./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 6b4ec56b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash b18268074b12ff6db81668668ee2d33af663d931f7be534d8799200934e1992a --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-6b4ec56 [2022-11-20 12:41:12,918 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-20 12:41:12,921 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-20 12:41:12,956 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-20 12:41:12,956 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-20 12:41:12,957 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-20 12:41:12,959 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-20 12:41:12,960 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-20 12:41:12,962 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-20 12:41:12,963 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-20 12:41:12,964 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-20 12:41:12,965 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-20 12:41:12,966 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-20 12:41:12,967 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-20 12:41:12,968 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-20 12:41:12,969 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-20 12:41:12,970 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-20 12:41:12,971 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-20 12:41:12,973 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-20 12:41:12,975 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-20 12:41:12,977 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-20 12:41:12,978 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-20 12:41:12,979 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-20 12:41:12,980 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-20 12:41:12,984 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-20 12:41:12,985 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-20 12:41:12,985 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-20 12:41:12,986 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-20 12:41:12,986 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-20 12:41:12,988 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-20 12:41:12,988 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-20 12:41:12,989 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-20 12:41:12,989 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-20 12:41:12,990 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-20 12:41:12,991 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-20 12:41:12,992 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-20 12:41:12,993 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-20 12:41:12,993 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-20 12:41:12,993 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-20 12:41:12,994 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-20 12:41:12,995 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-20 12:41:12,996 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-20 12:41:13,017 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-20 12:41:13,017 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-20 12:41:13,018 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-20 12:41:13,018 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-20 12:41:13,019 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-20 12:41:13,019 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-20 12:41:13,020 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-20 12:41:13,020 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-20 12:41:13,020 INFO L138 SettingsManager]: * Use SBE=true [2022-11-20 12:41:13,021 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-20 12:41:13,021 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-20 12:41:13,021 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-20 12:41:13,021 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-20 12:41:13,022 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-20 12:41:13,022 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-20 12:41:13,022 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-20 12:41:13,022 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-20 12:41:13,022 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-20 12:41:13,023 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-20 12:41:13,023 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-20 12:41:13,023 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-20 12:41:13,023 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-20 12:41:13,024 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-20 12:41:13,024 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-20 12:41:13,024 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-20 12:41:13,024 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-20 12:41:13,025 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-20 12:41:13,025 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-20 12:41:13,025 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-20 12:41:13,025 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-20 12:41:13,025 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-20 12:41:13,026 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-20 12:41:13,026 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-20 12:41:13,026 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> b18268074b12ff6db81668668ee2d33af663d931f7be534d8799200934e1992a [2022-11-20 12:41:13,328 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-20 12:41:13,365 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-20 12:41:13,367 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-20 12:41:13,369 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-20 12:41:13,369 INFO L275 PluginConnector]: CDTParser initialized [2022-11-20 12:41:13,370 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/../../sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c [2022-11-20 12:41:16,440 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-20 12:41:16,726 INFO L351 CDTParser]: Found 1 translation units. [2022-11-20 12:41:16,727 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c [2022-11-20 12:41:16,737 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/data/75ea57e8f/86b7adeb8a29447cb6af950d7a43b043/FLAG85b48db19 [2022-11-20 12:41:16,751 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/data/75ea57e8f/86b7adeb8a29447cb6af950d7a43b043 [2022-11-20 12:41:16,754 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-20 12:41:16,755 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-20 12:41:16,757 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-20 12:41:16,757 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-20 12:41:16,765 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-20 12:41:16,766 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 12:41:16" (1/1) ... [2022-11-20 12:41:16,767 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6603da31 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:41:16, skipping insertion in model container [2022-11-20 12:41:16,767 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 12:41:16" (1/1) ... [2022-11-20 12:41:16,775 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-20 12:41:16,815 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-20 12:41:16,966 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c[2897,2910] [2022-11-20 12:41:17,124 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 12:41:17,138 INFO L203 MainTranslator]: Completed pre-run [2022-11-20 12:41:17,157 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c[2897,2910] [2022-11-20 12:41:17,201 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 12:41:17,219 INFO L208 MainTranslator]: Completed translation [2022-11-20 12:41:17,220 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:41:17 WrapperNode [2022-11-20 12:41:17,220 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-20 12:41:17,221 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-20 12:41:17,221 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-20 12:41:17,221 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-20 12:41:17,228 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:41:17" (1/1) ... [2022-11-20 12:41:17,241 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:41:17" (1/1) ... [2022-11-20 12:41:17,270 INFO L138 Inliner]: procedures = 60, calls = 109, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 243 [2022-11-20 12:41:17,270 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-20 12:41:17,271 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-20 12:41:17,271 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-20 12:41:17,271 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-20 12:41:17,282 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:41:17" (1/1) ... [2022-11-20 12:41:17,283 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:41:17" (1/1) ... [2022-11-20 12:41:17,285 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:41:17" (1/1) ... [2022-11-20 12:41:17,285 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:41:17" (1/1) ... [2022-11-20 12:41:17,291 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:41:17" (1/1) ... [2022-11-20 12:41:17,312 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:41:17" (1/1) ... [2022-11-20 12:41:17,314 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:41:17" (1/1) ... [2022-11-20 12:41:17,315 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:41:17" (1/1) ... [2022-11-20 12:41:17,317 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-20 12:41:17,318 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-20 12:41:17,318 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-20 12:41:17,319 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-20 12:41:17,319 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:41:17" (1/1) ... [2022-11-20 12:41:17,351 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-20 12:41:17,363 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 12:41:17,379 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-20 12:41:17,381 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-20 12:41:17,417 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-20 12:41:17,417 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-20 12:41:17,417 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-20 12:41:17,418 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-20 12:41:17,418 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-20 12:41:17,418 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-20 12:41:17,418 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-20 12:41:17,418 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-20 12:41:17,418 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-20 12:41:17,419 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-20 12:41:17,419 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-20 12:41:17,419 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-11-20 12:41:17,419 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-11-20 12:41:17,419 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-11-20 12:41:17,419 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-11-20 12:41:17,420 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-11-20 12:41:17,420 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-11-20 12:41:17,420 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-20 12:41:17,420 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-20 12:41:17,420 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-20 12:41:17,420 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-20 12:41:17,421 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-20 12:41:17,421 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-20 12:41:17,421 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-20 12:41:17,502 INFO L235 CfgBuilder]: Building ICFG [2022-11-20 12:41:17,504 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-20 12:41:17,913 INFO L276 CfgBuilder]: Performing block encoding [2022-11-20 12:41:17,920 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-20 12:41:17,921 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-20 12:41:17,923 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 12:41:17 BoogieIcfgContainer [2022-11-20 12:41:17,923 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-20 12:41:17,926 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-20 12:41:17,926 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-20 12:41:17,929 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-20 12:41:17,930 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 12:41:16" (1/3) ... [2022-11-20 12:41:17,930 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@12eb8a0c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 12:41:17, skipping insertion in model container [2022-11-20 12:41:17,931 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:41:17" (2/3) ... [2022-11-20 12:41:17,931 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@12eb8a0c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 12:41:17, skipping insertion in model container [2022-11-20 12:41:17,931 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 12:41:17" (3/3) ... [2022-11-20 12:41:17,932 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product63.cil.c [2022-11-20 12:41:17,952 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-20 12:41:17,953 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-20 12:41:18,007 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-20 12:41:18,013 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@6606529d, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-20 12:41:18,013 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-20 12:41:18,040 INFO L276 IsEmpty]: Start isEmpty. Operand has 117 states, 86 states have (on average 1.3604651162790697) internal successors, (117), 97 states have internal predecessors, (117), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2022-11-20 12:41:18,050 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-20 12:41:18,050 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:41:18,050 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:41:18,051 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:41:18,058 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:41:18,058 INFO L85 PathProgramCache]: Analyzing trace with hash 2028778160, now seen corresponding path program 1 times [2022-11-20 12:41:18,067 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:41:18,068 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1303499435] [2022-11-20 12:41:18,068 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:41:18,068 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:41:18,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:18,240 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-20 12:41:18,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:18,248 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-20 12:41:18,250 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:18,254 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 12:41:18,254 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:41:18,255 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1303499435] [2022-11-20 12:41:18,255 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1303499435] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:41:18,256 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:41:18,256 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-20 12:41:18,257 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1445350164] [2022-11-20 12:41:18,258 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:41:18,262 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-20 12:41:18,262 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:41:18,302 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-20 12:41:18,302 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-20 12:41:18,305 INFO L87 Difference]: Start difference. First operand has 117 states, 86 states have (on average 1.3604651162790697) internal successors, (117), 97 states have internal predecessors, (117), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-20 12:41:18,346 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:41:18,346 INFO L93 Difference]: Finished difference Result 225 states and 304 transitions. [2022-11-20 12:41:18,347 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-20 12:41:18,348 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-11-20 12:41:18,348 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:41:18,358 INFO L225 Difference]: With dead ends: 225 [2022-11-20 12:41:18,358 INFO L226 Difference]: Without dead ends: 108 [2022-11-20 12:41:18,362 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-20 12:41:18,366 INFO L413 NwaCegarLoop]: 149 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 149 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 12:41:18,367 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 149 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 12:41:18,384 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108 states. [2022-11-20 12:41:18,410 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108 to 108. [2022-11-20 12:41:18,411 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 108 states, 79 states have (on average 1.3037974683544304) internal successors, (103), 89 states have internal predecessors, (103), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2022-11-20 12:41:18,414 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 108 states to 108 states and 140 transitions. [2022-11-20 12:41:18,416 INFO L78 Accepts]: Start accepts. Automaton has 108 states and 140 transitions. Word has length 32 [2022-11-20 12:41:18,416 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:41:18,417 INFO L495 AbstractCegarLoop]: Abstraction has 108 states and 140 transitions. [2022-11-20 12:41:18,417 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-20 12:41:18,417 INFO L276 IsEmpty]: Start isEmpty. Operand 108 states and 140 transitions. [2022-11-20 12:41:18,420 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-11-20 12:41:18,420 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:41:18,420 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:41:18,420 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-20 12:41:18,421 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:41:18,421 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:41:18,421 INFO L85 PathProgramCache]: Analyzing trace with hash -257998862, now seen corresponding path program 1 times [2022-11-20 12:41:18,422 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:41:18,422 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [23485360] [2022-11-20 12:41:18,422 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:41:18,422 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:41:18,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:18,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-20 12:41:18,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:18,619 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-11-20 12:41:18,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:18,627 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 12:41:18,627 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:41:18,627 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [23485360] [2022-11-20 12:41:18,628 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [23485360] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:41:18,628 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:41:18,628 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-20 12:41:18,628 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1471461008] [2022-11-20 12:41:18,628 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:41:18,640 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-20 12:41:18,640 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:41:18,642 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-20 12:41:18,642 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 12:41:18,643 INFO L87 Difference]: Start difference. First operand 108 states and 140 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-20 12:41:18,730 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:41:18,730 INFO L93 Difference]: Finished difference Result 307 states and 406 transitions. [2022-11-20 12:41:18,731 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-20 12:41:18,731 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2022-11-20 12:41:18,732 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:41:18,734 INFO L225 Difference]: With dead ends: 307 [2022-11-20 12:41:18,736 INFO L226 Difference]: Without dead ends: 207 [2022-11-20 12:41:18,738 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 12:41:18,740 INFO L413 NwaCegarLoop]: 170 mSDtfsCounter, 115 mSDsluCounter, 129 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 115 SdHoareTripleChecker+Valid, 299 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 12:41:18,742 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [115 Valid, 299 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 12:41:18,744 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 207 states. [2022-11-20 12:41:18,788 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 207 to 204. [2022-11-20 12:41:18,789 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 204 states, 147 states have (on average 1.3197278911564625) internal successors, (194), 166 states have internal predecessors, (194), 38 states have call successors, (38), 20 states have call predecessors, (38), 18 states have return successors, (36), 25 states have call predecessors, (36), 36 states have call successors, (36) [2022-11-20 12:41:18,793 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 204 states to 204 states and 268 transitions. [2022-11-20 12:41:18,793 INFO L78 Accepts]: Start accepts. Automaton has 204 states and 268 transitions. Word has length 37 [2022-11-20 12:41:18,793 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:41:18,794 INFO L495 AbstractCegarLoop]: Abstraction has 204 states and 268 transitions. [2022-11-20 12:41:18,794 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-20 12:41:18,794 INFO L276 IsEmpty]: Start isEmpty. Operand 204 states and 268 transitions. [2022-11-20 12:41:18,796 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-20 12:41:18,797 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:41:18,797 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:41:18,797 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-20 12:41:18,797 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:41:18,798 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:41:18,798 INFO L85 PathProgramCache]: Analyzing trace with hash 702056680, now seen corresponding path program 1 times [2022-11-20 12:41:18,798 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:41:18,798 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2012537621] [2022-11-20 12:41:18,798 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:41:18,798 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:41:18,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:18,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-20 12:41:18,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:18,975 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-11-20 12:41:18,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:18,995 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-20 12:41:18,995 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:41:18,995 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2012537621] [2022-11-20 12:41:18,995 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2012537621] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:41:18,996 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:41:18,996 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-20 12:41:18,996 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [643020097] [2022-11-20 12:41:18,996 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:41:18,997 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-20 12:41:18,997 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:41:18,997 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-20 12:41:18,998 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-20 12:41:18,998 INFO L87 Difference]: Start difference. First operand 204 states and 268 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-20 12:41:19,258 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:41:19,258 INFO L93 Difference]: Finished difference Result 538 states and 751 transitions. [2022-11-20 12:41:19,259 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-20 12:41:19,259 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 41 [2022-11-20 12:41:19,260 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:41:19,264 INFO L225 Difference]: With dead ends: 538 [2022-11-20 12:41:19,264 INFO L226 Difference]: Without dead ends: 342 [2022-11-20 12:41:19,269 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-11-20 12:41:19,271 INFO L413 NwaCegarLoop]: 158 mSDtfsCounter, 103 mSDsluCounter, 519 mSDsCounter, 0 mSdLazyCounter, 91 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 105 SdHoareTripleChecker+Valid, 677 SdHoareTripleChecker+Invalid, 103 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 91 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 12:41:19,272 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [105 Valid, 677 Invalid, 103 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 91 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 12:41:19,273 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 342 states. [2022-11-20 12:41:19,323 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 342 to 329. [2022-11-20 12:41:19,324 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 329 states, 240 states have (on average 1.2666666666666666) internal successors, (304), 259 states have internal predecessors, (304), 54 states have call successors, (54), 38 states have call predecessors, (54), 34 states have return successors, (70), 45 states have call predecessors, (70), 50 states have call successors, (70) [2022-11-20 12:41:19,328 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 329 states to 329 states and 428 transitions. [2022-11-20 12:41:19,329 INFO L78 Accepts]: Start accepts. Automaton has 329 states and 428 transitions. Word has length 41 [2022-11-20 12:41:19,329 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:41:19,329 INFO L495 AbstractCegarLoop]: Abstraction has 329 states and 428 transitions. [2022-11-20 12:41:19,330 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-20 12:41:19,330 INFO L276 IsEmpty]: Start isEmpty. Operand 329 states and 428 transitions. [2022-11-20 12:41:19,332 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2022-11-20 12:41:19,333 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:41:19,333 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:41:19,333 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-20 12:41:19,334 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:41:19,334 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:41:19,335 INFO L85 PathProgramCache]: Analyzing trace with hash 1444776659, now seen corresponding path program 1 times [2022-11-20 12:41:19,335 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:41:19,335 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1209764374] [2022-11-20 12:41:19,335 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:41:19,336 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:41:19,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:19,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-20 12:41:19,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:19,503 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-20 12:41:19,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:19,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:41:19,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:19,619 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 12:41:19,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:19,629 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-11-20 12:41:19,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:19,637 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 12:41:19,637 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:41:19,638 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1209764374] [2022-11-20 12:41:19,639 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1209764374] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:41:19,640 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:41:19,640 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-20 12:41:19,640 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1017623774] [2022-11-20 12:41:19,641 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:41:19,642 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-20 12:41:19,642 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:41:19,643 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-20 12:41:19,643 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-20 12:41:19,644 INFO L87 Difference]: Start difference. First operand 329 states and 428 transitions. Second operand has 6 states, 6 states have (on average 8.5) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-20 12:41:19,956 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:41:19,957 INFO L93 Difference]: Finished difference Result 746 states and 1031 transitions. [2022-11-20 12:41:19,957 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-20 12:41:19,958 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.5) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 64 [2022-11-20 12:41:19,958 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:41:19,967 INFO L225 Difference]: With dead ends: 746 [2022-11-20 12:41:19,968 INFO L226 Difference]: Without dead ends: 425 [2022-11-20 12:41:19,970 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-20 12:41:19,981 INFO L413 NwaCegarLoop]: 117 mSDtfsCounter, 86 mSDsluCounter, 386 mSDsCounter, 0 mSdLazyCounter, 174 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 91 SdHoareTripleChecker+Valid, 503 SdHoareTripleChecker+Invalid, 208 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 174 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 12:41:19,982 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [91 Valid, 503 Invalid, 208 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 174 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 12:41:19,985 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 425 states. [2022-11-20 12:41:20,056 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 425 to 389. [2022-11-20 12:41:20,059 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 389 states, 286 states have (on average 1.2517482517482517) internal successors, (358), 305 states have internal predecessors, (358), 58 states have call successors, (58), 38 states have call predecessors, (58), 44 states have return successors, (92), 57 states have call predecessors, (92), 54 states have call successors, (92) [2022-11-20 12:41:20,065 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 389 states to 389 states and 508 transitions. [2022-11-20 12:41:20,065 INFO L78 Accepts]: Start accepts. Automaton has 389 states and 508 transitions. Word has length 64 [2022-11-20 12:41:20,067 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:41:20,068 INFO L495 AbstractCegarLoop]: Abstraction has 389 states and 508 transitions. [2022-11-20 12:41:20,068 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.5) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-20 12:41:20,069 INFO L276 IsEmpty]: Start isEmpty. Operand 389 states and 508 transitions. [2022-11-20 12:41:20,080 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-20 12:41:20,083 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:41:20,084 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:41:20,085 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-20 12:41:20,086 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:41:20,086 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:41:20,086 INFO L85 PathProgramCache]: Analyzing trace with hash 968830382, now seen corresponding path program 1 times [2022-11-20 12:41:20,087 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:41:20,087 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1982644877] [2022-11-20 12:41:20,088 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:41:20,094 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:41:20,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:20,159 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-20 12:41:20,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:20,181 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-20 12:41:20,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:20,190 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:41:20,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:20,197 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 12:41:20,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:20,200 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-11-20 12:41:20,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:20,203 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 12:41:20,204 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:41:20,204 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1982644877] [2022-11-20 12:41:20,204 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1982644877] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:41:20,204 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:41:20,204 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-20 12:41:20,205 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1953140727] [2022-11-20 12:41:20,205 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:41:20,205 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-20 12:41:20,205 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:41:20,206 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-20 12:41:20,206 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-20 12:41:20,206 INFO L87 Difference]: Start difference. First operand 389 states and 508 transitions. Second operand has 4 states, 4 states have (on average 11.5) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (7), 3 states have call predecessors, (7), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-20 12:41:20,335 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:41:20,335 INFO L93 Difference]: Finished difference Result 657 states and 826 transitions. [2022-11-20 12:41:20,336 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-20 12:41:20,336 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.5) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (7), 3 states have call predecessors, (7), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 60 [2022-11-20 12:41:20,336 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:41:20,338 INFO L225 Difference]: With dead ends: 657 [2022-11-20 12:41:20,339 INFO L226 Difference]: Without dead ends: 355 [2022-11-20 12:41:20,340 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-20 12:41:20,346 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 83 mSDsluCounter, 122 mSDsCounter, 0 mSdLazyCounter, 78 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 94 SdHoareTripleChecker+Valid, 226 SdHoareTripleChecker+Invalid, 98 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 78 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 12:41:20,346 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [94 Valid, 226 Invalid, 98 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 78 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 12:41:20,347 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 355 states. [2022-11-20 12:41:20,386 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 355 to 353. [2022-11-20 12:41:20,387 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 353 states, 262 states have (on average 1.2595419847328244) internal successors, (330), 281 states have internal predecessors, (330), 46 states have call successors, (46), 34 states have call predecessors, (46), 44 states have return successors, (68), 49 states have call predecessors, (68), 46 states have call successors, (68) [2022-11-20 12:41:20,389 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 353 states to 353 states and 444 transitions. [2022-11-20 12:41:20,390 INFO L78 Accepts]: Start accepts. Automaton has 353 states and 444 transitions. Word has length 60 [2022-11-20 12:41:20,390 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:41:20,390 INFO L495 AbstractCegarLoop]: Abstraction has 353 states and 444 transitions. [2022-11-20 12:41:20,390 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 11.5) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (7), 3 states have call predecessors, (7), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-20 12:41:20,391 INFO L276 IsEmpty]: Start isEmpty. Operand 353 states and 444 transitions. [2022-11-20 12:41:20,392 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2022-11-20 12:41:20,393 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:41:20,393 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:41:20,394 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-20 12:41:20,394 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:41:20,394 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:41:20,394 INFO L85 PathProgramCache]: Analyzing trace with hash -1463987243, now seen corresponding path program 1 times [2022-11-20 12:41:20,395 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:41:20,395 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [198775966] [2022-11-20 12:41:20,395 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:41:20,395 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:41:20,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:20,510 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-20 12:41:20,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:20,518 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-20 12:41:20,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:20,555 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:41:20,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:20,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 12:41:20,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:20,615 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-11-20 12:41:20,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:20,619 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 12:41:20,619 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:41:20,619 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [198775966] [2022-11-20 12:41:20,620 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [198775966] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:41:20,620 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:41:20,620 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-20 12:41:20,620 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [816411416] [2022-11-20 12:41:20,620 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:41:20,622 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-20 12:41:20,622 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:41:20,622 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-20 12:41:20,622 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-20 12:41:20,623 INFO L87 Difference]: Start difference. First operand 353 states and 444 transitions. Second operand has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-20 12:41:20,803 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:41:20,804 INFO L93 Difference]: Finished difference Result 716 states and 927 transitions. [2022-11-20 12:41:20,804 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-20 12:41:20,804 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 64 [2022-11-20 12:41:20,805 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:41:20,807 INFO L225 Difference]: With dead ends: 716 [2022-11-20 12:41:20,808 INFO L226 Difference]: Without dead ends: 371 [2022-11-20 12:41:20,809 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-20 12:41:20,810 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 83 mSDsluCounter, 239 mSDsCounter, 0 mSdLazyCounter, 125 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 89 SdHoareTripleChecker+Valid, 343 SdHoareTripleChecker+Invalid, 148 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 125 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 12:41:20,811 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [89 Valid, 343 Invalid, 148 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 12:41:20,812 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 371 states. [2022-11-20 12:41:20,850 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 371 to 357. [2022-11-20 12:41:20,851 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 357 states, 266 states have (on average 1.255639097744361) internal successors, (334), 285 states have internal predecessors, (334), 46 states have call successors, (46), 34 states have call predecessors, (46), 44 states have return successors, (68), 49 states have call predecessors, (68), 46 states have call successors, (68) [2022-11-20 12:41:20,854 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 357 states to 357 states and 448 transitions. [2022-11-20 12:41:20,855 INFO L78 Accepts]: Start accepts. Automaton has 357 states and 448 transitions. Word has length 64 [2022-11-20 12:41:20,855 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:41:20,855 INFO L495 AbstractCegarLoop]: Abstraction has 357 states and 448 transitions. [2022-11-20 12:41:20,855 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-20 12:41:20,856 INFO L276 IsEmpty]: Start isEmpty. Operand 357 states and 448 transitions. [2022-11-20 12:41:20,857 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2022-11-20 12:41:20,857 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:41:20,857 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:41:20,857 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-20 12:41:20,858 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:41:20,858 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:41:20,858 INFO L85 PathProgramCache]: Analyzing trace with hash -762387369, now seen corresponding path program 1 times [2022-11-20 12:41:20,858 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:41:20,858 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1964508696] [2022-11-20 12:41:20,858 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:41:20,859 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:41:20,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:20,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-20 12:41:20,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:20,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-20 12:41:20,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:20,975 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:41:20,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:20,993 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 12:41:20,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:20,997 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-11-20 12:41:20,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:20,999 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 12:41:21,000 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:41:21,000 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1964508696] [2022-11-20 12:41:21,000 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1964508696] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:41:21,000 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:41:21,000 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-20 12:41:21,001 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2077060279] [2022-11-20 12:41:21,001 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:41:21,001 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-20 12:41:21,001 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:41:21,002 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-20 12:41:21,002 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-20 12:41:21,002 INFO L87 Difference]: Start difference. First operand 357 states and 448 transitions. Second operand has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-20 12:41:21,328 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:41:21,328 INFO L93 Difference]: Finished difference Result 998 states and 1301 transitions. [2022-11-20 12:41:21,328 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-20 12:41:21,329 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 64 [2022-11-20 12:41:21,329 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:41:21,333 INFO L225 Difference]: With dead ends: 998 [2022-11-20 12:41:21,333 INFO L226 Difference]: Without dead ends: 649 [2022-11-20 12:41:21,335 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 14 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-20 12:41:21,336 INFO L413 NwaCegarLoop]: 157 mSDtfsCounter, 258 mSDsluCounter, 211 mSDsCounter, 0 mSdLazyCounter, 204 mSolverCounterSat, 80 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 266 SdHoareTripleChecker+Valid, 368 SdHoareTripleChecker+Invalid, 284 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 80 IncrementalHoareTripleChecker+Valid, 204 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 12:41:21,337 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [266 Valid, 368 Invalid, 284 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [80 Valid, 204 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 12:41:21,338 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 649 states. [2022-11-20 12:41:21,387 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 649 to 642. [2022-11-20 12:41:21,388 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 642 states, 477 states have (on average 1.2243186582809225) internal successors, (584), 505 states have internal predecessors, (584), 87 states have call successors, (87), 71 states have call predecessors, (87), 77 states have return successors, (139), 88 states have call predecessors, (139), 87 states have call successors, (139) [2022-11-20 12:41:21,392 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 642 states to 642 states and 810 transitions. [2022-11-20 12:41:21,393 INFO L78 Accepts]: Start accepts. Automaton has 642 states and 810 transitions. Word has length 64 [2022-11-20 12:41:21,395 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:41:21,395 INFO L495 AbstractCegarLoop]: Abstraction has 642 states and 810 transitions. [2022-11-20 12:41:21,395 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-20 12:41:21,395 INFO L276 IsEmpty]: Start isEmpty. Operand 642 states and 810 transitions. [2022-11-20 12:41:21,396 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-11-20 12:41:21,397 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:41:21,397 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:41:21,397 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-20 12:41:21,397 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:41:21,398 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:41:21,398 INFO L85 PathProgramCache]: Analyzing trace with hash -480731343, now seen corresponding path program 1 times [2022-11-20 12:41:21,398 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:41:21,398 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [652083187] [2022-11-20 12:41:21,398 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:41:21,398 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:41:21,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:21,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:41:21,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:21,663 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-20 12:41:21,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:21,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-11-20 12:41:21,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:21,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:41:21,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:21,733 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 12:41:21,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:21,744 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-11-20 12:41:21,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:21,749 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 12:41:21,749 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:41:21,749 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [652083187] [2022-11-20 12:41:21,750 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [652083187] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:41:21,750 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:41:21,750 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-20 12:41:21,750 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [662979621] [2022-11-20 12:41:21,750 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:41:21,751 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-20 12:41:21,752 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:41:21,752 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-20 12:41:21,752 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-11-20 12:41:21,753 INFO L87 Difference]: Start difference. First operand 642 states and 810 transitions. Second operand has 10 states, 10 states have (on average 5.3) internal successors, (53), 8 states have internal predecessors, (53), 5 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 5 states have call successors, (6) [2022-11-20 12:41:23,264 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:41:23,264 INFO L93 Difference]: Finished difference Result 2031 states and 2688 transitions. [2022-11-20 12:41:23,264 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-11-20 12:41:23,265 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.3) internal successors, (53), 8 states have internal predecessors, (53), 5 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 5 states have call successors, (6) Word has length 68 [2022-11-20 12:41:23,266 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:41:23,274 INFO L225 Difference]: With dead ends: 2031 [2022-11-20 12:41:23,275 INFO L226 Difference]: Without dead ends: 1510 [2022-11-20 12:41:23,293 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 15 SyntacticMatches, 1 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 297 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=221, Invalid=969, Unknown=0, NotChecked=0, Total=1190 [2022-11-20 12:41:23,296 INFO L413 NwaCegarLoop]: 127 mSDtfsCounter, 692 mSDsluCounter, 694 mSDsCounter, 0 mSdLazyCounter, 1169 mSolverCounterSat, 253 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 703 SdHoareTripleChecker+Valid, 821 SdHoareTripleChecker+Invalid, 1422 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 253 IncrementalHoareTripleChecker+Valid, 1169 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-20 12:41:23,296 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [703 Valid, 821 Invalid, 1422 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [253 Valid, 1169 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-11-20 12:41:23,299 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1510 states. [2022-11-20 12:41:23,452 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1510 to 1245. [2022-11-20 12:41:23,454 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1245 states, 924 states have (on average 1.222943722943723) internal successors, (1130), 985 states have internal predecessors, (1130), 170 states have call successors, (170), 126 states have call predecessors, (170), 150 states have return successors, (270), 172 states have call predecessors, (270), 170 states have call successors, (270) [2022-11-20 12:41:23,461 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1245 states to 1245 states and 1570 transitions. [2022-11-20 12:41:23,461 INFO L78 Accepts]: Start accepts. Automaton has 1245 states and 1570 transitions. Word has length 68 [2022-11-20 12:41:23,462 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:41:23,462 INFO L495 AbstractCegarLoop]: Abstraction has 1245 states and 1570 transitions. [2022-11-20 12:41:23,462 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.3) internal successors, (53), 8 states have internal predecessors, (53), 5 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 5 states have call successors, (6) [2022-11-20 12:41:23,462 INFO L276 IsEmpty]: Start isEmpty. Operand 1245 states and 1570 transitions. [2022-11-20 12:41:23,469 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-11-20 12:41:23,469 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:41:23,469 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:41:23,470 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-20 12:41:23,470 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:41:23,470 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:41:23,470 INFO L85 PathProgramCache]: Analyzing trace with hash -608570004, now seen corresponding path program 1 times [2022-11-20 12:41:23,471 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:41:23,471 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1918316052] [2022-11-20 12:41:23,471 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:41:23,471 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:41:23,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:23,544 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:41:23,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:23,554 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-20 12:41:23,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:23,578 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 12:41:23,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:23,587 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-20 12:41:23,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:23,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:41:23,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:23,606 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 12:41:23,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:23,609 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2022-11-20 12:41:23,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:23,612 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2022-11-20 12:41:23,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:23,616 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-20 12:41:23,616 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:41:23,617 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1918316052] [2022-11-20 12:41:23,617 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1918316052] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:41:23,617 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:41:23,617 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-20 12:41:23,617 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [145648468] [2022-11-20 12:41:23,618 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:41:23,618 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-20 12:41:23,618 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:41:23,619 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-20 12:41:23,619 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-20 12:41:23,620 INFO L87 Difference]: Start difference. First operand 1245 states and 1570 transitions. Second operand has 7 states, 7 states have (on average 11.0) internal successors, (77), 4 states have internal predecessors, (77), 4 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2022-11-20 12:41:24,058 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:41:24,058 INFO L93 Difference]: Finished difference Result 1481 states and 1859 transitions. [2022-11-20 12:41:24,059 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-20 12:41:24,059 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 11.0) internal successors, (77), 4 states have internal predecessors, (77), 4 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) Word has length 98 [2022-11-20 12:41:24,059 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:41:24,062 INFO L225 Difference]: With dead ends: 1481 [2022-11-20 12:41:24,062 INFO L226 Difference]: Without dead ends: 637 [2022-11-20 12:41:24,065 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2022-11-20 12:41:24,067 INFO L413 NwaCegarLoop]: 113 mSDtfsCounter, 332 mSDsluCounter, 231 mSDsCounter, 0 mSdLazyCounter, 304 mSolverCounterSat, 115 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 341 SdHoareTripleChecker+Valid, 344 SdHoareTripleChecker+Invalid, 419 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 115 IncrementalHoareTripleChecker+Valid, 304 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-20 12:41:24,068 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [341 Valid, 344 Invalid, 419 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [115 Valid, 304 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-20 12:41:24,069 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 637 states. [2022-11-20 12:41:24,157 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 637 to 611. [2022-11-20 12:41:24,158 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 611 states, 454 states have (on average 1.1916299559471366) internal successors, (541), 482 states have internal predecessors, (541), 82 states have call successors, (82), 62 states have call predecessors, (82), 74 states have return successors, (132), 84 states have call predecessors, (132), 82 states have call successors, (132) [2022-11-20 12:41:24,162 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 611 states to 611 states and 755 transitions. [2022-11-20 12:41:24,162 INFO L78 Accepts]: Start accepts. Automaton has 611 states and 755 transitions. Word has length 98 [2022-11-20 12:41:24,162 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:41:24,163 INFO L495 AbstractCegarLoop]: Abstraction has 611 states and 755 transitions. [2022-11-20 12:41:24,163 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 11.0) internal successors, (77), 4 states have internal predecessors, (77), 4 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2022-11-20 12:41:24,163 INFO L276 IsEmpty]: Start isEmpty. Operand 611 states and 755 transitions. [2022-11-20 12:41:24,164 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2022-11-20 12:41:24,165 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:41:24,165 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:41:24,165 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-20 12:41:24,165 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:41:24,166 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:41:24,166 INFO L85 PathProgramCache]: Analyzing trace with hash 115908773, now seen corresponding path program 1 times [2022-11-20 12:41:24,166 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:41:24,166 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1817587633] [2022-11-20 12:41:24,166 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:41:24,167 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:41:24,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:24,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:41:24,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:24,317 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-20 12:41:24,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:24,349 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 12:41:24,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:24,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-20 12:41:24,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:24,371 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:41:24,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:24,391 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 12:41:24,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:24,394 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-11-20 12:41:24,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:24,410 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2022-11-20 12:41:24,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:24,414 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 91 [2022-11-20 12:41:24,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:24,423 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-20 12:41:24,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:24,425 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:41:24,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:24,427 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2022-11-20 12:41:24,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:24,430 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 8 proven. 20 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-11-20 12:41:24,430 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:41:24,430 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1817587633] [2022-11-20 12:41:24,430 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1817587633] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 12:41:24,430 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1128475526] [2022-11-20 12:41:24,431 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:41:24,431 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 12:41:24,431 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 12:41:24,439 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 12:41:24,441 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-20 12:41:24,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:24,555 INFO L263 TraceCheckSpWp]: Trace formula consists of 397 conjuncts, 8 conjunts are in the unsatisfiable core [2022-11-20 12:41:24,563 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 12:41:24,836 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 30 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:41:24,836 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 12:41:25,140 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 18 proven. 10 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-11-20 12:41:25,140 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1128475526] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 12:41:25,140 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 12:41:25,141 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2022-11-20 12:41:25,141 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1759290353] [2022-11-20 12:41:25,141 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 12:41:25,142 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-11-20 12:41:25,142 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:41:25,143 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-11-20 12:41:25,143 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2022-11-20 12:41:25,143 INFO L87 Difference]: Start difference. First operand 611 states and 755 transitions. Second operand has 15 states, 15 states have (on average 10.333333333333334) internal successors, (155), 10 states have internal predecessors, (155), 6 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (24), 8 states have call predecessors, (24), 6 states have call successors, (24) [2022-11-20 12:41:26,732 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:41:26,732 INFO L93 Difference]: Finished difference Result 1306 states and 1651 transitions. [2022-11-20 12:41:26,732 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-11-20 12:41:26,733 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 10.333333333333334) internal successors, (155), 10 states have internal predecessors, (155), 6 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (24), 8 states have call predecessors, (24), 6 states have call successors, (24) Word has length 121 [2022-11-20 12:41:26,733 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:41:26,737 INFO L225 Difference]: With dead ends: 1306 [2022-11-20 12:41:26,737 INFO L226 Difference]: Without dead ends: 756 [2022-11-20 12:41:26,740 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 319 GetRequests, 273 SyntacticMatches, 4 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 462 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=441, Invalid=1451, Unknown=0, NotChecked=0, Total=1892 [2022-11-20 12:41:26,741 INFO L413 NwaCegarLoop]: 165 mSDtfsCounter, 499 mSDsluCounter, 1032 mSDsCounter, 0 mSdLazyCounter, 1303 mSolverCounterSat, 256 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 503 SdHoareTripleChecker+Valid, 1197 SdHoareTripleChecker+Invalid, 1559 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 256 IncrementalHoareTripleChecker+Valid, 1303 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-20 12:41:26,742 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [503 Valid, 1197 Invalid, 1559 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [256 Valid, 1303 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-11-20 12:41:26,743 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 756 states. [2022-11-20 12:41:26,831 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 756 to 672. [2022-11-20 12:41:26,832 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 672 states, 494 states have (on average 1.1720647773279351) internal successors, (579), 530 states have internal predecessors, (579), 92 states have call successors, (92), 76 states have call predecessors, (92), 85 states have return successors, (124), 89 states have call predecessors, (124), 92 states have call successors, (124) [2022-11-20 12:41:26,836 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 672 states to 672 states and 795 transitions. [2022-11-20 12:41:26,836 INFO L78 Accepts]: Start accepts. Automaton has 672 states and 795 transitions. Word has length 121 [2022-11-20 12:41:26,837 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:41:26,838 INFO L495 AbstractCegarLoop]: Abstraction has 672 states and 795 transitions. [2022-11-20 12:41:26,838 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 10.333333333333334) internal successors, (155), 10 states have internal predecessors, (155), 6 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (24), 8 states have call predecessors, (24), 6 states have call successors, (24) [2022-11-20 12:41:26,838 INFO L276 IsEmpty]: Start isEmpty. Operand 672 states and 795 transitions. [2022-11-20 12:41:26,843 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 212 [2022-11-20 12:41:26,843 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:41:26,844 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:41:26,860 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-20 12:41:27,052 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 12:41:27,053 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:41:27,053 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:41:27,053 INFO L85 PathProgramCache]: Analyzing trace with hash 950034461, now seen corresponding path program 1 times [2022-11-20 12:41:27,053 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:41:27,053 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [642608916] [2022-11-20 12:41:27,053 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:41:27,053 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:41:27,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:27,294 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:41:27,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:27,305 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-20 12:41:27,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:27,390 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 12:41:27,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:27,406 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-20 12:41:27,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:27,441 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:41:27,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:27,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 12:41:27,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:27,569 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-11-20 12:41:27,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:27,606 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 12:41:27,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:27,609 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:41:27,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:27,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 12:41:27,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:27,615 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-20 12:41:27,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:27,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:41:27,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:27,621 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 124 [2022-11-20 12:41:27,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:27,693 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 12:41:27,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:27,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:41:27,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:27,713 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 12:41:27,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:27,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 165 [2022-11-20 12:41:27,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:27,721 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 174 [2022-11-20 12:41:27,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:27,727 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:41:27,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:27,735 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 12:41:27,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:27,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 203 [2022-11-20 12:41:27,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:27,752 INFO L134 CoverageAnalysis]: Checked inductivity of 225 backedges. 91 proven. 45 refuted. 0 times theorem prover too weak. 89 trivial. 0 not checked. [2022-11-20 12:41:27,752 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:41:27,753 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [642608916] [2022-11-20 12:41:27,753 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [642608916] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 12:41:27,753 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1793867619] [2022-11-20 12:41:27,753 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:41:27,753 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 12:41:27,754 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 12:41:27,756 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 12:41:27,786 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-20 12:41:27,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:27,924 INFO L263 TraceCheckSpWp]: Trace formula consists of 631 conjuncts, 13 conjunts are in the unsatisfiable core [2022-11-20 12:41:27,931 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 12:41:28,258 INFO L134 CoverageAnalysis]: Checked inductivity of 225 backedges. 163 proven. 4 refuted. 0 times theorem prover too weak. 58 trivial. 0 not checked. [2022-11-20 12:41:28,258 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 12:41:28,893 INFO L134 CoverageAnalysis]: Checked inductivity of 225 backedges. 77 proven. 39 refuted. 0 times theorem prover too weak. 109 trivial. 0 not checked. [2022-11-20 12:41:28,894 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1793867619] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 12:41:28,894 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 12:41:28,894 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 10, 11] total 30 [2022-11-20 12:41:28,894 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1163794148] [2022-11-20 12:41:28,894 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 12:41:28,895 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-11-20 12:41:28,895 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:41:28,896 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-11-20 12:41:28,896 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=126, Invalid=744, Unknown=0, NotChecked=0, Total=870 [2022-11-20 12:41:28,896 INFO L87 Difference]: Start difference. First operand 672 states and 795 transitions. Second operand has 30 states, 30 states have (on average 7.8) internal successors, (234), 23 states have internal predecessors, (234), 10 states have call successors, (40), 8 states have call predecessors, (40), 12 states have return successors, (44), 12 states have call predecessors, (44), 10 states have call successors, (44) [2022-11-20 12:41:32,547 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:41:32,547 INFO L93 Difference]: Finished difference Result 1906 states and 2356 transitions. [2022-11-20 12:41:32,548 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 67 states. [2022-11-20 12:41:32,549 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 30 states have (on average 7.8) internal successors, (234), 23 states have internal predecessors, (234), 10 states have call successors, (40), 8 states have call predecessors, (40), 12 states have return successors, (44), 12 states have call predecessors, (44), 10 states have call successors, (44) Word has length 211 [2022-11-20 12:41:32,549 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:41:32,555 INFO L225 Difference]: With dead ends: 1906 [2022-11-20 12:41:32,555 INFO L226 Difference]: Without dead ends: 1242 [2022-11-20 12:41:32,561 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 566 GetRequests, 465 SyntacticMatches, 8 SemanticMatches, 93 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2375 ImplicationChecksByTransitivity, 1.9s TimeCoverageRelationStatistics Valid=1403, Invalid=7527, Unknown=0, NotChecked=0, Total=8930 [2022-11-20 12:41:32,562 INFO L413 NwaCegarLoop]: 134 mSDtfsCounter, 2020 mSDsluCounter, 1262 mSDsCounter, 0 mSdLazyCounter, 2888 mSolverCounterSat, 891 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2020 SdHoareTripleChecker+Valid, 1396 SdHoareTripleChecker+Invalid, 3779 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 891 IncrementalHoareTripleChecker+Valid, 2888 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.0s IncrementalHoareTripleChecker+Time [2022-11-20 12:41:32,562 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2020 Valid, 1396 Invalid, 3779 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [891 Valid, 2888 Invalid, 0 Unknown, 0 Unchecked, 2.0s Time] [2022-11-20 12:41:32,564 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1242 states. [2022-11-20 12:41:32,692 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1242 to 1145. [2022-11-20 12:41:32,695 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1145 states, 855 states have (on average 1.1076023391812866) internal successors, (947), 895 states have internal predecessors, (947), 156 states have call successors, (156), 134 states have call predecessors, (156), 133 states have return successors, (187), 143 states have call predecessors, (187), 156 states have call successors, (187) [2022-11-20 12:41:32,701 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1145 states to 1145 states and 1290 transitions. [2022-11-20 12:41:32,701 INFO L78 Accepts]: Start accepts. Automaton has 1145 states and 1290 transitions. Word has length 211 [2022-11-20 12:41:32,702 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:41:32,702 INFO L495 AbstractCegarLoop]: Abstraction has 1145 states and 1290 transitions. [2022-11-20 12:41:32,702 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 30 states have (on average 7.8) internal successors, (234), 23 states have internal predecessors, (234), 10 states have call successors, (40), 8 states have call predecessors, (40), 12 states have return successors, (44), 12 states have call predecessors, (44), 10 states have call successors, (44) [2022-11-20 12:41:32,702 INFO L276 IsEmpty]: Start isEmpty. Operand 1145 states and 1290 transitions. [2022-11-20 12:41:32,708 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 236 [2022-11-20 12:41:32,708 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:41:32,708 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:41:32,719 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-20 12:41:32,914 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-20 12:41:32,914 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:41:32,915 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:41:32,915 INFO L85 PathProgramCache]: Analyzing trace with hash -1994411691, now seen corresponding path program 1 times [2022-11-20 12:41:32,915 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:41:32,915 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1027973472] [2022-11-20 12:41:32,915 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:41:32,915 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:41:32,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:33,167 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:41:33,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:33,177 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-20 12:41:33,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:33,199 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 12:41:33,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:33,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-20 12:41:33,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:33,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:41:33,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:33,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 12:41:33,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:33,258 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-11-20 12:41:33,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:33,326 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 12:41:33,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:33,328 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:41:33,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:33,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 12:41:33,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:33,343 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-20 12:41:33,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:33,348 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:41:33,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:33,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-11-20 12:41:33,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:33,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2022-11-20 12:41:33,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:33,376 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2022-11-20 12:41:33,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:33,394 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 12:41:33,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:33,397 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:41:33,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:33,400 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 12:41:33,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:33,402 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-20 12:41:33,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:33,404 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 175 [2022-11-20 12:41:33,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:33,406 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2022-11-20 12:41:33,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:33,408 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 189 [2022-11-20 12:41:33,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:33,411 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 198 [2022-11-20 12:41:33,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:33,420 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:41:33,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:33,433 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 12:41:33,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:33,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 227 [2022-11-20 12:41:33,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:33,439 INFO L134 CoverageAnalysis]: Checked inductivity of 275 backedges. 86 proven. 59 refuted. 0 times theorem prover too weak. 130 trivial. 0 not checked. [2022-11-20 12:41:33,439 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:41:33,439 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1027973472] [2022-11-20 12:41:33,440 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1027973472] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 12:41:33,440 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [98538102] [2022-11-20 12:41:33,440 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:41:33,440 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 12:41:33,440 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 12:41:33,444 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 12:41:33,467 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-20 12:41:33,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:33,616 INFO L263 TraceCheckSpWp]: Trace formula consists of 689 conjuncts, 12 conjunts are in the unsatisfiable core [2022-11-20 12:41:33,621 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 12:41:33,822 INFO L134 CoverageAnalysis]: Checked inductivity of 275 backedges. 206 proven. 11 refuted. 0 times theorem prover too weak. 58 trivial. 0 not checked. [2022-11-20 12:41:33,823 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 12:41:34,486 INFO L134 CoverageAnalysis]: Checked inductivity of 275 backedges. 101 proven. 62 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2022-11-20 12:41:34,487 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [98538102] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 12:41:34,487 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 12:41:34,487 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 8, 8] total 22 [2022-11-20 12:41:34,487 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2135429758] [2022-11-20 12:41:34,488 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 12:41:34,489 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-11-20 12:41:34,489 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:41:34,489 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-11-20 12:41:34,490 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=394, Unknown=0, NotChecked=0, Total=462 [2022-11-20 12:41:34,490 INFO L87 Difference]: Start difference. First operand 1145 states and 1290 transitions. Second operand has 22 states, 22 states have (on average 11.863636363636363) internal successors, (261), 15 states have internal predecessors, (261), 7 states have call successors, (54), 8 states have call predecessors, (54), 11 states have return successors, (48), 10 states have call predecessors, (48), 7 states have call successors, (48) [2022-11-20 12:41:36,486 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:41:36,486 INFO L93 Difference]: Finished difference Result 2238 states and 2552 transitions. [2022-11-20 12:41:36,487 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-11-20 12:41:36,487 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 11.863636363636363) internal successors, (261), 15 states have internal predecessors, (261), 7 states have call successors, (54), 8 states have call predecessors, (54), 11 states have return successors, (48), 10 states have call predecessors, (48), 7 states have call successors, (48) Word has length 235 [2022-11-20 12:41:36,488 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:41:36,493 INFO L225 Difference]: With dead ends: 2238 [2022-11-20 12:41:36,493 INFO L226 Difference]: Without dead ends: 1207 [2022-11-20 12:41:36,497 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 574 GetRequests, 526 SyntacticMatches, 1 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 442 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=483, Invalid=1869, Unknown=0, NotChecked=0, Total=2352 [2022-11-20 12:41:36,498 INFO L413 NwaCegarLoop]: 44 mSDtfsCounter, 775 mSDsluCounter, 333 mSDsCounter, 0 mSdLazyCounter, 1717 mSolverCounterSat, 305 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 778 SdHoareTripleChecker+Valid, 377 SdHoareTripleChecker+Invalid, 2022 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 305 IncrementalHoareTripleChecker+Valid, 1717 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-11-20 12:41:36,498 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [778 Valid, 377 Invalid, 2022 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [305 Valid, 1717 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2022-11-20 12:41:36,500 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1207 states. [2022-11-20 12:41:36,626 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1207 to 1169. [2022-11-20 12:41:36,628 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1169 states, 871 states have (on average 1.1010332950631458) internal successors, (959), 911 states have internal predecessors, (959), 156 states have call successors, (156), 142 states have call predecessors, (156), 141 states have return successors, (187), 143 states have call predecessors, (187), 156 states have call successors, (187) [2022-11-20 12:41:36,633 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1169 states to 1169 states and 1302 transitions. [2022-11-20 12:41:36,634 INFO L78 Accepts]: Start accepts. Automaton has 1169 states and 1302 transitions. Word has length 235 [2022-11-20 12:41:36,634 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:41:36,634 INFO L495 AbstractCegarLoop]: Abstraction has 1169 states and 1302 transitions. [2022-11-20 12:41:36,635 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 11.863636363636363) internal successors, (261), 15 states have internal predecessors, (261), 7 states have call successors, (54), 8 states have call predecessors, (54), 11 states have return successors, (48), 10 states have call predecessors, (48), 7 states have call successors, (48) [2022-11-20 12:41:36,635 INFO L276 IsEmpty]: Start isEmpty. Operand 1169 states and 1302 transitions. [2022-11-20 12:41:36,640 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 237 [2022-11-20 12:41:36,641 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:41:36,641 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:41:36,660 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-20 12:41:36,851 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-20 12:41:36,851 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:41:36,852 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:41:36,852 INFO L85 PathProgramCache]: Analyzing trace with hash 213775524, now seen corresponding path program 1 times [2022-11-20 12:41:36,852 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:41:36,852 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [229326097] [2022-11-20 12:41:36,852 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:41:36,852 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:41:36,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:37,384 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:41:37,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:37,394 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-20 12:41:37,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:37,425 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 12:41:37,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:37,434 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-20 12:41:37,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:37,439 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:41:37,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:37,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 12:41:37,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:37,445 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-11-20 12:41:37,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:37,506 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 12:41:37,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:37,509 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:41:37,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:37,513 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 12:41:37,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:37,521 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-20 12:41:37,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:37,523 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:41:37,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:37,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-11-20 12:41:37,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:37,538 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2022-11-20 12:41:37,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:37,541 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 135 [2022-11-20 12:41:37,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:37,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 12:41:37,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:37,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:41:37,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:37,593 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 12:41:37,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:37,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-20 12:41:37,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:37,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2022-11-20 12:41:37,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:37,618 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2022-11-20 12:41:37,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:37,621 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 190 [2022-11-20 12:41:37,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:37,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 199 [2022-11-20 12:41:37,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:37,642 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:41:37,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:37,652 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 12:41:37,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:37,655 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 228 [2022-11-20 12:41:37,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:37,658 INFO L134 CoverageAnalysis]: Checked inductivity of 276 backedges. 117 proven. 41 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2022-11-20 12:41:37,658 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:41:37,658 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [229326097] [2022-11-20 12:41:37,659 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [229326097] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 12:41:37,659 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [268775582] [2022-11-20 12:41:37,659 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:41:37,659 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 12:41:37,659 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 12:41:37,660 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 12:41:37,684 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-20 12:41:37,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:41:37,810 INFO L263 TraceCheckSpWp]: Trace formula consists of 689 conjuncts, 18 conjunts are in the unsatisfiable core [2022-11-20 12:41:37,815 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 12:41:38,065 INFO L134 CoverageAnalysis]: Checked inductivity of 276 backedges. 147 proven. 26 refuted. 0 times theorem prover too weak. 103 trivial. 0 not checked. [2022-11-20 12:41:38,065 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 12:41:38,822 INFO L134 CoverageAnalysis]: Checked inductivity of 276 backedges. 103 proven. 45 refuted. 0 times theorem prover too weak. 128 trivial. 0 not checked. [2022-11-20 12:41:38,823 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [268775582] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 12:41:38,823 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 12:41:38,823 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 8, 13] total 25 [2022-11-20 12:41:38,824 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [291170115] [2022-11-20 12:41:38,824 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 12:41:38,825 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2022-11-20 12:41:38,825 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:41:38,826 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2022-11-20 12:41:38,826 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=122, Invalid=478, Unknown=0, NotChecked=0, Total=600 [2022-11-20 12:41:38,827 INFO L87 Difference]: Start difference. First operand 1169 states and 1302 transitions. Second operand has 25 states, 25 states have (on average 10.6) internal successors, (265), 21 states have internal predecessors, (265), 16 states have call successors, (56), 11 states have call predecessors, (56), 14 states have return successors, (51), 16 states have call predecessors, (51), 16 states have call successors, (51) [2022-11-20 12:41:41,248 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:41:41,248 INFO L93 Difference]: Finished difference Result 2209 states and 2511 transitions. [2022-11-20 12:41:41,249 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2022-11-20 12:41:41,249 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 25 states have (on average 10.6) internal successors, (265), 21 states have internal predecessors, (265), 16 states have call successors, (56), 11 states have call predecessors, (56), 14 states have return successors, (51), 16 states have call predecessors, (51), 16 states have call successors, (51) Word has length 236 [2022-11-20 12:41:41,250 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:41:41,251 INFO L225 Difference]: With dead ends: 2209 [2022-11-20 12:41:41,251 INFO L226 Difference]: Without dead ends: 0 [2022-11-20 12:41:41,256 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 589 GetRequests, 519 SyntacticMatches, 8 SemanticMatches, 62 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 937 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=955, Invalid=3077, Unknown=0, NotChecked=0, Total=4032 [2022-11-20 12:41:41,257 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 1299 mSDsluCounter, 434 mSDsCounter, 0 mSdLazyCounter, 2248 mSolverCounterSat, 657 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1302 SdHoareTripleChecker+Valid, 487 SdHoareTripleChecker+Invalid, 2905 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 657 IncrementalHoareTripleChecker+Valid, 2248 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2022-11-20 12:41:41,257 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1302 Valid, 487 Invalid, 2905 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [657 Valid, 2248 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2022-11-20 12:41:41,258 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-20 12:41:41,258 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-20 12:41:41,259 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:41:41,259 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-20 12:41:41,259 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 236 [2022-11-20 12:41:41,259 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:41:41,260 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-20 12:41:41,260 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 25 states have (on average 10.6) internal successors, (265), 21 states have internal predecessors, (265), 16 states have call successors, (56), 11 states have call predecessors, (56), 14 states have return successors, (51), 16 states have call predecessors, (51), 16 states have call successors, (51) [2022-11-20 12:41:41,260 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-20 12:41:41,260 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-20 12:41:41,263 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-20 12:41:41,276 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-20 12:41:41,476 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 12:41:41,479 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-20 12:42:00,879 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 466 473) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 (not (= 1 ~systemActive~0))) (or .cse0 (not (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0)))) [2022-11-20 12:42:00,879 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 466 473) no Hoare annotation was computed. [2022-11-20 12:42:00,879 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 466 473) no Hoare annotation was computed. [2022-11-20 12:42:00,879 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 356 362) no Hoare annotation was computed. [2022-11-20 12:42:00,879 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 356 362) the Hoare annotation is: true [2022-11-20 12:42:00,880 INFO L895 garLoopResultBuilder]: At program point L409(line 409) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-20 12:42:00,880 INFO L899 garLoopResultBuilder]: For program point L409-1(lines 390 414) no Hoare annotation was computed. [2022-11-20 12:42:00,880 INFO L895 garLoopResultBuilder]: At program point L564(lines 549 567) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-20 12:42:00,880 INFO L899 garLoopResultBuilder]: For program point L558(lines 558 562) no Hoare annotation was computed. [2022-11-20 12:42:00,880 INFO L899 garLoopResultBuilder]: For program point L558-2(lines 558 562) no Hoare annotation was computed. [2022-11-20 12:42:00,881 INFO L895 garLoopResultBuilder]: At program point L682(lines 677 685) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-20 12:42:00,881 INFO L895 garLoopResultBuilder]: At program point L404(line 404) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-20 12:42:00,881 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 390 414) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-20 12:42:00,882 INFO L895 garLoopResultBuilder]: At program point L400(line 400) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-20 12:42:00,882 INFO L899 garLoopResultBuilder]: For program point L398(lines 398 406) no Hoare annotation was computed. [2022-11-20 12:42:00,882 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 390 414) no Hoare annotation was computed. [2022-11-20 12:42:00,882 INFO L899 garLoopResultBuilder]: For program point L394(lines 394 411) no Hoare annotation was computed. [2022-11-20 12:42:00,882 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 485 493) no Hoare annotation was computed. [2022-11-20 12:42:00,882 INFO L902 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 485 493) the Hoare annotation is: true [2022-11-20 12:42:00,882 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 485 493) no Hoare annotation was computed. [2022-11-20 12:42:00,883 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 610 621) the Hoare annotation is: (let ((.cse2 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~pumpRunning~0))) (.cse4 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3 .cse4) (or (not (= ~pumpRunning~0 0)) .cse1 .cse2 .cse4) (or .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse3 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-20 12:42:00,883 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 610 621) no Hoare annotation was computed. [2022-11-20 12:42:00,883 INFO L899 garLoopResultBuilder]: For program point L614-1(lines 610 621) no Hoare annotation was computed. [2022-11-20 12:42:00,883 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 222 251) no Hoare annotation was computed. [2022-11-20 12:42:00,884 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 222 251) the Hoare annotation is: true [2022-11-20 12:42:00,884 INFO L902 garLoopResultBuilder]: At program point L247(lines 222 251) the Hoare annotation is: true [2022-11-20 12:42:00,884 INFO L899 garLoopResultBuilder]: For program point L243(line 243) no Hoare annotation was computed. [2022-11-20 12:42:00,884 INFO L899 garLoopResultBuilder]: For program point L236(lines 236 240) no Hoare annotation was computed. [2022-11-20 12:42:00,884 INFO L902 garLoopResultBuilder]: At program point L236-1(lines 236 240) the Hoare annotation is: true [2022-11-20 12:42:00,884 INFO L899 garLoopResultBuilder]: For program point L233(line 233) no Hoare annotation was computed. [2022-11-20 12:42:00,885 INFO L902 garLoopResultBuilder]: At program point L232-2(lines 232 246) the Hoare annotation is: true [2022-11-20 12:42:00,885 INFO L902 garLoopResultBuilder]: At program point L228(line 228) the Hoare annotation is: true [2022-11-20 12:42:00,885 INFO L899 garLoopResultBuilder]: For program point L228-1(line 228) no Hoare annotation was computed. [2022-11-20 12:42:00,885 INFO L899 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2022-11-20 12:42:00,885 INFO L895 garLoopResultBuilder]: At program point L659(lines 654 662) the Hoare annotation is: (let ((.cse20 (= 1 ~systemActive~0)) (.cse7 (<= ~waterLevel~0 0)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse19 (= ~pumpRunning~0 0)) (.cse5 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse6 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse11 (= ~waterLevel~0 1)) (.cse8 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (and .cse19 .cse5 .cse6 .cse11 .cse8)) (.cse10 (not (< 1 |old(~waterLevel~0)|))) (.cse18 (not (= 0 ~systemActive~0))) (.cse17 (and .cse19 .cse13)) (.cse14 (not (<= |old(~waterLevel~0)| 0))) (.cse16 (not (= |old(~pumpRunning~0)| 0))) (.cse12 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (and .cse19 .cse5 .cse20 .cse6 .cse7 .cse8)) (.cse15 (= ~methaneLevelCritical~0 0)) (.cse1 (not .cse20)) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5 .cse6 .cse7 .cse8)) (or .cse1 .cse2 .cse9 .cse10 (and .cse4 .cse5 .cse6 .cse11 .cse8) .cse12) (or .cse1 .cse2 .cse13 .cse14 .cse3) (or .cse15 .cse1 .cse2 .cse9 .cse10 .cse12) (or .cse16 .cse17 .cse18) (or .cse16 (= 2 |timeShift_getWaterLevel_#res#1|) .cse10 .cse12 .cse18) (or .cse17 .cse15 .cse1 .cse2 .cse14 .cse3) (or .cse16 .cse1 (and .cse19 .cse5 .cse13) .cse12 (and (<= 1 ~pumpRunning~0) .cse5 (= 2 ~waterLevel~0) .cse13)) (or .cse16 .cse19 .cse15 .cse1 .cse12) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse15 .cse1 .cse2 .cse3)))) [2022-11-20 12:42:00,886 INFO L899 garLoopResultBuilder]: For program point L424(lines 424 432) no Hoare annotation was computed. [2022-11-20 12:42:00,886 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 329 355) no Hoare annotation was computed. [2022-11-20 12:42:00,886 INFO L895 garLoopResultBuilder]: At program point L69(lines 62 71) the Hoare annotation is: (let ((.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 0) .cse7)) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse2 .cse4 (and .cse5 (< 1 ~waterLevel~0) (<= ~waterLevel~0 2) .cse6) (not (< 1 |old(~waterLevel~0)|)) .cse3) (or (and .cse5 .cse7 .cse6) .cse2 .cse4 .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2022-11-20 12:42:00,886 INFO L899 garLoopResultBuilder]: For program point L420(lines 420 437) no Hoare annotation was computed. [2022-11-20 12:42:00,887 INFO L895 garLoopResultBuilder]: At program point L82(line 82) the Hoare annotation is: (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse18 (= ~pumpRunning~0 0)) (.cse10 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse11 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse19 (= 1 ~systemActive~0)) (.cse12 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse13 (<= ~waterLevel~0 0)) (.cse14 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse7 (not (= 0 ~systemActive~0))) (.cse8 (and .cse18 .cse10 .cse11 .cse19 .cse12 .cse13 .cse14)) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (and .cse18 .cse2)) (.cse3 (not (<= |old(~waterLevel~0)| 0))) (.cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse20 (not (<= 2 |old(~waterLevel~0)|))) (.cse17 (= ~methaneLevelCritical~0 0)) (.cse0 (not .cse19)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse15 (not (< 1 |old(~waterLevel~0)|))) (.cse16 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse8 (and .cse9 .cse10 .cse11 .cse12 .cse13 .cse14) .cse1 .cse4) (or .cse5 .cse15 .cse16 .cse7) (or (not (= |old(~waterLevel~0)| 1)) .cse17 .cse0 .cse8 .cse1 .cse4) (or .cse5 .cse0 (and .cse18 .cse10 .cse11 .cse2) .cse16) (or .cse0 .cse1 (and .cse18 .cse10 .cse11 .cse19 .cse12 .cse14) (and .cse9 .cse10 .cse11 .cse12 .cse14) .cse16 .cse20) (or .cse6 .cse17 .cse0 .cse1 .cse3 .cse4) (or .cse5 .cse0 .cse16 .cse20) (or .cse18 .cse17 .cse0 .cse1 .cse15 .cse16) (or .cse0 .cse1 .cse15 (= ~waterLevel~0 1) .cse16)))) [2022-11-20 12:42:00,887 INFO L899 garLoopResultBuilder]: For program point L82-1(line 82) no Hoare annotation was computed. [2022-11-20 12:42:00,887 INFO L899 garLoopResultBuilder]: For program point L144(line 144) no Hoare annotation was computed. [2022-11-20 12:42:00,887 INFO L899 garLoopResultBuilder]: For program point L590(lines 590 594) no Hoare annotation was computed. [2022-11-20 12:42:00,887 INFO L895 garLoopResultBuilder]: At program point L590-2(lines 586 597) the Hoare annotation is: (let ((.cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) (not (<= |old(~waterLevel~0)| 0)) .cse2) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 (and .cse3 (<= ~waterLevel~0 0) .cse4) .cse2) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) (and .cse3 (= ~waterLevel~0 1) .cse4) .cse5) (or .cse6 .cse0 .cse5) (or .cse6 (not (= 0 ~systemActive~0))))) [2022-11-20 12:42:00,888 INFO L899 garLoopResultBuilder]: For program point L343-1(lines 343 349) no Hoare annotation was computed. [2022-11-20 12:42:00,888 INFO L895 garLoopResultBuilder]: At program point L145(lines 140 147) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse3 .cse0 .cse2) (or .cse3 (not (= 0 ~systemActive~0))))) [2022-11-20 12:42:00,888 INFO L895 garLoopResultBuilder]: At program point L430(line 430) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse7 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (and .cse5 .cse6 (<= ~waterLevel~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) .cse7)) (.cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (and .cse5 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse6 .cse7)) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) .cse3 (and .cse5 .cse6 (= ~waterLevel~0 1) .cse7)) (or .cse8 .cse0 .cse1 .cse3 .cse4) (or .cse0 .cse1 .cse2 (not (<= |old(~waterLevel~0)| 0)) .cse4) (or .cse8 .cse0 .cse1 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse9 .cse0 .cse3) (or .cse9 (not (= 0 ~systemActive~0)))))) [2022-11-20 12:42:00,889 INFO L895 garLoopResultBuilder]: At program point L426(line 426) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse8 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 (and .cse4 .cse5 (<= ~waterLevel~0 0) .cse6) .cse3 .cse7) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) .cse3 (and .cse4 .cse5 (= ~waterLevel~0 1) .cse6)) (or .cse0 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) .cse3 (not (<= |old(~waterLevel~0)| 0)) .cse7) (or .cse8 .cse0 .cse3) (or .cse0 .cse1 .cse2 .cse3 .cse7) (or .cse8 (not (= 0 ~systemActive~0))))) [2022-11-20 12:42:00,889 INFO L895 garLoopResultBuilder]: At program point L422(line 422) the Hoare annotation is: (let ((.cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) (not (<= |old(~waterLevel~0)| 0)) .cse2) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 (and .cse3 (<= ~waterLevel~0 0) .cse4) .cse2) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) (and .cse3 (= ~waterLevel~0 1) .cse4) .cse5) (or .cse6 .cse0 .cse5) (or .cse6 (not (= 0 ~systemActive~0))))) [2022-11-20 12:42:00,889 INFO L899 garLoopResultBuilder]: For program point L422-1(line 422) no Hoare annotation was computed. [2022-11-20 12:42:00,889 INFO L895 garLoopResultBuilder]: At program point L67(line 67) the Hoare annotation is: (let ((.cse6 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (and (= ~pumpRunning~0 0) .cse6 .cse7)) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse2 .cse4 (not (< 1 |old(~waterLevel~0)|)) (and .cse5 .cse6 (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse2 .cse4 (and .cse5 .cse6 .cse7) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 (not (= 0 ~systemActive~0)))))) [2022-11-20 12:42:00,889 INFO L899 garLoopResultBuilder]: For program point L67-1(line 67) no Hoare annotation was computed. [2022-11-20 12:42:00,889 INFO L899 garLoopResultBuilder]: For program point L84(lines 84 94) no Hoare annotation was computed. [2022-11-20 12:42:00,890 INFO L895 garLoopResultBuilder]: At program point L435(line 435) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1 .cse2) (or .cse1 .cse3 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse3 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-11-20 12:42:00,890 INFO L895 garLoopResultBuilder]: At program point L435-1(lines 416 440) the Hoare annotation is: (let ((.cse9 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse12 (= ~pumpRunning~0 0)) (.cse13 (= 1 ~systemActive~0)) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse20 (<= ~waterLevel~0 0)) (.cse18 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse11 (<= 1 ~switchedOnBeforeTS~0)) (.cse15 (= ~methaneLevelCritical~0 0))) (let ((.cse2 (not .cse15)) (.cse3 (and .cse8 .cse10 .cse20 .cse18 .cse11)) (.cse4 (and .cse12 .cse15 .cse13 .cse10 .cse20 .cse18 .cse11)) (.cse6 (and .cse12 .cse13 .cse9 .cse10 .cse11)) (.cse19 (not (<= |old(~waterLevel~0)| 0))) (.cse7 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse16 (not (< 1 |old(~waterLevel~0)|))) (.cse14 (= ~waterLevel~0 1)) (.cse0 (not .cse13)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse17 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (and .cse8 .cse9 .cse10 .cse11)) (or (and .cse12 .cse13 .cse14) .cse15 .cse0 .cse1 .cse16 .cse5) (or .cse17 (and .cse12 .cse18) .cse0 .cse5 (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0) .cse18)) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse19 .cse7) (or (not (= |old(~waterLevel~0)| 1)) .cse15 .cse0 .cse1 .cse6 .cse7) (or (and .cse12 .cse10 .cse18 .cse11) .cse15 .cse0 .cse1 .cse19 .cse7) (or (and .cse12 .cse13 .cse10 .cse14 .cse11) .cse0 .cse1 .cse16 .cse5 (and .cse8 .cse10 .cse14 .cse11)) (or .cse17 .cse12 .cse15 .cse0 .cse5) (or .cse17 (not (= 0 ~systemActive~0)))))) [2022-11-20 12:42:00,890 INFO L899 garLoopResultBuilder]: For program point L336(lines 336 342) no Hoare annotation was computed. [2022-11-20 12:42:00,890 INFO L899 garLoopResultBuilder]: For program point L80(lines 80 97) no Hoare annotation was computed. [2022-11-20 12:42:00,890 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 329 355) the Hoare annotation is: (let ((.cse6 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (and (= ~pumpRunning~0 0) .cse6 .cse7)) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse2 .cse4 (not (< 1 |old(~waterLevel~0)|)) (and .cse5 .cse6 (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse2 .cse4 (and .cse5 .cse6 .cse7) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 (not (= 0 ~systemActive~0)))))) [2022-11-20 12:42:00,891 INFO L895 garLoopResultBuilder]: At program point L80-1(lines 72 100) the Hoare annotation is: (let ((.cse26 (<= 1 ~pumpRunning~0)) (.cse20 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse8 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse9 (<= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|)) (.cse22 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse28 (<= ~waterLevel~0 0)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse23 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse10 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~waterLevel~0)| 1))) (.cse14 (not (= 0 ~systemActive~0))) (.cse16 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse17 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)) (.cse4 (and .cse6 .cse10)) (.cse27 (not (<= 2 |old(~waterLevel~0)|))) (.cse19 (and .cse26 .cse20 .cse7 .cse8 .cse9 .cse10 .cse22 .cse28 .cse13 .cse23)) (.cse24 (and .cse6 .cse7 .cse8 .cse10 .cse22 .cse28 .cse13 .cse23)) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse12 (not (= |old(~pumpRunning~0)| 0))) (.cse25 (not (<= |old(~waterLevel~0)| 0))) (.cse2 (not .cse10)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse15 (not (< 1 |old(~waterLevel~0)|))) (.cse18 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse11 (= ~waterLevel~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or (and .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) .cse12 .cse0 .cse2) (or .cse12 (and .cse6 .cse13) .cse14) (or .cse12 .cse15 (and .cse16 .cse17) .cse18 .cse14) (let ((.cse21 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))) (or .cse2 .cse3 .cse19 (and .cse20 .cse7 .cse8 .cse9 .cse21 .cse22 .cse23) (and .cse6 .cse7 .cse8 .cse10 .cse21 .cse22 .cse23) .cse18 .cse24 .cse5)) (or .cse1 .cse2 .cse3 .cse24 .cse25 .cse5) (or .cse12 .cse2 (and .cse26 .cse16 .cse13 .cse17) (and .cse6 .cse16 .cse10 .cse13 .cse17) .cse18 .cse27) (or .cse12 .cse1 .cse2 .cse18 .cse4 .cse27) (or .cse2 .cse3 .cse19 .cse24 .cse25 .cse5) (or (and .cse6 .cse7 .cse8 .cse9 .cse10 .cse13) .cse12 .cse2 .cse25) (or .cse2 (and .cse6 .cse7 .cse8 .cse10 .cse22 .cse11 .cse23) .cse3 .cse15 .cse18 (and .cse20 .cse7 .cse8 .cse1 .cse9 .cse22 .cse11 .cse23))))) [2022-11-20 12:42:00,891 INFO L899 garLoopResultBuilder]: For program point L336-2(lines 332 354) no Hoare annotation was computed. [2022-11-20 12:42:00,891 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 329 355) no Hoare annotation was computed. [2022-11-20 12:42:00,891 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 144) no Hoare annotation was computed. [2022-11-20 12:42:00,892 INFO L899 garLoopResultBuilder]: For program point L572(lines 572 578) no Hoare annotation was computed. [2022-11-20 12:42:00,892 INFO L899 garLoopResultBuilder]: For program point L572-1(lines 572 578) no Hoare annotation was computed. [2022-11-20 12:42:00,892 INFO L899 garLoopResultBuilder]: For program point L184(lines 184 190) no Hoare annotation was computed. [2022-11-20 12:42:00,892 INFO L899 garLoopResultBuilder]: For program point L184-1(lines 184 190) no Hoare annotation was computed. [2022-11-20 12:42:00,892 INFO L895 garLoopResultBuilder]: At program point L209(lines 164 211) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse1 .cse3 .cse4) (and .cse5 .cse4 (= 0 ~systemActive~0)) (and .cse5 (<= ~waterLevel~0 1) .cse3 .cse4) (and .cse0 .cse2 .cse3 .cse4 (<= ~waterLevel~0 0) .cse6) (and .cse0 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse6))) [2022-11-20 12:42:00,892 INFO L895 garLoopResultBuilder]: At program point L176(line 176) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse1 .cse3 .cse4) (and .cse5 .cse4 (= 0 ~systemActive~0)) (and .cse5 (<= ~waterLevel~0 1) .cse3 .cse4) (and .cse0 .cse2 .cse3 .cse4 (<= ~waterLevel~0 0) .cse6) (and .cse0 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse6))) [2022-11-20 12:42:00,893 INFO L895 garLoopResultBuilder]: At program point L135(lines 130 138) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-20 12:42:00,893 INFO L902 garLoopResultBuilder]: At program point L292(lines 284 294) the Hoare annotation is: true [2022-11-20 12:42:00,893 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-20 12:42:00,893 INFO L895 garLoopResultBuilder]: At program point L127(lines 123 129) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-20 12:42:00,893 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-20 12:42:00,893 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-20 12:42:00,894 INFO L899 garLoopResultBuilder]: For program point L305(lines 305 312) no Hoare annotation was computed. [2022-11-20 12:42:00,894 INFO L899 garLoopResultBuilder]: For program point L305-2(lines 305 312) no Hoare annotation was computed. [2022-11-20 12:42:00,894 INFO L899 garLoopResultBuilder]: For program point L165(lines 164 211) no Hoare annotation was computed. [2022-11-20 12:42:00,894 INFO L899 garLoopResultBuilder]: For program point L194(lines 194 207) no Hoare annotation was computed. [2022-11-20 12:42:00,894 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-20 12:42:00,894 INFO L895 garLoopResultBuilder]: At program point L574(line 574) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 1 ~systemActive~0) .cse0) (and (<= 2 ~waterLevel~0) .cse0 (not (= 0 ~systemActive~0))))) [2022-11-20 12:42:00,894 INFO L895 garLoopResultBuilder]: At program point L186(line 186) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse5 (= ~pumpRunning~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 .cse1 (< 1 ~waterLevel~0) .cse2 .cse3 .cse4) (and .cse5 .cse3 (= 0 ~systemActive~0)) (and .cse5 .cse2 .cse3 .cse4))) [2022-11-20 12:42:00,895 INFO L902 garLoopResultBuilder]: At program point L314(lines 295 317) the Hoare annotation is: true [2022-11-20 12:42:00,895 INFO L895 garLoopResultBuilder]: At program point L281(lines 277 283) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-20 12:42:00,895 INFO L895 garLoopResultBuilder]: At program point L120(lines 116 122) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-20 12:42:00,895 INFO L902 garLoopResultBuilder]: At program point L215(lines 154 219) the Hoare annotation is: true [2022-11-20 12:42:00,895 INFO L899 garLoopResultBuilder]: For program point L174(lines 174 180) no Hoare annotation was computed. [2022-11-20 12:42:00,895 INFO L899 garLoopResultBuilder]: For program point L174-1(lines 174 180) no Hoare annotation was computed. [2022-11-20 12:42:00,896 INFO L899 garLoopResultBuilder]: For program point L166(lines 166 170) no Hoare annotation was computed. [2022-11-20 12:42:00,896 INFO L895 garLoopResultBuilder]: At program point L59(lines 54 61) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-20 12:42:00,896 INFO L895 garLoopResultBuilder]: At program point L212(lines 163 213) the Hoare annotation is: false [2022-11-20 12:42:00,896 INFO L899 garLoopResultBuilder]: For program point L200(lines 200 206) no Hoare annotation was computed. [2022-11-20 12:42:00,896 INFO L895 garLoopResultBuilder]: At program point L200-2(lines 194 207) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1) .cse3) (and .cse0 (< 1 ~waterLevel~0) .cse1 .cse2 .cse4) (and .cse5 .cse2 (= 0 ~systemActive~0)) (and .cse5 .cse1 .cse2 .cse4) (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 0) .cse3))) [2022-11-20 12:42:00,896 INFO L895 garLoopResultBuilder]: At program point L580(lines 568 582) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= 0 ~systemActive~0)) [2022-11-20 12:42:00,897 INFO L895 garLoopResultBuilder]: At program point L545(lines 530 548) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (= 2 ~waterLevel~0) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) .cse1 .cse2) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 (= ~pumpRunning~0 0) .cse1 .cse2))) [2022-11-20 12:42:00,897 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 364 388) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-20 12:42:00,897 INFO L895 garLoopResultBuilder]: At program point L446(lines 441 448) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= ~waterLevel~0 1)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not .cse1) .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or (and (<= 1 ~pumpRunning~0) .cse1) .cse3 .cse0 (not (<= ~waterLevel~0 2))) (or .cse3 .cse0 .cse2))) [2022-11-20 12:42:00,897 INFO L899 garLoopResultBuilder]: For program point L667(lines 667 673) no Hoare annotation was computed. [2022-11-20 12:42:00,898 INFO L899 garLoopResultBuilder]: For program point L539(lines 539 543) no Hoare annotation was computed. [2022-11-20 12:42:00,898 INFO L895 garLoopResultBuilder]: At program point L378(line 378) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0)) .cse0 (not (<= ~waterLevel~0 2))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-20 12:42:00,898 INFO L899 garLoopResultBuilder]: For program point L539-2(lines 539 543) no Hoare annotation was computed. [2022-11-20 12:42:00,898 INFO L899 garLoopResultBuilder]: For program point L372(lines 372 380) no Hoare annotation was computed. [2022-11-20 12:42:00,898 INFO L899 garLoopResultBuilder]: For program point L368(lines 368 385) no Hoare annotation was computed. [2022-11-20 12:42:00,898 INFO L895 garLoopResultBuilder]: At program point L672(lines 663 676) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 1)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse2 (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse2 .cse0 .cse1))) [2022-11-20 12:42:00,899 INFO L895 garLoopResultBuilder]: At program point L383(line 383) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-20 12:42:00,899 INFO L899 garLoopResultBuilder]: For program point L383-1(lines 364 388) no Hoare annotation was computed. [2022-11-20 12:42:00,899 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 364 388) no Hoare annotation was computed. [2022-11-20 12:42:00,899 INFO L899 garLoopResultBuilder]: For program point L456(lines 456 462) no Hoare annotation was computed. [2022-11-20 12:42:00,899 INFO L895 garLoopResultBuilder]: At program point L454(line 454) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (= ~pumpRunning~0 0) (= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-20 12:42:00,900 INFO L895 garLoopResultBuilder]: At program point L456-2(lines 449 465) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse5 (not (<= ~waterLevel~0 2))) (.cse4 (= ~pumpRunning~0 0)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= ~waterLevel~0 1)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not .cse1) .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or (<= 1 ~pumpRunning~0) .cse3 .cse4 .cse0 .cse5) (or .cse3 .cse1 .cse0 .cse5 (and (not (= 0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~6#1|)) .cse4)) (or .cse3 .cse0 .cse2))) [2022-11-20 12:42:00,900 INFO L899 garLoopResultBuilder]: For program point L454-1(line 454) no Hoare annotation was computed. [2022-11-20 12:42:00,900 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 598 609) no Hoare annotation was computed. [2022-11-20 12:42:00,900 INFO L899 garLoopResultBuilder]: For program point L602-1(lines 598 609) no Hoare annotation was computed. [2022-11-20 12:42:00,900 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 598 609) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (<= 1 ~pumpRunning~0))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse3 (not (= 0 ~systemActive~0))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse5 .cse0 .cse3 .cse4))) [2022-11-20 12:42:00,900 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 474 484) the Hoare annotation is: true [2022-11-20 12:42:00,901 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 474 484) no Hoare annotation was computed. [2022-11-20 12:42:00,901 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 474 484) no Hoare annotation was computed. [2022-11-20 12:42:00,901 INFO L895 garLoopResultBuilder]: At program point L627(lines 622 630) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |isMethaneAlarm_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0))) (and (or .cse0 (not (<= 1 ~pumpRunning~0)) (not (<= ~waterLevel~0 1)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= ~pumpRunning~0 0)) .cse0 (not (<= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2)) .cse1))) [2022-11-20 12:42:00,904 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:42:00,907 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-20 12:42:00,966 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 12:42:00 BoogieIcfgContainer [2022-11-20 12:42:00,966 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-20 12:42:00,967 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-20 12:42:00,967 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-20 12:42:00,967 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-20 12:42:00,968 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 12:41:17" (3/4) ... [2022-11-20 12:42:00,980 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-20 12:42:00,987 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-20 12:42:00,988 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-20 12:42:00,988 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-20 12:42:00,988 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-20 12:42:00,988 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-20 12:42:00,989 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-20 12:42:00,989 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-20 12:42:00,989 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-11-20 12:42:00,989 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-11-20 12:42:00,989 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-11-20 12:42:01,005 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 25 nodes and edges [2022-11-20 12:42:01,005 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-20 12:42:01,006 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-20 12:42:01,006 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-20 12:42:01,007 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-20 12:42:01,036 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && 1 < waterLevel) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2022-11-20 12:42:01,037 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-20 12:42:01,038 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == 0 && 1 == systemActive)) || !(1 <= \old(switchedOnBeforeTS))) && ((((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && 1 == systemActive) && waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || (2 == \result && tmp == 2)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || ((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || (((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || ((((pumpRunning == 0 && 2 == \result) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (pumpRunning == 0 && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(\old(waterLevel) <= 0))) && (((((!(1 == systemActive) || ((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || (((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == waterLevel) && methaneLevelCritical == 0) && pumpRunning <= tmp___0) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) [2022-11-20 12:42:01,039 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) || (((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) && (((((((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && 2 == waterLevel) && \old(waterLevel) == waterLevel))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == 0 && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-20 12:42:01,039 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-20 12:42:01,040 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(\old(waterLevel) <= 1) || (((((pumpRunning == 0 && waterLevel == \result) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) || ((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 < \old(waterLevel))) || ((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || 2 == \result) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((pumpRunning == 0 && \old(waterLevel) == waterLevel) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || (((1 <= pumpRunning && waterLevel == \result) && 2 == waterLevel) && \old(waterLevel) == waterLevel))) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((((((((pumpRunning == 0 && waterLevel == \result) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) || !(\old(waterLevel) == 1)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) [2022-11-20 12:42:01,040 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= pumpRunning)) || !(waterLevel <= 1)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS)) && ((((!(pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || \result == methaneLevelCritical) [2022-11-20 12:42:01,041 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) [2022-11-20 12:42:01,041 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((((1 <= pumpRunning || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2))) && ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || (!(0 == tmp) && pumpRunning == 0))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) [2022-11-20 12:42:01,044 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2))) && (((1 <= \result || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(waterLevel <= 1)) [2022-11-20 12:42:01,045 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((((1 <= pumpRunning && methaneLevelCritical == 0) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(waterLevel <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) [2022-11-20 12:42:01,045 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) [2022-11-20 12:42:01,045 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || 2 == waterLevel) || (tmp___0 == 0 && \result == 0)) || !(1 == systemActive)) || !(waterLevel <= 2)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2022-11-20 12:42:01,092 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/witness.graphml [2022-11-20 12:42:01,092 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-20 12:42:01,093 INFO L158 Benchmark]: Toolchain (without parser) took 44337.33ms. Allocated memory was 142.6MB in the beginning and 400.6MB in the end (delta: 257.9MB). Free memory was 105.4MB in the beginning and 162.7MB in the end (delta: -57.2MB). Peak memory consumption was 202.5MB. Max. memory is 16.1GB. [2022-11-20 12:42:01,093 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 104.9MB. Free memory is still 54.0MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-20 12:42:01,093 INFO L158 Benchmark]: CACSL2BoogieTranslator took 463.84ms. Allocated memory is still 142.6MB. Free memory was 105.4MB in the beginning and 86.1MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-20 12:42:01,094 INFO L158 Benchmark]: Boogie Procedure Inliner took 49.47ms. Allocated memory is still 142.6MB. Free memory was 86.1MB in the beginning and 83.7MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-20 12:42:01,095 INFO L158 Benchmark]: Boogie Preprocessor took 46.58ms. Allocated memory is still 142.6MB. Free memory was 83.7MB in the beginning and 82.0MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-20 12:42:01,095 INFO L158 Benchmark]: RCFGBuilder took 605.12ms. Allocated memory is still 142.6MB. Free memory was 82.0MB in the beginning and 63.9MB in the end (delta: 18.1MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-20 12:42:01,096 INFO L158 Benchmark]: TraceAbstraction took 43040.32ms. Allocated memory was 142.6MB in the beginning and 400.6MB in the end (delta: 257.9MB). Free memory was 63.1MB in the beginning and 169.0MB in the end (delta: -105.8MB). Peak memory consumption was 194.1MB. Max. memory is 16.1GB. [2022-11-20 12:42:01,097 INFO L158 Benchmark]: Witness Printer took 125.37ms. Allocated memory is still 400.6MB. Free memory was 169.0MB in the beginning and 162.7MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-20 12:42:01,098 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 104.9MB. Free memory is still 54.0MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 463.84ms. Allocated memory is still 142.6MB. Free memory was 105.4MB in the beginning and 86.1MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 49.47ms. Allocated memory is still 142.6MB. Free memory was 86.1MB in the beginning and 83.7MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 46.58ms. Allocated memory is still 142.6MB. Free memory was 83.7MB in the beginning and 82.0MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 605.12ms. Allocated memory is still 142.6MB. Free memory was 82.0MB in the beginning and 63.9MB in the end (delta: 18.1MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 43040.32ms. Allocated memory was 142.6MB in the beginning and 400.6MB in the end (delta: 257.9MB). Free memory was 63.1MB in the beginning and 169.0MB in the end (delta: -105.8MB). Peak memory consumption was 194.1MB. Max. memory is 16.1GB. * Witness Printer took 125.37ms. Allocated memory is still 400.6MB. Free memory was 169.0MB in the beginning and 162.7MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 144]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 117 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 42.9s, OverallIterations: 13, TraceHistogramMax: 7, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 13.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 19.4s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 6407 SdHoareTripleChecker+Valid, 7.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 6345 mSDsluCounter, 7187 SdHoareTripleChecker+Invalid, 6.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5592 mSDsCounter, 2646 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 10305 IncrementalHoareTripleChecker+Invalid, 12951 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 2646 mSolverCounterUnsat, 1595 mSDtfsCounter, 10305 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 2226 GetRequests, 1886 SyntacticMatches, 23 SemanticMatches, 317 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4544 ImplicationChecksByTransitivity, 4.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1245occurred in iteration=8, InterpolantAutomatonStates: 254, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.0s AutomataMinimizationTime, 13 MinimizatonAttempts, 585 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 54 LocationsWithAnnotation, 4237 PreInvPairs, 4798 NumberOfFragments, 3702 HoareAnnotationTreeSize, 4237 FomulaSimplifications, 11461 FormulaSimplificationTreeSizeReduction, 2.0s HoareSimplificationTime, 54 FomulaSimplificationsInter, 78168 FormulaSimplificationTreeSizeReductionInter, 17.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 7.2s InterpolantComputationTime, 2134 NumberOfCodeBlocks, 2134 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 2916 ConstructedInterpolants, 0 QuantifiedInterpolants, 6325 SizeOfPredicates, 9 NumberOfNonLiveVariables, 2406 ConjunctsInSsa, 51 ConjunctsInUnsatCore, 21 InterpolantComputations, 9 PerfectInterpolantSequences, 2129/2502 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 568]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && splverifierCounter == 0) && 0 == systemActive - InvariantResult [Line: 654]: Loop Invariant Derived loop invariant: (((((((((((((!(\old(waterLevel) <= 1) || (((((pumpRunning == 0 && waterLevel == \result) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) || ((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 < \old(waterLevel))) || ((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || 2 == \result) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((pumpRunning == 0 && \old(waterLevel) == waterLevel) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || (((1 <= pumpRunning && waterLevel == \result) && 2 == waterLevel) && \old(waterLevel) == waterLevel))) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((((((((pumpRunning == 0 && waterLevel == \result) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) || !(\old(waterLevel) == 1)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 140]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 130]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 586]: Loop Invariant Derived loop invariant: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 164]: Loop Invariant Derived loop invariant: ((((((((1 <= pumpRunning && 2 == waterLevel) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) || (((pumpRunning == 0 && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || ((pumpRunning == 0 && splverifierCounter == 0) && 0 == systemActive)) || (((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0)) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 116]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 622]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= pumpRunning)) || !(waterLevel <= 1)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS)) && ((((!(pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || \result == methaneLevelCritical) - InvariantResult [Line: 277]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 677]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 232]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 222]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && 1 < waterLevel) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 416]: Loop Invariant Derived loop invariant: (((((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) || (((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) && (((((((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && 2 == waterLevel) && \old(waterLevel) == waterLevel))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == 0 && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 123]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 284]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 663]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2))) && (((1 <= \result || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(waterLevel <= 1)) - InvariantResult [Line: 549]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 72]: Loop Invariant Derived loop invariant: ((((((((((((((!(\old(waterLevel) == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == 0 && 1 == systemActive)) || !(1 <= \old(switchedOnBeforeTS))) && ((((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && 1 == systemActive) && waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || (2 == \result && tmp == 2)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || ((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || (((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || ((((pumpRunning == 0 && 2 == \result) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (pumpRunning == 0 && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(\old(waterLevel) <= 0))) && (((((!(1 == systemActive) || ((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || (((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == waterLevel) && methaneLevelCritical == 0) && pumpRunning <= tmp___0) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) - InvariantResult [Line: 530]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || 2 == waterLevel) || (tmp___0 == 0 && \result == 0)) || !(1 == systemActive)) || !(waterLevel <= 2)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 154]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((((1 <= pumpRunning && methaneLevelCritical == 0) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(waterLevel <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) - InvariantResult [Line: 449]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((((1 <= pumpRunning || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2))) && ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || (!(0 == tmp) && pumpRunning == 0))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) RESULT: Ultimate proved your program to be correct! [2022-11-20 12:42:01,150 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aaf47a6f-70e0-4bd5-862a-999d8c5b8ca7/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE