./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 6b4ec56b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 603cfb64133b588a2e9c81e31ac984484d295feb0a468539180131e3ac5a47d6 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-6b4ec56 [2022-11-20 12:47:41,289 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-20 12:47:41,292 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-20 12:47:41,332 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-20 12:47:41,335 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-20 12:47:41,340 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-20 12:47:41,341 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-20 12:47:41,345 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-20 12:47:41,347 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-20 12:47:41,349 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-20 12:47:41,351 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-20 12:47:41,355 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-20 12:47:41,356 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-20 12:47:41,363 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-20 12:47:41,365 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-20 12:47:41,367 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-20 12:47:41,370 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-20 12:47:41,373 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-20 12:47:41,378 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-20 12:47:41,380 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-20 12:47:41,386 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-20 12:47:41,387 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-20 12:47:41,390 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-20 12:47:41,391 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-20 12:47:41,395 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-20 12:47:41,398 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-20 12:47:41,398 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-20 12:47:41,400 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-20 12:47:41,401 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-20 12:47:41,404 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-20 12:47:41,405 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-20 12:47:41,407 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-20 12:47:41,408 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-20 12:47:41,410 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-20 12:47:41,411 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-20 12:47:41,412 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-20 12:47:41,413 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-20 12:47:41,413 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-20 12:47:41,413 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-20 12:47:41,415 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-20 12:47:41,416 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-20 12:47:41,417 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-20 12:47:41,458 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-20 12:47:41,459 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-20 12:47:41,460 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-20 12:47:41,460 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-20 12:47:41,461 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-20 12:47:41,461 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-20 12:47:41,462 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-20 12:47:41,462 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-20 12:47:41,463 INFO L138 SettingsManager]: * Use SBE=true [2022-11-20 12:47:41,463 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-20 12:47:41,464 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-20 12:47:41,464 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-20 12:47:41,465 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-20 12:47:41,465 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-20 12:47:41,465 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-20 12:47:41,465 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-20 12:47:41,466 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-20 12:47:41,466 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-20 12:47:41,466 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-20 12:47:41,466 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-20 12:47:41,467 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-20 12:47:41,467 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-20 12:47:41,467 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-20 12:47:41,467 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-20 12:47:41,468 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-20 12:47:41,468 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-20 12:47:41,468 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-20 12:47:41,468 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-20 12:47:41,469 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-20 12:47:41,469 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-20 12:47:41,470 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-20 12:47:41,470 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-20 12:47:41,470 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-20 12:47:41,470 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 603cfb64133b588a2e9c81e31ac984484d295feb0a468539180131e3ac5a47d6 [2022-11-20 12:47:41,746 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-20 12:47:41,769 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-20 12:47:41,772 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-20 12:47:41,774 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-20 12:47:41,774 INFO L275 PluginConnector]: CDTParser initialized [2022-11-20 12:47:41,776 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/../../sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c [2022-11-20 12:47:44,864 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-20 12:47:45,128 INFO L351 CDTParser]: Found 1 translation units. [2022-11-20 12:47:45,129 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c [2022-11-20 12:47:45,146 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/data/e9e8082f9/d597ac06f9524b6ca8c5ec5b19dcac67/FLAG40f55e5b0 [2022-11-20 12:47:45,162 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/data/e9e8082f9/d597ac06f9524b6ca8c5ec5b19dcac67 [2022-11-20 12:47:45,165 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-20 12:47:45,167 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-20 12:47:45,168 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-20 12:47:45,169 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-20 12:47:45,173 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-20 12:47:45,174 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 12:47:45" (1/1) ... [2022-11-20 12:47:45,175 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7f8474e6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:47:45, skipping insertion in model container [2022-11-20 12:47:45,175 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 12:47:45" (1/1) ... [2022-11-20 12:47:45,184 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-20 12:47:45,224 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-20 12:47:45,397 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c[3064,3077] [2022-11-20 12:47:45,491 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 12:47:45,502 INFO L203 MainTranslator]: Completed pre-run [2022-11-20 12:47:45,521 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c[3064,3077] [2022-11-20 12:47:45,572 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 12:47:45,598 INFO L208 MainTranslator]: Completed translation [2022-11-20 12:47:45,599 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:47:45 WrapperNode [2022-11-20 12:47:45,599 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-20 12:47:45,600 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-20 12:47:45,600 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-20 12:47:45,601 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-20 12:47:45,609 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:47:45" (1/1) ... [2022-11-20 12:47:45,638 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:47:45" (1/1) ... [2022-11-20 12:47:45,683 INFO L138 Inliner]: procedures = 56, calls = 102, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 208 [2022-11-20 12:47:45,683 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-20 12:47:45,684 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-20 12:47:45,684 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-20 12:47:45,684 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-20 12:47:45,694 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:47:45" (1/1) ... [2022-11-20 12:47:45,695 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:47:45" (1/1) ... [2022-11-20 12:47:45,707 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:47:45" (1/1) ... [2022-11-20 12:47:45,709 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:47:45" (1/1) ... [2022-11-20 12:47:45,714 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:47:45" (1/1) ... [2022-11-20 12:47:45,730 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:47:45" (1/1) ... [2022-11-20 12:47:45,731 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:47:45" (1/1) ... [2022-11-20 12:47:45,738 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:47:45" (1/1) ... [2022-11-20 12:47:45,741 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-20 12:47:45,742 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-20 12:47:45,742 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-20 12:47:45,742 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-20 12:47:45,746 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:47:45" (1/1) ... [2022-11-20 12:47:45,754 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-20 12:47:45,767 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 12:47:45,781 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-20 12:47:45,798 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-20 12:47:45,830 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-20 12:47:45,830 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-20 12:47:45,830 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-20 12:47:45,830 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-20 12:47:45,831 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-20 12:47:45,831 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-20 12:47:45,831 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-20 12:47:45,831 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-20 12:47:45,831 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-20 12:47:45,832 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-11-20 12:47:45,832 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-11-20 12:47:45,832 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-11-20 12:47:45,832 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-11-20 12:47:45,832 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-11-20 12:47:45,833 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-11-20 12:47:45,833 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-20 12:47:45,833 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-20 12:47:45,833 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-20 12:47:45,833 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-20 12:47:45,834 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-20 12:47:45,970 INFO L235 CfgBuilder]: Building ICFG [2022-11-20 12:47:45,972 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-20 12:47:46,417 INFO L276 CfgBuilder]: Performing block encoding [2022-11-20 12:47:46,425 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-20 12:47:46,425 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-20 12:47:46,428 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 12:47:46 BoogieIcfgContainer [2022-11-20 12:47:46,428 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-20 12:47:46,450 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-20 12:47:46,450 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-20 12:47:46,454 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-20 12:47:46,454 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 12:47:45" (1/3) ... [2022-11-20 12:47:46,455 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@43789fd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 12:47:46, skipping insertion in model container [2022-11-20 12:47:46,455 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:47:45" (2/3) ... [2022-11-20 12:47:46,455 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@43789fd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 12:47:46, skipping insertion in model container [2022-11-20 12:47:46,455 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 12:47:46" (3/3) ... [2022-11-20 12:47:46,457 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product45.cil.c [2022-11-20 12:47:46,478 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-20 12:47:46,478 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-20 12:47:46,538 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-20 12:47:46,545 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@565a0330, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-20 12:47:46,545 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-20 12:47:46,550 INFO L276 IsEmpty]: Start isEmpty. Operand has 98 states, 74 states have (on average 1.364864864864865) internal successors, (101), 82 states have internal predecessors, (101), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2022-11-20 12:47:46,562 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-20 12:47:46,562 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:47:46,563 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:47:46,563 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:47:46,568 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:47:46,569 INFO L85 PathProgramCache]: Analyzing trace with hash -1310639887, now seen corresponding path program 1 times [2022-11-20 12:47:46,579 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:47:46,580 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [190916788] [2022-11-20 12:47:46,580 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:47:46,581 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:47:46,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:46,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-20 12:47:46,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:46,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-20 12:47:46,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:46,913 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 12:47:46,913 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:47:46,914 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [190916788] [2022-11-20 12:47:46,915 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [190916788] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:47:46,915 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:47:46,915 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-20 12:47:46,917 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1521744009] [2022-11-20 12:47:46,918 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:47:46,926 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-20 12:47:46,926 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:47:46,972 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-20 12:47:46,973 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-20 12:47:46,977 INFO L87 Difference]: Start difference. First operand has 98 states, 74 states have (on average 1.364864864864865) internal successors, (101), 82 states have internal predecessors, (101), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-20 12:47:47,025 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:47:47,025 INFO L93 Difference]: Finished difference Result 187 states and 252 transitions. [2022-11-20 12:47:47,026 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-20 12:47:47,027 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-11-20 12:47:47,028 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:47:47,038 INFO L225 Difference]: With dead ends: 187 [2022-11-20 12:47:47,038 INFO L226 Difference]: Without dead ends: 89 [2022-11-20 12:47:47,042 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-20 12:47:47,046 INFO L413 NwaCegarLoop]: 123 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 123 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 12:47:47,046 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 123 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 12:47:47,060 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89 states. [2022-11-20 12:47:47,083 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89 to 89. [2022-11-20 12:47:47,085 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 89 states, 67 states have (on average 1.2985074626865671) internal successors, (87), 74 states have internal predecessors, (87), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-20 12:47:47,088 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89 states to 89 states and 114 transitions. [2022-11-20 12:47:47,090 INFO L78 Accepts]: Start accepts. Automaton has 89 states and 114 transitions. Word has length 32 [2022-11-20 12:47:47,091 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:47:47,091 INFO L495 AbstractCegarLoop]: Abstraction has 89 states and 114 transitions. [2022-11-20 12:47:47,091 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-20 12:47:47,092 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 114 transitions. [2022-11-20 12:47:47,094 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-20 12:47:47,094 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:47:47,094 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:47:47,095 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-20 12:47:47,095 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:47:47,096 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:47:47,096 INFO L85 PathProgramCache]: Analyzing trace with hash -527547429, now seen corresponding path program 1 times [2022-11-20 12:47:47,096 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:47:47,097 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1363577727] [2022-11-20 12:47:47,097 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:47:47,097 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:47:47,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:47,289 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-20 12:47:47,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:47,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-20 12:47:47,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:47,313 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 12:47:47,314 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:47:47,314 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1363577727] [2022-11-20 12:47:47,314 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1363577727] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:47:47,314 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:47:47,315 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-20 12:47:47,315 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [577879020] [2022-11-20 12:47:47,315 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:47:47,317 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-20 12:47:47,318 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:47:47,320 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-20 12:47:47,320 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 12:47:47,320 INFO L87 Difference]: Start difference. First operand 89 states and 114 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-20 12:47:47,347 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:47:47,348 INFO L93 Difference]: Finished difference Result 143 states and 183 transitions. [2022-11-20 12:47:47,348 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-20 12:47:47,349 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2022-11-20 12:47:47,349 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:47:47,351 INFO L225 Difference]: With dead ends: 143 [2022-11-20 12:47:47,351 INFO L226 Difference]: Without dead ends: 80 [2022-11-20 12:47:47,352 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 12:47:47,353 INFO L413 NwaCegarLoop]: 101 mSDtfsCounter, 12 mSDsluCounter, 85 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 186 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 12:47:47,354 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 186 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 12:47:47,359 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2022-11-20 12:47:47,368 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 80. [2022-11-20 12:47:47,368 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 80 states, 61 states have (on average 1.3114754098360655) internal successors, (80), 68 states have internal predecessors, (80), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-20 12:47:47,370 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 102 transitions. [2022-11-20 12:47:47,370 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 102 transitions. Word has length 33 [2022-11-20 12:47:47,374 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:47:47,374 INFO L495 AbstractCegarLoop]: Abstraction has 80 states and 102 transitions. [2022-11-20 12:47:47,375 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-20 12:47:47,375 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 102 transitions. [2022-11-20 12:47:47,382 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-11-20 12:47:47,382 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:47:47,382 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:47:47,382 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-20 12:47:47,383 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:47:47,383 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:47:47,383 INFO L85 PathProgramCache]: Analyzing trace with hash 671106305, now seen corresponding path program 1 times [2022-11-20 12:47:47,385 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:47:47,386 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1513953036] [2022-11-20 12:47:47,386 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:47:47,386 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:47:47,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:47,541 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-20 12:47:47,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:47,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-11-20 12:47:47,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:47,572 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 12:47:47,576 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:47:47,577 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1513953036] [2022-11-20 12:47:47,577 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1513953036] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:47:47,577 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:47:47,577 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-20 12:47:47,578 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [119565106] [2022-11-20 12:47:47,578 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:47:47,578 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-20 12:47:47,579 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:47:47,579 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-20 12:47:47,579 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 12:47:47,580 INFO L87 Difference]: Start difference. First operand 80 states and 102 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-20 12:47:47,619 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:47:47,620 INFO L93 Difference]: Finished difference Result 152 states and 197 transitions. [2022-11-20 12:47:47,620 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-20 12:47:47,621 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2022-11-20 12:47:47,621 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:47:47,622 INFO L225 Difference]: With dead ends: 152 [2022-11-20 12:47:47,622 INFO L226 Difference]: Without dead ends: 80 [2022-11-20 12:47:47,623 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 12:47:47,625 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 79 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 100 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 12:47:47,626 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [79 Valid, 100 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 12:47:47,627 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2022-11-20 12:47:47,637 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 80. [2022-11-20 12:47:47,638 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 80 states, 61 states have (on average 1.2950819672131149) internal successors, (79), 68 states have internal predecessors, (79), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-20 12:47:47,639 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 101 transitions. [2022-11-20 12:47:47,639 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 101 transitions. Word has length 37 [2022-11-20 12:47:47,641 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:47:47,641 INFO L495 AbstractCegarLoop]: Abstraction has 80 states and 101 transitions. [2022-11-20 12:47:47,641 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-20 12:47:47,642 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 101 transitions. [2022-11-20 12:47:47,643 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-20 12:47:47,643 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:47:47,643 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:47:47,644 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-20 12:47:47,644 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:47:47,644 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:47:47,645 INFO L85 PathProgramCache]: Analyzing trace with hash -488472773, now seen corresponding path program 1 times [2022-11-20 12:47:47,645 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:47:47,645 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1914636711] [2022-11-20 12:47:47,645 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:47:47,646 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:47:47,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:47,753 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-20 12:47:47,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:47,765 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-20 12:47:47,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:47,798 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:47:47,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:47,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-11-20 12:47:47,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:47,819 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 12:47:47,820 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:47:47,820 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1914636711] [2022-11-20 12:47:47,821 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1914636711] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:47:47,821 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:47:47,821 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-20 12:47:47,821 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1868369712] [2022-11-20 12:47:47,822 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:47:47,823 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-20 12:47:47,823 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:47:47,824 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-20 12:47:47,824 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-20 12:47:47,825 INFO L87 Difference]: Start difference. First operand 80 states and 101 transitions. Second operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2022-11-20 12:47:48,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:47:48,221 INFO L93 Difference]: Finished difference Result 235 states and 297 transitions. [2022-11-20 12:47:48,221 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-20 12:47:48,221 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 47 [2022-11-20 12:47:48,222 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:47:48,228 INFO L225 Difference]: With dead ends: 235 [2022-11-20 12:47:48,229 INFO L226 Difference]: Without dead ends: 163 [2022-11-20 12:47:48,233 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-11-20 12:47:48,238 INFO L413 NwaCegarLoop]: 115 mSDtfsCounter, 206 mSDsluCounter, 172 mSDsCounter, 0 mSdLazyCounter, 120 mSolverCounterSat, 55 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 209 SdHoareTripleChecker+Valid, 287 SdHoareTripleChecker+Invalid, 175 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 55 IncrementalHoareTripleChecker+Valid, 120 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-20 12:47:48,242 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [209 Valid, 287 Invalid, 175 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [55 Valid, 120 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-20 12:47:48,245 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 163 states. [2022-11-20 12:47:48,277 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 163 to 157. [2022-11-20 12:47:48,283 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 120 states have (on average 1.2583333333333333) internal successors, (151), 128 states have internal predecessors, (151), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-11-20 12:47:48,287 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 192 transitions. [2022-11-20 12:47:48,292 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 192 transitions. Word has length 47 [2022-11-20 12:47:48,292 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:47:48,293 INFO L495 AbstractCegarLoop]: Abstraction has 157 states and 192 transitions. [2022-11-20 12:47:48,293 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2022-11-20 12:47:48,293 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 192 transitions. [2022-11-20 12:47:48,294 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-20 12:47:48,295 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:47:48,295 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:47:48,295 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-20 12:47:48,299 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:47:48,300 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:47:48,300 INFO L85 PathProgramCache]: Analyzing trace with hash 1464828133, now seen corresponding path program 1 times [2022-11-20 12:47:48,300 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:47:48,301 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1605249414] [2022-11-20 12:47:48,301 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:47:48,301 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:47:48,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:48,439 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-20 12:47:48,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:48,448 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-20 12:47:48,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:48,480 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 12:47:48,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:48,483 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-20 12:47:48,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:48,486 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 12:47:48,486 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:47:48,487 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1605249414] [2022-11-20 12:47:48,487 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1605249414] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:47:48,487 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:47:48,487 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-20 12:47:48,487 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1004038346] [2022-11-20 12:47:48,488 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:47:48,488 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-20 12:47:48,488 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:47:48,489 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-20 12:47:48,489 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-20 12:47:48,489 INFO L87 Difference]: Start difference. First operand 157 states and 192 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-20 12:47:48,723 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:47:48,723 INFO L93 Difference]: Finished difference Result 324 states and 404 transitions. [2022-11-20 12:47:48,724 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-20 12:47:48,724 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 53 [2022-11-20 12:47:48,724 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:47:48,726 INFO L225 Difference]: With dead ends: 324 [2022-11-20 12:47:48,726 INFO L226 Difference]: Without dead ends: 175 [2022-11-20 12:47:48,727 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2022-11-20 12:47:48,728 INFO L413 NwaCegarLoop]: 80 mSDtfsCounter, 176 mSDsluCounter, 187 mSDsCounter, 0 mSdLazyCounter, 107 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 180 SdHoareTripleChecker+Valid, 267 SdHoareTripleChecker+Invalid, 154 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 107 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 12:47:48,729 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [180 Valid, 267 Invalid, 154 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 107 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 12:47:48,730 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 175 states. [2022-11-20 12:47:48,756 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 175 to 159. [2022-11-20 12:47:48,756 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 159 states, 122 states have (on average 1.2540983606557377) internal successors, (153), 130 states have internal predecessors, (153), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-11-20 12:47:48,760 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 159 states to 159 states and 194 transitions. [2022-11-20 12:47:48,760 INFO L78 Accepts]: Start accepts. Automaton has 159 states and 194 transitions. Word has length 53 [2022-11-20 12:47:48,761 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:47:48,761 INFO L495 AbstractCegarLoop]: Abstraction has 159 states and 194 transitions. [2022-11-20 12:47:48,761 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-20 12:47:48,762 INFO L276 IsEmpty]: Start isEmpty. Operand 159 states and 194 transitions. [2022-11-20 12:47:48,763 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-20 12:47:48,763 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:47:48,763 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:47:48,763 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-20 12:47:48,764 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:47:48,764 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:47:48,764 INFO L85 PathProgramCache]: Analyzing trace with hash 1042126307, now seen corresponding path program 1 times [2022-11-20 12:47:48,765 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:47:48,765 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [798100609] [2022-11-20 12:47:48,765 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:47:48,765 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:47:48,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:48,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-20 12:47:48,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:48,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-20 12:47:48,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:48,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 12:47:48,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:48,939 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-20 12:47:48,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:48,965 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-20 12:47:48,966 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:47:48,966 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [798100609] [2022-11-20 12:47:48,966 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [798100609] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:47:48,966 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:47:48,966 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-20 12:47:48,966 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1540353277] [2022-11-20 12:47:48,967 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:47:48,967 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-20 12:47:48,967 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:47:48,968 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-20 12:47:48,968 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-20 12:47:48,968 INFO L87 Difference]: Start difference. First operand 159 states and 194 transitions. Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 12:47:49,401 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:47:49,401 INFO L93 Difference]: Finished difference Result 322 states and 394 transitions. [2022-11-20 12:47:49,402 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-20 12:47:49,402 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) Word has length 53 [2022-11-20 12:47:49,402 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:47:49,404 INFO L225 Difference]: With dead ends: 322 [2022-11-20 12:47:49,404 INFO L226 Difference]: Without dead ends: 171 [2022-11-20 12:47:49,405 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-11-20 12:47:49,406 INFO L413 NwaCegarLoop]: 90 mSDtfsCounter, 142 mSDsluCounter, 343 mSDsCounter, 0 mSdLazyCounter, 221 mSolverCounterSat, 33 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 149 SdHoareTripleChecker+Valid, 433 SdHoareTripleChecker+Invalid, 254 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 33 IncrementalHoareTripleChecker+Valid, 221 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-20 12:47:49,406 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [149 Valid, 433 Invalid, 254 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [33 Valid, 221 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-20 12:47:49,407 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 171 states. [2022-11-20 12:47:49,423 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 171 to 157. [2022-11-20 12:47:49,424 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 120 states have (on average 1.225) internal successors, (147), 128 states have internal predecessors, (147), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-11-20 12:47:49,425 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 188 transitions. [2022-11-20 12:47:49,426 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 188 transitions. Word has length 53 [2022-11-20 12:47:49,426 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:47:49,426 INFO L495 AbstractCegarLoop]: Abstraction has 157 states and 188 transitions. [2022-11-20 12:47:49,426 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 12:47:49,426 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 188 transitions. [2022-11-20 12:47:49,427 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-11-20 12:47:49,427 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:47:49,428 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:47:49,428 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-20 12:47:49,428 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:47:49,428 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:47:49,429 INFO L85 PathProgramCache]: Analyzing trace with hash -2072494715, now seen corresponding path program 1 times [2022-11-20 12:47:49,429 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:47:49,429 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1535930795] [2022-11-20 12:47:49,429 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:47:49,429 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:47:49,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:49,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-20 12:47:49,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:49,529 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-20 12:47:49,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:49,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 12:47:49,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:49,572 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-11-20 12:47:49,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:49,575 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 12:47:49,575 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:47:49,575 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1535930795] [2022-11-20 12:47:49,575 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1535930795] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:47:49,576 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:47:49,576 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-20 12:47:49,576 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [391077914] [2022-11-20 12:47:49,576 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:47:49,577 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-20 12:47:49,577 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:47:49,577 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-20 12:47:49,577 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-20 12:47:49,578 INFO L87 Difference]: Start difference. First operand 157 states and 188 transitions. Second operand has 6 states, 6 states have (on average 8.0) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 12:47:49,778 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:47:49,779 INFO L93 Difference]: Finished difference Result 316 states and 385 transitions. [2022-11-20 12:47:49,779 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-20 12:47:49,779 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 59 [2022-11-20 12:47:49,780 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:47:49,781 INFO L225 Difference]: With dead ends: 316 [2022-11-20 12:47:49,781 INFO L226 Difference]: Without dead ends: 167 [2022-11-20 12:47:49,782 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-20 12:47:49,782 INFO L413 NwaCegarLoop]: 79 mSDtfsCounter, 69 mSDsluCounter, 264 mSDsCounter, 0 mSdLazyCounter, 132 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 343 SdHoareTripleChecker+Invalid, 155 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 132 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 12:47:49,783 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [74 Valid, 343 Invalid, 155 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 132 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 12:47:49,783 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167 states. [2022-11-20 12:47:49,801 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167 to 160. [2022-11-20 12:47:49,801 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 160 states, 123 states have (on average 1.2195121951219512) internal successors, (150), 131 states have internal predecessors, (150), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-11-20 12:47:49,802 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 160 states to 160 states and 191 transitions. [2022-11-20 12:47:49,803 INFO L78 Accepts]: Start accepts. Automaton has 160 states and 191 transitions. Word has length 59 [2022-11-20 12:47:49,803 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:47:49,803 INFO L495 AbstractCegarLoop]: Abstraction has 160 states and 191 transitions. [2022-11-20 12:47:49,803 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 12:47:49,804 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 191 transitions. [2022-11-20 12:47:49,804 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-11-20 12:47:49,804 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:47:49,805 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:47:49,805 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-20 12:47:49,805 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:47:49,805 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:47:49,806 INFO L85 PathProgramCache]: Analyzing trace with hash 1236936713, now seen corresponding path program 1 times [2022-11-20 12:47:49,806 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:47:49,806 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1347287357] [2022-11-20 12:47:49,806 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:47:49,806 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:47:49,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:49,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-20 12:47:49,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:49,893 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-20 12:47:49,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:49,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 12:47:49,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:49,918 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-11-20 12:47:49,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:49,921 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 12:47:49,921 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:47:49,921 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1347287357] [2022-11-20 12:47:49,921 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1347287357] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:47:49,921 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:47:49,921 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-20 12:47:49,922 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [558105432] [2022-11-20 12:47:49,922 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:47:49,922 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-20 12:47:49,922 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:47:49,923 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-20 12:47:49,923 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-20 12:47:49,923 INFO L87 Difference]: Start difference. First operand 160 states and 191 transitions. Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-20 12:47:50,208 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:47:50,209 INFO L93 Difference]: Finished difference Result 441 states and 552 transitions. [2022-11-20 12:47:50,209 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-20 12:47:50,209 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 59 [2022-11-20 12:47:50,210 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:47:50,213 INFO L225 Difference]: With dead ends: 441 [2022-11-20 12:47:50,213 INFO L226 Difference]: Without dead ends: 289 [2022-11-20 12:47:50,214 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-20 12:47:50,215 INFO L413 NwaCegarLoop]: 126 mSDtfsCounter, 217 mSDsluCounter, 161 mSDsCounter, 0 mSdLazyCounter, 167 mSolverCounterSat, 66 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 225 SdHoareTripleChecker+Valid, 287 SdHoareTripleChecker+Invalid, 233 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 66 IncrementalHoareTripleChecker+Valid, 167 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 12:47:50,215 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [225 Valid, 287 Invalid, 233 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [66 Valid, 167 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 12:47:50,216 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 289 states. [2022-11-20 12:47:50,246 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 289 to 287. [2022-11-20 12:47:50,247 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 287 states, 218 states have (on average 1.2064220183486238) internal successors, (263), 230 states have internal predecessors, (263), 36 states have call successors, (36), 31 states have call predecessors, (36), 32 states have return successors, (51), 36 states have call predecessors, (51), 36 states have call successors, (51) [2022-11-20 12:47:50,249 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 287 states to 287 states and 350 transitions. [2022-11-20 12:47:50,250 INFO L78 Accepts]: Start accepts. Automaton has 287 states and 350 transitions. Word has length 59 [2022-11-20 12:47:50,250 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:47:50,250 INFO L495 AbstractCegarLoop]: Abstraction has 287 states and 350 transitions. [2022-11-20 12:47:50,251 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-20 12:47:50,251 INFO L276 IsEmpty]: Start isEmpty. Operand 287 states and 350 transitions. [2022-11-20 12:47:50,252 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-11-20 12:47:50,252 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:47:50,252 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:47:50,253 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-20 12:47:50,253 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:47:50,254 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:47:50,254 INFO L85 PathProgramCache]: Analyzing trace with hash -1533447185, now seen corresponding path program 1 times [2022-11-20 12:47:50,254 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:47:50,254 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [927040010] [2022-11-20 12:47:50,254 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:47:50,255 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:47:50,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:50,460 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:47:50,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:50,504 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-20 12:47:50,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:50,520 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-11-20 12:47:50,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:50,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 12:47:50,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:50,555 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-11-20 12:47:50,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:50,559 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 12:47:50,559 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:47:50,559 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [927040010] [2022-11-20 12:47:50,560 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [927040010] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:47:50,560 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:47:50,560 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-20 12:47:50,560 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [223581676] [2022-11-20 12:47:50,561 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:47:50,561 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-20 12:47:50,561 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:47:50,562 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-20 12:47:50,562 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-11-20 12:47:50,563 INFO L87 Difference]: Start difference. First operand 287 states and 350 transitions. Second operand has 10 states, 10 states have (on average 5.0) internal successors, (50), 8 states have internal predecessors, (50), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-20 12:47:51,529 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:47:51,530 INFO L93 Difference]: Finished difference Result 849 states and 1072 transitions. [2022-11-20 12:47:51,530 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-11-20 12:47:51,530 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.0) internal successors, (50), 8 states have internal predecessors, (50), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 63 [2022-11-20 12:47:51,531 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:47:51,534 INFO L225 Difference]: With dead ends: 849 [2022-11-20 12:47:51,534 INFO L226 Difference]: Without dead ends: 620 [2022-11-20 12:47:51,536 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 206 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=187, Invalid=743, Unknown=0, NotChecked=0, Total=930 [2022-11-20 12:47:51,537 INFO L413 NwaCegarLoop]: 106 mSDtfsCounter, 607 mSDsluCounter, 541 mSDsCounter, 0 mSdLazyCounter, 737 mSolverCounterSat, 189 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 614 SdHoareTripleChecker+Valid, 647 SdHoareTripleChecker+Invalid, 926 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 189 IncrementalHoareTripleChecker+Valid, 737 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-20 12:47:51,537 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [614 Valid, 647 Invalid, 926 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [189 Valid, 737 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-20 12:47:51,538 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 620 states. [2022-11-20 12:47:51,593 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 620 to 533. [2022-11-20 12:47:51,594 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 533 states, 405 states have (on average 1.2) internal successors, (486), 429 states have internal predecessors, (486), 66 states have call successors, (66), 55 states have call predecessors, (66), 61 states have return successors, (90), 66 states have call predecessors, (90), 66 states have call successors, (90) [2022-11-20 12:47:51,597 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 533 states to 533 states and 642 transitions. [2022-11-20 12:47:51,598 INFO L78 Accepts]: Start accepts. Automaton has 533 states and 642 transitions. Word has length 63 [2022-11-20 12:47:51,598 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:47:51,598 INFO L495 AbstractCegarLoop]: Abstraction has 533 states and 642 transitions. [2022-11-20 12:47:51,598 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.0) internal successors, (50), 8 states have internal predecessors, (50), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-20 12:47:51,599 INFO L276 IsEmpty]: Start isEmpty. Operand 533 states and 642 transitions. [2022-11-20 12:47:51,600 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2022-11-20 12:47:51,600 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:47:51,601 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:47:51,601 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-20 12:47:51,601 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:47:51,602 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:47:51,602 INFO L85 PathProgramCache]: Analyzing trace with hash -706462267, now seen corresponding path program 1 times [2022-11-20 12:47:51,602 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:47:51,602 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2124543744] [2022-11-20 12:47:51,602 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:47:51,603 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:47:51,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:51,763 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:47:51,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:51,783 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-20 12:47:51,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:51,816 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 12:47:51,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:51,826 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-20 12:47:51,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:51,843 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 12:47:51,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:51,846 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-11-20 12:47:51,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:51,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2022-11-20 12:47:51,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:51,866 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-11-20 12:47:51,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:51,871 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:47:51,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:51,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-11-20 12:47:51,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:51,877 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 8 proven. 18 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-20 12:47:51,877 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:47:51,878 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2124543744] [2022-11-20 12:47:51,878 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2124543744] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 12:47:51,878 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1021761005] [2022-11-20 12:47:51,878 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:47:51,879 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 12:47:51,879 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 12:47:51,887 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 12:47:51,893 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-20 12:47:52,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:52,004 INFO L263 TraceCheckSpWp]: Trace formula consists of 357 conjuncts, 8 conjunts are in the unsatisfiable core [2022-11-20 12:47:52,014 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 12:47:52,275 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 28 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:47:52,275 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 12:47:52,550 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 18 proven. 8 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-20 12:47:52,554 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1021761005] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 12:47:52,555 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 12:47:52,555 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2022-11-20 12:47:52,555 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2006686684] [2022-11-20 12:47:52,555 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 12:47:52,556 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-11-20 12:47:52,557 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:47:52,558 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-11-20 12:47:52,558 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2022-11-20 12:47:52,558 INFO L87 Difference]: Start difference. First operand 533 states and 642 transitions. Second operand has 15 states, 15 states have (on average 9.066666666666666) internal successors, (136), 10 states have internal predecessors, (136), 6 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (21), 8 states have call predecessors, (21), 6 states have call successors, (21) [2022-11-20 12:47:53,942 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:47:53,942 INFO L93 Difference]: Finished difference Result 1187 states and 1471 transitions. [2022-11-20 12:47:53,942 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-11-20 12:47:53,943 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 9.066666666666666) internal successors, (136), 10 states have internal predecessors, (136), 6 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (21), 8 states have call predecessors, (21), 6 states have call successors, (21) Word has length 106 [2022-11-20 12:47:53,944 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:47:53,949 INFO L225 Difference]: With dead ends: 1187 [2022-11-20 12:47:53,949 INFO L226 Difference]: Without dead ends: 710 [2022-11-20 12:47:53,952 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 284 GetRequests, 237 SyntacticMatches, 4 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 497 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=452, Invalid=1528, Unknown=0, NotChecked=0, Total=1980 [2022-11-20 12:47:53,953 INFO L413 NwaCegarLoop]: 169 mSDtfsCounter, 503 mSDsluCounter, 826 mSDsCounter, 0 mSdLazyCounter, 848 mSolverCounterSat, 245 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 507 SdHoareTripleChecker+Valid, 995 SdHoareTripleChecker+Invalid, 1093 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 245 IncrementalHoareTripleChecker+Valid, 848 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-20 12:47:53,955 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [507 Valid, 995 Invalid, 1093 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [245 Valid, 848 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-20 12:47:53,956 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 710 states. [2022-11-20 12:47:54,057 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 710 to 602. [2022-11-20 12:47:54,058 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 602 states, 452 states have (on average 1.1991150442477876) internal successors, (542), 484 states have internal predecessors, (542), 77 states have call successors, (77), 66 states have call predecessors, (77), 72 states have return successors, (101), 74 states have call predecessors, (101), 77 states have call successors, (101) [2022-11-20 12:47:54,063 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 602 states to 602 states and 720 transitions. [2022-11-20 12:47:54,064 INFO L78 Accepts]: Start accepts. Automaton has 602 states and 720 transitions. Word has length 106 [2022-11-20 12:47:54,065 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:47:54,065 INFO L495 AbstractCegarLoop]: Abstraction has 602 states and 720 transitions. [2022-11-20 12:47:54,066 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 9.066666666666666) internal successors, (136), 10 states have internal predecessors, (136), 6 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (21), 8 states have call predecessors, (21), 6 states have call successors, (21) [2022-11-20 12:47:54,066 INFO L276 IsEmpty]: Start isEmpty. Operand 602 states and 720 transitions. [2022-11-20 12:47:54,070 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 189 [2022-11-20 12:47:54,070 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:47:54,071 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:47:54,083 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-11-20 12:47:54,277 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-20 12:47:54,277 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:47:54,278 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:47:54,278 INFO L85 PathProgramCache]: Analyzing trace with hash -1427499724, now seen corresponding path program 1 times [2022-11-20 12:47:54,278 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:47:54,278 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [170787756] [2022-11-20 12:47:54,278 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:47:54,279 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:47:54,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:54,446 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:47:54,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:54,458 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-20 12:47:54,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:54,475 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 12:47:54,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:54,483 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-20 12:47:54,488 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:54,500 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 12:47:54,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:54,504 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2022-11-20 12:47:54,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:54,515 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 12:47:54,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:54,544 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:47:54,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:54,547 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 12:47:54,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:54,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:47:54,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:54,554 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 109 [2022-11-20 12:47:54,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:54,618 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 12:47:54,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:54,621 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:47:54,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:54,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 147 [2022-11-20 12:47:54,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:54,651 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 156 [2022-11-20 12:47:54,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:54,657 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 12:47:54,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:54,660 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 180 [2022-11-20 12:47:54,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:54,663 INFO L134 CoverageAnalysis]: Checked inductivity of 212 backedges. 83 proven. 3 refuted. 0 times theorem prover too weak. 126 trivial. 0 not checked. [2022-11-20 12:47:54,664 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:47:54,664 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [170787756] [2022-11-20 12:47:54,664 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [170787756] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 12:47:54,664 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1730871514] [2022-11-20 12:47:54,664 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:47:54,665 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 12:47:54,665 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 12:47:54,666 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 12:47:54,691 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-20 12:47:54,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:54,823 INFO L263 TraceCheckSpWp]: Trace formula consists of 575 conjuncts, 13 conjunts are in the unsatisfiable core [2022-11-20 12:47:54,834 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 12:47:55,147 INFO L134 CoverageAnalysis]: Checked inductivity of 212 backedges. 154 proven. 4 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2022-11-20 12:47:55,148 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 12:47:55,775 INFO L134 CoverageAnalysis]: Checked inductivity of 212 backedges. 77 proven. 39 refuted. 0 times theorem prover too weak. 96 trivial. 0 not checked. [2022-11-20 12:47:55,776 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1730871514] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 12:47:55,776 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 12:47:55,776 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 10, 11] total 26 [2022-11-20 12:47:55,776 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1568537255] [2022-11-20 12:47:55,776 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 12:47:55,777 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-11-20 12:47:55,777 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:47:55,778 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-11-20 12:47:55,779 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=116, Invalid=534, Unknown=0, NotChecked=0, Total=650 [2022-11-20 12:47:55,779 INFO L87 Difference]: Start difference. First operand 602 states and 720 transitions. Second operand has 26 states, 26 states have (on average 7.576923076923077) internal successors, (197), 21 states have internal predecessors, (197), 9 states have call successors, (31), 8 states have call predecessors, (31), 10 states have return successors, (34), 9 states have call predecessors, (34), 9 states have call successors, (34) [2022-11-20 12:47:58,481 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:47:58,482 INFO L93 Difference]: Finished difference Result 1753 states and 2193 transitions. [2022-11-20 12:47:58,482 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2022-11-20 12:47:58,483 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 7.576923076923077) internal successors, (197), 21 states have internal predecessors, (197), 9 states have call successors, (31), 8 states have call predecessors, (31), 10 states have return successors, (34), 9 states have call predecessors, (34), 9 states have call successors, (34) Word has length 188 [2022-11-20 12:47:58,483 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:47:58,489 INFO L225 Difference]: With dead ends: 1753 [2022-11-20 12:47:58,490 INFO L226 Difference]: Without dead ends: 1159 [2022-11-20 12:47:58,494 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 478 GetRequests, 402 SyntacticMatches, 4 SemanticMatches, 72 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1328 ImplicationChecksByTransitivity, 1.4s TimeCoverageRelationStatistics Valid=976, Invalid=4426, Unknown=0, NotChecked=0, Total=5402 [2022-11-20 12:47:58,495 INFO L413 NwaCegarLoop]: 130 mSDtfsCounter, 1754 mSDsluCounter, 961 mSDsCounter, 0 mSdLazyCounter, 1853 mSolverCounterSat, 682 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1754 SdHoareTripleChecker+Valid, 1091 SdHoareTripleChecker+Invalid, 2535 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 682 IncrementalHoareTripleChecker+Valid, 1853 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2022-11-20 12:47:58,496 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1754 Valid, 1091 Invalid, 2535 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [682 Valid, 1853 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2022-11-20 12:47:58,497 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1159 states. [2022-11-20 12:47:58,616 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1159 to 1065. [2022-11-20 12:47:58,619 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1065 states, 805 states have (on average 1.1440993788819875) internal successors, (921), 850 states have internal predecessors, (921), 138 states have call successors, (138), 121 states have call predecessors, (138), 121 states have return successors, (160), 127 states have call predecessors, (160), 138 states have call successors, (160) [2022-11-20 12:47:58,624 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1065 states to 1065 states and 1219 transitions. [2022-11-20 12:47:58,624 INFO L78 Accepts]: Start accepts. Automaton has 1065 states and 1219 transitions. Word has length 188 [2022-11-20 12:47:58,625 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:47:58,625 INFO L495 AbstractCegarLoop]: Abstraction has 1065 states and 1219 transitions. [2022-11-20 12:47:58,625 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 7.576923076923077) internal successors, (197), 21 states have internal predecessors, (197), 9 states have call successors, (31), 8 states have call predecessors, (31), 10 states have return successors, (34), 9 states have call predecessors, (34), 9 states have call successors, (34) [2022-11-20 12:47:58,626 INFO L276 IsEmpty]: Start isEmpty. Operand 1065 states and 1219 transitions. [2022-11-20 12:47:58,631 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 209 [2022-11-20 12:47:58,631 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:47:58,632 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:47:58,648 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-20 12:47:58,839 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-20 12:47:58,839 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:47:58,840 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:47:58,840 INFO L85 PathProgramCache]: Analyzing trace with hash 1648051732, now seen corresponding path program 1 times [2022-11-20 12:47:58,840 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:47:58,840 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1280628483] [2022-11-20 12:47:58,840 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:47:58,840 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:47:58,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:59,028 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:47:59,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:59,041 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-20 12:47:59,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:59,079 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 12:47:59,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:59,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-20 12:47:59,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:59,099 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 12:47:59,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:59,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2022-11-20 12:47:59,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:59,153 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 12:47:59,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:59,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:47:59,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:59,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 12:47:59,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:59,163 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:47:59,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:59,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-11-20 12:47:59,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:59,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2022-11-20 12:47:59,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:59,194 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2022-11-20 12:47:59,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:59,202 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 12:47:59,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:59,206 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:47:59,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:59,209 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-20 12:47:59,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:59,211 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 157 [2022-11-20 12:47:59,212 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:59,214 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 167 [2022-11-20 12:47:59,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:59,217 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2022-11-20 12:47:59,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:59,223 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 12:47:59,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:59,226 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 200 [2022-11-20 12:47:59,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:59,228 INFO L134 CoverageAnalysis]: Checked inductivity of 258 backedges. 86 proven. 53 refuted. 0 times theorem prover too weak. 119 trivial. 0 not checked. [2022-11-20 12:47:59,229 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:47:59,229 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1280628483] [2022-11-20 12:47:59,229 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1280628483] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 12:47:59,229 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [37238051] [2022-11-20 12:47:59,229 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:47:59,230 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 12:47:59,230 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 12:47:59,231 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 12:47:59,266 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-20 12:47:59,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:47:59,399 INFO L263 TraceCheckSpWp]: Trace formula consists of 624 conjuncts, 10 conjunts are in the unsatisfiable core [2022-11-20 12:47:59,409 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 12:47:59,590 INFO L134 CoverageAnalysis]: Checked inductivity of 258 backedges. 195 proven. 9 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2022-11-20 12:47:59,591 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 12:48:00,163 INFO L134 CoverageAnalysis]: Checked inductivity of 258 backedges. 99 proven. 54 refuted. 0 times theorem prover too weak. 105 trivial. 0 not checked. [2022-11-20 12:48:00,164 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [37238051] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 12:48:00,164 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 12:48:00,164 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 8, 8] total 22 [2022-11-20 12:48:00,164 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1318058007] [2022-11-20 12:48:00,164 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 12:48:00,165 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-11-20 12:48:00,166 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:48:00,166 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-11-20 12:48:00,166 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=394, Unknown=0, NotChecked=0, Total=462 [2022-11-20 12:48:00,167 INFO L87 Difference]: Start difference. First operand 1065 states and 1219 transitions. Second operand has 22 states, 22 states have (on average 10.227272727272727) internal successors, (225), 15 states have internal predecessors, (225), 7 states have call successors, (45), 8 states have call predecessors, (45), 11 states have return successors, (40), 10 states have call predecessors, (40), 7 states have call successors, (40) [2022-11-20 12:48:02,237 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:48:02,237 INFO L93 Difference]: Finished difference Result 2080 states and 2411 transitions. [2022-11-20 12:48:02,238 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-11-20 12:48:02,238 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 10.227272727272727) internal successors, (225), 15 states have internal predecessors, (225), 7 states have call successors, (45), 8 states have call predecessors, (45), 11 states have return successors, (40), 10 states have call predecessors, (40), 7 states have call successors, (40) Word has length 208 [2022-11-20 12:48:02,239 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:48:02,245 INFO L225 Difference]: With dead ends: 2080 [2022-11-20 12:48:02,245 INFO L226 Difference]: Without dead ends: 1119 [2022-11-20 12:48:02,250 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 509 GetRequests, 460 SyntacticMatches, 1 SemanticMatches, 48 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 479 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=498, Invalid=1952, Unknown=0, NotChecked=0, Total=2450 [2022-11-20 12:48:02,251 INFO L413 NwaCegarLoop]: 45 mSDtfsCounter, 603 mSDsluCounter, 466 mSDsCounter, 0 mSdLazyCounter, 1807 mSolverCounterSat, 231 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 607 SdHoareTripleChecker+Valid, 511 SdHoareTripleChecker+Invalid, 2038 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 231 IncrementalHoareTripleChecker+Valid, 1807 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-11-20 12:48:02,251 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [607 Valid, 511 Invalid, 2038 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [231 Valid, 1807 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2022-11-20 12:48:02,253 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1119 states. [2022-11-20 12:48:02,366 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1119 to 1063. [2022-11-20 12:48:02,368 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1063 states, 805 states have (on average 1.132919254658385) internal successors, (912), 848 states have internal predecessors, (912), 132 states have call successors, (132), 123 states have call predecessors, (132), 125 states have return successors, (154), 125 states have call predecessors, (154), 132 states have call successors, (154) [2022-11-20 12:48:02,372 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1063 states to 1063 states and 1198 transitions. [2022-11-20 12:48:02,372 INFO L78 Accepts]: Start accepts. Automaton has 1063 states and 1198 transitions. Word has length 208 [2022-11-20 12:48:02,373 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:48:02,373 INFO L495 AbstractCegarLoop]: Abstraction has 1063 states and 1198 transitions. [2022-11-20 12:48:02,373 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 10.227272727272727) internal successors, (225), 15 states have internal predecessors, (225), 7 states have call successors, (45), 8 states have call predecessors, (45), 11 states have return successors, (40), 10 states have call predecessors, (40), 7 states have call successors, (40) [2022-11-20 12:48:02,374 INFO L276 IsEmpty]: Start isEmpty. Operand 1063 states and 1198 transitions. [2022-11-20 12:48:02,378 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 210 [2022-11-20 12:48:02,378 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:48:02,379 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:48:02,395 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-20 12:48:02,591 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-20 12:48:02,592 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:48:02,592 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:48:02,592 INFO L85 PathProgramCache]: Analyzing trace with hash -22386492, now seen corresponding path program 1 times [2022-11-20 12:48:02,592 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:48:02,592 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1126861849] [2022-11-20 12:48:02,592 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:48:02,592 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:48:02,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:02,780 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:48:02,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:02,793 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-20 12:48:02,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:02,801 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 12:48:02,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:02,809 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-20 12:48:02,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:02,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 12:48:02,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:02,821 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2022-11-20 12:48:02,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:02,829 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 12:48:02,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:02,831 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:48:02,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:02,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 12:48:02,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:02,836 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:48:02,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:02,838 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-11-20 12:48:02,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:02,846 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2022-11-20 12:48:02,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:02,859 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 120 [2022-11-20 12:48:02,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:02,869 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 12:48:02,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:02,871 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:48:02,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:02,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-20 12:48:02,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:02,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2022-11-20 12:48:02,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:02,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 168 [2022-11-20 12:48:02,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:02,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 177 [2022-11-20 12:48:02,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:02,943 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 12:48:02,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:02,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 201 [2022-11-20 12:48:02,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:02,978 INFO L134 CoverageAnalysis]: Checked inductivity of 259 backedges. 73 proven. 31 refuted. 0 times theorem prover too weak. 155 trivial. 0 not checked. [2022-11-20 12:48:02,978 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:48:02,978 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1126861849] [2022-11-20 12:48:02,978 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1126861849] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 12:48:02,978 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [794081154] [2022-11-20 12:48:02,979 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:48:02,979 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 12:48:02,979 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 12:48:02,980 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 12:48:03,007 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-20 12:48:03,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:03,140 INFO L263 TraceCheckSpWp]: Trace formula consists of 624 conjuncts, 18 conjunts are in the unsatisfiable core [2022-11-20 12:48:03,144 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 12:48:03,495 INFO L134 CoverageAnalysis]: Checked inductivity of 259 backedges. 138 proven. 26 refuted. 0 times theorem prover too weak. 95 trivial. 0 not checked. [2022-11-20 12:48:03,496 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 12:48:04,407 INFO L134 CoverageAnalysis]: Checked inductivity of 259 backedges. 99 proven. 45 refuted. 0 times theorem prover too weak. 115 trivial. 0 not checked. [2022-11-20 12:48:04,407 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [794081154] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 12:48:04,407 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 12:48:04,408 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 8, 13] total 28 [2022-11-20 12:48:04,411 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1694094807] [2022-11-20 12:48:04,411 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 12:48:04,412 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-11-20 12:48:04,412 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:48:04,413 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-11-20 12:48:04,413 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=116, Invalid=640, Unknown=0, NotChecked=0, Total=756 [2022-11-20 12:48:04,414 INFO L87 Difference]: Start difference. First operand 1063 states and 1198 transitions. Second operand has 28 states, 28 states have (on average 9.285714285714286) internal successors, (260), 22 states have internal predecessors, (260), 14 states have call successors, (48), 12 states have call predecessors, (48), 15 states have return successors, (49), 15 states have call predecessors, (49), 14 states have call successors, (49) [2022-11-20 12:48:09,392 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:48:09,392 INFO L93 Difference]: Finished difference Result 2357 states and 2710 transitions. [2022-11-20 12:48:09,393 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 63 states. [2022-11-20 12:48:09,393 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 28 states have (on average 9.285714285714286) internal successors, (260), 22 states have internal predecessors, (260), 14 states have call successors, (48), 12 states have call predecessors, (48), 15 states have return successors, (49), 15 states have call predecessors, (49), 14 states have call successors, (49) Word has length 209 [2022-11-20 12:48:09,394 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:48:09,401 INFO L225 Difference]: With dead ends: 2357 [2022-11-20 12:48:09,402 INFO L226 Difference]: Without dead ends: 1404 [2022-11-20 12:48:09,406 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 551 GetRequests, 456 SyntacticMatches, 8 SemanticMatches, 87 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2096 ImplicationChecksByTransitivity, 1.9s TimeCoverageRelationStatistics Valid=1543, Invalid=6289, Unknown=0, NotChecked=0, Total=7832 [2022-11-20 12:48:09,407 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 2139 mSDsluCounter, 1034 mSDsCounter, 0 mSdLazyCounter, 4487 mSolverCounterSat, 1000 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2139 SdHoareTripleChecker+Valid, 1138 SdHoareTripleChecker+Invalid, 5487 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1000 IncrementalHoareTripleChecker+Valid, 4487 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.1s IncrementalHoareTripleChecker+Time [2022-11-20 12:48:09,408 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2139 Valid, 1138 Invalid, 5487 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1000 Valid, 4487 Invalid, 0 Unknown, 0 Unchecked, 3.1s Time] [2022-11-20 12:48:09,409 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1404 states. [2022-11-20 12:48:09,517 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1404 to 1259. [2022-11-20 12:48:09,519 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1259 states, 954 states have (on average 1.128930817610063) internal successors, (1077), 990 states have internal predecessors, (1077), 160 states have call successors, (160), 151 states have call predecessors, (160), 144 states have return successors, (176), 144 states have call predecessors, (176), 160 states have call successors, (176) [2022-11-20 12:48:09,525 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1259 states to 1259 states and 1413 transitions. [2022-11-20 12:48:09,526 INFO L78 Accepts]: Start accepts. Automaton has 1259 states and 1413 transitions. Word has length 209 [2022-11-20 12:48:09,526 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:48:09,527 INFO L495 AbstractCegarLoop]: Abstraction has 1259 states and 1413 transitions. [2022-11-20 12:48:09,527 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 28 states have (on average 9.285714285714286) internal successors, (260), 22 states have internal predecessors, (260), 14 states have call successors, (48), 12 states have call predecessors, (48), 15 states have return successors, (49), 15 states have call predecessors, (49), 14 states have call successors, (49) [2022-11-20 12:48:09,527 INFO L276 IsEmpty]: Start isEmpty. Operand 1259 states and 1413 transitions. [2022-11-20 12:48:09,533 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 264 [2022-11-20 12:48:09,534 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:48:09,534 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:48:09,540 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-20 12:48:09,740 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 12:48:09,740 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:48:09,741 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:48:09,741 INFO L85 PathProgramCache]: Analyzing trace with hash -161147261, now seen corresponding path program 1 times [2022-11-20 12:48:09,741 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:48:09,741 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1040955206] [2022-11-20 12:48:09,741 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:48:09,741 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:48:09,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:10,367 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:48:10,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:10,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-20 12:48:10,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:10,437 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 12:48:10,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:10,448 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-20 12:48:10,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:10,452 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 12:48:10,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:10,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2022-11-20 12:48:10,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:10,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 12:48:10,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:10,584 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:48:10,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:10,592 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 12:48:10,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:10,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:48:10,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:10,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-11-20 12:48:10,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:10,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2022-11-20 12:48:10,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:10,619 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 120 [2022-11-20 12:48:10,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:10,678 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 12:48:10,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:10,681 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:48:10,682 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:10,685 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-20 12:48:10,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:10,688 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2022-11-20 12:48:10,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:10,732 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2022-11-20 12:48:10,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:10,735 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2022-11-20 12:48:10,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:10,776 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 12:48:10,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:10,779 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-20 12:48:10,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:10,784 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 12:48:10,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:10,785 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-20 12:48:10,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:10,788 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 212 [2022-11-20 12:48:10,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:10,824 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 222 [2022-11-20 12:48:10,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:10,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 231 [2022-11-20 12:48:10,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:10,838 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 12:48:10,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:10,840 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 255 [2022-11-20 12:48:10,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:10,844 INFO L134 CoverageAnalysis]: Checked inductivity of 442 backedges. 86 proven. 135 refuted. 0 times theorem prover too weak. 221 trivial. 0 not checked. [2022-11-20 12:48:10,844 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:48:10,844 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1040955206] [2022-11-20 12:48:10,845 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1040955206] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 12:48:10,845 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [87793025] [2022-11-20 12:48:10,845 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:48:10,845 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 12:48:10,845 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 12:48:10,846 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 12:48:10,856 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-20 12:48:11,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:48:11,027 INFO L263 TraceCheckSpWp]: Trace formula consists of 761 conjuncts, 30 conjunts are in the unsatisfiable core [2022-11-20 12:48:11,035 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 12:48:11,454 INFO L134 CoverageAnalysis]: Checked inductivity of 442 backedges. 155 proven. 89 refuted. 0 times theorem prover too weak. 198 trivial. 0 not checked. [2022-11-20 12:48:11,454 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 12:48:12,493 INFO L134 CoverageAnalysis]: Checked inductivity of 442 backedges. 96 proven. 136 refuted. 0 times theorem prover too weak. 210 trivial. 0 not checked. [2022-11-20 12:48:12,494 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [87793025] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 12:48:12,494 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 12:48:12,494 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 11, 16] total 31 [2022-11-20 12:48:12,494 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1544254913] [2022-11-20 12:48:12,494 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 12:48:12,496 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-20 12:48:12,496 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:48:12,496 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-20 12:48:12,497 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=165, Invalid=765, Unknown=0, NotChecked=0, Total=930 [2022-11-20 12:48:12,497 INFO L87 Difference]: Start difference. First operand 1259 states and 1413 transitions. Second operand has 31 states, 31 states have (on average 10.0) internal successors, (310), 27 states have internal predecessors, (310), 18 states have call successors, (58), 13 states have call predecessors, (58), 20 states have return successors, (61), 18 states have call predecessors, (61), 18 states have call successors, (61) [2022-11-20 12:48:15,378 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:48:15,379 INFO L93 Difference]: Finished difference Result 1980 states and 2239 transitions. [2022-11-20 12:48:15,379 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 40 states. [2022-11-20 12:48:15,379 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 31 states have (on average 10.0) internal successors, (310), 27 states have internal predecessors, (310), 18 states have call successors, (58), 13 states have call predecessors, (58), 20 states have return successors, (61), 18 states have call predecessors, (61), 18 states have call successors, (61) Word has length 263 [2022-11-20 12:48:15,380 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:48:15,381 INFO L225 Difference]: With dead ends: 1980 [2022-11-20 12:48:15,381 INFO L226 Difference]: Without dead ends: 0 [2022-11-20 12:48:15,386 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 642 GetRequests, 563 SyntacticMatches, 15 SemanticMatches, 64 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 897 ImplicationChecksByTransitivity, 1.6s TimeCoverageRelationStatistics Valid=908, Invalid=3382, Unknown=0, NotChecked=0, Total=4290 [2022-11-20 12:48:15,386 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 1387 mSDsluCounter, 591 mSDsCounter, 0 mSdLazyCounter, 2528 mSolverCounterSat, 469 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1389 SdHoareTripleChecker+Valid, 647 SdHoareTripleChecker+Invalid, 2997 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 469 IncrementalHoareTripleChecker+Valid, 2528 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2022-11-20 12:48:15,387 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1389 Valid, 647 Invalid, 2997 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [469 Valid, 2528 Invalid, 0 Unknown, 0 Unchecked, 1.6s Time] [2022-11-20 12:48:15,387 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-20 12:48:15,387 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-20 12:48:15,388 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:48:15,388 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-20 12:48:15,388 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 263 [2022-11-20 12:48:15,388 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:48:15,389 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-20 12:48:15,389 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 31 states have (on average 10.0) internal successors, (310), 27 states have internal predecessors, (310), 18 states have call successors, (58), 13 states have call predecessors, (58), 20 states have return successors, (61), 18 states have call predecessors, (61), 18 states have call successors, (61) [2022-11-20 12:48:15,389 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-20 12:48:15,389 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-20 12:48:15,392 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-20 12:48:15,415 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-20 12:48:15,616 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 12:48:15,619 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-20 12:48:35,943 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 610 616) no Hoare annotation was computed. [2022-11-20 12:48:35,944 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 610 616) the Hoare annotation is: true [2022-11-20 12:48:35,944 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 83 94) the Hoare annotation is: (let ((.cse3 (not (= 2 ~waterLevel~0))) (.cse1 (not (= ~pumpRunning~0 0))) (.cse4 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse5 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse7 (not (<= 0 ~waterLevel~0))) (.cse8 (not (<= 1 ~pumpRunning~0))) (.cse6 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse4) (or .cse1 .cse2 .cse4 (not (<= 2 ~waterLevel~0)) .cse5 .cse6) (or .cse0 (not (<= ~waterLevel~0 0)) .cse1 .cse2 .cse7 .cse4) (or .cse0 .cse2 .cse3 .cse4 .cse8) (or .cse1 .cse2 .cse7 .cse4 .cse5 (not (<= ~waterLevel~0 1))) (or .cse0 (= ~methaneLevelCritical~0 0) .cse2 .cse7 .cse8 .cse6 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-20 12:48:35,944 INFO L899 garLoopResultBuilder]: For program point L87-1(lines 83 94) no Hoare annotation was computed. [2022-11-20 12:48:35,945 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2022-11-20 12:48:35,945 INFO L899 garLoopResultBuilder]: For program point L897(lines 897 901) no Hoare annotation was computed. [2022-11-20 12:48:35,945 INFO L902 garLoopResultBuilder]: At program point L897-1(lines 897 901) the Hoare annotation is: true [2022-11-20 12:48:35,945 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 883 912) no Hoare annotation was computed. [2022-11-20 12:48:35,945 INFO L899 garLoopResultBuilder]: For program point L894(line 894) no Hoare annotation was computed. [2022-11-20 12:48:35,945 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 883 912) the Hoare annotation is: true [2022-11-20 12:48:35,946 INFO L902 garLoopResultBuilder]: At program point L893-2(lines 893 907) the Hoare annotation is: true [2022-11-20 12:48:35,946 INFO L902 garLoopResultBuilder]: At program point L889(line 889) the Hoare annotation is: true [2022-11-20 12:48:35,946 INFO L899 garLoopResultBuilder]: For program point L889-1(line 889) no Hoare annotation was computed. [2022-11-20 12:48:35,946 INFO L902 garLoopResultBuilder]: At program point L908(lines 883 912) the Hoare annotation is: true [2022-11-20 12:48:35,946 INFO L899 garLoopResultBuilder]: For program point L904(line 904) no Hoare annotation was computed. [2022-11-20 12:48:35,947 INFO L895 garLoopResultBuilder]: At program point L543(lines 536 545) the Hoare annotation is: (let ((.cse10 (= ~pumpRunning~0 0)) (.cse15 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse14 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse16 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse6 (and .cse15 (< 1 ~waterLevel~0) .cse14 .cse16)) (.cse7 (not (< 1 |old(~waterLevel~0)|))) (.cse9 (not (<= 1 ~methaneLevelCritical~0))) (.cse12 (and .cse15 .cse14 .cse16)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (not (<= |old(~waterLevel~0)| 2))) (.cse13 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse10 .cse14)) (.cse2 (not (= 1 ~systemActive~0))) (.cse11 (not (<= 0 |old(~waterLevel~0)|))) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse2 .cse5 .cse6 .cse7 .cse3 .cse8) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2 .cse9 (and .cse10 (= ~waterLevel~0 1))) (or .cse0 .cse1 .cse2 .cse9 .cse4) (or .cse0 .cse1 .cse2 .cse11 .cse9 (not (<= |old(~waterLevel~0)| 0))) (or .cse12 .cse2 .cse5 .cse11 .cse9 .cse8 .cse13) (or .cse2 .cse5 .cse6 .cse7 .cse9 .cse8) (or .cse12 .cse2 .cse5 .cse11 .cse3 .cse8 .cse13) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse11 .cse3)))) [2022-11-20 12:48:35,947 INFO L899 garLoopResultBuilder]: For program point L155(line 155) no Hoare annotation was computed. [2022-11-20 12:48:35,947 INFO L895 garLoopResultBuilder]: At program point L663(line 663) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 0))) (let ((.cse10 (not (< 1 |old(~waterLevel~0)|))) (.cse9 (not (= |old(~waterLevel~0)| 2))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (and .cse11 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= 0 |old(~waterLevel~0)|))) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse0 .cse8 .cse9) (or .cse0 .cse1 .cse10 .cse3 .cse4) (or .cse6 (not (= |old(~waterLevel~0)| 1)) .cse0 .cse3 (and .cse11 (= ~waterLevel~0 1))) (or .cse0 .cse1 .cse10 .cse8 .cse4) (or .cse6 .cse7 .cse0 .cse3 .cse9) (or .cse6 .cse7 .cse0 .cse2 .cse3 (not (<= |old(~waterLevel~0)| 0))) (or (not (<= |old(~waterLevel~0)| 1)) .cse6 .cse7 .cse0 .cse2 .cse8) (or .cse0 .cse1 .cse2 .cse8 .cse4 .cse5)))) [2022-11-20 12:48:35,948 INFO L895 garLoopResultBuilder]: At program point L663-1(lines 644 668) the Hoare annotation is: (let ((.cse4 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse13 (<= ~waterLevel~0 0)) (.cse14 (<= 0 ~waterLevel~0)) (.cse12 (not (= |old(~waterLevel~0)| 1))) (.cse19 (not (= |old(~waterLevel~0)| 2))) (.cse20 (not (< 1 |old(~waterLevel~0)|))) (.cse21 (= ~waterLevel~0 1)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse16 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse3 (<= 1 ~switchedOnBeforeTS~0)) (.cse9 (not (<= |old(~waterLevel~0)| 2))) (.cse11 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (not (<= |old(~waterLevel~0)| 0))) (.cse17 (not (= |old(~pumpRunning~0)| 0))) (.cse18 (and .cse0 .cse2)) (.cse5 (not (= 1 ~systemActive~0))) (.cse7 (not (<= 0 |old(~waterLevel~0)|))) (.cse15 (not .cse4))) (and (or (and .cse0 .cse1 .cse2 .cse3) .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (or .cse12 .cse4 .cse5 .cse6 (and .cse0 .cse1 .cse13 .cse3 .cse14) .cse8 .cse9 .cse11) (or .cse12 .cse5 .cse6 .cse15 (and .cse16 .cse1 .cse13 .cse3 .cse14) .cse9 .cse11) (or .cse17 .cse18 .cse5 .cse15 (and (<= 1 ~pumpRunning~0) .cse2) .cse19) (or .cse5 .cse6 .cse20 .cse8 (and .cse0 .cse1 .cse21 .cse3) .cse9) (or .cse17 .cse12 .cse5 .cse8 (and .cse0 .cse21)) (or .cse17 .cse18 .cse5 .cse8 .cse19) (or .cse5 .cse6 .cse20 .cse15 .cse9 (and .cse16 .cse1 .cse21 .cse3)) (or .cse5 .cse6 .cse7 .cse15 (and .cse16 .cse1 .cse2 .cse3) .cse9 .cse10 .cse11) (or .cse17 .cse18 .cse5 .cse7 .cse8 .cse10) (or (not (<= |old(~waterLevel~0)| 1)) .cse17 .cse18 .cse5 .cse7 .cse15)))) [2022-11-20 12:48:35,948 INFO L899 garLoopResultBuilder]: For program point L597-1(lines 597 603) no Hoare annotation was computed. [2022-11-20 12:48:35,948 INFO L895 garLoopResultBuilder]: At program point L556(line 556) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse6 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse20 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse10 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~3#1| ~waterLevel~0)) (.cse22 (= ~methaneLevelCritical~0 0))) (let ((.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse8 (= ~waterLevel~0 1)) (.cse14 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (not .cse22)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse18 (and .cse5 .cse6 .cse20 .cse10)) (.cse19 (not (<= 0 |old(~waterLevel~0)|))) (.cse21 (not (<= |old(~waterLevel~0)| 0))) (.cse13 (not (= |old(~waterLevel~0)| 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse15 (<= ~waterLevel~0 0)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse16 (<= 0 ~waterLevel~0)) (.cse11 (not (<= |old(~waterLevel~0)| 2))) (.cse17 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 (not (< 1 |old(~waterLevel~0)|)) .cse2 (and .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) .cse11) (or .cse0 .cse1 .cse12 .cse3) (or .cse13 .cse1 .cse4 .cse12 (and .cse14 .cse6 .cse7 .cse15 .cse9 .cse10 .cse16) .cse17) (or .cse0 .cse13 .cse1 .cse2 (and .cse5 .cse6 .cse8 .cse10)) (or .cse1 .cse4 .cse12 .cse11 (and .cse14 .cse6 .cse7 .cse8 .cse9 .cse10) (not (<= 2 |old(~waterLevel~0)|))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse18 .cse19 .cse12) (or .cse1 .cse4 .cse19 (and .cse14 .cse6 .cse7 .cse20 .cse9 .cse10) .cse12 .cse21 .cse17) (or .cse0 .cse1 .cse18 .cse19 .cse2 .cse21) (or .cse22 .cse1 .cse4 .cse19 (and .cse5 .cse6 .cse7 .cse20 .cse9 .cse10) .cse2 .cse11 .cse21 .cse17) (or .cse13 .cse22 .cse1 .cse4 .cse2 (and .cse5 .cse6 .cse7 .cse15 .cse9 .cse10 .cse16) .cse11 .cse17)))) [2022-11-20 12:48:35,948 INFO L899 garLoopResultBuilder]: For program point L556-1(line 556) no Hoare annotation was computed. [2022-11-20 12:48:35,948 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 583 609) no Hoare annotation was computed. [2022-11-20 12:48:35,949 INFO L895 garLoopResultBuilder]: At program point L156(lines 151 158) the Hoare annotation is: (let ((.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (< 1 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= 0 |old(~waterLevel~0)|))) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse5 .cse2 .cse6 .cse7) (or .cse0 .cse1 .cse8 .cse3) (or .cse1 .cse4 .cse9 .cse2 .cse6) (or .cse0 .cse1 .cse5 .cse2 (not (<= |old(~waterLevel~0)| 0))) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2) (or .cse1 .cse4 .cse9 .cse8 .cse6) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse5 .cse8) (or .cse1 .cse4 .cse5 .cse8 .cse6 .cse7))) [2022-11-20 12:48:35,949 INFO L899 garLoopResultBuilder]: For program point L590(lines 590 596) no Hoare annotation was computed. [2022-11-20 12:48:35,949 INFO L899 garLoopResultBuilder]: For program point L590-2(lines 586 608) no Hoare annotation was computed. [2022-11-20 12:48:35,949 INFO L899 garLoopResultBuilder]: For program point L652(lines 652 660) no Hoare annotation was computed. [2022-11-20 12:48:35,949 INFO L899 garLoopResultBuilder]: For program point L648(lines 648 665) no Hoare annotation was computed. [2022-11-20 12:48:35,950 INFO L895 garLoopResultBuilder]: At program point L132(lines 127 135) the Hoare annotation is: (let ((.cse13 (= ~methaneLevelCritical~0 0)) (.cse7 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse6 (= ~pumpRunning~0 0)) (.cse21 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse22 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (and .cse6 .cse21 .cse22)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse19 (not (<= |old(~waterLevel~0)| 0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse17 (not (<= 0 |old(~waterLevel~0)|))) (.cse18 (and .cse6 .cse7 .cse22)) (.cse9 (<= ~waterLevel~0 0)) (.cse11 (<= 0 ~waterLevel~0)) (.cse12 (not (= |old(~waterLevel~0)| 1))) (.cse15 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not (= 1 ~systemActive~0))) (.cse14 (not (<= 1 |old(~pumpRunning~0)|))) (.cse23 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse16 (= ~waterLevel~0 1)) (.cse10 (<= 1 ~switchedOnBeforeTS~0)) (.cse20 (not .cse13)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or (and .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) .cse12 .cse13 .cse2 .cse14 .cse3 .cse4 .cse15) (or .cse2 .cse14 (and .cse6 .cse7 .cse8 .cse16 .cse10) .cse3 .cse4 .cse5) (or .cse1 .cse2 .cse17 .cse18 .cse3 .cse19) (or .cse0 .cse1 .cse2 .cse20 (not (= |old(~waterLevel~0)| 2)) (and (<= 1 ~pumpRunning~0) .cse21 .cse22)) (or .cse1 (and .cse6 .cse7 .cse16) .cse12 .cse2 .cse3) (or (and .cse23 .cse7 .cse8 .cse22 .cse10) .cse2 .cse14 .cse17 .cse20 .cse4 .cse19 .cse15) (or .cse13 .cse2 .cse14 .cse17 .cse3 .cse4 .cse19 (and .cse6 .cse7 .cse8 .cse22 .cse10) .cse15) (or (not (<= |old(~waterLevel~0)| 1)) .cse1 .cse2 .cse17 .cse18 .cse20) (or (and .cse23 .cse7 .cse8 .cse9 .cse10 .cse11) .cse12 .cse2 .cse14 .cse20 .cse4 .cse15) (or .cse2 .cse14 (and .cse23 .cse7 .cse8 .cse16 .cse10) .cse20 .cse4 .cse5)))) [2022-11-20 12:48:35,950 INFO L895 garLoopResultBuilder]: At program point L541(line 541) the Hoare annotation is: (let ((.cse16 (= 1 ~systemActive~0)) (.cse14 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse15 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse17 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse12 (not (= |old(~waterLevel~0)| 1))) (.cse5 (and .cse14 .cse15 .cse17)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse7 (and (= ~pumpRunning~0 0) .cse15 .cse17)) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 0 |old(~waterLevel~0)|))) (.cse13 (not (<= |old(~waterLevel~0)| 0))) (.cse0 (not .cse16)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (not (< 1 |old(~waterLevel~0)|))) (.cse9 (not (<= 1 ~methaneLevelCritical~0))) (.cse11 (and (<= 1 ~pumpRunning~0) .cse14 .cse15 .cse16 .cse17)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse7 .cse8 .cse0 .cse9 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse10 .cse3 .cse11 .cse4) (or .cse7 (not (<= |old(~waterLevel~0)| 1)) .cse8 .cse0 .cse2 .cse3) (or .cse7 .cse8 .cse12 .cse0 .cse9) (or .cse12 .cse0 .cse1 .cse9 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse9 .cse5 .cse13 .cse6) (or .cse7 .cse8 .cse0 .cse3 (not (= |old(~waterLevel~0)| 2))) (or .cse7 .cse8 .cse0 .cse2 .cse9 .cse13) (or .cse0 .cse1 .cse10 .cse9 .cse11 .cse4)))) [2022-11-20 12:48:35,950 INFO L899 garLoopResultBuilder]: For program point L541-1(line 541) no Hoare annotation was computed. [2022-11-20 12:48:35,951 INFO L899 garLoopResultBuilder]: For program point L558(lines 558 568) no Hoare annotation was computed. [2022-11-20 12:48:35,951 INFO L899 garLoopResultBuilder]: For program point L554(lines 554 571) no Hoare annotation was computed. [2022-11-20 12:48:35,951 INFO L895 garLoopResultBuilder]: At program point L554-1(lines 546 574) the Hoare annotation is: (let ((.cse24 (= ~methaneLevelCritical~0 0)) (.cse2 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse3 (<= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|)) (.cse4 (= 1 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= ~pumpRunning~0 0)) (.cse20 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse21 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~3#1| ~waterLevel~0))) (let ((.cse5 (= ~waterLevel~0 1)) (.cse11 (and .cse0 .cse1 .cse20 .cse21 .cse6)) (.cse19 (not (<= 2 |old(~waterLevel~0)|))) (.cse12 (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse21 .cse6)) (.cse13 (not (<= 0 |old(~waterLevel~0)|))) (.cse10 (not (<= 1 ~methaneLevelCritical~0))) (.cse18 (not (<= |old(~waterLevel~0)| 2))) (.cse22 (not (<= |old(~waterLevel~0)| 0))) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse16 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse25 (<= ~waterLevel~0 0)) (.cse17 (<= 1 ~switchedOnBeforeTS~0)) (.cse26 (<= 0 ~waterLevel~0)) (.cse8 (not (= |old(~waterLevel~0)| 1))) (.cse9 (not .cse4)) (.cse15 (not (<= 1 |old(~pumpRunning~0)|))) (.cse14 (not .cse24)) (.cse23 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) .cse7 .cse8 .cse9 .cse10) (or .cse7 .cse9 .cse10 .cse11 (not (= |old(~waterLevel~0)| 2))) (or .cse12 (not (<= |old(~waterLevel~0)| 1)) .cse7 .cse9 .cse13 .cse14) (or .cse9 .cse15 (not (< 1 |old(~waterLevel~0)|)) (and .cse0 .cse7 .cse2 .cse3 .cse4 .cse16 .cse5 .cse17 .cse6) .cse14 .cse18) (or .cse9 .cse15 (and .cse7 .cse1 .cse2 .cse4 .cse16 .cse5 .cse17 .cse6) .cse10 .cse18 .cse19) (or .cse7 .cse9 .cse14 .cse11 .cse18 (and (<= 1 ~pumpRunning~0) .cse20 .cse21 .cse6) .cse19) (or .cse9 .cse15 .cse13 .cse14 (and .cse0 .cse7 .cse2 .cse3 .cse4 .cse16 .cse21 .cse17 .cse6) .cse22 .cse23) (or .cse12 .cse7 .cse9 .cse13 .cse10 .cse22) (or .cse8 .cse24 .cse9 .cse15 .cse10 .cse18 (and .cse7 .cse1 .cse2 .cse4 .cse16 .cse25 .cse17 .cse6 .cse26) .cse23) (or .cse24 .cse9 .cse15 .cse13 .cse10 (and .cse7 .cse1 .cse2 .cse4 .cse16 .cse21 .cse17 .cse6) .cse18 .cse22 .cse23) (or (and .cse0 .cse7 .cse2 .cse3 .cse4 .cse16 .cse25 .cse17 .cse6 .cse26) .cse8 .cse9 .cse15 .cse14 .cse23)))) [2022-11-20 12:48:35,951 INFO L899 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2022-11-20 12:48:35,952 INFO L895 garLoopResultBuilder]: At program point L63-2(lines 59 70) the Hoare annotation is: (let ((.cse15 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse16 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (< 1 |old(~waterLevel~0)|))) (.cse6 (and .cse15 (= ~waterLevel~0 1) .cse16)) (.cse8 (not (= |old(~waterLevel~0)| 1))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (and .cse15 (<= ~waterLevel~0 0) .cse16 (<= 0 ~waterLevel~0))) (.cse14 (and .cse15 (= |old(~waterLevel~0)| ~waterLevel~0) .cse16)) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse12 (not (<= 0 |old(~waterLevel~0)|))) (.cse9 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse13 (not (<= |old(~waterLevel~0)| 0))) (.cse11 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse5 .cse2 .cse6 .cse7) (or .cse8 .cse1 .cse4 .cse9 .cse7 .cse10 .cse11) (or .cse0 .cse1 .cse9 .cse3) (or .cse0 .cse1 .cse12 .cse2 .cse13) (or .cse0 .cse8 .cse1 .cse2) (or .cse14 .cse1 .cse4 .cse12 .cse2 .cse13 .cse11) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse12 .cse9) (or .cse1 .cse4 .cse5 .cse9 .cse6 .cse7) (or .cse8 .cse1 .cse4 .cse2 .cse10 .cse11) (or .cse14 .cse1 .cse4 .cse12 .cse9 .cse7 .cse13 .cse11)))) [2022-11-20 12:48:35,952 INFO L895 garLoopResultBuilder]: At program point L699(lines 694 701) the Hoare annotation is: (let ((.cse7 (= ~methaneLevelCritical~0 0))) (let ((.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse11 (not (<= |old(~waterLevel~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse13 (not (= |old(~waterLevel~0)| 1))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse15 (not (< 1 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (not (<= 0 |old(~waterLevel~0)|))) (.cse14 (not .cse7)) (.cse10 (not (<= |old(~waterLevel~0)| 2))) (.cse12 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (and .cse4 .cse5 (= |old(~waterLevel~0)| ~waterLevel~0) .cse6) .cse7 .cse1 .cse8 .cse9 .cse2 .cse10 .cse11 .cse12) (or .cse13 .cse7 .cse1 .cse8 (and .cse4 .cse5 (<= ~waterLevel~0 0) .cse6 (<= 0 ~waterLevel~0)) .cse2 .cse10 .cse12) (or .cse0 .cse1 .cse14 .cse3) (or .cse0 .cse1 .cse9 .cse2 .cse11) (or .cse1 .cse8 .cse15 .cse2 (and .cse4 .cse5 (= ~waterLevel~0 1) .cse6) .cse10) (or .cse0 .cse13 .cse1 .cse2) (or .cse1 .cse8 .cse15 .cse14 .cse10) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse9 .cse14) (or .cse1 .cse8 .cse9 .cse14 .cse10 .cse12)))) [2022-11-20 12:48:35,952 INFO L895 garLoopResultBuilder]: At program point L658(line 658) the Hoare annotation is: (let ((.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse8 (not (= |old(~waterLevel~0)| 1))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse13 (not (< 1 |old(~waterLevel~0)|))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse11 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse12 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse14 (not (<= |old(~waterLevel~0)| 0))) (.cse7 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 0 |old(~waterLevel~0)|))) (.cse9 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse5 .cse2 .cse6 .cse7) (or .cse8 .cse1 .cse4 .cse9 (and .cse10 .cse11 (<= ~waterLevel~0 0) .cse12 (<= 0 ~waterLevel~0)) .cse6 .cse7) (or .cse0 .cse1 .cse9 .cse3) (or .cse1 .cse4 .cse13 .cse2 .cse6) (or .cse0 .cse1 .cse5 .cse2 .cse14) (or .cse0 .cse8 .cse1 .cse2) (or .cse1 .cse4 .cse13 .cse9 .cse6 (and .cse10 .cse11 (= ~waterLevel~0 1) .cse12)) (or .cse1 .cse4 .cse5 .cse9 (and .cse10 .cse11 (= |old(~waterLevel~0)| ~waterLevel~0) .cse12) .cse6 .cse14 .cse7) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse5 .cse9))) [2022-11-20 12:48:35,953 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 583 609) the Hoare annotation is: (let ((.cse16 (= 1 ~systemActive~0)) (.cse14 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse15 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse17 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse12 (not (= |old(~waterLevel~0)| 1))) (.cse5 (and .cse14 .cse15 .cse17)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse7 (and (= ~pumpRunning~0 0) .cse15 .cse17)) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 0 |old(~waterLevel~0)|))) (.cse13 (not (<= |old(~waterLevel~0)| 0))) (.cse0 (not .cse16)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (not (< 1 |old(~waterLevel~0)|))) (.cse9 (not (<= 1 ~methaneLevelCritical~0))) (.cse11 (and (<= 1 ~pumpRunning~0) .cse14 .cse15 .cse16 .cse17)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse7 .cse8 .cse0 .cse9 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse10 .cse3 .cse11 .cse4) (or .cse7 (not (<= |old(~waterLevel~0)| 1)) .cse8 .cse0 .cse2 .cse3) (or .cse7 .cse8 .cse12 .cse0 .cse9) (or .cse12 .cse0 .cse1 .cse9 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse9 .cse5 .cse13 .cse6) (or .cse7 .cse8 .cse0 .cse3 (not (= |old(~waterLevel~0)| 2))) (or .cse7 .cse8 .cse0 .cse2 .cse9 .cse13) (or .cse0 .cse1 .cse10 .cse9 .cse11 .cse4)))) [2022-11-20 12:48:35,953 INFO L899 garLoopResultBuilder]: For program point L559(lines 559 565) no Hoare annotation was computed. [2022-11-20 12:48:35,953 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 583 609) no Hoare annotation was computed. [2022-11-20 12:48:35,953 INFO L895 garLoopResultBuilder]: At program point L650(line 650) the Hoare annotation is: (let ((.cse15 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse16 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (< 1 |old(~waterLevel~0)|))) (.cse6 (and .cse15 (= ~waterLevel~0 1) .cse16)) (.cse8 (not (= |old(~waterLevel~0)| 1))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (and .cse15 (<= ~waterLevel~0 0) .cse16 (<= 0 ~waterLevel~0))) (.cse14 (and .cse15 (= |old(~waterLevel~0)| ~waterLevel~0) .cse16)) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse12 (not (<= 0 |old(~waterLevel~0)|))) (.cse9 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse13 (not (<= |old(~waterLevel~0)| 0))) (.cse11 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse5 .cse2 .cse6 .cse7) (or .cse8 .cse1 .cse4 .cse9 .cse7 .cse10 .cse11) (or .cse0 .cse1 .cse9 .cse3) (or .cse0 .cse1 .cse12 .cse2 .cse13) (or .cse0 .cse8 .cse1 .cse2) (or .cse14 .cse1 .cse4 .cse12 .cse2 .cse13 .cse11) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse12 .cse9) (or .cse1 .cse4 .cse5 .cse9 .cse6 .cse7) (or .cse8 .cse1 .cse4 .cse2 .cse10 .cse11) (or .cse14 .cse1 .cse4 .cse12 .cse9 .cse7 .cse13 .cse11)))) [2022-11-20 12:48:35,953 INFO L899 garLoopResultBuilder]: For program point L650-1(line 650) no Hoare annotation was computed. [2022-11-20 12:48:35,954 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 155) no Hoare annotation was computed. [2022-11-20 12:48:35,954 INFO L895 garLoopResultBuilder]: At program point L832(lines 789 834) the Hoare annotation is: (let ((.cse7 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse1 (= 2 ~waterLevel~0)) (.cse8 (<= ~waterLevel~0 0)) (.cse9 (<= 0 ~waterLevel~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (= ~waterLevel~0 1)) (.cse10 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse2 .cse3 .cse4 .cse6) (and .cse5 .cse7 .cse1 .cse3 .cse4) (and .cse5 .cse7 .cse3 .cse4 .cse6) (and .cse5 .cse2 .cse3 .cse4 .cse8 .cse9) (and .cse5 .cse7 .cse3 .cse4 .cse8 .cse9) (and .cse5 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse3 .cse4 .cse8 .cse10 .cse9) (and .cse0 .cse2 .cse3 .cse4 .cse6 .cse10))) [2022-11-20 12:48:35,954 INFO L899 garLoopResultBuilder]: For program point L799(lines 799 805) no Hoare annotation was computed. [2022-11-20 12:48:35,954 INFO L899 garLoopResultBuilder]: For program point L799-1(lines 799 805) no Hoare annotation was computed. [2022-11-20 12:48:35,954 INFO L902 garLoopResultBuilder]: At program point L952(lines 944 954) the Hoare annotation is: true [2022-11-20 12:48:35,954 INFO L899 garLoopResultBuilder]: For program point L791(lines 791 795) no Hoare annotation was computed. [2022-11-20 12:48:35,955 INFO L899 garLoopResultBuilder]: For program point L965(lines 965 972) no Hoare annotation was computed. [2022-11-20 12:48:35,955 INFO L899 garLoopResultBuilder]: For program point L965-2(lines 965 972) no Hoare annotation was computed. [2022-11-20 12:48:35,955 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-20 12:48:35,955 INFO L895 garLoopResultBuilder]: At program point L862(lines 858 864) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-20 12:48:35,955 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-20 12:48:35,955 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-20 12:48:35,955 INFO L899 garLoopResultBuilder]: For program point L825(lines 825 829) no Hoare annotation was computed. [2022-11-20 12:48:35,956 INFO L895 garLoopResultBuilder]: At program point L825-2(lines 819 830) the Hoare annotation is: (let ((.cse7 (< 1 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= 2 ~waterLevel~0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse8 (<= ~waterLevel~0 2)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse10 (<= 0 ~waterLevel~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse3 .cse4 (= ~waterLevel~0 1)) (and .cse5 .cse6 .cse7 .cse3 .cse4 .cse8) (and .cse5 .cse6 .cse3 .cse4 .cse8 .cse9 .cse10) (and .cse5 .cse1 .cse2 .cse7 .cse3 .cse4) (and .cse0 .cse6 (<= ~waterLevel~0 1) .cse3 .cse4 .cse10) (and .cse0 .cse1 .cse3 .cse4 (<= ~waterLevel~0 0) .cse10) (and .cse0 .cse2 .cse6 .cse3 .cse4) (and .cse5 .cse1 .cse3 .cse4 .cse8 .cse9 .cse10))) [2022-11-20 12:48:35,956 INFO L902 garLoopResultBuilder]: At program point L974(lines 955 977) the Hoare annotation is: true [2022-11-20 12:48:35,956 INFO L895 garLoopResultBuilder]: At program point L941(lines 937 943) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-20 12:48:35,956 INFO L899 garLoopResultBuilder]: For program point L809(lines 809 815) no Hoare annotation was computed. [2022-11-20 12:48:35,956 INFO L899 garLoopResultBuilder]: For program point L809-1(lines 809 815) no Hoare annotation was computed. [2022-11-20 12:48:35,957 INFO L902 garLoopResultBuilder]: At program point L838(lines 779 842) the Hoare annotation is: true [2022-11-20 12:48:35,957 INFO L895 garLoopResultBuilder]: At program point L801(line 801) the Hoare annotation is: (let ((.cse6 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse1 (= 2 ~waterLevel~0)) (.cse9 (<= ~waterLevel~0 0)) (.cse7 (<= 0 ~waterLevel~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse8 (= ~waterLevel~0 1)) (.cse10 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 (<= ~waterLevel~0 1) .cse3 .cse4 .cse7) (and .cse5 .cse2 .cse3 .cse4 .cse8) (and .cse5 .cse6 .cse1 .cse3 .cse4) (and .cse5 .cse2 .cse3 .cse4 .cse9 .cse7) (and .cse5 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse3 .cse4 .cse9 .cse10 .cse7) (and .cse0 .cse2 .cse3 .cse4 .cse8 .cse10))) [2022-11-20 12:48:35,957 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-20 12:48:35,957 INFO L895 garLoopResultBuilder]: At program point L533(lines 528 535) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-20 12:48:35,957 INFO L895 garLoopResultBuilder]: At program point L835(lines 788 836) the Hoare annotation is: false [2022-11-20 12:48:35,957 INFO L899 garLoopResultBuilder]: For program point L790(lines 789 834) no Hoare annotation was computed. [2022-11-20 12:48:35,958 INFO L899 garLoopResultBuilder]: For program point L819(lines 819 830) no Hoare annotation was computed. [2022-11-20 12:48:35,958 INFO L895 garLoopResultBuilder]: At program point L877(lines 872 880) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-20 12:48:35,958 INFO L895 garLoopResultBuilder]: At program point L811(line 811) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse7 (<= ~waterLevel~0 1)) (.cse8 (<= 0 ~waterLevel~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (<= 1 ~methaneLevelCritical~0)) (.cse1 (= 2 ~waterLevel~0)) (.cse9 (< 1 ~waterLevel~0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse7 .cse3 .cse4 .cse8) (and .cse5 .cse2 .cse3 .cse4 (= ~waterLevel~0 1)) (and .cse0 .cse2 .cse7 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse8) (and .cse5 .cse2 .cse3 .cse4 (<= ~waterLevel~0 0) .cse8) (and .cse5 .cse2 .cse9 .cse3 .cse4 (<= ~waterLevel~0 2)) (and .cse5 .cse6 .cse1 .cse9 .cse3 .cse4))) [2022-11-20 12:48:35,958 INFO L895 garLoopResultBuilder]: At program point L869(lines 865 871) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-20 12:48:35,958 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2022-11-20 12:48:35,958 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 71 82) no Hoare annotation was computed. [2022-11-20 12:48:35,959 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 71 82) the Hoare annotation is: (let ((.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse11 (not (<= |old(~waterLevel~0)| 0))) (.cse8 (not (= |old(~waterLevel~0)| 1))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 1 ~pumpRunning~0))) (.cse9 (= ~waterLevel~0 1)) (.cse12 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse10 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse6 .cse7 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse6 .cse3 .cse4 .cse5) (or .cse0 .cse8 .cse1 .cse6 .cse9) (or .cse1 .cse10 .cse6 .cse7 .cse3 .cse11 .cse12) (or .cse0 .cse1 .cse10 .cse6 .cse3 .cse11) (or .cse8 .cse1 .cse6 .cse7 .cse9 .cse12) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse10 .cse2 .cse3))) [2022-11-20 12:48:35,959 INFO L895 garLoopResultBuilder]: At program point L632(line 632) the Hoare annotation is: (let ((.cse7 (= 1 ~systemActive~0))) (let ((.cse2 (not (<= 0 ~waterLevel~0))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (<= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse7)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) .cse7 (= |processEnvironment__wrappee__methaneQuery_~tmp~4#1| 0)))) (and (or .cse0 (not (<= ~waterLevel~0 0)) .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse2 (not (<= 1 |old(~pumpRunning~0)|)) .cse3 .cse5 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse6 .cse4 (not (<= ~waterLevel~0 2))) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse3 .cse4)))) [2022-11-20 12:48:35,959 INFO L899 garLoopResultBuilder]: For program point L626(lines 626 634) no Hoare annotation was computed. [2022-11-20 12:48:35,960 INFO L895 garLoopResultBuilder]: At program point L145(lines 136 149) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0))) (let ((.cse5 (not (<= ~waterLevel~0 0))) (.cse4 (not (<= 0 ~waterLevel~0))) (.cse7 (not (= ~waterLevel~0 1))) (.cse6 (and (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|) .cse1)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse8 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 (not (= 2 ~waterLevel~0)) .cse3) (or .cse2 .cse4 (not (<= 1 |old(~pumpRunning~0)|)) .cse3 (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse5 .cse2 .cse4 .cse6 .cse3) (or .cse7 .cse0 .cse2 .cse6 .cse8) (or .cse0 .cse5 .cse2 .cse4 .cse6 .cse8) (or .cse7 .cse0 .cse2 .cse6 .cse3) (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse8 (not (<= ~waterLevel~0 2)))))) [2022-11-20 12:48:35,960 INFO L899 garLoopResultBuilder]: For program point L622(lines 622 639) no Hoare annotation was computed. [2022-11-20 12:48:35,960 INFO L899 garLoopResultBuilder]: For program point L684(lines 684 690) no Hoare annotation was computed. [2022-11-20 12:48:35,960 INFO L895 garLoopResultBuilder]: At program point L682(line 682) the Hoare annotation is: (let ((.cse2 (not (<= 2 ~waterLevel~0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0))) (.cse5 (not (<= ~waterLevel~0 2))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 0 ~waterLevel~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= ~waterLevel~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse6 (not (<= 1 |old(~pumpRunning~0)|)) .cse3 .cse7 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 .cse2 .cse8 .cse4 .cse5) (or .cse0 .cse1 .cse6 .cse8 .cse7) (or .cse0 .cse1 .cse6 .cse3 .cse7))) [2022-11-20 12:48:35,960 INFO L895 garLoopResultBuilder]: At program point L684-2(lines 677 693) the Hoare annotation is: (let ((.cse5 (not (<= 2 ~waterLevel~0))) (.cse6 (not (<= ~waterLevel~0 2))) (.cse7 (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~6#1| ~methaneLevelCritical~0)) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~waterLevel~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (<= ~waterLevel~0 1)))) (and (or .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse4 .cse0 .cse5 .cse2 .cse6 (and (<= 1 ~pumpRunning~0) .cse7)) (or .cse4 .cse0 .cse5 .cse8 .cse6 (and (= ~pumpRunning~0 0) .cse7)) (or .cse4 .cse0 .cse1 .cse8 .cse3) (or .cse4 .cse0 .cse1 .cse2 .cse3))) [2022-11-20 12:48:35,961 INFO L899 garLoopResultBuilder]: For program point L682-1(line 682) no Hoare annotation was computed. [2022-11-20 12:48:35,961 INFO L895 garLoopResultBuilder]: At program point L773(lines 758 776) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (= ~pumpRunning~0 0))) (let ((.cse2 (not (<= 2 ~waterLevel~0))) (.cse4 (and .cse11 .cse12)) (.cse5 (not (<= ~waterLevel~0 2))) (.cse7 (not (<= ~waterLevel~0 0))) (.cse6 (not (<= 0 ~waterLevel~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse10 (not (= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse8 (and (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0) .cse11 .cse12 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0))) (.cse9 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse6 (not (<= 1 |old(~pumpRunning~0)|)) .cse3 (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse7 .cse1 .cse6 .cse8 .cse9) (or .cse10 .cse0 .cse1 .cse8 .cse3) (or .cse0 .cse1 .cse2 .cse9 .cse4 .cse5) (or .cse0 .cse7 .cse1 .cse6 .cse8 .cse3) (or .cse10 .cse0 .cse1 .cse8 .cse9)))) [2022-11-20 12:48:35,961 INFO L895 garLoopResultBuilder]: At program point L674(lines 669 676) the Hoare annotation is: (let ((.cse5 (not (<= 2 ~waterLevel~0))) (.cse7 (not (<= ~waterLevel~0 2))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~waterLevel~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (<= ~waterLevel~0 1)))) (and (or .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse4 .cse0 .cse5 .cse6 .cse7) (or .cse4 .cse0 .cse5 .cse2 .cse7 (and (<= 1 ~pumpRunning~0) (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~6#1| ~methaneLevelCritical~0))) (or .cse4 .cse0 .cse1 .cse6 .cse3) (or .cse4 .cse0 .cse1 .cse2 .cse3))) [2022-11-20 12:48:35,961 INFO L899 garLoopResultBuilder]: For program point L767(lines 767 771) no Hoare annotation was computed. [2022-11-20 12:48:35,961 INFO L899 garLoopResultBuilder]: For program point L767-2(lines 767 771) no Hoare annotation was computed. [2022-11-20 12:48:35,962 INFO L895 garLoopResultBuilder]: At program point L637(line 637) the Hoare annotation is: (let ((.cse2 (not (<= 2 ~waterLevel~0))) (.cse4 (not (<= ~waterLevel~0 2))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (not (<= ~waterLevel~0 1))) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse9 (not (<= 0 ~waterLevel~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (<= 1 ~switchedOnBeforeTS~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or (not (= ~waterLevel~0 1)) .cse6 .cse1 .cse7 .cse3 .cse8) (or .cse0 .cse1 .cse9 .cse5 .cse10) (or .cse0 .cse1 .cse9 .cse3 .cse10) (or .cse6 (not (<= ~waterLevel~0 0)) .cse1 .cse9 .cse7 .cse3 .cse8))) [2022-11-20 12:48:35,962 INFO L899 garLoopResultBuilder]: For program point L637-1(lines 618 642) no Hoare annotation was computed. [2022-11-20 12:48:35,962 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 618 642) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (not (<= ~waterLevel~0 0))) (.cse9 (not (<= 0 ~waterLevel~0))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse10 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 (not (= 2 ~waterLevel~0)) .cse3) (or .cse4 .cse5 .cse2 .cse6 .cse3 .cse7) (or .cse0 .cse1 .cse8 .cse2 .cse9 .cse3) (or .cse0 .cse1 .cse8 .cse2 .cse9 .cse10) (or .cse5 .cse8 .cse2 .cse9 .cse6 .cse3 .cse7) (or .cse4 .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse1 .cse2 .cse10) (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse10 (not (<= ~waterLevel~0 2))))) [2022-11-20 12:48:35,962 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 146) no Hoare annotation was computed. [2022-11-20 12:48:35,963 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 618 642) no Hoare annotation was computed. [2022-11-20 12:48:35,963 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 713 721) no Hoare annotation was computed. [2022-11-20 12:48:35,963 INFO L902 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 713 721) the Hoare annotation is: true [2022-11-20 12:48:35,963 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 713 721) no Hoare annotation was computed. [2022-11-20 12:48:35,963 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 702 712) the Hoare annotation is: true [2022-11-20 12:48:35,963 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 702 712) no Hoare annotation was computed. [2022-11-20 12:48:35,963 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 702 712) no Hoare annotation was computed. [2022-11-20 12:48:35,964 INFO L895 garLoopResultBuilder]: At program point L100(lines 95 103) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 0))) (.cse2 (not (<= 0 ~waterLevel~0))) (.cse8 (not (= ~waterLevel~0 1))) (.cse4 (not (<= 1 ~pumpRunning~0))) (.cse6 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse10 (not (<= 2 ~waterLevel~0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse11 (not (<= ~waterLevel~0 2))) (.cse5 (= |isMethaneAlarm_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse7 .cse4 .cse5 .cse6) (or .cse8 .cse1 .cse3 .cse4 .cse5 .cse6) (or .cse8 .cse1 .cse7 .cse4 .cse5 .cse6) (or .cse9 .cse1 .cse10 .cse3 .cse11 .cse5) (or .cse9 .cse1 .cse10 .cse7 .cse11 .cse5))) [2022-11-20 12:48:35,967 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:48:35,970 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-20 12:48:36,021 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 12:48:36 BoogieIcfgContainer [2022-11-20 12:48:36,021 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-20 12:48:36,022 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-20 12:48:36,022 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-20 12:48:36,023 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-20 12:48:36,023 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 12:47:46" (3/4) ... [2022-11-20 12:48:36,026 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-20 12:48:36,033 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-20 12:48:36,033 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-20 12:48:36,033 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-20 12:48:36,033 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-20 12:48:36,034 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-20 12:48:36,034 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-11-20 12:48:36,034 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-11-20 12:48:36,034 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-11-20 12:48:36,041 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-11-20 12:48:36,041 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-20 12:48:36,042 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-20 12:48:36,042 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-20 12:48:36,042 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-20 12:48:36,069 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && 1 < waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && 1 < waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) [2022-11-20 12:48:36,070 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) [2022-11-20 12:48:36,070 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && pumpRunning <= tmp___0) && 1 == systemActive) && waterLevel == 1) && tmp == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == waterLevel)) || !(\old(waterLevel) == 2))) && (((((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && pumpRunning <= tmp___0) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp == waterLevel) || !(\old(waterLevel) <= 1)) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((((((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && waterLevel == \result) && pumpRunning <= tmp___0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && waterLevel == \result) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == waterLevel)) || !(\old(waterLevel) <= 2)) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == waterLevel)) || !(2 <= \old(waterLevel)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && waterLevel == \result) && pumpRunning <= tmp___0) && 1 == systemActive) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && pumpRunning <= tmp___0) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || ((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && waterLevel == \result) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && tmp == waterLevel) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && waterLevel == \result) && 1 == systemActive) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && waterLevel == \result) && pumpRunning <= tmp___0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && tmp == waterLevel) && 0 <= waterLevel) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS))) [2022-11-20 12:48:36,071 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) && (((((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) [2022-11-20 12:48:36,071 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2022-11-20 12:48:36,071 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((((((((((pumpRunning == 0 && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel) || !(\old(waterLevel) == 1)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel))) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && waterLevel == \result) && waterLevel == 1)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && (((((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || ((((pumpRunning == 0 && waterLevel == \result) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0))) && (((((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-11-20 12:48:36,072 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) && (((((((((((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2022-11-20 12:48:36,072 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(waterLevel <= 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS)) && ((((((!(waterLevel <= 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(waterLevel == 1) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(waterLevel == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || \result == methaneLevelCritical)) && (((((!(pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || \result == methaneLevelCritical) [2022-11-20 12:48:36,072 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 == waterLevel)) || !(methaneLevelCritical == 0)) && (((((!(1 == systemActive) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) || !(methaneLevelCritical == 0))) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical))) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (1 <= \result && pumpRunning == 0)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) [2022-11-20 12:48:36,073 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 == systemActive) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && tmp == methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || (pumpRunning == 0 && tmp == methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) [2022-11-20 12:48:36,073 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 == systemActive) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && tmp == methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) [2022-11-20 12:48:36,073 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(waterLevel <= 2)) && (((((!(1 == systemActive) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || (((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical))) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && \result == 0)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || (((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && \result == 0)) || !(methaneLevelCritical == 0))) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical)) [2022-11-20 12:48:36,096 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/witness.graphml [2022-11-20 12:48:36,097 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-20 12:48:36,097 INFO L158 Benchmark]: Toolchain (without parser) took 50930.79ms. Allocated memory was 142.6MB in the beginning and 394.3MB in the end (delta: 251.7MB). Free memory was 99.0MB in the beginning and 306.9MB in the end (delta: -207.9MB). Peak memory consumption was 45.8MB. Max. memory is 16.1GB. [2022-11-20 12:48:36,098 INFO L158 Benchmark]: CDTParser took 0.23ms. Allocated memory is still 142.6MB. Free memory is still 90.4MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-20 12:48:36,098 INFO L158 Benchmark]: CACSL2BoogieTranslator took 431.08ms. Allocated memory is still 142.6MB. Free memory was 98.6MB in the beginning and 80.1MB in the end (delta: 18.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-11-20 12:48:36,098 INFO L158 Benchmark]: Boogie Procedure Inliner took 83.32ms. Allocated memory is still 142.6MB. Free memory was 80.1MB in the beginning and 77.7MB in the end (delta: 2.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-20 12:48:36,099 INFO L158 Benchmark]: Boogie Preprocessor took 57.12ms. Allocated memory is still 142.6MB. Free memory was 77.7MB in the beginning and 76.2MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-20 12:48:36,099 INFO L158 Benchmark]: RCFGBuilder took 686.28ms. Allocated memory was 142.6MB in the beginning and 188.7MB in the end (delta: 46.1MB). Free memory was 76.2MB in the beginning and 158.5MB in the end (delta: -82.3MB). Peak memory consumption was 22.6MB. Max. memory is 16.1GB. [2022-11-20 12:48:36,100 INFO L158 Benchmark]: TraceAbstraction took 49571.56ms. Allocated memory was 188.7MB in the beginning and 394.3MB in the end (delta: 205.5MB). Free memory was 158.8MB in the beginning and 312.2MB in the end (delta: -153.4MB). Peak memory consumption was 240.9MB. Max. memory is 16.1GB. [2022-11-20 12:48:36,100 INFO L158 Benchmark]: Witness Printer took 74.78ms. Allocated memory is still 394.3MB. Free memory was 312.2MB in the beginning and 306.9MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-20 12:48:36,102 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.23ms. Allocated memory is still 142.6MB. Free memory is still 90.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 431.08ms. Allocated memory is still 142.6MB. Free memory was 98.6MB in the beginning and 80.1MB in the end (delta: 18.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 83.32ms. Allocated memory is still 142.6MB. Free memory was 80.1MB in the beginning and 77.7MB in the end (delta: 2.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 57.12ms. Allocated memory is still 142.6MB. Free memory was 77.7MB in the beginning and 76.2MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 686.28ms. Allocated memory was 142.6MB in the beginning and 188.7MB in the end (delta: 46.1MB). Free memory was 76.2MB in the beginning and 158.5MB in the end (delta: -82.3MB). Peak memory consumption was 22.6MB. Max. memory is 16.1GB. * TraceAbstraction took 49571.56ms. Allocated memory was 188.7MB in the beginning and 394.3MB in the end (delta: 205.5MB). Free memory was 158.8MB in the beginning and 312.2MB in the end (delta: -153.4MB). Peak memory consumption was 240.9MB. Max. memory is 16.1GB. * Witness Printer took 74.78ms. Allocated memory is still 394.3MB. Free memory was 312.2MB in the beginning and 306.9MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 155]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 98 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 49.5s, OverallIterations: 14, TraceHistogramMax: 9, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 16.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 20.3s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 7941 SdHoareTripleChecker+Valid, 9.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 7894 mSDsluCounter, 7055 SdHoareTripleChecker+Invalid, 8.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5631 mSDsCounter, 3040 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 13009 IncrementalHoareTripleChecker+Invalid, 16049 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 3040 mSolverCounterUnsat, 1424 mSDtfsCounter, 13009 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 2620 GetRequests, 2202 SyntacticMatches, 33 SemanticMatches, 385 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5538 ImplicationChecksByTransitivity, 7.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1259occurred in iteration=13, InterpolantAutomatonStates: 295, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 14 MinimizatonAttempts, 535 StatesRemovedByMinimization, 10 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 45 LocationsWithAnnotation, 3045 PreInvPairs, 3362 NumberOfFragments, 6612 HoareAnnotationTreeSize, 3045 FomulaSimplifications, 7471 FormulaSimplificationTreeSizeReduction, 1.6s HoareSimplificationTime, 45 FomulaSimplificationsInter, 64896 FormulaSimplificationTreeSizeReductionInter, 18.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 8.9s InterpolantComputationTime, 2384 NumberOfCodeBlocks, 2384 NumberOfCodeBlocksAsserted, 19 NumberOfCheckSat, 3334 ConstructedInterpolants, 0 QuantifiedInterpolants, 8275 SizeOfPredicates, 13 NumberOfNonLiveVariables, 2941 ConjunctsInSsa, 79 ConjunctsInUnsatCore, 24 InterpolantComputations, 9 PerfectInterpolantSequences, 2992/3651 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 865]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 872]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 == waterLevel)) || !(methaneLevelCritical == 0)) && (((((!(1 == systemActive) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) || !(methaneLevelCritical == 0))) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical))) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (1 <= \result && pumpRunning == 0)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) - InvariantResult [Line: 789]: Loop Invariant Derived loop invariant: (((((((((((1 <= pumpRunning && 2 == waterLevel) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) || ((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1)) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1)) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 0) && 0 <= waterLevel)) || (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 0) && 0 <= waterLevel)) || ((((pumpRunning == 0 && 2 == waterLevel) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0)) || ((((((1 <= pumpRunning && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) - InvariantResult [Line: 536]: Loop Invariant Derived loop invariant: (((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && 1 < waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && 1 < waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 644]: Loop Invariant Derived loop invariant: ((((((((((((((((((((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) && (((((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: ((((((((((!(waterLevel <= 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS)) && ((((((!(waterLevel <= 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(waterLevel == 1) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(waterLevel == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || \result == methaneLevelCritical)) && (((((!(pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || \result == methaneLevelCritical) - InvariantResult [Line: 937]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 546]: Loop Invariant Derived loop invariant: (((((((((((((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && pumpRunning <= tmp___0) && 1 == systemActive) && waterLevel == 1) && tmp == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == waterLevel)) || !(\old(waterLevel) == 2))) && (((((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && pumpRunning <= tmp___0) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp == waterLevel) || !(\old(waterLevel) <= 1)) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((((((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && waterLevel == \result) && pumpRunning <= tmp___0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && waterLevel == \result) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == waterLevel)) || !(\old(waterLevel) <= 2)) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == waterLevel)) || !(2 <= \old(waterLevel)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && waterLevel == \result) && pumpRunning <= tmp___0) && 1 == systemActive) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && pumpRunning <= tmp___0) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || ((((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && waterLevel == \result) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && tmp == waterLevel) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && waterLevel == \result) && 1 == systemActive) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && waterLevel == \result) && pumpRunning <= tmp___0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && tmp == waterLevel) && 0 <= waterLevel) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 788]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 758]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(waterLevel <= 2)) && (((((!(1 == systemActive) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || (((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical))) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && \result == 0)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || (((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && \result == 0)) || !(methaneLevelCritical == 0))) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical)) - InvariantResult [Line: 528]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 694]: Loop Invariant Derived loop invariant: (((((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) && (((((((((((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 669]: Loop Invariant Derived loop invariant: ((((((((!(1 == systemActive) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && tmp == methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: ((((((((((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((((((((((pumpRunning == 0 && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel) || !(\old(waterLevel) == 1)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel))) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && waterLevel == \result) && waterLevel == 1)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && (((((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || ((((pumpRunning == 0 && waterLevel == \result) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0))) && (((((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 858]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 955]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 883]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: ((((((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 677]: Loop Invariant Derived loop invariant: ((((((((!(1 == systemActive) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && tmp == methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || (pumpRunning == 0 && tmp == methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) - InvariantResult [Line: 779]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 893]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-11-20 12:48:36,163 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_55dc4be7-c509-49fb-a51d-fed0e99cdc63/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE