20:34:49,278 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:34:49,278 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-18 20:34:49,279 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-18 20:34:49,279 INFO L87 Difference]: Start difference. First operand 353 states and 444 transitions. Second operand has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-18 20:34:49,466 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:34:49,467 INFO L93 Difference]: Finished difference Result 716 states and 927 transitions. [2022-11-18 20:34:49,468 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-18 20:34:49,468 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 64 [2022-11-18 20:34:49,469 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:34:49,474 INFO L225 Difference]: With dead ends: 716 [2022-11-18 20:34:49,474 INFO L226 Difference]: Without dead ends: 371 [2022-11-18 20:34:49,476 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-18 20:34:49,481 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 83 mSDsluCounter, 239 mSDsCounter, 0 mSdLazyCounter, 125 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 89 SdHoareTripleChecker+Valid, 343 SdHoareTripleChecker+Invalid, 148 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 125 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-18 20:34:49,484 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [89 Valid, 343 Invalid, 148 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-18 20:34:49,485 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 371 states. [2022-11-18 20:34:49,538 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 371 to 357. [2022-11-18 20:34:49,539 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 357 states, 266 states have (on average 1.255639097744361) internal successors, (334), 285 states have internal predecessors, (334), 46 states have call successors, (46), 34 states have call predecessors, (46), 44 states have return successors, (68), 49 states have call predecessors, (68), 46 states have call successors, (68) [2022-11-18 20:34:49,543 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 357 states to 357 states and 448 transitions. [2022-11-18 20:34:49,544 INFO L78 Accepts]: Start accepts. Automaton has 357 states and 448 transitions. Word has length 64 [2022-11-18 20:34:49,545 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:34:49,545 INFO L495 AbstractCegarLoop]: Abstraction has 357 states and 448 transitions. [2022-11-18 20:34:49,545 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-18 20:34:49,546 INFO L276 IsEmpty]: Start isEmpty. Operand 357 states and 448 transitions. [2022-11-18 20:34:49,547 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2022-11-18 20:34:49,548 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:34:49,548 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:34:49,548 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-18 20:34:49,548 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:34:49,549 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:34:49,549 INFO L85 PathProgramCache]: Analyzing trace with hash -762387369, now seen corresponding path program 1 times [2022-11-18 20:34:49,549 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:34:49,550 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [277241836] [2022-11-18 20:34:49,550 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:34:49,550 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:34:49,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:49,646 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-18 20:34:49,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:49,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-18 20:34:49,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:49,698 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:34:49,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:49,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:34:49,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:49,730 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-11-18 20:34:49,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:49,734 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-18 20:34:49,735 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:34:49,735 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [277241836] [2022-11-18 20:34:49,735 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [277241836] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:34:49,735 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:34:49,736 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-18 20:34:49,736 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1786268503] [2022-11-18 20:34:49,736 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:34:49,739 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-18 20:34:49,739 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:34:49,740 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-18 20:34:49,740 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-18 20:34:49,740 INFO L87 Difference]: Start difference. First operand 357 states and 448 transitions. Second operand has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-18 20:34:50,107 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:34:50,108 INFO L93 Difference]: Finished difference Result 998 states and 1301 transitions. [2022-11-18 20:34:50,108 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 20:34:50,108 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 64 [2022-11-18 20:34:50,109 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:34:50,112 INFO L225 Difference]: With dead ends: 998 [2022-11-18 20:34:50,112 INFO L226 Difference]: Without dead ends: 649 [2022-11-18 20:34:50,114 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 14 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-18 20:34:50,115 INFO L413 NwaCegarLoop]: 157 mSDtfsCounter, 258 mSDsluCounter, 211 mSDsCounter, 0 mSdLazyCounter, 204 mSolverCounterSat, 80 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 266 SdHoareTripleChecker+Valid, 368 SdHoareTripleChecker+Invalid, 284 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 80 IncrementalHoareTripleChecker+Valid, 204 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-18 20:34:50,115 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [266 Valid, 368 Invalid, 284 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [80 Valid, 204 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-18 20:34:50,116 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 649 states. [2022-11-18 20:34:50,160 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 649 to 642. [2022-11-18 20:34:50,161 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 642 states, 477 states have (on average 1.2243186582809225) internal successors, (584), 505 states have internal predecessors, (584), 87 states have call successors, (87), 71 states have call predecessors, (87), 77 states have return successors, (139), 88 states have call predecessors, (139), 87 states have call successors, (139) [2022-11-18 20:34:50,165 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 642 states to 642 states and 810 transitions. [2022-11-18 20:34:50,166 INFO L78 Accepts]: Start accepts. Automaton has 642 states and 810 transitions. Word has length 64 [2022-11-18 20:34:50,166 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:34:50,166 INFO L495 AbstractCegarLoop]: Abstraction has 642 states and 810 transitions. [2022-11-18 20:34:50,166 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-18 20:34:50,166 INFO L276 IsEmpty]: Start isEmpty. Operand 642 states and 810 transitions. [2022-11-18 20:34:50,168 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-11-18 20:34:50,168 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:34:50,168 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:34:50,168 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-18 20:34:50,169 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:34:50,169 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:34:50,169 INFO L85 PathProgramCache]: Analyzing trace with hash -480731343, now seen corresponding path program 1 times [2022-11-18 20:34:50,169 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:34:50,170 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [917532668] [2022-11-18 20:34:50,170 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:34:50,170 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:34:50,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:50,374 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-18 20:34:50,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:50,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-18 20:34:50,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:50,426 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-11-18 20:34:50,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:50,450 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:34:50,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:50,462 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:34:50,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:50,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-11-18 20:34:50,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:50,470 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-18 20:34:50,470 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:34:50,470 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [917532668] [2022-11-18 20:34:50,470 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [917532668] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:34:50,471 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:34:50,471 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-18 20:34:50,471 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [309331307] [2022-11-18 20:34:50,471 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:34:50,472 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-18 20:34:50,472 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:34:50,472 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-18 20:34:50,473 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-11-18 20:34:50,473 INFO L87 Difference]: Start difference. First operand 642 states and 810 transitions. Second operand has 10 states, 10 states have (on average 5.3) internal successors, (53), 8 states have internal predecessors, (53), 5 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 5 states have call successors, (6) [2022-11-18 20:34:51,991 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:34:51,991 INFO L93 Difference]: Finished difference Result 2031 states and 2688 transitions. [2022-11-18 20:34:51,991 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-11-18 20:34:51,992 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.3) internal successors, (53), 8 states have internal predecessors, (53), 5 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 5 states have call successors, (6) Word has length 68 [2022-11-18 20:34:51,993 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:34:52,001 INFO L225 Difference]: With dead ends: 2031 [2022-11-18 20:34:52,002 INFO L226 Difference]: Without dead ends: 1510 [2022-11-18 20:34:52,007 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 15 SyntacticMatches, 1 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 297 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=221, Invalid=969, Unknown=0, NotChecked=0, Total=1190 [2022-11-18 20:34:52,008 INFO L413 NwaCegarLoop]: 127 mSDtfsCounter, 692 mSDsluCounter, 694 mSDsCounter, 0 mSdLazyCounter, 1163 mSolverCounterSat, 255 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 703 SdHoareTripleChecker+Valid, 821 SdHoareTripleChecker+Invalid, 1418 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 255 IncrementalHoareTripleChecker+Valid, 1163 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-18 20:34:52,008 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [703 Valid, 821 Invalid, 1418 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [255 Valid, 1163 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-11-18 20:34:52,010 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1510 states. [2022-11-18 20:34:52,145 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1510 to 1245. [2022-11-18 20:34:52,147 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1245 states, 924 states have (on average 1.222943722943723) internal successors, (1130), 985 states have internal predecessors, (1130), 170 states have call successors, (170), 126 states have call predecessors, (170), 150 states have return successors, (270), 172 states have call predecessors, (270), 170 states have call successors, (270) [2022-11-18 20:34:52,159 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1245 states to 1245 states and 1570 transitions. [2022-11-18 20:34:52,160 INFO L78 Accepts]: Start accepts. Automaton has 1245 states and 1570 transitions. Word has length 68 [2022-11-18 20:34:52,160 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:34:52,160 INFO L495 AbstractCegarLoop]: Abstraction has 1245 states and 1570 transitions. [2022-11-18 20:34:52,161 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.3) internal successors, (53), 8 states have internal predecessors, (53), 5 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 5 states have call successors, (6) [2022-11-18 20:34:52,161 INFO L276 IsEmpty]: Start isEmpty. Operand 1245 states and 1570 transitions. [2022-11-18 20:34:52,163 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-11-18 20:34:52,163 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:34:52,163 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:34:52,164 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-18 20:34:52,164 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:34:52,164 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:34:52,164 INFO L85 PathProgramCache]: Analyzing trace with hash -608570004, now seen corresponding path program 1 times [2022-11-18 20:34:52,164 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:34:52,165 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1843146797] [2022-11-18 20:34:52,165 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:34:52,165 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:34:52,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:52,238 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-18 20:34:52,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:52,249 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-18 20:34:52,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:52,274 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-18 20:34:52,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:52,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-18 20:34:52,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:52,295 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:34:52,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:52,302 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:34:52,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:52,311 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2022-11-18 20:34:52,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:52,313 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2022-11-18 20:34:52,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:52,317 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-18 20:34:52,317 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:34:52,317 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1843146797] [2022-11-18 20:34:52,318 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1843146797] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:34:52,318 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:34:52,318 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-18 20:34:52,318 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1661748849] [2022-11-18 20:34:52,318 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:34:52,319 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-18 20:34:52,319 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:34:52,322 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-18 20:34:52,322 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-18 20:34:52,323 INFO L87 Difference]: Start difference. First operand 1245 states and 1570 transitions. Second operand has 7 states, 7 states have (on average 11.0) internal successors, (77), 4 states have internal predecessors, (77), 4 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2022-11-18 20:34:52,768 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:34:52,769 INFO L93 Difference]: Finished difference Result 1481 states and 1859 transitions. [2022-11-18 20:34:52,769 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-18 20:34:52,769 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 11.0) internal successors, (77), 4 states have internal predecessors, (77), 4 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) Word has length 98 [2022-11-18 20:34:52,770 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:34:52,773 INFO L225 Difference]: With dead ends: 1481 [2022-11-18 20:34:52,774 INFO L226 Difference]: Without dead ends: 637 [2022-11-18 20:34:52,777 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2022-11-18 20:34:52,779 INFO L413 NwaCegarLoop]: 113 mSDtfsCounter, 332 mSDsluCounter, 231 mSDsCounter, 0 mSdLazyCounter, 302 mSolverCounterSat, 117 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 341 SdHoareTripleChecker+Valid, 344 SdHoareTripleChecker+Invalid, 419 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 117 IncrementalHoareTripleChecker+Valid, 302 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-18 20:34:52,780 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [341 Valid, 344 Invalid, 419 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [117 Valid, 302 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-18 20:34:52,781 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 637 states. [2022-11-18 20:34:52,871 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 637 to 611. [2022-11-18 20:34:52,872 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 611 states, 454 states have (on average 1.1916299559471366) internal successors, (541), 482 states have internal predecessors, (541), 82 states have call successors, (82), 62 states have call predecessors, (82), 74 states have return successors, (132), 84 states have call predecessors, (132), 82 states have call successors, (132) [2022-11-18 20:34:52,876 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 611 states to 611 states and 755 transitions. [2022-11-18 20:34:52,876 INFO L78 Accepts]: Start accepts. Automaton has 611 states and 755 transitions. Word has length 98 [2022-11-18 20:34:52,877 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:34:52,877 INFO L495 AbstractCegarLoop]: Abstraction has 611 states and 755 transitions. [2022-11-18 20:34:52,877 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 11.0) internal successors, (77), 4 states have internal predecessors, (77), 4 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2022-11-18 20:34:52,877 INFO L276 IsEmpty]: Start isEmpty. Operand 611 states and 755 transitions. [2022-11-18 20:34:52,880 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2022-11-18 20:34:52,880 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:34:52,880 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:34:52,881 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-18 20:34:52,881 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:34:52,881 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:34:52,882 INFO L85 PathProgramCache]: Analyzing trace with hash 115908773, now seen corresponding path program 1 times [2022-11-18 20:34:52,882 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:34:52,882 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1499930169] [2022-11-18 20:34:52,882 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:34:52,882 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:34:52,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:53,060 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-18 20:34:53,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:53,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 20:34:53,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:53,107 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-18 20:34:53,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:53,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-18 20:34:53,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:53,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:34:53,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:53,159 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:34:53,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:53,163 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-11-18 20:34:53,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:53,177 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2022-11-18 20:34:53,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:53,180 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 91 [2022-11-18 20:34:53,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:53,188 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-18 20:34:53,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:53,190 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:34:53,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:53,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2022-11-18 20:34:53,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:53,195 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 8 proven. 20 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-11-18 20:34:53,195 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:34:53,195 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1499930169] [2022-11-18 20:34:53,196 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1499930169] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 20:34:53,196 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [45458666] [2022-11-18 20:34:53,196 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:34:53,196 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 20:34:53,196 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 20:34:53,200 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 20:34:53,213 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-18 20:34:53,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:53,332 INFO L263 TraceCheckSpWp]: Trace formula consists of 397 conjuncts, 8 conjunts are in the unsatisfiable core [2022-11-18 20:34:53,339 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 20:34:53,611 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 30 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:34:53,612 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-18 20:34:53,927 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 18 proven. 10 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-11-18 20:34:53,927 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [45458666] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-18 20:34:53,927 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-18 20:34:53,928 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2022-11-18 20:34:53,928 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1825561319] [2022-11-18 20:34:53,928 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-18 20:34:53,928 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-11-18 20:34:53,929 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:34:53,929 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-11-18 20:34:53,929 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2022-11-18 20:34:53,930 INFO L87 Difference]: Start difference. First operand 611 states and 755 transitions. Second operand has 15 states, 15 states have (on average 10.333333333333334) internal successors, (155), 10 states have internal predecessors, (155), 6 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (24), 8 states have call predecessors, (24), 6 states have call successors, (24) [2022-11-18 20:34:55,625 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:34:55,626 INFO L93 Difference]: Finished difference Result 1306 states and 1651 transitions. [2022-11-18 20:34:55,626 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-11-18 20:34:55,627 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 10.333333333333334) internal successors, (155), 10 states have internal predecessors, (155), 6 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (24), 8 states have call predecessors, (24), 6 states have call successors, (24) Word has length 121 [2022-11-18 20:34:55,627 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:34:55,630 INFO L225 Difference]: With dead ends: 1306 [2022-11-18 20:34:55,630 INFO L226 Difference]: Without dead ends: 756 [2022-11-18 20:34:55,633 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 319 GetRequests, 273 SyntacticMatches, 4 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 462 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=441, Invalid=1451, Unknown=0, NotChecked=0, Total=1892 [2022-11-18 20:34:55,634 INFO L413 NwaCegarLoop]: 165 mSDtfsCounter, 499 mSDsluCounter, 1032 mSDsCounter, 0 mSdLazyCounter, 1310 mSolverCounterSat, 253 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 503 SdHoareTripleChecker+Valid, 1197 SdHoareTripleChecker+Invalid, 1563 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 253 IncrementalHoareTripleChecker+Valid, 1310 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-18 20:34:55,634 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [503 Valid, 1197 Invalid, 1563 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [253 Valid, 1310 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-11-18 20:34:55,636 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 756 states. [2022-11-18 20:34:55,703 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 756 to 672. [2022-11-18 20:34:55,705 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 672 states, 494 states have (on average 1.1720647773279351) internal successors, (579), 530 states have internal predecessors, (579), 92 states have call successors, (92), 76 states have call predecessors, (92), 85 states have return successors, (124), 89 states have call predecessors, (124), 92 states have call successors, (124) [2022-11-18 20:34:55,708 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 672 states to 672 states and 795 transitions. [2022-11-18 20:34:55,709 INFO L78 Accepts]: Start accepts. Automaton has 672 states and 795 transitions. Word has length 121 [2022-11-18 20:34:55,709 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:34:55,709 INFO L495 AbstractCegarLoop]: Abstraction has 672 states and 795 transitions. [2022-11-18 20:34:55,710 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 10.333333333333334) internal successors, (155), 10 states have internal predecessors, (155), 6 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (24), 8 states have call predecessors, (24), 6 states have call successors, (24) [2022-11-18 20:34:55,710 INFO L276 IsEmpty]: Start isEmpty. Operand 672 states and 795 transitions. [2022-11-18 20:34:55,714 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 212 [2022-11-18 20:34:55,714 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:34:55,714 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:34:55,724 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-18 20:34:55,921 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-18 20:34:55,922 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:34:55,922 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:34:55,922 INFO L85 PathProgramCache]: Analyzing trace with hash 950034461, now seen corresponding path program 1 times [2022-11-18 20:34:55,922 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:34:55,922 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1302190325] [2022-11-18 20:34:55,923 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:34:55,923 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:34:55,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:56,180 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-18 20:34:56,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:56,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 20:34:56,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:56,282 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-18 20:34:56,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:56,298 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-18 20:34:56,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:56,332 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:34:56,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:56,402 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:34:56,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:56,445 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-11-18 20:34:56,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:56,457 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-18 20:34:56,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:56,459 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-18 20:34:56,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:56,462 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-18 20:34:56,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:56,466 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-18 20:34:56,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:56,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:34:56,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:56,470 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 124 [2022-11-18 20:34:56,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:56,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-18 20:34:56,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:56,528 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-18 20:34:56,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:56,543 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-18 20:34:56,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:56,547 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 165 [2022-11-18 20:34:56,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:56,549 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 174 [2022-11-18 20:34:56,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:56,557 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:34:56,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:56,563 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:34:56,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:56,566 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 203 [2022-11-18 20:34:56,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:56,569 INFO L134 CoverageAnalysis]: Checked inductivity of 225 backedges. 91 proven. 45 refuted. 0 times theorem prover too weak. 89 trivial. 0 not checked. [2022-11-18 20:34:56,569 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:34:56,569 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1302190325] [2022-11-18 20:34:56,569 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1302190325] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 20:34:56,570 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [710828068] [2022-11-18 20:34:56,570 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:34:56,570 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 20:34:56,570 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 20:34:56,576 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 20:34:56,600 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-18 20:34:56,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:56,751 INFO L263 TraceCheckSpWp]: Trace formula consists of 631 conjuncts, 13 conjunts are in the unsatisfiable core [2022-11-18 20:34:56,757 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 20:34:57,049 INFO L134 CoverageAnalysis]: Checked inductivity of 225 backedges. 163 proven. 4 refuted. 0 times theorem prover too weak. 58 trivial. 0 not checked. [2022-11-18 20:34:57,049 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-18 20:34:57,719 INFO L134 CoverageAnalysis]: Checked inductivity of 225 backedges. 77 proven. 39 refuted. 0 times theorem prover too weak. 109 trivial. 0 not checked. [2022-11-18 20:34:57,719 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [710828068] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-18 20:34:57,719 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-18 20:34:57,720 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 10, 11] total 30 [2022-11-18 20:34:57,720 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1856175101] [2022-11-18 20:34:57,720 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-18 20:34:57,721 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-11-18 20:34:57,721 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:34:57,721 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-11-18 20:34:57,722 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=126, Invalid=744, Unknown=0, NotChecked=0, Total=870 [2022-11-18 20:34:57,722 INFO L87 Difference]: Start difference. First operand 672 states and 795 transitions. Second operand has 30 states, 30 states have (on average 7.8) internal successors, (234), 23 states have internal predecessors, (234), 10 states have call successors, (40), 8 states have call predecessors, (40), 12 states have return successors, (44), 12 states have call predecessors, (44), 10 states have call successors, (44) [2022-11-18 20:35:01,764 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:35:01,765 INFO L93 Difference]: Finished difference Result 1906 states and 2356 transitions. [2022-11-18 20:35:01,765 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 67 states. [2022-11-18 20:35:01,766 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 30 states have (on average 7.8) internal successors, (234), 23 states have internal predecessors, (234), 10 states have call successors, (40), 8 states have call predecessors, (40), 12 states have return successors, (44), 12 states have call predecessors, (44), 10 states have call successors, (44) Word has length 211 [2022-11-18 20:35:01,770 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:35:01,777 INFO L225 Difference]: With dead ends: 1906 [2022-11-18 20:35:01,778 INFO L226 Difference]: Without dead ends: 1242 [2022-11-18 20:35:01,784 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 566 GetRequests, 465 SyntacticMatches, 8 SemanticMatches, 93 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2375 ImplicationChecksByTransitivity, 2.0s TimeCoverageRelationStatistics Valid=1403, Invalid=7527, Unknown=0, NotChecked=0, Total=8930 [2022-11-18 20:35:01,785 INFO L413 NwaCegarLoop]: 134 mSDtfsCounter, 2020 mSDsluCounter, 1262 mSDsCounter, 0 mSdLazyCounter, 2875 mSolverCounterSat, 897 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2020 SdHoareTripleChecker+Valid, 1396 SdHoareTripleChecker+Invalid, 3772 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 897 IncrementalHoareTripleChecker+Valid, 2875 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2022-11-18 20:35:01,785 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2020 Valid, 1396 Invalid, 3772 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [897 Valid, 2875 Invalid, 0 Unknown, 0 Unchecked, 2.2s Time] [2022-11-18 20:35:01,787 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1242 states. [2022-11-18 20:35:01,939 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1242 to 1145. [2022-11-18 20:35:01,941 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1145 states, 855 states have (on average 1.1076023391812866) internal successors, (947), 895 states have internal predecessors, (947), 156 states have call successors, (156), 134 states have call predecessors, (156), 133 states have return successors, (187), 143 states have call predecessors, (187), 156 states have call successors, (187) [2022-11-18 20:35:01,946 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1145 states to 1145 states and 1290 transitions. [2022-11-18 20:35:01,947 INFO L78 Accepts]: Start accepts. Automaton has 1145 states and 1290 transitions. Word has length 211 [2022-11-18 20:35:01,947 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:35:01,947 INFO L495 AbstractCegarLoop]: Abstraction has 1145 states and 1290 transitions. [2022-11-18 20:35:01,948 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 30 states have (on average 7.8) internal successors, (234), 23 states have internal predecessors, (234), 10 states have call successors, (40), 8 states have call predecessors, (40), 12 states have return successors, (44), 12 states have call predecessors, (44), 10 states have call successors, (44) [2022-11-18 20:35:01,948 INFO L276 IsEmpty]: Start isEmpty. Operand 1145 states and 1290 transitions. [2022-11-18 20:35:01,953 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 236 [2022-11-18 20:35:01,954 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:35:01,954 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:35:01,961 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-18 20:35:02,161 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-18 20:35:02,162 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:35:02,162 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:35:02,162 INFO L85 PathProgramCache]: Analyzing trace with hash -1994411691, now seen corresponding path program 1 times [2022-11-18 20:35:02,162 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:35:02,162 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1923570819] [2022-11-18 20:35:02,162 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:35:02,163 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:35:02,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:02,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-18 20:35:02,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:02,410 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 20:35:02,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:02,434 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-18 20:35:02,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:02,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-18 20:35:02,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:02,456 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:35:02,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:02,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:35:02,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:02,470 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-11-18 20:35:02,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:02,532 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-18 20:35:02,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:02,534 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-18 20:35:02,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:02,539 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-18 20:35:02,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:02,547 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-18 20:35:02,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:02,552 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:35:02,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:02,554 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-11-18 20:35:02,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:02,578 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2022-11-18 20:35:02,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:02,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2022-11-18 20:35:02,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:02,593 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-18 20:35:02,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:02,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-18 20:35:02,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:02,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-18 20:35:02,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:02,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-18 20:35:02,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:02,603 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 175 [2022-11-18 20:35:02,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:02,606 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2022-11-18 20:35:02,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:02,608 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 189 [2022-11-18 20:35:02,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:02,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 198 [2022-11-18 20:35:02,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:02,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:35:02,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:02,634 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:35:02,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:02,637 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 227 [2022-11-18 20:35:02,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:02,640 INFO L134 CoverageAnalysis]: Checked inductivity of 275 backedges. 86 proven. 59 refuted. 0 times theorem prover too weak. 130 trivial. 0 not checked. [2022-11-18 20:35:02,640 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:35:02,640 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1923570819] [2022-11-18 20:35:02,640 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1923570819] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 20:35:02,641 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1767741393] [2022-11-18 20:35:02,641 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:35:02,641 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 20:35:02,641 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 20:35:02,642 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 20:35:02,660 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-18 20:35:02,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:02,807 INFO L263 TraceCheckSpWp]: Trace formula consists of 689 conjuncts, 12 conjunts are in the unsatisfiable core [2022-11-18 20:35:02,813 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 20:35:03,066 INFO L134 CoverageAnalysis]: Checked inductivity of 275 backedges. 206 proven. 11 refuted. 0 times theorem prover too weak. 58 trivial. 0 not checked. [2022-11-18 20:35:03,066 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-18 20:35:03,796 INFO L134 CoverageAnalysis]: Checked inductivity of 275 backedges. 101 proven. 62 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2022-11-18 20:35:03,797 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1767741393] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-18 20:35:03,797 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-18 20:35:03,797 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 8, 8] total 22 [2022-11-18 20:35:03,797 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1839355418] [2022-11-18 20:35:03,798 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-18 20:35:03,799 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-11-18 20:35:03,799 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:35:03,799 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-11-18 20:35:03,800 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=394, Unknown=0, NotChecked=0, Total=462 [2022-11-18 20:35:03,800 INFO L87 Difference]: Start difference. First operand 1145 states and 1290 transitions. Second operand has 22 states, 22 states have (on average 11.863636363636363) internal successors, (261), 15 states have internal predecessors, (261), 7 states have call successors, (54), 8 states have call predecessors, (54), 11 states have return successors, (48), 10 states have call predecessors, (48), 7 states have call successors, (48) [2022-11-18 20:35:05,695 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:35:05,695 INFO L93 Difference]: Finished difference Result 2238 states and 2552 transitions. [2022-11-18 20:35:05,696 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-11-18 20:35:05,696 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 11.863636363636363) internal successors, (261), 15 states have internal predecessors, (261), 7 states have call successors, (54), 8 states have call predecessors, (54), 11 states have return successors, (48), 10 states have call predecessors, (48), 7 states have call successors, (48) Word has length 235 [2022-11-18 20:35:05,697 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:35:05,703 INFO L225 Difference]: With dead ends: 2238 [2022-11-18 20:35:05,703 INFO L226 Difference]: Without dead ends: 1207 [2022-11-18 20:35:05,707 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 574 GetRequests, 526 SyntacticMatches, 1 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 442 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=483, Invalid=1869, Unknown=0, NotChecked=0, Total=2352 [2022-11-18 20:35:05,708 INFO L413 NwaCegarLoop]: 44 mSDtfsCounter, 775 mSDsluCounter, 333 mSDsCounter, 0 mSdLazyCounter, 1717 mSolverCounterSat, 305 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 778 SdHoareTripleChecker+Valid, 377 SdHoareTripleChecker+Invalid, 2022 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 305 IncrementalHoareTripleChecker+Valid, 1717 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-18 20:35:05,708 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [778 Valid, 377 Invalid, 2022 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [305 Valid, 1717 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-11-18 20:35:05,710 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1207 states. [2022-11-18 20:35:05,845 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1207 to 1169. [2022-11-18 20:35:05,847 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1169 states, 871 states have (on average 1.1010332950631458) internal successors, (959), 911 states have internal predecessors, (959), 156 states have call successors, (156), 142 states have call predecessors, (156), 141 states have return successors, (187), 143 states have call predecessors, (187), 156 states have call successors, (187) [2022-11-18 20:35:05,852 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1169 states to 1169 states and 1302 transitions. [2022-11-18 20:35:05,853 INFO L78 Accepts]: Start accepts. Automaton has 1169 states and 1302 transitions. Word has length 235 [2022-11-18 20:35:05,853 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:35:05,853 INFO L495 AbstractCegarLoop]: Abstraction has 1169 states and 1302 transitions. [2022-11-18 20:35:05,854 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 11.863636363636363) internal successors, (261), 15 states have internal predecessors, (261), 7 states have call successors, (54), 8 states have call predecessors, (54), 11 states have return successors, (48), 10 states have call predecessors, (48), 7 states have call successors, (48) [2022-11-18 20:35:05,854 INFO L276 IsEmpty]: Start isEmpty. Operand 1169 states and 1302 transitions. [2022-11-18 20:35:05,859 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 237 [2022-11-18 20:35:05,860 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:35:05,860 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:35:05,872 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-11-18 20:35:06,065 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 20:35:06,066 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:35:06,066 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:35:06,067 INFO L85 PathProgramCache]: Analyzing trace with hash 213775524, now seen corresponding path program 1 times [2022-11-18 20:35:06,067 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:35:06,067 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1397006969] [2022-11-18 20:35:06,067 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:35:06,067 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:35:06,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:06,585 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-18 20:35:06,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:06,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 20:35:06,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:06,637 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-18 20:35:06,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:06,646 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-18 20:35:06,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:06,653 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:35:06,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:06,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:35:06,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:06,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-11-18 20:35:06,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:06,734 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-18 20:35:06,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:06,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-18 20:35:06,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:06,742 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-18 20:35:06,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:06,751 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-18 20:35:06,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:06,753 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:35:06,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:06,756 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-11-18 20:35:06,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:06,779 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2022-11-18 20:35:06,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:06,782 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 135 [2022-11-18 20:35:06,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:06,859 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-18 20:35:06,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:06,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-18 20:35:06,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:06,866 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-18 20:35:06,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:06,869 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-18 20:35:06,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:06,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2022-11-18 20:35:06,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:06,896 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2022-11-18 20:35:06,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:06,898 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 190 [2022-11-18 20:35:06,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:06,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 199 [2022-11-18 20:35:06,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:06,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:35:06,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:06,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:35:06,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:06,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 228 [2022-11-18 20:35:06,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:06,941 INFO L134 CoverageAnalysis]: Checked inductivity of 276 backedges. 117 proven. 41 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2022-11-18 20:35:06,941 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:35:06,942 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1397006969] [2022-11-18 20:35:06,942 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1397006969] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 20:35:06,942 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1085027890] [2022-11-18 20:35:06,942 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:35:06,942 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 20:35:06,943 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 20:35:06,944 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 20:35:06,972 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-18 20:35:07,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:35:07,108 INFO L263 TraceCheckSpWp]: Trace formula consists of 689 conjuncts, 18 conjunts are in the unsatisfiable core [2022-11-18 20:35:07,113 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 20:35:07,377 INFO L134 CoverageAnalysis]: Checked inductivity of 276 backedges. 147 proven. 26 refuted. 0 times theorem prover too weak. 103 trivial. 0 not checked. [2022-11-18 20:35:07,377 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-18 20:35:08,249 INFO L134 CoverageAnalysis]: Checked inductivity of 276 backedges. 103 proven. 45 refuted. 0 times theorem prover too weak. 128 trivial. 0 not checked. [2022-11-18 20:35:08,249 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1085027890] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-18 20:35:08,249 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-18 20:35:08,250 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 8, 13] total 25 [2022-11-18 20:35:08,250 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [102314434] [2022-11-18 20:35:08,250 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-18 20:35:08,251 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2022-11-18 20:35:08,252 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:35:08,252 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2022-11-18 20:35:08,253 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=122, Invalid=478, Unknown=0, NotChecked=0, Total=600 [2022-11-18 20:35:08,253 INFO L87 Difference]: Start difference. First operand 1169 states and 1302 transitions. Second operand has 25 states, 25 states have (on average 10.6) internal successors, (265), 21 states have internal predecessors, (265), 16 states have call successors, (56), 11 states have call predecessors, (56), 14 states have return successors, (51), 16 states have call predecessors, (51), 16 states have call successors, (51) [2022-11-18 20:35:10,712 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:35:10,712 INFO L93 Difference]: Finished difference Result 2209 states and 2511 transitions. [2022-11-18 20:35:10,712 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2022-11-18 20:35:10,713 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 25 states have (on average 10.6) internal successors, (265), 21 states have internal predecessors, (265), 16 states have call successors, (56), 11 states have call predecessors, (56), 14 states have return successors, (51), 16 states have call predecessors, (51), 16 states have call successors, (51) Word has length 236 [2022-11-18 20:35:10,713 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:35:10,714 INFO L225 Difference]: With dead ends: 2209 [2022-11-18 20:35:10,714 INFO L226 Difference]: Without dead ends: 0 [2022-11-18 20:35:10,720 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 589 GetRequests, 519 SyntacticMatches, 8 SemanticMatches, 62 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 937 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=955, Invalid=3077, Unknown=0, NotChecked=0, Total=4032 [2022-11-18 20:35:10,721 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 1299 mSDsluCounter, 434 mSDsCounter, 0 mSdLazyCounter, 2248 mSolverCounterSat, 657 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1302 SdHoareTripleChecker+Valid, 487 SdHoareTripleChecker+Invalid, 2905 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 657 IncrementalHoareTripleChecker+Valid, 2248 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2022-11-18 20:35:10,721 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1302 Valid, 487 Invalid, 2905 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [657 Valid, 2248 Invalid, 0 Unknown, 0 Unchecked, 1.6s Time] [2022-11-18 20:35:10,721 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-18 20:35:10,721 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-18 20:35:10,722 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-18 20:35:10,722 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-18 20:35:10,722 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 236 [2022-11-18 20:35:10,722 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:35:10,722 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-18 20:35:10,723 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 25 states have (on average 10.6) internal successors, (265), 21 states have internal predecessors, (265), 16 states have call successors, (56), 11 states have call predecessors, (56), 14 states have return successors, (51), 16 states have call predecessors, (51), 16 states have call successors, (51) [2022-11-18 20:35:10,723 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-18 20:35:10,723 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-18 20:35:10,726 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-18 20:35:10,737 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-18 20:35:10,931 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 20:35:10,933 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-18 20:35:30,398 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 466 473) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 (not (= 1 ~systemActive~0))) (or .cse0 (not (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0)))) [2022-11-18 20:35:30,398 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 466 473) no Hoare annotation was computed. [2022-11-18 20:35:30,399 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 466 473) no Hoare annotation was computed. [2022-11-18 20:35:30,399 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 356 362) no Hoare annotation was computed. [2022-11-18 20:35:30,399 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 356 362) the Hoare annotation is: true [2022-11-18 20:35:30,399 INFO L895 garLoopResultBuilder]: At program point L409(line 409) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-18 20:35:30,399 INFO L899 garLoopResultBuilder]: For program point L409-1(lines 390 414) no Hoare annotation was computed. [2022-11-18 20:35:30,400 INFO L895 garLoopResultBuilder]: At program point L564(lines 549 567) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-18 20:35:30,400 INFO L899 garLoopResultBuilder]: For program point L558(lines 558 562) no Hoare annotation was computed. [2022-11-18 20:35:30,400 INFO L899 garLoopResultBuilder]: For program point L558-2(lines 558 562) no Hoare annotation was computed. [2022-11-18 20:35:30,406 INFO L895 garLoopResultBuilder]: At program point L682(lines 677 685) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-18 20:35:30,407 INFO L895 garLoopResultBuilder]: At program point L404(line 404) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-18 20:35:30,407 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 390 414) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-18 20:35:30,407 INFO L895 garLoopResultBuilder]: At program point L400(line 400) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-18 20:35:30,407 INFO L899 garLoopResultBuilder]: For program point L398(lines 398 406) no Hoare annotation was computed. [2022-11-18 20:35:30,408 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 390 414) no Hoare annotation was computed. [2022-11-18 20:35:30,408 INFO L899 garLoopResultBuilder]: For program point L394(lines 394 411) no Hoare annotation was computed. [2022-11-18 20:35:30,408 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 485 493) no Hoare annotation was computed. [2022-11-18 20:35:30,408 INFO L902 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 485 493) the Hoare annotation is: true [2022-11-18 20:35:30,408 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 485 493) no Hoare annotation was computed. [2022-11-18 20:35:30,410 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 610 621) the Hoare annotation is: (let ((.cse2 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~pumpRunning~0))) (.cse4 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3 .cse4) (or (not (= ~pumpRunning~0 0)) .cse1 .cse2 .cse4) (or .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse3 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-18 20:35:30,410 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 610 621) no Hoare annotation was computed. [2022-11-18 20:35:30,410 INFO L899 garLoopResultBuilder]: For program point L614-1(lines 610 621) no Hoare annotation was computed. [2022-11-18 20:35:30,411 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 222 251) no Hoare annotation was computed. [2022-11-18 20:35:30,411 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 222 251) the Hoare annotation is: true [2022-11-18 20:35:30,411 INFO L902 garLoopResultBuilder]: At program point L247(lines 222 251) the Hoare annotation is: true [2022-11-18 20:35:30,411 INFO L899 garLoopResultBuilder]: For program point L243(line 243) no Hoare annotation was computed. [2022-11-18 20:35:30,411 INFO L899 garLoopResultBuilder]: For program point L236(lines 236 240) no Hoare annotation was computed. [2022-11-18 20:35:30,412 INFO L902 garLoopResultBuilder]: At program point L236-1(lines 236 240) the Hoare annotation is: true [2022-11-18 20:35:30,412 INFO L899 garLoopResultBuilder]: For program point L233(line 233) no Hoare annotation was computed. [2022-11-18 20:35:30,412 INFO L902 garLoopResultBuilder]: At program point L232-2(lines 232 246) the Hoare annotation is: true [2022-11-18 20:35:30,412 INFO L902 garLoopResultBuilder]: At program point L228(line 228) the Hoare annotation is: true [2022-11-18 20:35:30,412 INFO L899 garLoopResultBuilder]: For program point L228-1(line 228) no Hoare annotation was computed. [2022-11-18 20:35:30,413 INFO L899 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2022-11-18 20:35:30,413 INFO L895 garLoopResultBuilder]: At program point L659(lines 654 662) the Hoare annotation is: (let ((.cse20 (= 1 ~systemActive~0)) (.cse7 (<= ~waterLevel~0 0)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse19 (= ~pumpRunning~0 0)) (.cse5 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse6 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse11 (= ~waterLevel~0 1)) (.cse8 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (and .cse19 .cse5 .cse6 .cse11 .cse8)) (.cse10 (not (< 1 |old(~waterLevel~0)|))) (.cse18 (not (= 0 ~systemActive~0))) (.cse17 (and .cse19 .cse13)) (.cse14 (not (<= |old(~waterLevel~0)| 0))) (.cse16 (not (= |old(~pumpRunning~0)| 0))) (.cse12 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (and .cse19 .cse5 .cse20 .cse6 .cse7 .cse8)) (.cse15 (= ~methaneLevelCritical~0 0)) (.cse1 (not .cse20)) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5 .cse6 .cse7 .cse8)) (or .cse1 .cse2 .cse9 .cse10 (and .cse4 .cse5 .cse6 .cse11 .cse8) .cse12) (or .cse1 .cse2 .cse13 .cse14 .cse3) (or .cse15 .cse1 .cse2 .cse9 .cse10 .cse12) (or .cse16 .cse17 .cse18) (or .cse16 (= 2 |timeShift_getWaterLevel_#res#1|) .cse10 .cse12 .cse18) (or .cse17 .cse15 .cse1 .cse2 .cse14 .cse3) (or .cse16 .cse1 (and .cse19 .cse5 .cse13) .cse12 (and (<= 1 ~pumpRunning~0) .cse5 (= 2 ~waterLevel~0) .cse13)) (or .cse16 .cse19 .cse15 .cse1 .cse12) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse15 .cse1 .cse2 .cse3)))) [2022-11-18 20:35:30,413 INFO L899 garLoopResultBuilder]: For program point L424(lines 424 432) no Hoare annotation was computed. [2022-11-18 20:35:30,413 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 329 355) no Hoare annotation was computed. [2022-11-18 20:35:30,414 INFO L895 garLoopResultBuilder]: At program point L69(lines 62 71) the Hoare annotation is: (let ((.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 0) .cse7)) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse2 .cse4 (and .cse5 (< 1 ~waterLevel~0) (<= ~waterLevel~0 2) .cse6) (not (< 1 |old(~waterLevel~0)|)) .cse3) (or (and .cse5 .cse7 .cse6) .cse2 .cse4 .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2022-11-18 20:35:30,414 INFO L899 garLoopResultBuilder]: For program point L420(lines 420 437) no Hoare annotation was computed. [2022-11-18 20:35:30,414 INFO L895 garLoopResultBuilder]: At program point L82(line 82) the Hoare annotation is: (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse18 (= ~pumpRunning~0 0)) (.cse10 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse11 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse19 (= 1 ~systemActive~0)) (.cse12 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse13 (<= ~waterLevel~0 0)) (.cse14 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse7 (not (= 0 ~systemActive~0))) (.cse8 (and .cse18 .cse10 .cse11 .cse19 .cse12 .cse13 .cse14)) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (and .cse18 .cse2)) (.cse3 (not (<= |old(~waterLevel~0)| 0))) (.cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse20 (not (<= 2 |old(~waterLevel~0)|))) (.cse17 (= ~methaneLevelCritical~0 0)) (.cse0 (not .cse19)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse15 (not (< 1 |old(~waterLevel~0)|))) (.cse16 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse8 (and .cse9 .cse10 .cse11 .cse12 .cse13 .cse14) .cse1 .cse4) (or .cse5 .cse15 .cse16 .cse7) (or (not (= |old(~waterLevel~0)| 1)) .cse17 .cse0 .cse8 .cse1 .cse4) (or .cse5 .cse0 (and .cse18 .cse10 .cse11 .cse2) .cse16) (or .cse0 .cse1 (and .cse18 .cse10 .cse11 .cse19 .cse12 .cse14) (and .cse9 .cse10 .cse11 .cse12 .cse14) .cse16 .cse20) (or .cse6 .cse17 .cse0 .cse1 .cse3 .cse4) (or .cse5 .cse0 .cse16 .cse20) (or .cse18 .cse17 .cse0 .cse1 .cse15 .cse16) (or .cse0 .cse1 .cse15 (= ~waterLevel~0 1) .cse16)))) [2022-11-18 20:35:30,415 INFO L899 garLoopResultBuilder]: For program point L82-1(line 82) no Hoare annotation was computed. [2022-11-18 20:35:30,415 INFO L899 garLoopResultBuilder]: For program point L144(line 144) no Hoare annotation was computed. [2022-11-18 20:35:30,415 INFO L899 garLoopResultBuilder]: For program point L590(lines 590 594) no Hoare annotation was computed. [2022-11-18 20:35:30,415 INFO L895 garLoopResultBuilder]: At program point L590-2(lines 586 597) the Hoare annotation is: (let ((.cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) (not (<= |old(~waterLevel~0)| 0)) .cse2) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 (and .cse3 (<= ~waterLevel~0 0) .cse4) .cse2) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) (and .cse3 (= ~waterLevel~0 1) .cse4) .cse5) (or .cse6 .cse0 .cse5) (or .cse6 (not (= 0 ~systemActive~0))))) [2022-11-18 20:35:30,416 INFO L899 garLoopResultBuilder]: For program point L343-1(lines 343 349) no Hoare annotation was computed. [2022-11-18 20:35:30,416 INFO L895 garLoopResultBuilder]: At program point L145(lines 140 147) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse3 .cse0 .cse2) (or .cse3 (not (= 0 ~systemActive~0))))) [2022-11-18 20:35:30,416 INFO L895 garLoopResultBuilder]: At program point L430(line 430) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse7 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (and .cse5 .cse6 (<= ~waterLevel~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) .cse7)) (.cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (and .cse5 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse6 .cse7)) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) .cse3 (and .cse5 .cse6 (= ~waterLevel~0 1) .cse7)) (or .cse8 .cse0 .cse1 .cse3 .cse4) (or .cse0 .cse1 .cse2 (not (<= |old(~waterLevel~0)| 0)) .cse4) (or .cse8 .cse0 .cse1 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse9 .cse0 .cse3) (or .cse9 (not (= 0 ~systemActive~0)))))) [2022-11-18 20:35:30,417 INFO L895 garLoopResultBuilder]: At program point L426(line 426) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse8 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 (and .cse4 .cse5 (<= ~waterLevel~0 0) .cse6) .cse3 .cse7) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) .cse3 (and .cse4 .cse5 (= ~waterLevel~0 1) .cse6)) (or .cse0 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) .cse3 (not (<= |old(~waterLevel~0)| 0)) .cse7) (or .cse8 .cse0 .cse3) (or .cse0 .cse1 .cse2 .cse3 .cse7) (or .cse8 (not (= 0 ~systemActive~0))))) [2022-11-18 20:35:30,417 INFO L895 garLoopResultBuilder]: At program point L422(line 422) the Hoare annotation is: (let ((.cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) (not (<= |old(~waterLevel~0)| 0)) .cse2) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 (and .cse3 (<= ~waterLevel~0 0) .cse4) .cse2) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) (and .cse3 (= ~waterLevel~0 1) .cse4) .cse5) (or .cse6 .cse0 .cse5) (or .cse6 (not (= 0 ~systemActive~0))))) [2022-11-18 20:35:30,417 INFO L899 garLoopResultBuilder]: For program point L422-1(line 422) no Hoare annotation was computed. [2022-11-18 20:35:30,418 INFO L895 garLoopResultBuilder]: At program point L67(line 67) the Hoare annotation is: (let ((.cse6 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (and (= ~pumpRunning~0 0) .cse6 .cse7)) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse2 .cse4 (not (< 1 |old(~waterLevel~0)|)) (and .cse5 .cse6 (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse2 .cse4 (and .cse5 .cse6 .cse7) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 (not (= 0 ~systemActive~0)))))) [2022-11-18 20:35:30,418 INFO L899 garLoopResultBuilder]: For program point L67-1(line 67) no Hoare annotation was computed. [2022-11-18 20:35:30,418 INFO L899 garLoopResultBuilder]: For program point L84(lines 84 94) no Hoare annotation was computed. [2022-11-18 20:35:30,419 INFO L895 garLoopResultBuilder]: At program point L435(line 435) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1 .cse2) (or .cse1 .cse3 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse3 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-11-18 20:35:30,419 INFO L895 garLoopResultBuilder]: At program point L435-1(lines 416 440) the Hoare annotation is: (let ((.cse9 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse12 (= ~pumpRunning~0 0)) (.cse13 (= 1 ~systemActive~0)) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse20 (<= ~waterLevel~0 0)) (.cse18 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse11 (<= 1 ~switchedOnBeforeTS~0)) (.cse15 (= ~methaneLevelCritical~0 0))) (let ((.cse2 (not .cse15)) (.cse3 (and .cse8 .cse10 .cse20 .cse18 .cse11)) (.cse4 (and .cse12 .cse15 .cse13 .cse10 .cse20 .cse18 .cse11)) (.cse6 (and .cse12 .cse13 .cse9 .cse10 .cse11)) (.cse19 (not (<= |old(~waterLevel~0)| 0))) (.cse7 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse16 (not (< 1 |old(~waterLevel~0)|))) (.cse14 (= ~waterLevel~0 1)) (.cse0 (not .cse13)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse17 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (and .cse8 .cse9 .cse10 .cse11)) (or (and .cse12 .cse13 .cse14) .cse15 .cse0 .cse1 .cse16 .cse5) (or .cse17 (and .cse12 .cse18) .cse0 .cse5 (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0) .cse18)) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse19 .cse7) (or (not (= |old(~waterLevel~0)| 1)) .cse15 .cse0 .cse1 .cse6 .cse7) (or (and .cse12 .cse10 .cse18 .cse11) .cse15 .cse0 .cse1 .cse19 .cse7) (or (and .cse12 .cse13 .cse10 .cse14 .cse11) .cse0 .cse1 .cse16 .cse5 (and .cse8 .cse10 .cse14 .cse11)) (or .cse17 .cse12 .cse15 .cse0 .cse5) (or .cse17 (not (= 0 ~systemActive~0)))))) [2022-11-18 20:35:30,419 INFO L899 garLoopResultBuilder]: For program point L336(lines 336 342) no Hoare annotation was computed. [2022-11-18 20:35:30,420 INFO L899 garLoopResultBuilder]: For program point L80(lines 80 97) no Hoare annotation was computed. [2022-11-18 20:35:30,420 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 329 355) the Hoare annotation is: (let ((.cse6 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (and (= ~pumpRunning~0 0) .cse6 .cse7)) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse2 .cse4 (not (< 1 |old(~waterLevel~0)|)) (and .cse5 .cse6 (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse2 .cse4 (and .cse5 .cse6 .cse7) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 (not (= 0 ~systemActive~0)))))) [2022-11-18 20:35:30,421 INFO L895 garLoopResultBuilder]: At program point L80-1(lines 72 100) the Hoare annotation is: (let ((.cse26 (<= 1 ~pumpRunning~0)) (.cse20 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse8 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse9 (<= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|)) (.cse22 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse28 (<= ~waterLevel~0 0)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse23 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse10 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~waterLevel~0)| 1))) (.cse14 (not (= 0 ~systemActive~0))) (.cse16 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse17 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)) (.cse4 (and .cse6 .cse10)) (.cse27 (not (<= 2 |old(~waterLevel~0)|))) (.cse19 (and .cse26 .cse20 .cse7 .cse8 .cse9 .cse10 .cse22 .cse28 .cse13 .cse23)) (.cse24 (and .cse6 .cse7 .cse8 .cse10 .cse22 .cse28 .cse13 .cse23)) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse12 (not (= |old(~pumpRunning~0)| 0))) (.cse25 (not (<= |old(~waterLevel~0)| 0))) (.cse2 (not .cse10)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse15 (not (< 1 |old(~waterLevel~0)|))) (.cse18 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse11 (= ~waterLevel~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or (and .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) .cse12 .cse0 .cse2) (or .cse12 (and .cse6 .cse13) .cse14) (or .cse12 .cse15 (and .cse16 .cse17) .cse18 .cse14) (let ((.cse21 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))) (or .cse2 .cse3 .cse19 (and .cse20 .cse7 .cse8 .cse9 .cse21 .cse22 .cse23) (and .cse6 .cse7 .cse8 .cse10 .cse21 .cse22 .cse23) .cse18 .cse24 .cse5)) (or .cse1 .cse2 .cse3 .cse24 .cse25 .cse5) (or .cse12 .cse2 (and .cse26 .cse16 .cse13 .cse17) (and .cse6 .cse16 .cse10 .cse13 .cse17) .cse18 .cse27) (or .cse12 .cse1 .cse2 .cse18 .cse4 .cse27) (or .cse2 .cse3 .cse19 .cse24 .cse25 .cse5) (or (and .cse6 .cse7 .cse8 .cse9 .cse10 .cse13) .cse12 .cse2 .cse25) (or .cse2 (and .cse6 .cse7 .cse8 .cse10 .cse22 .cse11 .cse23) .cse3 .cse15 .cse18 (and .cse20 .cse7 .cse8 .cse1 .cse9 .cse22 .cse11 .cse23))))) [2022-11-18 20:35:30,422 INFO L899 garLoopResultBuilder]: For program point L336-2(lines 332 354) no Hoare annotation was computed. [2022-11-18 20:35:30,424 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 329 355) no Hoare annotation was computed. [2022-11-18 20:35:30,424 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 144) no Hoare annotation was computed. [2022-11-18 20:35:30,425 INFO L899 garLoopResultBuilder]: For program point L572(lines 572 578) no Hoare annotation was computed. [2022-11-18 20:35:30,425 INFO L899 garLoopResultBuilder]: For program point L572-1(lines 572 578) no Hoare annotation was computed. [2022-11-18 20:35:30,425 INFO L899 garLoopResultBuilder]: For program point L184(lines 184 190) no Hoare annotation was computed. [2022-11-18 20:35:30,425 INFO L899 garLoopResultBuilder]: For program point L184-1(lines 184 190) no Hoare annotation was computed. [2022-11-18 20:35:30,426 INFO L895 garLoopResultBuilder]: At program point L209(lines 164 211) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse1 .cse3 .cse4) (and .cse5 .cse4 (= 0 ~systemActive~0)) (and .cse5 (<= ~waterLevel~0 1) .cse3 .cse4) (and .cse0 .cse2 .cse3 .cse4 (<= ~waterLevel~0 0) .cse6) (and .cse0 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse6))) [2022-11-18 20:35:30,426 INFO L895 garLoopResultBuilder]: At program point L176(line 176) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse1 .cse3 .cse4) (and .cse5 .cse4 (= 0 ~systemActive~0)) (and .cse5 (<= ~waterLevel~0 1) .cse3 .cse4) (and .cse0 .cse2 .cse3 .cse4 (<= ~waterLevel~0 0) .cse6) (and .cse0 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse6))) [2022-11-18 20:35:30,427 INFO L895 garLoopResultBuilder]: At program point L135(lines 130 138) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-18 20:35:30,427 INFO L902 garLoopResultBuilder]: At program point L292(lines 284 294) the Hoare annotation is: true [2022-11-18 20:35:30,428 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-18 20:35:30,428 INFO L895 garLoopResultBuilder]: At program point L127(lines 123 129) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-18 20:35:30,428 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-18 20:35:30,428 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-18 20:35:30,429 INFO L899 garLoopResultBuilder]: For program point L305(lines 305 312) no Hoare annotation was computed. [2022-11-18 20:35:30,429 INFO L899 garLoopResultBuilder]: For program point L305-2(lines 305 312) no Hoare annotation was computed. [2022-11-18 20:35:30,429 INFO L899 garLoopResultBuilder]: For program point L165(lines 164 211) no Hoare annotation was computed. [2022-11-18 20:35:30,429 INFO L899 garLoopResultBuilder]: For program point L194(lines 194 207) no Hoare annotation was computed. [2022-11-18 20:35:30,429 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-18 20:35:30,430 INFO L895 garLoopResultBuilder]: At program point L574(line 574) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 1 ~systemActive~0) .cse0) (and (<= 2 ~waterLevel~0) .cse0 (not (= 0 ~systemActive~0))))) [2022-11-18 20:35:30,430 INFO L895 garLoopResultBuilder]: At program point L186(line 186) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse5 (= ~pumpRunning~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 .cse1 (< 1 ~waterLevel~0) .cse2 .cse3 .cse4) (and .cse5 .cse3 (= 0 ~systemActive~0)) (and .cse5 .cse2 .cse3 .cse4))) [2022-11-18 20:35:30,430 INFO L902 garLoopResultBuilder]: At program point L314(lines 295 317) the Hoare annotation is: true [2022-11-18 20:35:30,430 INFO L895 garLoopResultBuilder]: At program point L281(lines 277 283) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-18 20:35:30,431 INFO L895 garLoopResultBuilder]: At program point L120(lines 116 122) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-18 20:35:30,431 INFO L902 garLoopResultBuilder]: At program point L215(lines 154 219) the Hoare annotation is: true [2022-11-18 20:35:30,431 INFO L899 garLoopResultBuilder]: For program point L174(lines 174 180) no Hoare annotation was computed. [2022-11-18 20:35:30,431 INFO L899 garLoopResultBuilder]: For program point L174-1(lines 174 180) no Hoare annotation was computed. [2022-11-18 20:35:30,431 INFO L899 garLoopResultBuilder]: For program point L166(lines 166 170) no Hoare annotation was computed. [2022-11-18 20:35:30,432 INFO L895 garLoopResultBuilder]: At program point L59(lines 54 61) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-18 20:35:30,432 INFO L895 garLoopResultBuilder]: At program point L212(lines 163 213) the Hoare annotation is: false [2022-11-18 20:35:30,432 INFO L899 garLoopResultBuilder]: For program point L200(lines 200 206) no Hoare annotation was computed. [2022-11-18 20:35:30,432 INFO L895 garLoopResultBuilder]: At program point L200-2(lines 194 207) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1) .cse3) (and .cse0 (< 1 ~waterLevel~0) .cse1 .cse2 .cse4) (and .cse5 .cse2 (= 0 ~systemActive~0)) (and .cse5 .cse1 .cse2 .cse4) (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 0) .cse3))) [2022-11-18 20:35:30,432 INFO L895 garLoopResultBuilder]: At program point L580(lines 568 582) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= 0 ~systemActive~0)) [2022-11-18 20:35:30,433 INFO L895 garLoopResultBuilder]: At program point L545(lines 530 548) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (= 2 ~waterLevel~0) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) .cse1 .cse2) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 (= ~pumpRunning~0 0) .cse1 .cse2))) [2022-11-18 20:35:30,433 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 364 388) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-18 20:35:30,433 INFO L895 garLoopResultBuilder]: At program point L446(lines 441 448) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= ~waterLevel~0 1)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not .cse1) .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or (and (<= 1 ~pumpRunning~0) .cse1) .cse3 .cse0 (not (<= ~waterLevel~0 2))) (or .cse3 .cse0 .cse2))) [2022-11-18 20:35:30,434 INFO L899 garLoopResultBuilder]: For program point L667(lines 667 673) no Hoare annotation was computed. [2022-11-18 20:35:30,434 INFO L899 garLoopResultBuilder]: For program point L539(lines 539 543) no Hoare annotation was computed. [2022-11-18 20:35:30,434 INFO L895 garLoopResultBuilder]: At program point L378(line 378) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0)) .cse0 (not (<= ~waterLevel~0 2))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-18 20:35:30,434 INFO L899 garLoopResultBuilder]: For program point L539-2(lines 539 543) no Hoare annotation was computed. [2022-11-18 20:35:30,434 INFO L899 garLoopResultBuilder]: For program point L372(lines 372 380) no Hoare annotation was computed. [2022-11-18 20:35:30,435 INFO L899 garLoopResultBuilder]: For program point L368(lines 368 385) no Hoare annotation was computed. [2022-11-18 20:35:30,435 INFO L895 garLoopResultBuilder]: At program point L672(lines 663 676) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 1)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse2 (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse2 .cse0 .cse1))) [2022-11-18 20:35:30,435 INFO L895 garLoopResultBuilder]: At program point L383(line 383) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-18 20:35:30,435 INFO L899 garLoopResultBuilder]: For program point L383-1(lines 364 388) no Hoare annotation was computed. [2022-11-18 20:35:30,436 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 364 388) no Hoare annotation was computed. [2022-11-18 20:35:30,436 INFO L899 garLoopResultBuilder]: For program point L456(lines 456 462) no Hoare annotation was computed. [2022-11-18 20:35:30,436 INFO L895 garLoopResultBuilder]: At program point L454(line 454) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (= ~pumpRunning~0 0) (= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-18 20:35:30,436 INFO L895 garLoopResultBuilder]: At program point L456-2(lines 449 465) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse5 (not (<= ~waterLevel~0 2))) (.cse4 (= ~pumpRunning~0 0)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= ~waterLevel~0 1)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not .cse1) .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or (<= 1 ~pumpRunning~0) .cse3 .cse4 .cse0 .cse5) (or .cse3 .cse1 .cse0 .cse5 (and (not (= 0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~6#1|)) .cse4)) (or .cse3 .cse0 .cse2))) [2022-11-18 20:35:30,437 INFO L899 garLoopResultBuilder]: For program point L454-1(line 454) no Hoare annotation was computed. [2022-11-18 20:35:30,437 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 598 609) no Hoare annotation was computed. [2022-11-18 20:35:30,437 INFO L899 garLoopResultBuilder]: For program point L602-1(lines 598 609) no Hoare annotation was computed. [2022-11-18 20:35:30,438 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 598 609) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (<= 1 ~pumpRunning~0))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse3 (not (= 0 ~systemActive~0))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse5 .cse0 .cse3 .cse4))) [2022-11-18 20:35:30,439 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 474 484) the Hoare annotation is: true [2022-11-18 20:35:30,439 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 474 484) no Hoare annotation was computed. [2022-11-18 20:35:30,439 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 474 484) no Hoare annotation was computed. [2022-11-18 20:35:30,439 INFO L895 garLoopResultBuilder]: At program point L627(lines 622 630) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |isMethaneAlarm_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0))) (and (or .cse0 (not (<= 1 ~pumpRunning~0)) (not (<= ~waterLevel~0 1)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= ~pumpRunning~0 0)) .cse0 (not (<= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2)) .cse1))) [2022-11-18 20:35:30,443 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:35:30,446 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-18 20:35:30,530 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 18.11 08:35:30 BoogieIcfgContainer [2022-11-18 20:35:30,530 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-18 20:35:30,531 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-18 20:35:30,531 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-18 20:35:30,531 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-18 20:35:30,532 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 08:34:46" (3/4) ... [2022-11-18 20:35:30,535 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-18 20:35:30,546 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-18 20:35:30,547 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-18 20:35:30,547 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-18 20:35:30,547 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-18 20:35:30,547 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-18 20:35:30,547 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-18 20:35:30,547 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-18 20:35:30,547 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-11-18 20:35:30,547 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-11-18 20:35:30,548 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-11-18 20:35:30,555 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 25 nodes and edges [2022-11-18 20:35:30,556 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-18 20:35:30,557 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-18 20:35:30,557 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-18 20:35:30,558 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-18 20:35:30,588 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && 1 < waterLevel) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2022-11-18 20:35:30,589 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-18 20:35:30,589 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == 0 && 1 == systemActive)) || !(1 <= \old(switchedOnBeforeTS))) && ((((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && 1 == systemActive) && waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || (2 == \result && tmp == 2)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || ((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || (((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || ((((pumpRunning == 0 && 2 == \result) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (pumpRunning == 0 && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(\old(waterLevel) <= 0))) && (((((!(1 == systemActive) || ((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || (((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == waterLevel) && methaneLevelCritical == 0) && pumpRunning <= tmp___0) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) [2022-11-18 20:35:30,590 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) || (((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) && (((((((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && 2 == waterLevel) && \old(waterLevel) == waterLevel))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == 0 && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-18 20:35:30,590 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-18 20:35:30,591 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(\old(waterLevel) <= 1) || (((((pumpRunning == 0 && waterLevel == \result) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) || ((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 < \old(waterLevel))) || ((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || 2 == \result) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((pumpRunning == 0 && \old(waterLevel) == waterLevel) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || (((1 <= pumpRunning && waterLevel == \result) && 2 == waterLevel) && \old(waterLevel) == waterLevel))) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((((((((pumpRunning == 0 && waterLevel == \result) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) || !(\old(waterLevel) == 1)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) [2022-11-18 20:35:30,591 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= pumpRunning)) || !(waterLevel <= 1)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS)) && ((((!(pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || \result == methaneLevelCritical) [2022-11-18 20:35:30,592 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) [2022-11-18 20:35:30,592 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((((1 <= pumpRunning || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2))) && ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || (!(0 == tmp) && pumpRunning == 0))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) [2022-11-18 20:35:30,592 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2))) && (((1 <= \result || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(waterLevel <= 1)) [2022-11-18 20:35:30,592 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((((1 <= pumpRunning && methaneLevelCritical == 0) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(waterLevel <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) [2022-11-18 20:35:30,592 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) [2022-11-18 20:35:30,593 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || 2 == waterLevel) || (tmp___0 == 0 && \result == 0)) || !(1 == systemActive)) || !(waterLevel <= 2)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2022-11-18 20:35:30,651 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/witness.graphml [2022-11-18 20:35:30,651 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-18 20:35:30,652 INFO L158 Benchmark]: Toolchain (without parser) took 45967.19ms. Allocated memory was 111.1MB in the beginning and 358.6MB in the end (delta: 247.5MB). Free memory was 69.9MB in the beginning and 261.0MB in the end (delta: -191.1MB). Peak memory consumption was 56.6MB. Max. memory is 16.1GB. [2022-11-18 20:35:30,652 INFO L158 Benchmark]: CDTParser took 0.35ms. Allocated memory is still 111.1MB. Free memory is still 87.0MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-18 20:35:30,652 INFO L158 Benchmark]: CACSL2BoogieTranslator took 607.99ms. Allocated memory is still 111.1MB. Free memory was 69.6MB in the beginning and 76.7MB in the end (delta: -7.1MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-11-18 20:35:30,653 INFO L158 Benchmark]: Boogie Procedure Inliner took 87.52ms. Allocated memory is still 111.1MB. Free memory was 76.7MB in the beginning and 74.3MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-18 20:35:30,654 INFO L158 Benchmark]: Boogie Preprocessor took 60.37ms. Allocated memory is still 111.1MB. Free memory was 74.3MB in the beginning and 72.5MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-18 20:35:30,655 INFO L158 Benchmark]: RCFGBuilder took 665.53ms. Allocated memory is still 111.1MB. Free memory was 72.5MB in the beginning and 54.3MB in the end (delta: 18.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-11-18 20:35:30,655 INFO L158 Benchmark]: TraceAbstraction took 44416.61ms. Allocated memory was 111.1MB in the beginning and 358.6MB in the end (delta: 247.5MB). Free memory was 53.6MB in the beginning and 267.3MB in the end (delta: -213.7MB). Peak memory consumption was 190.7MB. Max. memory is 16.1GB. [2022-11-18 20:35:30,656 INFO L158 Benchmark]: Witness Printer took 120.22ms. Allocated memory is still 358.6MB. Free memory was 267.3MB in the beginning and 261.0MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-18 20:35:30,658 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.35ms. Allocated memory is still 111.1MB. Free memory is still 87.0MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 607.99ms. Allocated memory is still 111.1MB. Free memory was 69.6MB in the beginning and 76.7MB in the end (delta: -7.1MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 87.52ms. Allocated memory is still 111.1MB. Free memory was 76.7MB in the beginning and 74.3MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 60.37ms. Allocated memory is still 111.1MB. Free memory was 74.3MB in the beginning and 72.5MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 665.53ms. Allocated memory is still 111.1MB. Free memory was 72.5MB in the beginning and 54.3MB in the end (delta: 18.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 44416.61ms. Allocated memory was 111.1MB in the beginning and 358.6MB in the end (delta: 247.5MB). Free memory was 53.6MB in the beginning and 267.3MB in the end (delta: -213.7MB). Peak memory consumption was 190.7MB. Max. memory is 16.1GB. * Witness Printer took 120.22ms. Allocated memory is still 358.6MB. Free memory was 267.3MB in the beginning and 261.0MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 144]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 117 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 44.2s, OverallIterations: 13, TraceHistogramMax: 7, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 13.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 19.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 6407 SdHoareTripleChecker+Valid, 8.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 6345 mSDsluCounter, 7183 SdHoareTripleChecker+Invalid, 6.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5589 mSDsCounter, 2653 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 10291 IncrementalHoareTripleChecker+Invalid, 12944 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 2653 mSolverCounterUnsat, 1594 mSDtfsCounter, 10291 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 2226 GetRequests, 1886 SyntacticMatches, 23 SemanticMatches, 317 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4544 ImplicationChecksByTransitivity, 5.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1245occurred in iteration=8, InterpolantAutomatonStates: 254, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.0s AutomataMinimizationTime, 13 MinimizatonAttempts, 585 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 54 LocationsWithAnnotation, 4237 PreInvPairs, 4798 NumberOfFragments, 3702 HoareAnnotationTreeSize, 4237 FomulaSimplifications, 11461 FormulaSimplificationTreeSizeReduction, 1.9s HoareSimplificationTime, 54 FomulaSimplificationsInter, 78168 FormulaSimplificationTreeSizeReductionInter, 17.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 7.5s InterpolantComputationTime, 2134 NumberOfCodeBlocks, 2134 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 2916 ConstructedInterpolants, 0 QuantifiedInterpolants, 6325 SizeOfPredicates, 9 NumberOfNonLiveVariables, 2406 ConjunctsInSsa, 51 ConjunctsInUnsatCore, 21 InterpolantComputations, 9 PerfectInterpolantSequences, 2129/2502 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 568]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && splverifierCounter == 0) && 0 == systemActive - InvariantResult [Line: 654]: Loop Invariant Derived loop invariant: (((((((((((((!(\old(waterLevel) <= 1) || (((((pumpRunning == 0 && waterLevel == \result) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) || ((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 < \old(waterLevel))) || ((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || 2 == \result) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((pumpRunning == 0 && \old(waterLevel) == waterLevel) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || (((1 <= pumpRunning && waterLevel == \result) && 2 == waterLevel) && \old(waterLevel) == waterLevel))) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((((((((pumpRunning == 0 && waterLevel == \result) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) || !(\old(waterLevel) == 1)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 140]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 130]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 586]: Loop Invariant Derived loop invariant: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 164]: Loop Invariant Derived loop invariant: ((((((((1 <= pumpRunning && 2 == waterLevel) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) || (((pumpRunning == 0 && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || ((pumpRunning == 0 && splverifierCounter == 0) && 0 == systemActive)) || (((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0)) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 116]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 622]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= pumpRunning)) || !(waterLevel <= 1)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS)) && ((((!(pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || \result == methaneLevelCritical) - InvariantResult [Line: 277]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 677]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 232]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 222]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && 1 < waterLevel) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 416]: Loop Invariant Derived loop invariant: (((((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) || (((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) && (((((((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && 2 == waterLevel) && \old(waterLevel) == waterLevel))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == 0 && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 123]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 284]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 663]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2))) && (((1 <= \result || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(waterLevel <= 1)) - InvariantResult [Line: 549]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 72]: Loop Invariant Derived loop invariant: ((((((((((((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == 0 && 1 == systemActive)) || !(1 <= \old(switchedOnBeforeTS))) && ((((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && 1 == systemActive) && waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || (2 == \result && tmp == 2)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || ((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || (((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || ((((pumpRunning == 0 && 2 == \result) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (pumpRunning == 0 && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(\old(waterLevel) <= 0))) && (((((!(1 == systemActive) || ((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || (((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == waterLevel) && methaneLevelCritical == 0) && pumpRunning <= tmp___0) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) - InvariantResult [Line: 530]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || 2 == waterLevel) || (tmp___0 == 0 && \result == 0)) || !(1 == systemActive)) || !(waterLevel <= 2)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 154]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((((1 <= pumpRunning && methaneLevelCritical == 0) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(waterLevel <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) - InvariantResult [Line: 449]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((((1 <= pumpRunning || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2))) && ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || (!(0 == tmp) && pumpRunning == 0))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) RESULT: Ultimate proved your program to be correct! [2022-11-18 20:35:30,704 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f248364e-beb7-4db7-b448-a568011b9f65/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE