./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product47.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 6b4ec56b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product47.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 303db4082dd8b7a60cb4b5043655f09159321046818373497160cd54b8948d04 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-6b4ec56 [2022-11-20 09:27:07,684 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-20 09:27:07,687 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-20 09:27:07,723 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-20 09:27:07,726 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-20 09:27:07,730 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-20 09:27:07,733 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-20 09:27:07,737 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-20 09:27:07,739 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-20 09:27:07,740 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-20 09:27:07,741 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-20 09:27:07,742 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-20 09:27:07,743 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-20 09:27:07,744 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-20 09:27:07,745 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-20 09:27:07,746 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-20 09:27:07,747 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-20 09:27:07,748 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-20 09:27:07,750 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-20 09:27:07,761 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-20 09:27:07,763 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-20 09:27:07,766 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-20 09:27:07,768 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-20 09:27:07,769 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-20 09:27:07,777 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-20 09:27:07,777 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-20 09:27:07,778 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-20 09:27:07,779 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-20 09:27:07,779 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-20 09:27:07,780 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-20 09:27:07,780 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-20 09:27:07,781 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-20 09:27:07,782 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-20 09:27:07,783 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-20 09:27:07,784 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-20 09:27:07,784 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-20 09:27:07,785 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-20 09:27:07,785 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-20 09:27:07,785 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-20 09:27:07,791 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-20 09:27:07,793 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-20 09:27:07,794 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-20 09:27:07,828 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-20 09:27:07,828 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-20 09:27:07,829 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-20 09:27:07,829 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-20 09:27:07,830 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-20 09:27:07,830 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-20 09:27:07,831 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-20 09:27:07,831 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-20 09:27:07,831 INFO L138 SettingsManager]: * Use SBE=true [2022-11-20 09:27:07,831 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-20 09:27:07,832 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-20 09:27:07,832 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-20 09:27:07,832 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-20 09:27:07,832 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-20 09:27:07,833 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-20 09:27:07,833 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-20 09:27:07,833 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-20 09:27:07,833 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-20 09:27:07,833 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-20 09:27:07,834 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-20 09:27:07,834 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-20 09:27:07,834 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-20 09:27:07,834 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-20 09:27:07,835 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-20 09:27:07,835 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-20 09:27:07,835 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-20 09:27:07,835 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-20 09:27:07,835 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-20 09:27:07,836 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-20 09:27:07,836 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-20 09:27:07,836 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-20 09:27:07,836 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-20 09:27:07,836 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-20 09:27:07,837 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 303db4082dd8b7a60cb4b5043655f09159321046818373497160cd54b8948d04 [2022-11-20 09:27:08,137 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-20 09:27:08,175 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-20 09:27:08,177 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-20 09:27:08,179 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-20 09:27:08,179 INFO L275 PluginConnector]: CDTParser initialized [2022-11-20 09:27:08,181 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/../../sv-benchmarks/c/product-lines/minepump_spec5_product47.cil.c [2022-11-20 09:27:11,204 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-20 09:27:11,467 INFO L351 CDTParser]: Found 1 translation units. [2022-11-20 09:27:11,467 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/sv-benchmarks/c/product-lines/minepump_spec5_product47.cil.c [2022-11-20 09:27:11,477 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/data/cbd992ffc/184058e658af47a08107b66558c1dbcd/FLAG1e9d2dd1a [2022-11-20 09:27:11,491 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/data/cbd992ffc/184058e658af47a08107b66558c1dbcd [2022-11-20 09:27:11,493 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-20 09:27:11,495 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-20 09:27:11,496 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-20 09:27:11,496 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-20 09:27:11,499 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-20 09:27:11,500 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 09:27:11" (1/1) ... [2022-11-20 09:27:11,501 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1900992c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 09:27:11, skipping insertion in model container [2022-11-20 09:27:11,501 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 09:27:11" (1/1) ... [2022-11-20 09:27:11,508 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-20 09:27:11,565 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-20 09:27:11,755 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/sv-benchmarks/c/product-lines/minepump_spec5_product47.cil.c[1605,1618] [2022-11-20 09:27:11,933 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 09:27:11,949 INFO L203 MainTranslator]: Completed pre-run [2022-11-20 09:27:11,969 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/sv-benchmarks/c/product-lines/minepump_spec5_product47.cil.c[1605,1618] [2022-11-20 09:27:12,051 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 09:27:12,082 INFO L208 MainTranslator]: Completed translation [2022-11-20 09:27:12,083 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 09:27:12 WrapperNode [2022-11-20 09:27:12,083 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-20 09:27:12,084 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-20 09:27:12,084 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-20 09:27:12,084 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-20 09:27:12,092 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 09:27:12" (1/1) ... [2022-11-20 09:27:12,106 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 09:27:12" (1/1) ... [2022-11-20 09:27:12,131 INFO L138 Inliner]: procedures = 57, calls = 104, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 211 [2022-11-20 09:27:12,131 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-20 09:27:12,132 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-20 09:27:12,132 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-20 09:27:12,133 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-20 09:27:12,142 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 09:27:12" (1/1) ... [2022-11-20 09:27:12,143 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 09:27:12" (1/1) ... [2022-11-20 09:27:12,145 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 09:27:12" (1/1) ... [2022-11-20 09:27:12,145 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 09:27:12" (1/1) ... [2022-11-20 09:27:12,151 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 09:27:12" (1/1) ... [2022-11-20 09:27:12,156 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 09:27:12" (1/1) ... [2022-11-20 09:27:12,158 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 09:27:12" (1/1) ... [2022-11-20 09:27:12,159 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 09:27:12" (1/1) ... [2022-11-20 09:27:12,162 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-20 09:27:12,163 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-20 09:27:12,163 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-20 09:27:12,163 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-20 09:27:12,164 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 09:27:12" (1/1) ... [2022-11-20 09:27:12,171 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-20 09:27:12,184 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 09:27:12,197 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-20 09:27:12,228 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-20 09:27:12,249 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-20 09:27:12,249 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-20 09:27:12,249 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-20 09:27:12,250 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-20 09:27:12,250 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-20 09:27:12,251 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-20 09:27:12,251 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-20 09:27:12,251 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-20 09:27:12,251 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-20 09:27:12,252 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-11-20 09:27:12,252 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-11-20 09:27:12,253 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-11-20 09:27:12,253 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-11-20 09:27:12,253 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-11-20 09:27:12,253 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-11-20 09:27:12,254 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-20 09:27:12,254 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-20 09:27:12,254 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-20 09:27:12,255 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-20 09:27:12,255 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-20 09:27:12,255 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-20 09:27:12,255 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-20 09:27:12,400 INFO L235 CfgBuilder]: Building ICFG [2022-11-20 09:27:12,402 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-20 09:27:12,797 INFO L276 CfgBuilder]: Performing block encoding [2022-11-20 09:27:12,804 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-20 09:27:12,805 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-20 09:27:12,807 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 09:27:12 BoogieIcfgContainer [2022-11-20 09:27:12,807 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-20 09:27:12,810 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-20 09:27:12,810 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-20 09:27:12,813 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-20 09:27:12,813 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 09:27:11" (1/3) ... [2022-11-20 09:27:12,814 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@74531ae6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 09:27:12, skipping insertion in model container [2022-11-20 09:27:12,814 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 09:27:12" (2/3) ... [2022-11-20 09:27:12,815 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@74531ae6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 09:27:12, skipping insertion in model container [2022-11-20 09:27:12,815 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 09:27:12" (3/3) ... [2022-11-20 09:27:12,819 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product47.cil.c [2022-11-20 09:27:12,841 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-20 09:27:12,841 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-20 09:27:12,915 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-20 09:27:12,923 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@598bf140, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-20 09:27:12,924 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-20 09:27:12,929 INFO L276 IsEmpty]: Start isEmpty. Operand has 105 states, 78 states have (on average 1.358974358974359) internal successors, (106), 87 states have internal predecessors, (106), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) [2022-11-20 09:27:12,945 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-20 09:27:12,945 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 09:27:12,946 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 09:27:12,947 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 09:27:12,954 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 09:27:12,955 INFO L85 PathProgramCache]: Analyzing trace with hash 1870870440, now seen corresponding path program 1 times [2022-11-20 09:27:12,966 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 09:27:12,966 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [883053952] [2022-11-20 09:27:12,967 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 09:27:12,967 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 09:27:13,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:13,229 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-20 09:27:13,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:13,239 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-20 09:27:13,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:13,246 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 09:27:13,246 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 09:27:13,247 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [883053952] [2022-11-20 09:27:13,248 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [883053952] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 09:27:13,248 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 09:27:13,248 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-20 09:27:13,250 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1413229118] [2022-11-20 09:27:13,251 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 09:27:13,256 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-20 09:27:13,257 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 09:27:13,289 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-20 09:27:13,290 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-20 09:27:13,292 INFO L87 Difference]: Start difference. First operand has 105 states, 78 states have (on average 1.358974358974359) internal successors, (106), 87 states have internal predecessors, (106), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-20 09:27:13,372 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 09:27:13,373 INFO L93 Difference]: Finished difference Result 201 states and 270 transitions. [2022-11-20 09:27:13,374 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-20 09:27:13,375 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-11-20 09:27:13,376 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 09:27:13,388 INFO L225 Difference]: With dead ends: 201 [2022-11-20 09:27:13,388 INFO L226 Difference]: Without dead ends: 96 [2022-11-20 09:27:13,393 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-20 09:27:13,400 INFO L413 NwaCegarLoop]: 132 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 132 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 09:27:13,401 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 132 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 09:27:13,420 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 96 states. [2022-11-20 09:27:13,481 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 96 to 96. [2022-11-20 09:27:13,483 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 96 states, 71 states have (on average 1.295774647887324) internal successors, (92), 79 states have internal predecessors, (92), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 12 states have call predecessors, (15), 15 states have call successors, (15) [2022-11-20 09:27:13,485 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 96 states to 96 states and 123 transitions. [2022-11-20 09:27:13,486 INFO L78 Accepts]: Start accepts. Automaton has 96 states and 123 transitions. Word has length 32 [2022-11-20 09:27:13,487 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 09:27:13,487 INFO L495 AbstractCegarLoop]: Abstraction has 96 states and 123 transitions. [2022-11-20 09:27:13,487 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-20 09:27:13,488 INFO L276 IsEmpty]: Start isEmpty. Operand 96 states and 123 transitions. [2022-11-20 09:27:13,490 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-11-20 09:27:13,490 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 09:27:13,491 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 09:27:13,491 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-20 09:27:13,491 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 09:27:13,492 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 09:27:13,492 INFO L85 PathProgramCache]: Analyzing trace with hash 746670416, now seen corresponding path program 1 times [2022-11-20 09:27:13,492 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 09:27:13,493 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1230577089] [2022-11-20 09:27:13,493 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 09:27:13,493 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 09:27:13,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:13,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-20 09:27:13,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:13,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-11-20 09:27:13,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:13,771 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 09:27:13,774 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 09:27:13,775 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1230577089] [2022-11-20 09:27:13,775 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1230577089] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 09:27:13,775 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 09:27:13,775 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-20 09:27:13,776 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2117190353] [2022-11-20 09:27:13,776 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 09:27:13,777 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-20 09:27:13,778 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 09:27:13,778 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-20 09:27:13,779 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 09:27:13,779 INFO L87 Difference]: Start difference. First operand 96 states and 123 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-20 09:27:13,823 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 09:27:13,824 INFO L93 Difference]: Finished difference Result 271 states and 355 transitions. [2022-11-20 09:27:13,824 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-20 09:27:13,825 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2022-11-20 09:27:13,825 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 09:27:13,827 INFO L225 Difference]: With dead ends: 271 [2022-11-20 09:27:13,827 INFO L226 Difference]: Without dead ends: 183 [2022-11-20 09:27:13,829 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 09:27:13,830 INFO L413 NwaCegarLoop]: 150 mSDtfsCounter, 98 mSDsluCounter, 112 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 98 SdHoareTripleChecker+Valid, 262 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 09:27:13,831 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [98 Valid, 262 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 09:27:13,832 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 183 states. [2022-11-20 09:27:13,856 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 183 to 180. [2022-11-20 09:27:13,856 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 180 states, 131 states have (on average 1.3129770992366412) internal successors, (172), 146 states have internal predecessors, (172), 32 states have call successors, (32), 18 states have call predecessors, (32), 16 states have return successors, (30), 23 states have call predecessors, (30), 30 states have call successors, (30) [2022-11-20 09:27:13,859 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 180 states to 180 states and 234 transitions. [2022-11-20 09:27:13,859 INFO L78 Accepts]: Start accepts. Automaton has 180 states and 234 transitions. Word has length 37 [2022-11-20 09:27:13,859 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 09:27:13,860 INFO L495 AbstractCegarLoop]: Abstraction has 180 states and 234 transitions. [2022-11-20 09:27:13,860 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-20 09:27:13,860 INFO L276 IsEmpty]: Start isEmpty. Operand 180 states and 234 transitions. [2022-11-20 09:27:13,862 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-11-20 09:27:13,862 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 09:27:13,862 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 09:27:13,863 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-20 09:27:13,863 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 09:27:13,863 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 09:27:13,864 INFO L85 PathProgramCache]: Analyzing trace with hash -53536643, now seen corresponding path program 1 times [2022-11-20 09:27:13,864 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 09:27:13,864 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1679607005] [2022-11-20 09:27:13,864 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 09:27:13,865 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 09:27:13,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:13,933 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-20 09:27:13,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:13,941 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-20 09:27:13,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:13,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 09:27:13,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:13,956 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-20 09:27:13,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:13,960 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 09:27:13,960 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 09:27:13,960 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1679607005] [2022-11-20 09:27:13,960 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1679607005] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 09:27:13,961 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 09:27:13,961 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-20 09:27:13,961 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1525337254] [2022-11-20 09:27:13,961 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 09:27:13,962 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-20 09:27:13,962 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 09:27:13,962 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-20 09:27:13,967 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-20 09:27:13,967 INFO L87 Difference]: Start difference. First operand 180 states and 234 transitions. Second operand has 4 states, 4 states have (on average 7.75) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 09:27:14,173 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 09:27:14,173 INFO L93 Difference]: Finished difference Result 322 states and 415 transitions. [2022-11-20 09:27:14,174 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-20 09:27:14,174 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 7.75) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 43 [2022-11-20 09:27:14,174 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 09:27:14,176 INFO L225 Difference]: With dead ends: 322 [2022-11-20 09:27:14,176 INFO L226 Difference]: Without dead ends: 192 [2022-11-20 09:27:14,178 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-20 09:27:14,179 INFO L413 NwaCegarLoop]: 85 mSDtfsCounter, 72 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 67 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 83 SdHoareTripleChecker+Valid, 187 SdHoareTripleChecker+Invalid, 83 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 67 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 09:27:14,180 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [83 Valid, 187 Invalid, 83 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 67 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 09:27:14,182 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 192 states. [2022-11-20 09:27:14,214 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 192 to 162. [2022-11-20 09:27:14,225 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 162 states, 119 states have (on average 1.3277310924369747) internal successors, (158), 134 states have internal predecessors, (158), 26 states have call successors, (26), 16 states have call predecessors, (26), 16 states have return successors, (26), 19 states have call predecessors, (26), 26 states have call successors, (26) [2022-11-20 09:27:14,226 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 162 states to 162 states and 210 transitions. [2022-11-20 09:27:14,227 INFO L78 Accepts]: Start accepts. Automaton has 162 states and 210 transitions. Word has length 43 [2022-11-20 09:27:14,227 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 09:27:14,227 INFO L495 AbstractCegarLoop]: Abstraction has 162 states and 210 transitions. [2022-11-20 09:27:14,228 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 7.75) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 09:27:14,228 INFO L276 IsEmpty]: Start isEmpty. Operand 162 states and 210 transitions. [2022-11-20 09:27:14,229 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-20 09:27:14,229 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 09:27:14,230 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 09:27:14,230 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-20 09:27:14,230 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 09:27:14,231 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 09:27:14,231 INFO L85 PathProgramCache]: Analyzing trace with hash -1079510586, now seen corresponding path program 1 times [2022-11-20 09:27:14,231 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 09:27:14,231 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2033217700] [2022-11-20 09:27:14,232 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 09:27:14,232 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 09:27:14,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:14,412 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-20 09:27:14,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:14,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-11-20 09:27:14,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:14,437 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-20 09:27:14,437 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 09:27:14,437 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2033217700] [2022-11-20 09:27:14,438 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2033217700] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 09:27:14,439 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 09:27:14,439 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-20 09:27:14,440 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1720439369] [2022-11-20 09:27:14,440 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 09:27:14,441 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-20 09:27:14,442 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 09:27:14,443 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-20 09:27:14,443 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-20 09:27:14,443 INFO L87 Difference]: Start difference. First operand 162 states and 210 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-20 09:27:14,626 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 09:27:14,627 INFO L93 Difference]: Finished difference Result 428 states and 563 transitions. [2022-11-20 09:27:14,627 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-20 09:27:14,627 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2022-11-20 09:27:14,628 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 09:27:14,634 INFO L225 Difference]: With dead ends: 428 [2022-11-20 09:27:14,635 INFO L226 Difference]: Without dead ends: 274 [2022-11-20 09:27:14,636 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-11-20 09:27:14,647 INFO L413 NwaCegarLoop]: 121 mSDtfsCounter, 59 mSDsluCounter, 393 mSDsCounter, 0 mSdLazyCounter, 70 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 514 SdHoareTripleChecker+Invalid, 80 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 70 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 09:27:14,648 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [60 Valid, 514 Invalid, 80 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 70 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 09:27:14,651 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 274 states. [2022-11-20 09:27:14,747 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 274 to 261. [2022-11-20 09:27:14,748 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 261 states, 194 states have (on average 1.2783505154639174) internal successors, (248), 211 states have internal predecessors, (248), 36 states have call successors, (36), 30 states have call predecessors, (36), 30 states have return successors, (44), 33 states have call predecessors, (44), 36 states have call successors, (44) [2022-11-20 09:27:14,750 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 261 states to 261 states and 328 transitions. [2022-11-20 09:27:14,761 INFO L78 Accepts]: Start accepts. Automaton has 261 states and 328 transitions. Word has length 41 [2022-11-20 09:27:14,761 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 09:27:14,762 INFO L495 AbstractCegarLoop]: Abstraction has 261 states and 328 transitions. [2022-11-20 09:27:14,762 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-20 09:27:14,762 INFO L276 IsEmpty]: Start isEmpty. Operand 261 states and 328 transitions. [2022-11-20 09:27:14,764 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-11-20 09:27:14,764 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 09:27:14,765 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 09:27:14,765 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-20 09:27:14,765 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 09:27:14,766 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 09:27:14,766 INFO L85 PathProgramCache]: Analyzing trace with hash -298139813, now seen corresponding path program 1 times [2022-11-20 09:27:14,767 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 09:27:14,767 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1257625972] [2022-11-20 09:27:14,767 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 09:27:14,767 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 09:27:14,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:14,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-20 09:27:14,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:14,869 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-20 09:27:14,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:14,933 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 09:27:14,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:14,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-11-20 09:27:14,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:14,949 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 09:27:14,949 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 09:27:14,949 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1257625972] [2022-11-20 09:27:14,950 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1257625972] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 09:27:14,950 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 09:27:14,950 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-20 09:27:14,950 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1107788941] [2022-11-20 09:27:14,950 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 09:27:14,951 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-20 09:27:14,951 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 09:27:14,952 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-20 09:27:14,952 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-20 09:27:14,952 INFO L87 Difference]: Start difference. First operand 261 states and 328 transitions. Second operand has 6 states, 6 states have (on average 8.0) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 09:27:15,210 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 09:27:15,210 INFO L93 Difference]: Finished difference Result 578 states and 747 transitions. [2022-11-20 09:27:15,210 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-20 09:27:15,211 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 59 [2022-11-20 09:27:15,212 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 09:27:15,216 INFO L225 Difference]: With dead ends: 578 [2022-11-20 09:27:15,217 INFO L226 Difference]: Without dead ends: 325 [2022-11-20 09:27:15,218 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-20 09:27:15,224 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 71 mSDsluCounter, 297 mSDsCounter, 0 mSdLazyCounter, 140 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 386 SdHoareTripleChecker+Invalid, 165 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 140 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 09:27:15,224 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [76 Valid, 386 Invalid, 165 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 140 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 09:27:15,226 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325 states. [2022-11-20 09:27:15,270 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325 to 313. [2022-11-20 09:27:15,271 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 313 states, 236 states have (on average 1.2627118644067796) internal successors, (298), 253 states have internal predecessors, (298), 40 states have call successors, (40), 30 states have call predecessors, (40), 36 states have return successors, (54), 41 states have call predecessors, (54), 40 states have call successors, (54) [2022-11-20 09:27:15,275 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 313 states to 313 states and 392 transitions. [2022-11-20 09:27:15,275 INFO L78 Accepts]: Start accepts. Automaton has 313 states and 392 transitions. Word has length 59 [2022-11-20 09:27:15,276 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 09:27:15,276 INFO L495 AbstractCegarLoop]: Abstraction has 313 states and 392 transitions. [2022-11-20 09:27:15,276 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 09:27:15,276 INFO L276 IsEmpty]: Start isEmpty. Operand 313 states and 392 transitions. [2022-11-20 09:27:15,278 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-11-20 09:27:15,278 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 09:27:15,279 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 09:27:15,279 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-20 09:27:15,279 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 09:27:15,280 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 09:27:15,280 INFO L85 PathProgramCache]: Analyzing trace with hash 1625088221, now seen corresponding path program 1 times [2022-11-20 09:27:15,281 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 09:27:15,281 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [213779070] [2022-11-20 09:27:15,281 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 09:27:15,281 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 09:27:15,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:15,422 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-20 09:27:15,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:15,433 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-20 09:27:15,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:15,519 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 09:27:15,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:15,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-11-20 09:27:15,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:15,527 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 09:27:15,527 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 09:27:15,527 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [213779070] [2022-11-20 09:27:15,528 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [213779070] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 09:27:15,528 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 09:27:15,528 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-20 09:27:15,528 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1289454721] [2022-11-20 09:27:15,529 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 09:27:15,531 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-20 09:27:15,531 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 09:27:15,532 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-20 09:27:15,532 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-20 09:27:15,532 INFO L87 Difference]: Start difference. First operand 313 states and 392 transitions. Second operand has 6 states, 6 states have (on average 8.0) internal successors, (48), 5 states have internal predecessors, (48), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-20 09:27:15,938 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 09:27:15,938 INFO L93 Difference]: Finished difference Result 648 states and 829 transitions. [2022-11-20 09:27:15,938 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-20 09:27:15,939 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 5 states have internal predecessors, (48), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 59 [2022-11-20 09:27:15,939 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 09:27:15,941 INFO L225 Difference]: With dead ends: 648 [2022-11-20 09:27:15,941 INFO L226 Difference]: Without dead ends: 343 [2022-11-20 09:27:15,942 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 17 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=54, Invalid=102, Unknown=0, NotChecked=0, Total=156 [2022-11-20 09:27:15,943 INFO L413 NwaCegarLoop]: 103 mSDtfsCounter, 241 mSDsluCounter, 310 mSDsCounter, 0 mSdLazyCounter, 198 mSolverCounterSat, 76 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 251 SdHoareTripleChecker+Valid, 413 SdHoareTripleChecker+Invalid, 274 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 76 IncrementalHoareTripleChecker+Valid, 198 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-20 09:27:15,943 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [251 Valid, 413 Invalid, 274 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [76 Valid, 198 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-20 09:27:15,944 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2022-11-20 09:27:15,967 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 317. [2022-11-20 09:27:15,968 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 317 states, 240 states have (on average 1.2583333333333333) internal successors, (302), 257 states have internal predecessors, (302), 40 states have call successors, (40), 30 states have call predecessors, (40), 36 states have return successors, (54), 41 states have call predecessors, (54), 40 states have call successors, (54) [2022-11-20 09:27:15,969 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 317 states to 317 states and 396 transitions. [2022-11-20 09:27:15,970 INFO L78 Accepts]: Start accepts. Automaton has 317 states and 396 transitions. Word has length 59 [2022-11-20 09:27:15,970 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 09:27:15,970 INFO L495 AbstractCegarLoop]: Abstraction has 317 states and 396 transitions. [2022-11-20 09:27:15,970 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 5 states have internal predecessors, (48), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-20 09:27:15,971 INFO L276 IsEmpty]: Start isEmpty. Operand 317 states and 396 transitions. [2022-11-20 09:27:15,971 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-11-20 09:27:15,972 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 09:27:15,972 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 09:27:15,972 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-20 09:27:15,972 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 09:27:15,973 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 09:27:15,973 INFO L85 PathProgramCache]: Analyzing trace with hash -1283675681, now seen corresponding path program 1 times [2022-11-20 09:27:15,973 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 09:27:15,973 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [844939833] [2022-11-20 09:27:15,973 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 09:27:15,973 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 09:27:15,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:16,037 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-20 09:27:16,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:16,044 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-20 09:27:16,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:16,071 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 09:27:16,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:16,075 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-11-20 09:27:16,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:16,078 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 09:27:16,078 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 09:27:16,078 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [844939833] [2022-11-20 09:27:16,079 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [844939833] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 09:27:16,079 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 09:27:16,079 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-20 09:27:16,079 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2120950000] [2022-11-20 09:27:16,079 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 09:27:16,080 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-20 09:27:16,080 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 09:27:16,080 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-20 09:27:16,080 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-20 09:27:16,081 INFO L87 Difference]: Start difference. First operand 317 states and 396 transitions. Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-20 09:27:16,391 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 09:27:16,391 INFO L93 Difference]: Finished difference Result 898 states and 1165 transitions. [2022-11-20 09:27:16,392 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-20 09:27:16,392 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 59 [2022-11-20 09:27:16,392 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 09:27:16,396 INFO L225 Difference]: With dead ends: 898 [2022-11-20 09:27:16,396 INFO L226 Difference]: Without dead ends: 589 [2022-11-20 09:27:16,397 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-20 09:27:16,398 INFO L413 NwaCegarLoop]: 141 mSDtfsCounter, 235 mSDsluCounter, 186 mSDsCounter, 0 mSdLazyCounter, 176 mSolverCounterSat, 70 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 243 SdHoareTripleChecker+Valid, 327 SdHoareTripleChecker+Invalid, 246 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 70 IncrementalHoareTripleChecker+Valid, 176 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 09:27:16,398 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [243 Valid, 327 Invalid, 246 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [70 Valid, 176 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 09:27:16,400 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 589 states. [2022-11-20 09:27:16,443 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 589 to 582. [2022-11-20 09:27:16,444 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 582 states, 439 states have (on average 1.2300683371298406) internal successors, (540), 465 states have internal predecessors, (540), 77 states have call successors, (77), 63 states have call predecessors, (77), 65 states have return successors, (115), 76 states have call predecessors, (115), 77 states have call successors, (115) [2022-11-20 09:27:16,448 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 582 states to 582 states and 732 transitions. [2022-11-20 09:27:16,448 INFO L78 Accepts]: Start accepts. Automaton has 582 states and 732 transitions. Word has length 59 [2022-11-20 09:27:16,448 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 09:27:16,448 INFO L495 AbstractCegarLoop]: Abstraction has 582 states and 732 transitions. [2022-11-20 09:27:16,449 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-20 09:27:16,449 INFO L276 IsEmpty]: Start isEmpty. Operand 582 states and 732 transitions. [2022-11-20 09:27:16,450 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-11-20 09:27:16,450 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 09:27:16,450 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 09:27:16,451 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-20 09:27:16,451 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 09:27:16,451 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 09:27:16,451 INFO L85 PathProgramCache]: Analyzing trace with hash -1565994427, now seen corresponding path program 1 times [2022-11-20 09:27:16,452 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 09:27:16,452 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1196913246] [2022-11-20 09:27:16,452 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 09:27:16,452 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 09:27:16,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:16,607 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 09:27:16,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:16,657 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-20 09:27:16,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:16,669 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-11-20 09:27:16,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:16,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 09:27:16,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:16,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-11-20 09:27:16,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:16,698 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 09:27:16,699 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 09:27:16,699 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1196913246] [2022-11-20 09:27:16,699 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1196913246] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 09:27:16,699 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 09:27:16,699 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-20 09:27:16,700 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1126457126] [2022-11-20 09:27:16,700 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 09:27:16,700 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-20 09:27:16,700 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 09:27:16,701 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-20 09:27:16,701 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-11-20 09:27:16,701 INFO L87 Difference]: Start difference. First operand 582 states and 732 transitions. Second operand has 10 states, 10 states have (on average 5.0) internal successors, (50), 8 states have internal predecessors, (50), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-20 09:27:18,086 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 09:27:18,086 INFO L93 Difference]: Finished difference Result 1865 states and 2460 transitions. [2022-11-20 09:27:18,087 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-11-20 09:27:18,087 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.0) internal successors, (50), 8 states have internal predecessors, (50), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 63 [2022-11-20 09:27:18,088 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 09:27:18,095 INFO L225 Difference]: With dead ends: 1865 [2022-11-20 09:27:18,095 INFO L226 Difference]: Without dead ends: 1394 [2022-11-20 09:27:18,098 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 296 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=221, Invalid=969, Unknown=0, NotChecked=0, Total=1190 [2022-11-20 09:27:18,098 INFO L413 NwaCegarLoop]: 128 mSDtfsCounter, 609 mSDsluCounter, 698 mSDsCounter, 0 mSdLazyCounter, 979 mSolverCounterSat, 211 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 620 SdHoareTripleChecker+Valid, 826 SdHoareTripleChecker+Invalid, 1190 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 211 IncrementalHoareTripleChecker+Valid, 979 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-20 09:27:18,099 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [620 Valid, 826 Invalid, 1190 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [211 Valid, 979 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-11-20 09:27:18,101 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1394 states. [2022-11-20 09:27:18,215 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1394 to 1135. [2022-11-20 09:27:18,217 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1135 states, 854 states have (on average 1.2271662763466042) internal successors, (1048), 911 states have internal predecessors, (1048), 152 states have call successors, (152), 112 states have call predecessors, (152), 128 states have return successors, (230), 150 states have call predecessors, (230), 152 states have call successors, (230) [2022-11-20 09:27:18,223 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1135 states to 1135 states and 1430 transitions. [2022-11-20 09:27:18,224 INFO L78 Accepts]: Start accepts. Automaton has 1135 states and 1430 transitions. Word has length 63 [2022-11-20 09:27:18,225 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 09:27:18,225 INFO L495 AbstractCegarLoop]: Abstraction has 1135 states and 1430 transitions. [2022-11-20 09:27:18,225 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.0) internal successors, (50), 8 states have internal predecessors, (50), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-20 09:27:18,225 INFO L276 IsEmpty]: Start isEmpty. Operand 1135 states and 1430 transitions. [2022-11-20 09:27:18,228 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2022-11-20 09:27:18,228 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 09:27:18,228 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 09:27:18,229 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-20 09:27:18,229 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 09:27:18,229 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 09:27:18,229 INFO L85 PathProgramCache]: Analyzing trace with hash -1171557300, now seen corresponding path program 1 times [2022-11-20 09:27:18,229 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 09:27:18,230 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [292961445] [2022-11-20 09:27:18,230 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 09:27:18,230 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 09:27:18,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:18,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 09:27:18,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:18,313 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-20 09:27:18,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:18,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 09:27:18,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:18,341 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-20 09:27:18,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:18,349 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 09:27:18,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:18,352 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 72 [2022-11-20 09:27:18,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:18,355 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 85 [2022-11-20 09:27:18,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:18,358 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-20 09:27:18,358 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 09:27:18,358 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [292961445] [2022-11-20 09:27:18,358 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [292961445] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 09:27:18,359 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 09:27:18,359 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-20 09:27:18,359 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [452208866] [2022-11-20 09:27:18,359 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 09:27:18,360 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-20 09:27:18,360 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 09:27:18,360 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-20 09:27:18,360 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-20 09:27:18,361 INFO L87 Difference]: Start difference. First operand 1135 states and 1430 transitions. Second operand has 7 states, 7 states have (on average 10.571428571428571) internal successors, (74), 4 states have internal predecessors, (74), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2022-11-20 09:27:18,779 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 09:27:18,779 INFO L93 Difference]: Finished difference Result 1371 states and 1719 transitions. [2022-11-20 09:27:18,779 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-20 09:27:18,780 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 10.571428571428571) internal successors, (74), 4 states have internal predecessors, (74), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 93 [2022-11-20 09:27:18,781 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 09:27:18,784 INFO L225 Difference]: With dead ends: 1371 [2022-11-20 09:27:18,784 INFO L226 Difference]: Without dead ends: 582 [2022-11-20 09:27:18,787 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2022-11-20 09:27:18,789 INFO L413 NwaCegarLoop]: 109 mSDtfsCounter, 303 mSDsluCounter, 219 mSDsCounter, 0 mSdLazyCounter, 260 mSolverCounterSat, 97 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 312 SdHoareTripleChecker+Valid, 328 SdHoareTripleChecker+Invalid, 357 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 97 IncrementalHoareTripleChecker+Valid, 260 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 09:27:18,789 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [312 Valid, 328 Invalid, 357 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [97 Valid, 260 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 09:27:18,791 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 582 states. [2022-11-20 09:27:18,850 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 582 to 556. [2022-11-20 09:27:18,853 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 556 states, 419 states have (on average 1.1933174224343674) internal successors, (500), 445 states have internal predecessors, (500), 73 states have call successors, (73), 55 states have call predecessors, (73), 63 states have return successors, (112), 73 states have call predecessors, (112), 73 states have call successors, (112) [2022-11-20 09:27:18,857 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 556 states to 556 states and 685 transitions. [2022-11-20 09:27:18,858 INFO L78 Accepts]: Start accepts. Automaton has 556 states and 685 transitions. Word has length 93 [2022-11-20 09:27:18,858 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 09:27:18,858 INFO L495 AbstractCegarLoop]: Abstraction has 556 states and 685 transitions. [2022-11-20 09:27:18,858 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 10.571428571428571) internal successors, (74), 4 states have internal predecessors, (74), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2022-11-20 09:27:18,859 INFO L276 IsEmpty]: Start isEmpty. Operand 556 states and 685 transitions. [2022-11-20 09:27:18,867 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2022-11-20 09:27:18,867 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 09:27:18,869 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 09:27:18,869 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-20 09:27:18,871 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 09:27:18,871 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 09:27:18,872 INFO L85 PathProgramCache]: Analyzing trace with hash 1917161194, now seen corresponding path program 1 times [2022-11-20 09:27:18,872 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 09:27:18,872 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [521553364] [2022-11-20 09:27:18,872 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 09:27:18,872 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 09:27:18,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:19,029 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 09:27:19,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:19,044 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-20 09:27:19,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:19,070 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 09:27:19,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:19,080 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-20 09:27:19,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:19,094 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 09:27:19,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:19,097 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-11-20 09:27:19,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:19,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2022-11-20 09:27:19,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:19,116 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-11-20 09:27:19,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:19,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 09:27:19,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:19,121 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-11-20 09:27:19,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:19,125 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 8 proven. 18 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-20 09:27:19,125 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 09:27:19,125 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [521553364] [2022-11-20 09:27:19,126 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [521553364] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 09:27:19,126 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1846412593] [2022-11-20 09:27:19,126 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 09:27:19,126 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 09:27:19,126 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 09:27:19,130 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 09:27:19,140 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-20 09:27:19,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:19,261 INFO L263 TraceCheckSpWp]: Trace formula consists of 357 conjuncts, 8 conjunts are in the unsatisfiable core [2022-11-20 09:27:19,273 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 09:27:19,573 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 28 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 09:27:19,573 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 09:27:19,889 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 18 proven. 8 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-20 09:27:19,889 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1846412593] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 09:27:19,889 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 09:27:19,890 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2022-11-20 09:27:19,890 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2018267674] [2022-11-20 09:27:19,890 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 09:27:19,891 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-11-20 09:27:19,891 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 09:27:19,892 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-11-20 09:27:19,892 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2022-11-20 09:27:19,893 INFO L87 Difference]: Start difference. First operand 556 states and 685 transitions. Second operand has 15 states, 15 states have (on average 9.066666666666666) internal successors, (136), 10 states have internal predecessors, (136), 6 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (21), 8 states have call predecessors, (21), 6 states have call successors, (21) [2022-11-20 09:27:21,414 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 09:27:21,414 INFO L93 Difference]: Finished difference Result 1201 states and 1516 transitions. [2022-11-20 09:27:21,415 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-11-20 09:27:21,415 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 9.066666666666666) internal successors, (136), 10 states have internal predecessors, (136), 6 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (21), 8 states have call predecessors, (21), 6 states have call successors, (21) Word has length 106 [2022-11-20 09:27:21,416 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 09:27:21,420 INFO L225 Difference]: With dead ends: 1201 [2022-11-20 09:27:21,420 INFO L226 Difference]: Without dead ends: 701 [2022-11-20 09:27:21,423 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 283 GetRequests, 237 SyntacticMatches, 4 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 463 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=441, Invalid=1451, Unknown=0, NotChecked=0, Total=1892 [2022-11-20 09:27:21,424 INFO L413 NwaCegarLoop]: 165 mSDtfsCounter, 380 mSDsluCounter, 999 mSDsCounter, 0 mSdLazyCounter, 1068 mSolverCounterSat, 181 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 384 SdHoareTripleChecker+Valid, 1164 SdHoareTripleChecker+Invalid, 1249 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 181 IncrementalHoareTripleChecker+Valid, 1068 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-20 09:27:21,424 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [384 Valid, 1164 Invalid, 1249 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [181 Valid, 1068 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-11-20 09:27:21,425 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 701 states. [2022-11-20 09:27:21,500 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 701 to 617. [2022-11-20 09:27:21,501 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 617 states, 459 states have (on average 1.1764705882352942) internal successors, (540), 493 states have internal predecessors, (540), 83 states have call successors, (83), 69 states have call predecessors, (83), 74 states have return successors, (108), 78 states have call predecessors, (108), 83 states have call successors, (108) [2022-11-20 09:27:21,505 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 617 states to 617 states and 731 transitions. [2022-11-20 09:27:21,505 INFO L78 Accepts]: Start accepts. Automaton has 617 states and 731 transitions. Word has length 106 [2022-11-20 09:27:21,506 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 09:27:21,506 INFO L495 AbstractCegarLoop]: Abstraction has 617 states and 731 transitions. [2022-11-20 09:27:21,507 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 9.066666666666666) internal successors, (136), 10 states have internal predecessors, (136), 6 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (21), 8 states have call predecessors, (21), 6 states have call successors, (21) [2022-11-20 09:27:21,507 INFO L276 IsEmpty]: Start isEmpty. Operand 617 states and 731 transitions. [2022-11-20 09:27:21,510 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 196 [2022-11-20 09:27:21,511 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 09:27:21,511 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 09:27:21,518 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-20 09:27:21,717 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-20 09:27:21,718 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 09:27:21,718 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 09:27:21,719 INFO L85 PathProgramCache]: Analyzing trace with hash 670646930, now seen corresponding path program 1 times [2022-11-20 09:27:21,719 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 09:27:21,719 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1413250250] [2022-11-20 09:27:21,719 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 09:27:21,719 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 09:27:21,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:21,872 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 09:27:21,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:21,882 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-20 09:27:21,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:21,893 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 09:27:21,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:21,899 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-20 09:27:21,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:21,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 09:27:21,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:21,907 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2022-11-20 09:27:21,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:21,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 09:27:21,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:21,956 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 09:27:21,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:21,976 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 09:27:21,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:21,979 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 09:27:21,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:21,981 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 109 [2022-11-20 09:27:21,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:22,028 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 09:27:22,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:22,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 09:27:22,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:22,037 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 09:27:22,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:22,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 144 [2022-11-20 09:27:22,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:22,042 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 154 [2022-11-20 09:27:22,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:22,044 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 163 [2022-11-20 09:27:22,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:22,050 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 09:27:22,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:22,053 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 187 [2022-11-20 09:27:22,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:22,055 INFO L134 CoverageAnalysis]: Checked inductivity of 216 backedges. 84 proven. 13 refuted. 0 times theorem prover too weak. 119 trivial. 0 not checked. [2022-11-20 09:27:22,055 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 09:27:22,055 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1413250250] [2022-11-20 09:27:22,055 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1413250250] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 09:27:22,056 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [19972439] [2022-11-20 09:27:22,056 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 09:27:22,056 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 09:27:22,056 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 09:27:22,057 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 09:27:22,061 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-20 09:27:22,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:22,196 INFO L263 TraceCheckSpWp]: Trace formula consists of 588 conjuncts, 13 conjunts are in the unsatisfiable core [2022-11-20 09:27:22,201 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 09:27:22,471 INFO L134 CoverageAnalysis]: Checked inductivity of 216 backedges. 158 proven. 4 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2022-11-20 09:27:22,471 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 09:27:23,111 INFO L134 CoverageAnalysis]: Checked inductivity of 216 backedges. 78 proven. 42 refuted. 0 times theorem prover too weak. 96 trivial. 0 not checked. [2022-11-20 09:27:23,111 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [19972439] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 09:27:23,111 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 09:27:23,111 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 10, 11] total 28 [2022-11-20 09:27:23,112 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [197366100] [2022-11-20 09:27:23,112 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 09:27:23,113 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-11-20 09:27:23,114 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 09:27:23,114 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-11-20 09:27:23,115 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=124, Invalid=632, Unknown=0, NotChecked=0, Total=756 [2022-11-20 09:27:23,115 INFO L87 Difference]: Start difference. First operand 617 states and 731 transitions. Second operand has 28 states, 28 states have (on average 7.535714285714286) internal successors, (211), 22 states have internal predecessors, (211), 10 states have call successors, (37), 8 states have call predecessors, (37), 11 states have return successors, (41), 11 states have call predecessors, (41), 10 states have call successors, (41) [2022-11-20 09:27:25,717 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 09:27:25,718 INFO L93 Difference]: Finished difference Result 1768 states and 2177 transitions. [2022-11-20 09:27:25,718 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 51 states. [2022-11-20 09:27:25,719 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 28 states have (on average 7.535714285714286) internal successors, (211), 22 states have internal predecessors, (211), 10 states have call successors, (37), 8 states have call predecessors, (37), 11 states have return successors, (41), 11 states have call predecessors, (41), 10 states have call successors, (41) Word has length 195 [2022-11-20 09:27:25,719 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 09:27:25,724 INFO L225 Difference]: With dead ends: 1768 [2022-11-20 09:27:25,724 INFO L226 Difference]: Without dead ends: 1159 [2022-11-20 09:27:25,728 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 503 GetRequests, 424 SyntacticMatches, 4 SemanticMatches, 75 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1513 ImplicationChecksByTransitivity, 1.3s TimeCoverageRelationStatistics Valid=1066, Invalid=4786, Unknown=0, NotChecked=0, Total=5852 [2022-11-20 09:27:25,729 INFO L413 NwaCegarLoop]: 128 mSDtfsCounter, 1854 mSDsluCounter, 928 mSDsCounter, 0 mSdLazyCounter, 1954 mSolverCounterSat, 719 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1854 SdHoareTripleChecker+Valid, 1056 SdHoareTripleChecker+Invalid, 2673 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 719 IncrementalHoareTripleChecker+Valid, 1954 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-11-20 09:27:25,729 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1854 Valid, 1056 Invalid, 2673 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [719 Valid, 1954 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2022-11-20 09:27:25,731 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1159 states. [2022-11-20 09:27:25,834 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1159 to 1087. [2022-11-20 09:27:25,837 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1087 states, 818 states have (on average 1.117359413202934) internal successors, (914), 864 states have internal predecessors, (914), 145 states have call successors, (145), 125 states have call predecessors, (145), 123 states have return successors, (168), 130 states have call predecessors, (168), 145 states have call successors, (168) [2022-11-20 09:27:25,843 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1087 states to 1087 states and 1227 transitions. [2022-11-20 09:27:25,844 INFO L78 Accepts]: Start accepts. Automaton has 1087 states and 1227 transitions. Word has length 195 [2022-11-20 09:27:25,844 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 09:27:25,845 INFO L495 AbstractCegarLoop]: Abstraction has 1087 states and 1227 transitions. [2022-11-20 09:27:25,845 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 28 states have (on average 7.535714285714286) internal successors, (211), 22 states have internal predecessors, (211), 10 states have call successors, (37), 8 states have call predecessors, (37), 11 states have return successors, (41), 11 states have call predecessors, (41), 10 states have call successors, (41) [2022-11-20 09:27:25,845 INFO L276 IsEmpty]: Start isEmpty. Operand 1087 states and 1227 transitions. [2022-11-20 09:27:25,850 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 212 [2022-11-20 09:27:25,850 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 09:27:25,850 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 09:27:25,858 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-20 09:27:26,057 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-20 09:27:26,057 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 09:27:26,058 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 09:27:26,058 INFO L85 PathProgramCache]: Analyzing trace with hash 2132410704, now seen corresponding path program 1 times [2022-11-20 09:27:26,058 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 09:27:26,058 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1060770787] [2022-11-20 09:27:26,058 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 09:27:26,058 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 09:27:26,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:26,242 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 09:27:26,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:26,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-20 09:27:26,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:26,299 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 09:27:26,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:26,306 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-20 09:27:26,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:26,322 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 09:27:26,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:26,326 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2022-11-20 09:27:26,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:26,375 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 09:27:26,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:26,377 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 09:27:26,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:26,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 09:27:26,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:26,387 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 09:27:26,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:26,390 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-11-20 09:27:26,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:26,412 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2022-11-20 09:27:26,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:26,414 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2022-11-20 09:27:26,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:26,423 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 09:27:26,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:26,426 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 09:27:26,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:26,428 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 09:27:26,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:26,430 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-20 09:27:26,431 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:26,432 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 160 [2022-11-20 09:27:26,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:26,435 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2022-11-20 09:27:26,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:26,437 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 179 [2022-11-20 09:27:26,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:26,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 09:27:26,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:26,446 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 203 [2022-11-20 09:27:26,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:26,449 INFO L134 CoverageAnalysis]: Checked inductivity of 258 backedges. 86 proven. 53 refuted. 0 times theorem prover too weak. 119 trivial. 0 not checked. [2022-11-20 09:27:26,450 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 09:27:26,450 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1060770787] [2022-11-20 09:27:26,450 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1060770787] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 09:27:26,450 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [849752784] [2022-11-20 09:27:26,450 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 09:27:26,451 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 09:27:26,451 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 09:27:26,452 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 09:27:26,480 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-20 09:27:26,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:26,605 INFO L263 TraceCheckSpWp]: Trace formula consists of 630 conjuncts, 10 conjunts are in the unsatisfiable core [2022-11-20 09:27:26,610 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 09:27:26,810 INFO L134 CoverageAnalysis]: Checked inductivity of 258 backedges. 195 proven. 9 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2022-11-20 09:27:26,811 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 09:27:27,318 INFO L134 CoverageAnalysis]: Checked inductivity of 258 backedges. 99 proven. 54 refuted. 0 times theorem prover too weak. 105 trivial. 0 not checked. [2022-11-20 09:27:27,318 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [849752784] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 09:27:27,318 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 09:27:27,319 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 8, 8] total 22 [2022-11-20 09:27:27,319 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1318144847] [2022-11-20 09:27:27,319 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 09:27:27,320 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-11-20 09:27:27,320 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 09:27:27,321 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-11-20 09:27:27,321 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=394, Unknown=0, NotChecked=0, Total=462 [2022-11-20 09:27:27,322 INFO L87 Difference]: Start difference. First operand 1087 states and 1227 transitions. Second operand has 22 states, 22 states have (on average 10.363636363636363) internal successors, (228), 15 states have internal predecessors, (228), 7 states have call successors, (48), 8 states have call predecessors, (48), 11 states have return successors, (42), 10 states have call predecessors, (42), 7 states have call successors, (42) [2022-11-20 09:27:29,265 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 09:27:29,265 INFO L93 Difference]: Finished difference Result 2124 states and 2428 transitions. [2022-11-20 09:27:29,266 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-11-20 09:27:29,266 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 10.363636363636363) internal successors, (228), 15 states have internal predecessors, (228), 7 states have call successors, (48), 8 states have call predecessors, (48), 11 states have return successors, (42), 10 states have call predecessors, (42), 7 states have call successors, (42) Word has length 211 [2022-11-20 09:27:29,267 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 09:27:29,272 INFO L225 Difference]: With dead ends: 2124 [2022-11-20 09:27:29,272 INFO L226 Difference]: Without dead ends: 1141 [2022-11-20 09:27:29,277 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 516 GetRequests, 468 SyntacticMatches, 1 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 444 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=483, Invalid=1869, Unknown=0, NotChecked=0, Total=2352 [2022-11-20 09:27:29,278 INFO L413 NwaCegarLoop]: 43 mSDtfsCounter, 648 mSDsluCounter, 333 mSDsCounter, 0 mSdLazyCounter, 1558 mSolverCounterSat, 233 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 652 SdHoareTripleChecker+Valid, 376 SdHoareTripleChecker+Invalid, 1791 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 233 IncrementalHoareTripleChecker+Valid, 1558 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-20 09:27:29,278 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [652 Valid, 376 Invalid, 1791 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [233 Valid, 1558 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-11-20 09:27:29,280 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1141 states. [2022-11-20 09:27:29,403 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1141 to 1085. [2022-11-20 09:27:29,405 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1085 states, 818 states have (on average 1.10880195599022) internal successors, (907), 862 states have internal predecessors, (907), 139 states have call successors, (139), 127 states have call predecessors, (139), 127 states have return successors, (162), 128 states have call predecessors, (162), 139 states have call successors, (162) [2022-11-20 09:27:29,410 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1085 states to 1085 states and 1208 transitions. [2022-11-20 09:27:29,410 INFO L78 Accepts]: Start accepts. Automaton has 1085 states and 1208 transitions. Word has length 211 [2022-11-20 09:27:29,411 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 09:27:29,411 INFO L495 AbstractCegarLoop]: Abstraction has 1085 states and 1208 transitions. [2022-11-20 09:27:29,411 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 10.363636363636363) internal successors, (228), 15 states have internal predecessors, (228), 7 states have call successors, (48), 8 states have call predecessors, (48), 11 states have return successors, (42), 10 states have call predecessors, (42), 7 states have call successors, (42) [2022-11-20 09:27:29,411 INFO L276 IsEmpty]: Start isEmpty. Operand 1085 states and 1208 transitions. [2022-11-20 09:27:29,416 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 213 [2022-11-20 09:27:29,416 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 09:27:29,416 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 09:27:29,428 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-20 09:27:29,623 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-20 09:27:29,623 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 09:27:29,624 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 09:27:29,624 INFO L85 PathProgramCache]: Analyzing trace with hash 1954980905, now seen corresponding path program 1 times [2022-11-20 09:27:29,624 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 09:27:29,624 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1069258439] [2022-11-20 09:27:29,624 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 09:27:29,624 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 09:27:29,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:29,794 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 09:27:29,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:29,807 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-20 09:27:29,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:29,814 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 09:27:29,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:29,821 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-20 09:27:29,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:29,826 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 09:27:29,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:29,828 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2022-11-20 09:27:29,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:29,836 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 09:27:29,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:29,838 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 09:27:29,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:29,844 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 09:27:29,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:29,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 09:27:29,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:29,849 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-11-20 09:27:29,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:29,858 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2022-11-20 09:27:29,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:29,869 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 120 [2022-11-20 09:27:29,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:29,880 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 09:27:29,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:29,882 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 09:27:29,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:29,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 09:27:29,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:29,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-20 09:27:29,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:29,890 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2022-11-20 09:27:29,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:29,896 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 171 [2022-11-20 09:27:29,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:29,899 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 180 [2022-11-20 09:27:29,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:29,951 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 09:27:29,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:29,979 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 204 [2022-11-20 09:27:29,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:29,981 INFO L134 CoverageAnalysis]: Checked inductivity of 259 backedges. 73 proven. 31 refuted. 0 times theorem prover too weak. 155 trivial. 0 not checked. [2022-11-20 09:27:29,982 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 09:27:29,982 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1069258439] [2022-11-20 09:27:29,982 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1069258439] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 09:27:29,982 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [20882726] [2022-11-20 09:27:29,982 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 09:27:29,983 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 09:27:29,983 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 09:27:29,984 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 09:27:30,006 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-20 09:27:30,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:30,129 INFO L263 TraceCheckSpWp]: Trace formula consists of 630 conjuncts, 18 conjunts are in the unsatisfiable core [2022-11-20 09:27:30,134 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 09:27:30,460 INFO L134 CoverageAnalysis]: Checked inductivity of 259 backedges. 138 proven. 26 refuted. 0 times theorem prover too weak. 95 trivial. 0 not checked. [2022-11-20 09:27:30,460 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 09:27:31,332 INFO L134 CoverageAnalysis]: Checked inductivity of 259 backedges. 99 proven. 45 refuted. 0 times theorem prover too weak. 115 trivial. 0 not checked. [2022-11-20 09:27:31,337 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [20882726] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 09:27:31,337 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 09:27:31,337 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 8, 13] total 28 [2022-11-20 09:27:31,338 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1890907109] [2022-11-20 09:27:31,338 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 09:27:31,339 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-11-20 09:27:31,339 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 09:27:31,339 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-11-20 09:27:31,340 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=116, Invalid=640, Unknown=0, NotChecked=0, Total=756 [2022-11-20 09:27:31,340 INFO L87 Difference]: Start difference. First operand 1085 states and 1208 transitions. Second operand has 28 states, 28 states have (on average 9.285714285714286) internal successors, (260), 22 states have internal predecessors, (260), 14 states have call successors, (51), 12 states have call predecessors, (51), 15 states have return successors, (52), 15 states have call predecessors, (52), 14 states have call successors, (52) [2022-11-20 09:27:35,867 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 09:27:35,868 INFO L93 Difference]: Finished difference Result 2390 states and 2704 transitions. [2022-11-20 09:27:35,870 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 64 states. [2022-11-20 09:27:35,871 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 28 states have (on average 9.285714285714286) internal successors, (260), 22 states have internal predecessors, (260), 14 states have call successors, (51), 12 states have call predecessors, (51), 15 states have return successors, (52), 15 states have call predecessors, (52), 14 states have call successors, (52) Word has length 212 [2022-11-20 09:27:35,871 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 09:27:35,878 INFO L225 Difference]: With dead ends: 2390 [2022-11-20 09:27:35,878 INFO L226 Difference]: Without dead ends: 1415 [2022-11-20 09:27:35,883 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 560 GetRequests, 464 SyntacticMatches, 8 SemanticMatches, 88 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2147 ImplicationChecksByTransitivity, 1.8s TimeCoverageRelationStatistics Valid=1571, Invalid=6439, Unknown=0, NotChecked=0, Total=8010 [2022-11-20 09:27:35,884 INFO L413 NwaCegarLoop]: 98 mSDtfsCounter, 1998 mSDsluCounter, 1126 mSDsCounter, 0 mSdLazyCounter, 4414 mSolverCounterSat, 981 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1998 SdHoareTripleChecker+Valid, 1224 SdHoareTripleChecker+Invalid, 5395 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 981 IncrementalHoareTripleChecker+Valid, 4414 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.8s IncrementalHoareTripleChecker+Time [2022-11-20 09:27:35,885 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1998 Valid, 1224 Invalid, 5395 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [981 Valid, 4414 Invalid, 0 Unknown, 0 Unchecked, 2.8s Time] [2022-11-20 09:27:35,887 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1415 states. [2022-11-20 09:27:36,034 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1415 to 1270. [2022-11-20 09:27:36,036 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1270 states, 958 states have (on average 1.0991649269311066) internal successors, (1053), 994 states have internal predecessors, (1053), 166 states have call successors, (166), 153 states have call predecessors, (166), 145 states have return successors, (183), 148 states have call predecessors, (183), 166 states have call successors, (183) [2022-11-20 09:27:36,040 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1270 states to 1270 states and 1402 transitions. [2022-11-20 09:27:36,041 INFO L78 Accepts]: Start accepts. Automaton has 1270 states and 1402 transitions. Word has length 212 [2022-11-20 09:27:36,042 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 09:27:36,042 INFO L495 AbstractCegarLoop]: Abstraction has 1270 states and 1402 transitions. [2022-11-20 09:27:36,042 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 28 states have (on average 9.285714285714286) internal successors, (260), 22 states have internal predecessors, (260), 14 states have call successors, (51), 12 states have call predecessors, (51), 15 states have return successors, (52), 15 states have call predecessors, (52), 14 states have call successors, (52) [2022-11-20 09:27:36,042 INFO L276 IsEmpty]: Start isEmpty. Operand 1270 states and 1402 transitions. [2022-11-20 09:27:36,048 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 267 [2022-11-20 09:27:36,048 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 09:27:36,048 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 09:27:36,059 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-20 09:27:36,254 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 09:27:36,255 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 09:27:36,255 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 09:27:36,255 INFO L85 PathProgramCache]: Analyzing trace with hash -457369096, now seen corresponding path program 1 times [2022-11-20 09:27:36,255 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 09:27:36,255 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1135265941] [2022-11-20 09:27:36,256 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 09:27:36,256 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 09:27:36,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,084 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 09:27:37,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,098 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-20 09:27:37,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 09:27:37,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-20 09:27:37,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 09:27:37,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,169 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2022-11-20 09:27:37,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,248 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 09:27:37,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,251 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 09:27:37,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,257 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 09:27:37,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,262 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 09:27:37,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,264 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-11-20 09:27:37,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,278 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2022-11-20 09:27:37,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 120 [2022-11-20 09:27:37,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,341 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 09:27:37,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,344 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 09:27:37,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,348 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 09:27:37,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-20 09:27:37,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,356 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2022-11-20 09:27:37,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,405 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 167 [2022-11-20 09:27:37,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,408 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 173 [2022-11-20 09:27:37,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,425 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 09:27:37,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,430 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-20 09:27:37,431 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,434 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 09:27:37,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-20 09:27:37,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,439 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 215 [2022-11-20 09:27:37,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,477 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 225 [2022-11-20 09:27:37,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,479 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 234 [2022-11-20 09:27:37,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,486 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 09:27:37,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,488 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 258 [2022-11-20 09:27:37,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,491 INFO L134 CoverageAnalysis]: Checked inductivity of 442 backedges. 99 proven. 131 refuted. 0 times theorem prover too weak. 212 trivial. 0 not checked. [2022-11-20 09:27:37,491 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 09:27:37,491 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1135265941] [2022-11-20 09:27:37,492 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1135265941] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 09:27:37,492 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [831954419] [2022-11-20 09:27:37,492 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 09:27:37,492 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 09:27:37,492 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 09:27:37,494 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 09:27:37,514 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-20 09:27:37,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 09:27:37,658 INFO L263 TraceCheckSpWp]: Trace formula consists of 767 conjuncts, 30 conjunts are in the unsatisfiable core [2022-11-20 09:27:37,663 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 09:27:38,111 INFO L134 CoverageAnalysis]: Checked inductivity of 442 backedges. 155 proven. 89 refuted. 0 times theorem prover too weak. 198 trivial. 0 not checked. [2022-11-20 09:27:38,111 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 09:27:39,272 INFO L134 CoverageAnalysis]: Checked inductivity of 442 backedges. 96 proven. 136 refuted. 0 times theorem prover too weak. 210 trivial. 0 not checked. [2022-11-20 09:27:39,272 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [831954419] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 09:27:39,272 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 09:27:39,273 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 11, 16] total 32 [2022-11-20 09:27:39,273 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [356139846] [2022-11-20 09:27:39,273 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 09:27:39,274 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2022-11-20 09:27:39,274 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 09:27:39,275 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2022-11-20 09:27:39,275 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=167, Invalid=825, Unknown=0, NotChecked=0, Total=992 [2022-11-20 09:27:39,276 INFO L87 Difference]: Start difference. First operand 1270 states and 1402 transitions. Second operand has 32 states, 32 states have (on average 9.8125) internal successors, (314), 28 states have internal predecessors, (314), 19 states have call successors, (62), 13 states have call predecessors, (62), 20 states have return successors, (65), 19 states have call predecessors, (65), 19 states have call successors, (65) [2022-11-20 09:27:41,980 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 09:27:41,980 INFO L93 Difference]: Finished difference Result 2002 states and 2228 transitions. [2022-11-20 09:27:41,980 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2022-11-20 09:27:41,981 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 32 states have (on average 9.8125) internal successors, (314), 28 states have internal predecessors, (314), 19 states have call successors, (62), 13 states have call predecessors, (62), 20 states have return successors, (65), 19 states have call predecessors, (65), 19 states have call successors, (65) Word has length 266 [2022-11-20 09:27:41,982 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 09:27:41,982 INFO L225 Difference]: With dead ends: 2002 [2022-11-20 09:27:41,982 INFO L226 Difference]: Without dead ends: 0 [2022-11-20 09:27:41,988 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 651 GetRequests, 570 SyntacticMatches, 15 SemanticMatches, 66 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 963 ImplicationChecksByTransitivity, 1.6s TimeCoverageRelationStatistics Valid=951, Invalid=3605, Unknown=0, NotChecked=0, Total=4556 [2022-11-20 09:27:41,989 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 1807 mSDsluCounter, 529 mSDsCounter, 0 mSdLazyCounter, 2241 mSolverCounterSat, 714 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1809 SdHoareTripleChecker+Valid, 582 SdHoareTripleChecker+Invalid, 2955 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 714 IncrementalHoareTripleChecker+Valid, 2241 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2022-11-20 09:27:41,989 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1809 Valid, 582 Invalid, 2955 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [714 Valid, 2241 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2022-11-20 09:27:41,990 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-20 09:27:41,990 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-20 09:27:41,990 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 09:27:41,990 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-20 09:27:41,991 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 266 [2022-11-20 09:27:41,991 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 09:27:41,991 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-20 09:27:41,991 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 32 states have (on average 9.8125) internal successors, (314), 28 states have internal predecessors, (314), 19 states have call successors, (62), 13 states have call predecessors, (62), 20 states have return successors, (65), 19 states have call predecessors, (65), 19 states have call successors, (65) [2022-11-20 09:27:41,992 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-20 09:27:41,992 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-20 09:27:41,994 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-20 09:27:42,011 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-20 09:27:42,208 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-11-20 09:27:42,211 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-20 09:28:03,399 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 185 192) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 (not (= 1 ~systemActive~0))) (or .cse0 (not (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0)))) [2022-11-20 09:28:03,399 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 185 192) no Hoare annotation was computed. [2022-11-20 09:28:03,399 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 185 192) no Hoare annotation was computed. [2022-11-20 09:28:03,400 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 101 107) no Hoare annotation was computed. [2022-11-20 09:28:03,400 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 101 107) the Hoare annotation is: true [2022-11-20 09:28:03,400 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 932 943) the Hoare annotation is: (let ((.cse3 (not (= 2 ~waterLevel~0))) (.cse1 (not (= ~pumpRunning~0 0))) (.cse4 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse5 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse7 (not (<= 0 ~waterLevel~0))) (.cse8 (not (<= 1 ~pumpRunning~0))) (.cse6 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse4) (or .cse1 .cse2 .cse4 (not (<= 2 ~waterLevel~0)) .cse5 .cse6) (or .cse0 (not (<= ~waterLevel~0 0)) .cse1 .cse2 .cse7 .cse4) (or .cse0 .cse2 .cse3 .cse4 .cse8) (or .cse1 .cse2 .cse7 .cse4 .cse5 (not (<= ~waterLevel~0 1))) (or .cse0 (= ~methaneLevelCritical~0 0) .cse2 .cse7 .cse8 .cse6 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-20 09:28:03,401 INFO L899 garLoopResultBuilder]: For program point L936-1(lines 932 943) no Hoare annotation was computed. [2022-11-20 09:28:03,401 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 932 943) no Hoare annotation was computed. [2022-11-20 09:28:03,401 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 355 384) no Hoare annotation was computed. [2022-11-20 09:28:03,401 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 355 384) the Hoare annotation is: true [2022-11-20 09:28:03,401 INFO L902 garLoopResultBuilder]: At program point L380(lines 355 384) the Hoare annotation is: true [2022-11-20 09:28:03,401 INFO L899 garLoopResultBuilder]: For program point L376(line 376) no Hoare annotation was computed. [2022-11-20 09:28:03,402 INFO L899 garLoopResultBuilder]: For program point L369(lines 369 373) no Hoare annotation was computed. [2022-11-20 09:28:03,402 INFO L902 garLoopResultBuilder]: At program point L369-1(lines 369 373) the Hoare annotation is: true [2022-11-20 09:28:03,402 INFO L899 garLoopResultBuilder]: For program point L366(line 366) no Hoare annotation was computed. [2022-11-20 09:28:03,402 INFO L902 garLoopResultBuilder]: At program point L365-2(lines 365 379) the Hoare annotation is: true [2022-11-20 09:28:03,402 INFO L902 garLoopResultBuilder]: At program point L361(line 361) the Hoare annotation is: true [2022-11-20 09:28:03,402 INFO L899 garLoopResultBuilder]: For program point L361-1(line 361) no Hoare annotation was computed. [2022-11-20 09:28:03,403 INFO L895 garLoopResultBuilder]: At program point L886(line 886) the Hoare annotation is: (let ((.cse11 (= 1 ~systemActive~0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse9 (= ~pumpRunning~0 0)) (.cse10 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse13 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| ~waterLevel~0)) (.cse22 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse12 (<= ~waterLevel~0 0)) (.cse16 (<= 0 ~waterLevel~0)) (.cse23 (not (= 0 ~systemActive~0))) (.cse6 (not (= |old(~waterLevel~0)| 1))) (.cse21 (not (= |old(~waterLevel~0)| 2))) (.cse25 (= ~waterLevel~0 1)) (.cse24 (not (<= 2 |old(~waterLevel~0)|))) (.cse20 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (and .cse9 .cse10 .cse13 .cse22)) (.cse19 (not .cse7)) (.cse1 (not .cse11)) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= 0 |old(~waterLevel~0)|))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse14 (= |timeShift_processEnvironment_~tmp~1#1| ~methaneLevelCritical~0)) (.cse15 (<= 1 ~switchedOnBeforeTS~0)) (.cse17 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= |old(~waterLevel~0)| 0))) (.cse18 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse1 .cse8 .cse4 (and .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16) .cse17 .cse18) (or .cse6 .cse1 .cse8 .cse19 (and .cse20 .cse10 .cse12 .cse13 .cse14 .cse15 .cse16) .cse18) (or .cse0 .cse1 .cse19 .cse21) (or .cse0 (and .cse9 .cse22) .cse23) (or .cse0 .cse1 .cse4 .cse17 .cse24) (or .cse0 (not (< 1 |old(~waterLevel~0)|)) .cse17 .cse23) (or .cse0 .cse6 .cse1 .cse4 (and .cse9 .cse10 .cse13 .cse25)) (or .cse1 .cse8 .cse4 (and .cse9 .cse10 .cse11 .cse13 .cse14 .cse25 .cse15) .cse21) (or (and .cse20 .cse10 .cse13 .cse14 .cse25 .cse15) .cse1 .cse8 .cse19 .cse17 .cse24) (or .cse1 .cse8 .cse2 (and .cse20 .cse10 .cse13 .cse22 .cse14 .cse15) .cse19 .cse5 .cse18) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3 .cse19) (or .cse7 .cse1 .cse8 .cse2 .cse4 (and .cse9 .cse10 .cse13 .cse22 .cse14 .cse15) .cse17 .cse5 .cse18)))) [2022-11-20 09:28:03,404 INFO L895 garLoopResultBuilder]: At program point L981(lines 976 984) the Hoare annotation is: (let ((.cse14 (= ~methaneLevelCritical~0 0)) (.cse11 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse18 (= 1 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse20 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (= 0 ~systemActive~0))) (.cse8 (not (<= |old(~waterLevel~0)| 0))) (.cse17 (not (= |old(~waterLevel~0)| 2))) (.cse22 (and .cse1 .cse20 .cse2)) (.cse15 (not (<= 1 ~methaneLevelCritical~0))) (.cse19 (= ~waterLevel~0 1)) (.cse16 (not (<= |old(~waterLevel~0)| 2))) (.cse24 (not (<= 2 |old(~waterLevel~0)|))) (.cse23 (not (= |old(~waterLevel~0)| 1))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse25 (<= ~waterLevel~0 0)) (.cse12 (= |timeShift_processEnvironment_~tmp~1#1| ~methaneLevelCritical~0)) (.cse13 (<= 1 ~switchedOnBeforeTS~0)) (.cse26 (<= 0 ~waterLevel~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not .cse18)) (.cse6 (not (<= 0 |old(~waterLevel~0)|))) (.cse21 (and .cse1 .cse11 .cse2)) (.cse7 (not .cse14))) (and (or .cse0 (and .cse1 .cse2) .cse3) (or .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 (and .cse10 .cse11 .cse2 .cse12 .cse13)) (or .cse14 .cse4 .cse5 .cse6 (and .cse1 .cse11 .cse2 .cse12 .cse13) .cse15 .cse16 .cse8 .cse9) (or .cse4 .cse5 .cse15 .cse17 (and .cse1 .cse11 .cse18 .cse12 .cse19 .cse13)) (or .cse0 .cse20 (not (< 1 |old(~waterLevel~0)|)) .cse16 .cse3) (or .cse0 .cse4 .cse6 .cse21 .cse15 .cse8) (or .cse22 .cse0 .cse4 .cse15 .cse17) (or .cse0 (and .cse1 .cse11 .cse19) .cse23 .cse4 .cse15) (or .cse22 .cse0 .cse4 .cse7 (and (<= 1 ~pumpRunning~0) .cse20 .cse2) .cse16 .cse24) (or .cse23 .cse14 .cse4 .cse5 .cse15 (and .cse1 .cse11 .cse18 .cse25 .cse12 .cse13 .cse26) .cse16 .cse9) (or .cse4 .cse5 .cse7 (and .cse10 .cse11 .cse12 .cse19 .cse13) .cse16 .cse24) (or .cse23 .cse4 .cse5 .cse7 .cse9 (and .cse10 .cse11 .cse25 .cse12 .cse13 .cse26)) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse4 .cse6 .cse21 .cse7)))) [2022-11-20 09:28:03,404 INFO L899 garLoopResultBuilder]: For program point L886-1(line 886) no Hoare annotation was computed. [2022-11-20 09:28:03,404 INFO L899 garLoopResultBuilder]: For program point L81(lines 81 87) no Hoare annotation was computed. [2022-11-20 09:28:03,404 INFO L899 garLoopResultBuilder]: For program point L81-2(lines 77 99) no Hoare annotation was computed. [2022-11-20 09:28:03,404 INFO L899 garLoopResultBuilder]: For program point L143(lines 143 151) no Hoare annotation was computed. [2022-11-20 09:28:03,405 INFO L899 garLoopResultBuilder]: For program point L139(lines 139 156) no Hoare annotation was computed. [2022-11-20 09:28:03,405 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 74 100) no Hoare annotation was computed. [2022-11-20 09:28:03,405 INFO L899 garLoopResultBuilder]: For program point L912(lines 912 916) no Hoare annotation was computed. [2022-11-20 09:28:03,405 INFO L895 garLoopResultBuilder]: At program point L912-2(lines 908 919) the Hoare annotation is: (let ((.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse14 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse3 (and .cse13 (= ~waterLevel~0 1) .cse14)) (.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse10 (and .cse13 (= |old(~waterLevel~0)| ~waterLevel~0) .cse14)) (.cse8 (not (<= |old(~waterLevel~0)| 0))) (.cse7 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse12 (and .cse13 (<= ~waterLevel~0 0) .cse14 (<= 0 ~waterLevel~0))) (.cse11 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse2 .cse4) (or .cse0 .cse1 .cse6 .cse3 .cse4) (or .cse5 .cse0 .cse6 (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse0 .cse7 .cse6 .cse8) (or .cse5 .cse9 .cse0 .cse6) (or .cse10 .cse0 .cse1 .cse7 .cse6 .cse8 .cse11) (or .cse10 .cse0 .cse1 .cse7 .cse2 .cse8 .cse11) (or .cse9 .cse0 .cse1 .cse2 .cse12 .cse11) (or (not (<= |old(~waterLevel~0)| 1)) .cse5 .cse0 .cse7 .cse2) (or .cse9 .cse0 .cse1 .cse6 .cse12 .cse11) (or .cse5 (not (= 0 ~systemActive~0)))))) [2022-11-20 09:28:03,406 INFO L895 garLoopResultBuilder]: At program point L871(line 871) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse18 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse17 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse8 (= ~waterLevel~0 1))) (let ((.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse10 (not (= |old(~waterLevel~0)| 1))) (.cse14 (and .cse17 .cse7 .cse8)) (.cse15 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse12 (and .cse6 .cse7 .cse18)) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse13 (not (<= 0 |old(~waterLevel~0)|))) (.cse16 (not (<= |old(~waterLevel~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (and .cse17 .cse7 .cse18))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or (and .cse6 .cse7 .cse8) .cse9 .cse10 .cse0 .cse11) (or .cse12 .cse9 .cse0 .cse2 .cse3 .cse5) (or .cse12 .cse9 .cse0 .cse11 .cse3 .cse5) (or .cse12 (not (<= |old(~waterLevel~0)| 1)) .cse9 .cse0 .cse13 .cse2) (or .cse10 .cse0 .cse1 .cse14 .cse2 .cse15) (or .cse0 .cse1 .cse13 .cse2 .cse4 .cse16 .cse15) (or .cse10 .cse0 .cse1 .cse14 .cse11 .cse15) (or .cse12 .cse9 (not (= 0 ~systemActive~0))) (or .cse0 .cse1 .cse13 .cse11 .cse4 .cse16 .cse15) (or .cse12 .cse9 .cse0 .cse13 .cse11 .cse16) (or .cse0 .cse1 .cse11 (not (= |old(~waterLevel~0)| 2)) .cse4)))) [2022-11-20 09:28:03,406 INFO L899 garLoopResultBuilder]: For program point L871-1(line 871) no Hoare annotation was computed. [2022-11-20 09:28:03,406 INFO L899 garLoopResultBuilder]: For program point L888(lines 888 898) no Hoare annotation was computed. [2022-11-20 09:28:03,406 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2022-11-20 09:28:03,407 INFO L895 garLoopResultBuilder]: At program point L149(line 149) the Hoare annotation is: (let ((.cse9 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (= |old(~waterLevel~0)| 2))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse12 (not (<= |old(~waterLevel~0)| 0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= |timeShift_processEnvironment_~tmp~1#1| ~methaneLevelCritical~0)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse13 (not (= |old(~waterLevel~0)| 1))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse7 (not (<= 0 |old(~waterLevel~0)|))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse11 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 (and .cse2 .cse3 (= ~waterLevel~0 1) .cse4) .cse5 .cse6) (or .cse0 .cse1 .cse7 .cse8 .cse9 .cse10) (or .cse11 .cse0 .cse5 .cse6) (or .cse11 .cse0 .cse8 .cse9 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse8 .cse6) (or .cse11 .cse0 .cse7 .cse8 .cse12) (or .cse11 .cse13 .cse0 .cse8) (or (and .cse2 (= |old(~waterLevel~0)| ~waterLevel~0) .cse3 .cse4) .cse0 .cse1 .cse7 .cse5 .cse12 .cse10) (or (and .cse2 (<= ~waterLevel~0 0) .cse3 .cse4 (<= 0 ~waterLevel~0)) .cse13 .cse0 .cse1 .cse5 .cse10) (or (not (<= |old(~waterLevel~0)| 1)) .cse11 .cse0 .cse7 .cse5) (or .cse11 (not (= 0 ~systemActive~0))))) [2022-11-20 09:28:03,407 INFO L899 garLoopResultBuilder]: For program point L884(lines 884 901) no Hoare annotation was computed. [2022-11-20 09:28:03,408 INFO L895 garLoopResultBuilder]: At program point L884-1(lines 876 904) the Hoare annotation is: (let ((.cse27 (= ~methaneLevelCritical~0 0)) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse6 (<= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1|)) (.cse28 (= 1 ~systemActive~0)) (.cse7 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| ~waterLevel~0)) (.cse12 (= ~pumpRunning~0 0)) (.cse16 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse17 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2))) (let ((.cse14 (not (= 0 ~systemActive~0))) (.cse18 (and .cse12 .cse16 .cse13 .cse17)) (.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse20 (and .cse4 .cse12 .cse5 .cse6 .cse28 .cse7 .cse13)) (.cse23 (<= ~waterLevel~0 0)) (.cse24 (<= 0 ~waterLevel~0)) (.cse15 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse21 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not .cse27)) (.cse26 (not (<= |old(~waterLevel~0)| 0))) (.cse8 (= |timeShift_processEnvironment_~tmp~1#1| ~methaneLevelCritical~0)) (.cse10 (<= 1 ~switchedOnBeforeTS~0)) (.cse25 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse11 (not (= |old(~pumpRunning~0)| 0))) (.cse22 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not .cse28)) (.cse19 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (= ~waterLevel~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10)) (or .cse11 (and .cse12 .cse13) .cse14) (or .cse11 (not (< 1 |old(~waterLevel~0)|)) .cse15 (and .cse16 .cse17) .cse14) (or .cse11 (and (<= 1 ~pumpRunning~0) .cse16 .cse13 .cse17) .cse0 .cse18 .cse2 .cse3) (or .cse11 .cse0 .cse18 .cse19 .cse15 (not (<= 2 |old(~waterLevel~0)|))) (or (not (<= |old(~waterLevel~0)| 1)) .cse11 .cse20 .cse0 .cse21 .cse2) (or .cse22 .cse0 .cse1 .cse2 (and .cse4 .cse5 .cse6 .cse23 .cse7 .cse8 .cse10 .cse24) .cse25) (or (and .cse12 .cse5 .cse7 .cse8 .cse9 .cse10) .cse0 .cse1 .cse19 .cse3) (or .cse11 .cse20 .cse0 .cse21 .cse19 .cse26) (or .cse22 .cse27 .cse0 .cse1 .cse19 .cse15 (and .cse12 .cse5 .cse23 .cse7 .cse8 .cse10 .cse24) .cse25) (or .cse27 .cse0 .cse1 .cse21 .cse19 (and .cse12 .cse5 .cse7 .cse13 .cse8 .cse10) .cse15 .cse26 .cse25) (or .cse0 .cse1 .cse21 .cse2 .cse26 (and .cse4 .cse5 .cse6 .cse7 .cse13 .cse8 .cse10) .cse25) (or .cse11 .cse22 .cse0 .cse19 (and .cse12 .cse5 .cse6 .cse7 .cse9))))) [2022-11-20 09:28:03,408 INFO L895 garLoopResultBuilder]: At program point L145(line 145) the Hoare annotation is: (let ((.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse8 (not (<= |old(~waterLevel~0)| 0))) (.cse6 (not (= |old(~waterLevel~0)| 2))) (.cse7 (not (<= 0 |old(~waterLevel~0)|))) (.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (= |timeShift_processEnvironment_~tmp~1#1| ~methaneLevelCritical~0)) (.cse13 (<= 1 ~switchedOnBeforeTS~0)) (.cse10 (not (<= 1 ~methaneLevelCritical~0))) (.cse14 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse2 .cse6) (or .cse0 .cse1 .cse7 .cse2 .cse8 .cse9) (or .cse5 .cse0 .cse10 .cse3 .cse4) (or .cse5 .cse0 .cse7 .cse10 .cse8) (or (and .cse11 (= |old(~waterLevel~0)| ~waterLevel~0) .cse12 .cse13) .cse0 .cse1 .cse7 .cse10 .cse8 .cse9) (or .cse5 .cse14 .cse0 .cse10) (or .cse0 .cse1 (and .cse11 .cse12 (= ~waterLevel~0 1) .cse13) .cse10 .cse6) (or (not (<= |old(~waterLevel~0)| 1)) .cse5 .cse0 .cse7 .cse2) (or (and .cse11 (<= ~waterLevel~0 0) .cse12 .cse13 (<= 0 ~waterLevel~0)) .cse14 .cse0 .cse1 .cse10 .cse9) (or .cse14 .cse0 .cse1 .cse2 .cse9) (or .cse5 (not (= 0 ~systemActive~0))))) [2022-11-20 09:28:03,409 INFO L895 garLoopResultBuilder]: At program point L141(line 141) the Hoare annotation is: (let ((.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse14 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse3 (and .cse13 (= ~waterLevel~0 1) .cse14)) (.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse10 (and .cse13 (= |old(~waterLevel~0)| ~waterLevel~0) .cse14)) (.cse8 (not (<= |old(~waterLevel~0)| 0))) (.cse7 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse12 (and .cse13 (<= ~waterLevel~0 0) .cse14 (<= 0 ~waterLevel~0))) (.cse11 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse2 .cse4) (or .cse0 .cse1 .cse6 .cse3 .cse4) (or .cse5 .cse0 .cse6 (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse0 .cse7 .cse6 .cse8) (or .cse5 .cse9 .cse0 .cse6) (or .cse10 .cse0 .cse1 .cse7 .cse6 .cse8 .cse11) (or .cse10 .cse0 .cse1 .cse7 .cse2 .cse8 .cse11) (or .cse9 .cse0 .cse1 .cse2 .cse12 .cse11) (or (not (<= |old(~waterLevel~0)| 1)) .cse5 .cse0 .cse7 .cse2) (or .cse9 .cse0 .cse1 .cse6 .cse12 .cse11) (or .cse5 (not (= 0 ~systemActive~0)))))) [2022-11-20 09:28:03,409 INFO L899 garLoopResultBuilder]: For program point L141-1(line 141) no Hoare annotation was computed. [2022-11-20 09:28:03,410 INFO L895 garLoopResultBuilder]: At program point L154(line 154) the Hoare annotation is: (let ((.cse12 (= ~pumpRunning~0 0))) (let ((.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (not (= |old(~waterLevel~0)| 2))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (<= |old(~waterLevel~0)| 0))) (.cse9 (and .cse12 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse2 (not (<= 0 |old(~waterLevel~0)|))) (.cse11 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse8 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse6 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 .cse6 .cse7 .cse5) (or .cse8 .cse9 .cse0 .cse6 .cse10) (or .cse0 .cse1 .cse3 .cse10) (or .cse8 .cse11 .cse0 .cse3 (and .cse12 (= ~waterLevel~0 1))) (or .cse8 .cse9 .cse0 .cse3 .cse10) (or .cse8 .cse9 .cse0 .cse2 .cse3 .cse7) (or (not (<= |old(~waterLevel~0)| 1)) .cse8 .cse9 .cse0 .cse2 .cse6) (or .cse11 .cse0 .cse1 .cse6 .cse5) (or .cse8 (not (= 0 ~systemActive~0)))))) [2022-11-20 09:28:03,410 INFO L895 garLoopResultBuilder]: At program point L154-1(lines 135 159) the Hoare annotation is: (let ((.cse18 (= 1 ~systemActive~0)) (.cse21 (= ~methaneLevelCritical~0 0)) (.cse13 (= ~pumpRunning~0 0)) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse4 (= ~waterLevel~0 1)) (.cse7 (not (= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse19 (<= ~waterLevel~0 0)) (.cse20 (<= 0 ~waterLevel~0)) (.cse11 (not (= |old(~waterLevel~0)| 1))) (.cse9 (and .cse13 .cse10)) (.cse6 (not .cse21)) (.cse3 (= |timeShift_processEnvironment_~tmp~1#1| ~methaneLevelCritical~0)) (.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not .cse18)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse15 (not (<= 0 |old(~waterLevel~0)|))) (.cse12 (not (<= 1 ~methaneLevelCritical~0))) (.cse14 (not (<= |old(~waterLevel~0)| 2))) (.cse16 (not (<= |old(~waterLevel~0)| 0))) (.cse17 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse8 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5) .cse6 .cse7) (or .cse8 .cse9 .cse0 .cse6 (and (<= 1 ~pumpRunning~0) .cse10) .cse7) (or .cse8 .cse11 .cse0 .cse12 (and .cse13 .cse4)) (or .cse8 .cse9 .cse0 .cse12 .cse14 (not (<= 2 |old(~waterLevel~0)|))) (or .cse8 .cse9 .cse0 .cse15 .cse12 .cse16) (or (and .cse2 .cse10 .cse3 .cse5) .cse0 .cse1 .cse15 .cse6 .cse16 .cse17) (or .cse0 .cse1 .cse12 (and .cse13 .cse18 .cse3 .cse4 .cse5) .cse7) (or (and .cse13 .cse18 .cse19 .cse3 .cse5 .cse20) .cse11 .cse21 .cse0 .cse1 .cse12 .cse14 .cse17) (or (and .cse2 .cse19 .cse3 .cse5 .cse20) .cse11 .cse0 .cse1 .cse6 .cse17) (or (not (<= |old(~waterLevel~0)| 1)) .cse8 .cse9 .cse0 .cse15 .cse6) (or (and .cse13 .cse10 .cse3 .cse5) .cse21 .cse0 .cse1 .cse15 .cse12 .cse14 .cse16 .cse17) (or .cse8 (not (= 0 ~systemActive~0)))))) [2022-11-20 09:28:03,410 INFO L899 garLoopResultBuilder]: For program point L889(lines 889 895) no Hoare annotation was computed. [2022-11-20 09:28:03,410 INFO L899 garLoopResultBuilder]: For program point L88-1(lines 88 94) no Hoare annotation was computed. [2022-11-20 09:28:03,411 INFO L895 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: (let ((.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse9 (not (= |old(~waterLevel~0)| 2))) (.cse10 (not (<= |old(~waterLevel~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (<= 0 |old(~waterLevel~0)|))) (.cse11 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse8 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse6 .cse4 .cse7) (or .cse8 .cse0 .cse6 .cse9) (or .cse0 .cse1 .cse2 .cse6 .cse10 .cse5) (or .cse8 .cse0 .cse3 .cse4 .cse7) (or .cse0 .cse1 .cse3 .cse9) (or .cse8 .cse0 .cse2 .cse3 .cse10) (or .cse8 .cse11 .cse0 .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse8 .cse0 .cse2 .cse6) (or .cse11 .cse0 .cse1 .cse6 .cse5) (or .cse8 (not (= 0 ~systemActive~0))))) [2022-11-20 09:28:03,411 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 74 100) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse18 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse17 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse8 (= ~waterLevel~0 1))) (let ((.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse10 (not (= |old(~waterLevel~0)| 1))) (.cse14 (and .cse17 .cse7 .cse8)) (.cse15 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse12 (and .cse6 .cse7 .cse18)) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse13 (not (<= 0 |old(~waterLevel~0)|))) (.cse16 (not (<= |old(~waterLevel~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (and .cse17 .cse7 .cse18))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or (and .cse6 .cse7 .cse8) .cse9 .cse10 .cse0 .cse11) (or .cse12 .cse9 .cse0 .cse2 .cse3 .cse5) (or .cse12 .cse9 .cse0 .cse11 .cse3 .cse5) (or .cse12 (not (<= |old(~waterLevel~0)| 1)) .cse9 .cse0 .cse13 .cse2) (or .cse10 .cse0 .cse1 .cse14 .cse2 .cse15) (or .cse0 .cse1 .cse13 .cse2 .cse4 .cse16 .cse15) (or .cse10 .cse0 .cse1 .cse14 .cse11 .cse15) (or .cse12 .cse9 (not (= 0 ~systemActive~0))) (or .cse0 .cse1 .cse13 .cse11 .cse4 .cse16 .cse15) (or .cse12 .cse9 .cse0 .cse13 .cse11 .cse16) (or .cse0 .cse1 .cse11 (not (= |old(~waterLevel~0)| 2)) .cse4)))) [2022-11-20 09:28:03,412 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 74 100) no Hoare annotation was computed. [2022-11-20 09:28:03,412 INFO L895 garLoopResultBuilder]: At program point L873(lines 866 875) the Hoare annotation is: (let ((.cse13 (= ~pumpRunning~0 0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (= ~waterLevel~0 1)) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse19 (= 1 ~systemActive~0)) (.cse20 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse16 (not (<= |old(~waterLevel~0)| 0))) (.cse9 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse12 (not (= |old(~waterLevel~0)| 1))) (.cse10 (and .cse5 (let ((.cse21 (<= 1 ~pumpRunning~0))) (or (and .cse21 .cse4 .cse19 .cse14 .cse20) (and .cse21 .cse4 (<= 2 ~waterLevel~0) .cse19 .cse20))))) (.cse18 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse17 (and .cse4 .cse5 .cse20)) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse13 .cse5)) (.cse2 (not .cse19)) (.cse15 (not (<= 0 |old(~waterLevel~0)|))) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse0 .cse2 .cse3 (and .cse4 .cse5) .cse6 .cse7) (or .cse2 .cse8 .cse9 .cse10 .cse11) (or .cse0 .cse12 .cse2 .cse9 (and .cse13 .cse14)) (or .cse0 .cse1 .cse2 .cse9 .cse6 .cse7) (or .cse0 .cse1 .cse2 .cse15 .cse9 .cse16) (or .cse17 .cse2 .cse8 .cse15 .cse3 .cse16 .cse18) (or .cse17 .cse2 .cse8 .cse15 .cse9 .cse6 .cse18) (or .cse12 .cse2 .cse8 .cse3 .cse10 .cse18) (or .cse17 .cse2 .cse8 .cse3 .cse11) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse15 .cse3)))) [2022-11-20 09:28:03,412 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-11-20 09:28:03,413 INFO L895 garLoopResultBuilder]: At program point L345(lines 296 346) the Hoare annotation is: false [2022-11-20 09:28:03,413 INFO L899 garLoopResultBuilder]: For program point L333(lines 333 339) no Hoare annotation was computed. [2022-11-20 09:28:03,413 INFO L895 garLoopResultBuilder]: At program point L333-2(lines 327 340) the Hoare annotation is: (let ((.cse8 (< 1 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= 2 ~waterLevel~0)) (.cse11 (<= ~waterLevel~0 0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse5 (= ~waterLevel~0 1)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse9 (<= ~waterLevel~0 2)) (.cse12 (<= 1 ~switchedOnBeforeTS~0)) (.cse10 (<= 0 ~waterLevel~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse8 .cse3 .cse4 .cse9) (and .cse6 .cse1 .cse2 .cse8 .cse3 .cse4) (and .cse0 .cse4 (= 0 ~systemActive~0)) (and .cse0 .cse7 (<= ~waterLevel~0 1) .cse3 .cse4 .cse10) (and .cse0 .cse1 .cse3 .cse4 .cse11 .cse10) (and .cse0 .cse2 .cse7 .cse3 .cse4) (and .cse6 .cse7 .cse3 .cse4 .cse11 .cse12 .cse10) (and .cse6 .cse7 .cse3 .cse4 .cse5 .cse12) (and .cse6 .cse1 .cse3 .cse4 .cse9 .cse12 .cse10))) [2022-11-20 09:28:03,413 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-20 09:28:03,413 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-20 09:28:03,414 INFO L899 garLoopResultBuilder]: For program point L317(lines 317 323) no Hoare annotation was computed. [2022-11-20 09:28:03,414 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-20 09:28:03,414 INFO L899 garLoopResultBuilder]: For program point L317-1(lines 317 323) no Hoare annotation was computed. [2022-11-20 09:28:03,414 INFO L899 garLoopResultBuilder]: For program point L441(lines 441 448) no Hoare annotation was computed. [2022-11-20 09:28:03,414 INFO L895 garLoopResultBuilder]: At program point L280(lines 268 282) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= 0 ~systemActive~0)) [2022-11-20 09:28:03,414 INFO L899 garLoopResultBuilder]: For program point L441-2(lines 441 448) no Hoare annotation was computed. [2022-11-20 09:28:03,415 INFO L895 garLoopResultBuilder]: At program point L342(lines 297 344) the Hoare annotation is: (let ((.cse7 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse1 (= 2 ~waterLevel~0)) (.cse8 (<= ~waterLevel~0 0)) (.cse9 (<= 0 ~waterLevel~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (= ~waterLevel~0 1)) (.cse10 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse2 .cse3 .cse4 .cse6) (and .cse5 .cse7 .cse1 .cse3 .cse4) (and .cse5 .cse7 .cse3 .cse4 .cse6) (and .cse5 .cse2 .cse3 .cse4 .cse8 .cse9) (and .cse5 .cse4 (= 0 ~systemActive~0)) (and .cse5 .cse7 .cse3 .cse4 .cse8 .cse9) (and .cse5 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse3 .cse4 .cse8 .cse10 .cse9) (and .cse0 .cse2 .cse3 .cse4 .cse6 .cse10))) [2022-11-20 09:28:03,415 INFO L895 garLoopResultBuilder]: At program point L309(line 309) the Hoare annotation is: (let ((.cse6 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse1 (= 2 ~waterLevel~0)) (.cse9 (<= ~waterLevel~0 0)) (.cse7 (<= 0 ~waterLevel~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse8 (= ~waterLevel~0 1)) (.cse10 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 (<= ~waterLevel~0 1) .cse3 .cse4 .cse7) (and .cse5 .cse2 .cse3 .cse4 .cse8) (and .cse5 .cse6 .cse1 .cse3 .cse4) (and .cse5 .cse2 .cse3 .cse4 .cse9 .cse7) (and .cse5 .cse4 (= 0 ~systemActive~0)) (and .cse5 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse3 .cse4 .cse9 .cse10 .cse7) (and .cse0 .cse2 .cse3 .cse4 .cse8 .cse10))) [2022-11-20 09:28:03,415 INFO L899 garLoopResultBuilder]: For program point L272(lines 272 278) no Hoare annotation was computed. [2022-11-20 09:28:03,415 INFO L899 garLoopResultBuilder]: For program point L272-1(lines 272 278) no Hoare annotation was computed. [2022-11-20 09:28:03,416 INFO L902 garLoopResultBuilder]: At program point L425(lines 417 427) the Hoare annotation is: true [2022-11-20 09:28:03,416 INFO L902 garLoopResultBuilder]: At program point L450(lines 431 453) the Hoare annotation is: true [2022-11-20 09:28:03,416 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-20 09:28:03,416 INFO L895 garLoopResultBuilder]: At program point L863(lines 858 865) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-20 09:28:03,416 INFO L895 garLoopResultBuilder]: At program point L413(lines 409 415) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-20 09:28:03,417 INFO L895 garLoopResultBuilder]: At program point L851(lines 846 854) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-20 09:28:03,417 INFO L895 garLoopResultBuilder]: At program point L843(lines 839 845) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-20 09:28:03,417 INFO L899 garLoopResultBuilder]: For program point L298(lines 297 344) no Hoare annotation was computed. [2022-11-20 09:28:03,417 INFO L899 garLoopResultBuilder]: For program point L327(lines 327 340) no Hoare annotation was computed. [2022-11-20 09:28:03,417 INFO L895 garLoopResultBuilder]: At program point L319(line 319) the Hoare annotation is: (let ((.cse2 (<= ~waterLevel~0 1)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse5 (<= 0 ~waterLevel~0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse8 (<= ~waterLevel~0 2)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse9 (< 1 ~waterLevel~0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse6 .cse3 .cse4 (= ~waterLevel~0 1)) (and .cse7 .cse6 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and .cse7 .cse6 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse8) (and .cse0 .cse6 .cse3 .cse4 (<= ~waterLevel~0 0) .cse5) (and .cse0 .cse4 (= 0 ~systemActive~0)) (and .cse0 .cse6 .cse9 .cse3 .cse4 .cse8) (and .cse0 .cse1 (= 2 ~waterLevel~0) .cse9 .cse3 .cse4))) [2022-11-20 09:28:03,417 INFO L902 garLoopResultBuilder]: At program point L348(lines 287 352) the Hoare annotation is: true [2022-11-20 09:28:03,418 INFO L899 garLoopResultBuilder]: For program point L307(lines 307 313) no Hoare annotation was computed. [2022-11-20 09:28:03,418 INFO L899 garLoopResultBuilder]: For program point L307-1(lines 307 313) no Hoare annotation was computed. [2022-11-20 09:28:03,418 INFO L895 garLoopResultBuilder]: At program point L274(line 274) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 1 ~systemActive~0) .cse0) (and (<= 2 ~waterLevel~0) .cse0 (not (= 0 ~systemActive~0))))) [2022-11-20 09:28:03,418 INFO L899 garLoopResultBuilder]: For program point L299(lines 299 303) no Hoare annotation was computed. [2022-11-20 09:28:03,418 INFO L895 garLoopResultBuilder]: At program point L836(lines 832 838) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-20 09:28:03,418 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 920 931) no Hoare annotation was computed. [2022-11-20 09:28:03,419 INFO L899 garLoopResultBuilder]: For program point L924-1(lines 920 931) no Hoare annotation was computed. [2022-11-20 09:28:03,419 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 920 931) the Hoare annotation is: (let ((.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse11 (not (<= |old(~waterLevel~0)| 0))) (.cse8 (not (= |old(~waterLevel~0)| 1))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 1 ~pumpRunning~0))) (.cse9 (= ~waterLevel~0 1)) (.cse12 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse10 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse6 .cse7 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse6 .cse3 .cse4 .cse5) (or .cse0 .cse3 (not (= 0 ~systemActive~0))) (or .cse0 .cse8 .cse1 .cse6 .cse9) (or .cse1 .cse10 .cse6 .cse7 .cse3 .cse11 .cse12) (or .cse0 .cse1 .cse10 .cse6 .cse3 .cse11) (or .cse8 .cse1 .cse6 .cse7 .cse9 .cse12) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse10 .cse2 .cse3))) [2022-11-20 09:28:03,419 INFO L899 garLoopResultBuilder]: For program point L258-2(lines 258 262) no Hoare annotation was computed. [2022-11-20 09:28:03,419 INFO L895 garLoopResultBuilder]: At program point L128(line 128) the Hoare annotation is: (let ((.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (= 2 ~waterLevel~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (<= ~waterLevel~0 1))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse8 (not (<= 0 ~waterLevel~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= 1 ~switchedOnBeforeTS~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse6 .cse7) (or .cse5 .cse1 .cse8 .cse7 .cse9) (or .cse5 .cse1 .cse6 .cse3) (or .cse5 .cse1 .cse8 .cse3 .cse9) (or .cse0 (not (<= ~waterLevel~0 0)) .cse1 .cse8 .cse2 .cse3 .cse4))) [2022-11-20 09:28:03,420 INFO L899 garLoopResultBuilder]: For program point L128-1(lines 109 133) no Hoare annotation was computed. [2022-11-20 09:28:03,420 INFO L899 garLoopResultBuilder]: For program point L989(lines 989 995) no Hoare annotation was computed. [2022-11-20 09:28:03,420 INFO L895 garLoopResultBuilder]: At program point L994(lines 985 998) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse0 (not (= ~waterLevel~0 1))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (<= ~waterLevel~0 0))) (.cse6 (not (<= 0 ~waterLevel~0))) (.cse4 (and .cse5 (not (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0)))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse5 .cse2 (not (= 2 ~waterLevel~0)) .cse3) (or .cse2 .cse6 (not (<= 1 |old(~pumpRunning~0)|)) .cse3 (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 .cse2 .cse7 .cse4) (or .cse1 .cse8 .cse2 .cse6 .cse3 .cse4) (or .cse1 .cse8 .cse2 .cse6 .cse7 .cse4) (or .cse1 .cse5 .cse2 (not (<= 2 ~waterLevel~0)) .cse7 (not (<= ~waterLevel~0 2)))))) [2022-11-20 09:28:03,420 INFO L895 garLoopResultBuilder]: At program point L123(line 123) the Hoare annotation is: (let ((.cse6 (not (= ~waterLevel~0 1))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= ~waterLevel~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~waterLevel~0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__methaneQuery_~tmp~0#1| 0)))) (and (or .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse3 .cse0 (not (= 2 ~waterLevel~0)) .cse2 .cse4) (or .cse3 .cse5 .cse0 .cse1 .cse2 .cse4) (or .cse6 .cse3 .cse0 .cse7 .cse4) (or .cse3 .cse0 (not (<= 2 ~waterLevel~0)) .cse7 .cse4 (not (<= ~waterLevel~0 2))) (or .cse6 .cse3 .cse0 .cse2 .cse4) (or .cse3 .cse5 .cse0 .cse1 .cse7 .cse4))) [2022-11-20 09:28:03,421 INFO L899 garLoopResultBuilder]: For program point L117(lines 117 125) no Hoare annotation was computed. [2022-11-20 09:28:03,421 INFO L899 garLoopResultBuilder]: For program point L113(lines 113 130) no Hoare annotation was computed. [2022-11-20 09:28:03,421 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 109 133) the Hoare annotation is: (let ((.cse8 (not (<= ~waterLevel~0 0))) (.cse9 (not (<= 0 ~waterLevel~0))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= ~waterLevel~0 1))) (.cse1 (= ~pumpRunning~0 0)) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse10 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 (not (= 2 ~waterLevel~0)) .cse3) (or .cse4 .cse5 .cse2 .cse6 .cse3 .cse7) (or .cse0 .cse1 .cse8 .cse2 .cse9 .cse3) (or .cse0 .cse1 .cse8 .cse2 .cse9 .cse10) (or .cse5 .cse8 .cse2 .cse9 .cse6 .cse3 .cse7) (or .cse4 .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse1 .cse2 .cse10) (or .cse5 .cse0 .cse2 (not (<= 2 ~waterLevel~0)) .cse10 (not (<= ~waterLevel~0 2))))) [2022-11-20 09:28:03,421 INFO L899 garLoopResultBuilder]: For program point L175(lines 175 181) no Hoare annotation was computed. [2022-11-20 09:28:03,422 INFO L895 garLoopResultBuilder]: At program point L173(line 173) the Hoare annotation is: (let ((.cse4 (not (<= 0 ~waterLevel~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 (not (= 2 ~waterLevel~0)) .cse3) (or .cse2 .cse4 (not (<= 1 |old(~pumpRunning~0)|)) .cse3 .cse5 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse2 .cse4 .cse6 .cse5) (or .cse0 .cse2 .cse4 .cse3 .cse5) (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse6 (not (<= ~waterLevel~0 2))))) [2022-11-20 09:28:03,422 INFO L895 garLoopResultBuilder]: At program point L175-2(lines 168 184) the Hoare annotation is: (let ((.cse1 (not (<= 0 ~waterLevel~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (<= ~waterLevel~0 1))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~2#1| ~methaneLevelCritical~0))) (and (or .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse4 .cse0 (not (= 2 ~waterLevel~0)) (and (<= 1 ~pumpRunning~0) .cse5) .cse2) (or .cse4 .cse0 .cse1 .cse6 .cse3) (or .cse4 .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 (not (<= 2 ~waterLevel~0)) .cse6 (not (<= ~waterLevel~0 2)) (and (= ~pumpRunning~0 0) .cse5)))) [2022-11-20 09:28:03,422 INFO L899 garLoopResultBuilder]: For program point L173-1(line 173) no Hoare annotation was computed. [2022-11-20 09:28:03,422 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 109 133) no Hoare annotation was computed. [2022-11-20 09:28:03,423 INFO L895 garLoopResultBuilder]: At program point L264(lines 249 267) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0))) (let ((.cse3 (not (= 2 ~waterLevel~0))) (.cse6 (not (= ~waterLevel~0 1))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (<= ~waterLevel~0 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse8 (not (<= 0 ~waterLevel~0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (not (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~3#1| 0)) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~0#1| 0) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse3 .cse5) (or .cse6 .cse0 .cse2 .cse5 .cse7) (or .cse2 .cse8 (not (<= 1 |old(~pumpRunning~0)|)) .cse5 (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse6 .cse0 .cse2 .cse4 .cse7) (or .cse0 .cse9 .cse2 .cse8 .cse5 .cse7) (or .cse0 .cse9 .cse2 .cse8 .cse4 .cse7)))) [2022-11-20 09:28:03,423 INFO L895 garLoopResultBuilder]: At program point L165(lines 160 167) the Hoare annotation is: (let ((.cse5 (not (= 2 ~waterLevel~0))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~waterLevel~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (<= ~waterLevel~0 1)))) (and (or .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse4 .cse0 .cse5 (and (<= 1 ~pumpRunning~0) (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~2#1| ~methaneLevelCritical~0)) .cse2) (or .cse4 .cse0 .cse5 .cse6) (or .cse4 .cse0 .cse1 .cse6 .cse3) (or .cse4 .cse0 .cse1 .cse2 .cse3))) [2022-11-20 09:28:03,423 INFO L899 garLoopResultBuilder]: For program point L258(lines 258 262) no Hoare annotation was computed. [2022-11-20 09:28:03,423 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 204 212) no Hoare annotation was computed. [2022-11-20 09:28:03,423 INFO L902 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 204 212) the Hoare annotation is: true [2022-11-20 09:28:03,424 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 204 212) no Hoare annotation was computed. [2022-11-20 09:28:03,424 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 193 203) the Hoare annotation is: true [2022-11-20 09:28:03,424 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 193 203) no Hoare annotation was computed. [2022-11-20 09:28:03,424 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 193 203) no Hoare annotation was computed. [2022-11-20 09:28:03,424 INFO L895 garLoopResultBuilder]: At program point L949(lines 944 952) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 0))) (.cse2 (not (<= 0 ~waterLevel~0))) (.cse8 (not (= ~waterLevel~0 1))) (.cse4 (not (<= 1 ~pumpRunning~0))) (.cse6 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse10 (not (<= 2 ~waterLevel~0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse11 (not (<= ~waterLevel~0 2))) (.cse5 (= |isMethaneAlarm_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse7 .cse4 .cse5 .cse6) (or .cse8 .cse1 .cse3 .cse4 .cse5 .cse6) (or .cse8 .cse1 .cse7 .cse4 .cse5 .cse6) (or .cse9 .cse1 .cse10 .cse3 .cse11 .cse5) (or .cse9 .cse1 .cse10 .cse7 .cse11 .cse5))) [2022-11-20 09:28:03,428 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 09:28:03,430 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-20 09:28:03,485 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 09:28:03 BoogieIcfgContainer [2022-11-20 09:28:03,485 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-20 09:28:03,486 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-20 09:28:03,486 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-20 09:28:03,486 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-20 09:28:03,487 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 09:27:12" (3/4) ... [2022-11-20 09:28:03,490 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-20 09:28:03,496 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-20 09:28:03,497 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-20 09:28:03,497 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-20 09:28:03,497 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-20 09:28:03,497 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-20 09:28:03,497 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-20 09:28:03,498 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-11-20 09:28:03,498 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-11-20 09:28:03,498 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-11-20 09:28:03,507 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-11-20 09:28:03,508 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-20 09:28:03,508 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-20 09:28:03,509 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-20 09:28:03,509 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-20 09:28:03,530 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (\old(waterLevel) == waterLevel && (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && 1 == systemActive) && 1 <= switchedOnBeforeTS)))) || !(\old(waterLevel) == 2))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (\old(waterLevel) == waterLevel && (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && 1 == systemActive) && 1 <= switchedOnBeforeTS)))) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) [2022-11-20 09:28:03,531 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-20 09:28:03,531 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || ((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && pumpRunning <= tmp___0) && tmp == waterLevel) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || (2 == \result && tmp == 2)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(1 == systemActive)) || (((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && pumpRunning <= tmp___0) && 1 == systemActive) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && pumpRunning <= tmp___0) && waterLevel <= 0) && tmp == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2))) && (((((!(\old(pumpRunning) == 0) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && pumpRunning <= tmp___0) && 1 == systemActive) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || ((((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 0) && tmp == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 0)) || ((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && pumpRunning <= tmp___0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && waterLevel == \result) && pumpRunning <= tmp___0) && tmp == waterLevel) && waterLevel == 1)) [2022-11-20 09:28:03,532 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2))) && ((((((((((((pumpRunning == 0 && 1 == systemActive) && waterLevel <= 0) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel) || !(\old(waterLevel) == 1)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((((((((((pumpRunning == 0 && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-20 09:28:03,532 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-20 09:28:03,532 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) || ((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS))) && ((((((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || ((((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) || (((((pumpRunning == 0 && waterLevel == \result) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || 2 == \result) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && ((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2))) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && waterLevel == \result) && waterLevel == 1)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == 0 && waterLevel == \result) && 1 == systemActive) && waterLevel <= 0) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS))) || (((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && waterLevel <= 0) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) [2022-11-20 09:28:03,532 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(waterLevel <= 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS)) && ((((((!(waterLevel <= 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(waterLevel == 1) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(waterLevel == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || \result == methaneLevelCritical)) && (((((!(pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || \result == methaneLevelCritical) [2022-11-20 09:28:03,533 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && !(\result == 0))) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 == waterLevel)) || !(methaneLevelCritical == 0))) && (((((!(1 == systemActive) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) [2022-11-20 09:28:03,533 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 == systemActive) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 == waterLevel)) || (1 <= pumpRunning && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || (pumpRunning == 0 && tmp == methaneLevelCritical)) [2022-11-20 09:28:03,533 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 == systemActive) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 == waterLevel)) || (1 <= pumpRunning && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 == waterLevel)) || !(1 <= methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) [2022-11-20 09:28:03,533 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 == waterLevel)) || !(1 <= methaneLevelCritical)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 == waterLevel)) || !(methaneLevelCritical == 0))) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(tmp == 0)) && tmp___0 == 0) && \result == 0))) && (((((!(1 == systemActive) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(tmp == 0)) && tmp___0 == 0) && \result == 0))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(tmp == 0)) && tmp___0 == 0) && \result == 0))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(tmp == 0)) && tmp___0 == 0) && \result == 0)) [2022-11-20 09:28:03,576 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/witness.graphml [2022-11-20 09:28:03,576 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-20 09:28:03,577 INFO L158 Benchmark]: Toolchain (without parser) took 52082.07ms. Allocated memory was 146.8MB in the beginning and 474.0MB in the end (delta: 327.2MB). Free memory was 114.6MB in the beginning and 324.3MB in the end (delta: -209.7MB). Peak memory consumption was 120.2MB. Max. memory is 16.1GB. [2022-11-20 09:28:03,577 INFO L158 Benchmark]: CDTParser took 0.29ms. Allocated memory is still 113.2MB. Free memory is still 66.2MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-20 09:28:03,577 INFO L158 Benchmark]: CACSL2BoogieTranslator took 587.58ms. Allocated memory is still 146.8MB. Free memory was 114.6MB in the beginning and 96.0MB in the end (delta: 18.6MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-20 09:28:03,578 INFO L158 Benchmark]: Boogie Procedure Inliner took 47.67ms. Allocated memory is still 146.8MB. Free memory was 95.4MB in the beginning and 93.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-20 09:28:03,578 INFO L158 Benchmark]: Boogie Preprocessor took 29.96ms. Allocated memory is still 146.8MB. Free memory was 93.3MB in the beginning and 91.8MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-20 09:28:03,578 INFO L158 Benchmark]: RCFGBuilder took 644.67ms. Allocated memory is still 146.8MB. Free memory was 91.8MB in the beginning and 74.4MB in the end (delta: 17.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-11-20 09:28:03,579 INFO L158 Benchmark]: TraceAbstraction took 50675.70ms. Allocated memory was 146.8MB in the beginning and 474.0MB in the end (delta: 327.2MB). Free memory was 73.7MB in the beginning and 330.6MB in the end (delta: -256.9MB). Peak memory consumption was 246.1MB. Max. memory is 16.1GB. [2022-11-20 09:28:03,579 INFO L158 Benchmark]: Witness Printer took 90.00ms. Allocated memory is still 474.0MB. Free memory was 330.6MB in the beginning and 324.3MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-20 09:28:03,581 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.29ms. Allocated memory is still 113.2MB. Free memory is still 66.2MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 587.58ms. Allocated memory is still 146.8MB. Free memory was 114.6MB in the beginning and 96.0MB in the end (delta: 18.6MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 47.67ms. Allocated memory is still 146.8MB. Free memory was 95.4MB in the beginning and 93.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 29.96ms. Allocated memory is still 146.8MB. Free memory was 93.3MB in the beginning and 91.8MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 644.67ms. Allocated memory is still 146.8MB. Free memory was 91.8MB in the beginning and 74.4MB in the end (delta: 17.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 50675.70ms. Allocated memory was 146.8MB in the beginning and 474.0MB in the end (delta: 327.2MB). Free memory was 73.7MB in the beginning and 330.6MB in the end (delta: -256.9MB). Peak memory consumption was 246.1MB. Max. memory is 16.1GB. * Witness Printer took 90.00ms. Allocated memory is still 474.0MB. Free memory was 330.6MB in the beginning and 324.3MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 105 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 50.5s, OverallIterations: 14, TraceHistogramMax: 9, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 16.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 21.2s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 8440 SdHoareTripleChecker+Valid, 9.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 8375 mSDsluCounter, 7777 SdHoareTripleChecker+Invalid, 8.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 6232 mSDsCounter, 3333 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 13129 IncrementalHoareTripleChecker+Invalid, 16462 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 3333 mSolverCounterUnsat, 1545 mSDtfsCounter, 13129 mSolverCounterSat, 0.3s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 2682 GetRequests, 2252 SyntacticMatches, 33 SemanticMatches, 397 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5874 ImplicationChecksByTransitivity, 6.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1270occurred in iteration=13, InterpolantAutomatonStates: 304, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.0s AutomataMinimizationTime, 14 MinimizatonAttempts, 733 StatesRemovedByMinimization, 12 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 48 LocationsWithAnnotation, 3894 PreInvPairs, 4258 NumberOfFragments, 7003 HoareAnnotationTreeSize, 3894 FomulaSimplifications, 14335 FormulaSimplificationTreeSizeReduction, 1.9s HoareSimplificationTime, 48 FomulaSimplificationsInter, 63973 FormulaSimplificationTreeSizeReductionInter, 19.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 8.9s InterpolantComputationTime, 2466 NumberOfCodeBlocks, 2466 NumberOfCodeBlocksAsserted, 19 NumberOfCheckSat, 3432 ConstructedInterpolants, 0 QuantifiedInterpolants, 8346 SizeOfPredicates, 13 NumberOfNonLiveVariables, 2972 ConjunctsInSsa, 79 ConjunctsInUnsatCore, 24 InterpolantComputations, 9 PerfectInterpolantSequences, 3019/3687 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 365]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 297]: Loop Invariant Derived loop invariant: ((((((((((((1 <= pumpRunning && 2 == waterLevel) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) || ((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1)) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1)) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 0) && 0 <= waterLevel)) || ((pumpRunning == 0 && splverifierCounter == 0) && 0 == systemActive)) || (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 0) && 0 <= waterLevel)) || ((((pumpRunning == 0 && 2 == waterLevel) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0)) || ((((((1 <= pumpRunning && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) - InvariantResult [Line: 296]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 839]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 858]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 417]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 866]: Loop Invariant Derived loop invariant: (((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (\old(waterLevel) == waterLevel && (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && 1 == systemActive) && 1 <= switchedOnBeforeTS)))) || !(\old(waterLevel) == 2))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (\old(waterLevel) == waterLevel && (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && 1 == systemActive) && 1 <= switchedOnBeforeTS)))) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 409]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: ((((((((((!(waterLevel <= 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS)) && ((((((!(waterLevel <= 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(waterLevel == 1) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(waterLevel == 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || \result == methaneLevelCritical)) && (((((!(pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || \result == methaneLevelCritical) - InvariantResult [Line: 431]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 985]: Loop Invariant Derived loop invariant: (((((((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && !(\result == 0))) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 == waterLevel)) || !(methaneLevelCritical == 0))) && (((((!(1 == systemActive) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) - InvariantResult [Line: 268]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && splverifierCounter == 0) && 0 == systemActive - InvariantResult [Line: 135]: Loop Invariant Derived loop invariant: ((((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2))) && ((((((((((((pumpRunning == 0 && 1 == systemActive) && waterLevel <= 0) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel) || !(\old(waterLevel) == 1)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((((((((((pumpRunning == 0 && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: ((((((((!(1 == systemActive) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 == waterLevel)) || (1 <= pumpRunning && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 == waterLevel)) || !(1 <= methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) - InvariantResult [Line: 287]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 846]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 355]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 876]: Loop Invariant Derived loop invariant: (((((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || ((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && pumpRunning <= tmp___0) && tmp == waterLevel) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || (2 == \result && tmp == 2)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(1 == systemActive)) || (((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && pumpRunning <= tmp___0) && 1 == systemActive) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && pumpRunning <= tmp___0) && waterLevel <= 0) && tmp == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2))) && (((((!(\old(pumpRunning) == 0) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && pumpRunning <= tmp___0) && 1 == systemActive) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || ((((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 0) && tmp == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 0)) || ((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && pumpRunning <= tmp___0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && waterLevel == \result) && pumpRunning <= tmp___0) && tmp == waterLevel) && waterLevel == 1)) - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: ((((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 832]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 249]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 == waterLevel)) || !(1 <= methaneLevelCritical)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 == waterLevel)) || !(methaneLevelCritical == 0))) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(tmp == 0)) && tmp___0 == 0) && \result == 0))) && (((((!(1 == systemActive) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(tmp == 0)) && tmp___0 == 0) && \result == 0))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(tmp == 0)) && tmp___0 == 0) && \result == 0))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(tmp == 0)) && tmp___0 == 0) && \result == 0)) - InvariantResult [Line: 976]: Loop Invariant Derived loop invariant: (((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) || ((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS))) && ((((((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || ((((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2)) || (((((pumpRunning == 0 && waterLevel == \result) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || 2 == \result) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && ((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2))) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && waterLevel == \result) && waterLevel == 1)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == 0 && waterLevel == \result) && 1 == systemActive) && waterLevel <= 0) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS))) || (((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && waterLevel <= 0) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 168]: Loop Invariant Derived loop invariant: ((((((((!(1 == systemActive) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 == waterLevel)) || (1 <= pumpRunning && tmp == methaneLevelCritical)) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || (pumpRunning == 0 && tmp == methaneLevelCritical)) - InvariantResult [Line: 908]: Loop Invariant Derived loop invariant: ((((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) RESULT: Ultimate proved your program to be correct! [2022-11-20 09:28:03,638 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f652d9e8-0363-489d-96c0-8d08c8d8b7c2/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE