./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash e7a194b3d6e079d2329a0d70eaa59b34ff3d58300de8b046ef1cd7cff7f67b94 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 22:52:42,556 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 22:52:42,674 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 22:52:42,686 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 22:52:42,686 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 22:52:42,733 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 22:52:42,734 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 22:52:42,734 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 22:52:42,737 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 22:52:42,744 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 22:52:42,746 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 22:52:42,747 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 22:52:42,747 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 22:52:42,748 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 22:52:42,749 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 22:52:42,749 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 22:52:42,750 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 22:52:42,750 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 22:52:42,751 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 22:52:42,751 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 22:52:42,752 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 22:52:42,753 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 22:52:42,753 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 22:52:42,754 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 22:52:42,754 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 22:52:42,755 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 22:52:42,756 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 22:52:42,756 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 22:52:42,757 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:52:42,757 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 22:52:42,758 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 22:52:42,758 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 22:52:42,759 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 22:52:42,759 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 22:52:42,760 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 22:52:42,760 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 22:52:42,760 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 22:52:42,761 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 22:52:42,761 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 22:52:42,761 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> e7a194b3d6e079d2329a0d70eaa59b34ff3d58300de8b046ef1cd7cff7f67b94 [2023-11-06 22:52:43,095 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 22:52:43,124 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 22:52:43,130 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 22:52:43,132 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 22:52:43,132 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 22:52:43,134 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c [2023-11-06 22:52:46,944 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 22:52:47,316 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 22:52:47,317 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c [2023-11-06 22:52:47,336 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/data/60adfc984/aa80a53521fe4f519bc58c7dc4e792e4/FLAGbcdc08265 [2023-11-06 22:52:47,356 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/data/60adfc984/aa80a53521fe4f519bc58c7dc4e792e4 [2023-11-06 22:52:47,359 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 22:52:47,361 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 22:52:47,363 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 22:52:47,363 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 22:52:47,370 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 22:52:47,371 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:52:47" (1/1) ... [2023-11-06 22:52:47,373 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@a40aca4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:52:47, skipping insertion in model container [2023-11-06 22:52:47,374 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:52:47" (1/1) ... [2023-11-06 22:52:47,457 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 22:52:47,832 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c[17915,17928] [2023-11-06 22:52:47,844 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:52:47,865 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 22:52:47,882 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] [2023-11-06 22:52:47,884 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [415] [2023-11-06 22:52:47,885 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [653] [2023-11-06 22:52:47,885 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [691] [2023-11-06 22:52:47,885 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [759] [2023-11-06 22:52:47,886 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [810] [2023-11-06 22:52:47,886 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [907] [2023-11-06 22:52:47,886 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [916] [2023-11-06 22:52:48,029 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c[17915,17928] [2023-11-06 22:52:48,034 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:52:48,073 INFO L206 MainTranslator]: Completed translation [2023-11-06 22:52:48,074 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:52:48 WrapperNode [2023-11-06 22:52:48,074 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 22:52:48,075 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 22:52:48,076 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 22:52:48,076 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 22:52:48,085 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:52:48" (1/1) ... [2023-11-06 22:52:48,115 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:52:48" (1/1) ... [2023-11-06 22:52:48,152 INFO L138 Inliner]: procedures = 58, calls = 105, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 233 [2023-11-06 22:52:48,153 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 22:52:48,154 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 22:52:48,154 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 22:52:48,154 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 22:52:48,169 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:52:48" (1/1) ... [2023-11-06 22:52:48,169 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:52:48" (1/1) ... [2023-11-06 22:52:48,173 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:52:48" (1/1) ... [2023-11-06 22:52:48,173 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:52:48" (1/1) ... [2023-11-06 22:52:48,184 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:52:48" (1/1) ... [2023-11-06 22:52:48,193 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:52:48" (1/1) ... [2023-11-06 22:52:48,197 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:52:48" (1/1) ... [2023-11-06 22:52:48,199 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:52:48" (1/1) ... [2023-11-06 22:52:48,204 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 22:52:48,209 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 22:52:48,209 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 22:52:48,209 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 22:52:48,210 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:52:48" (1/1) ... [2023-11-06 22:52:48,219 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:52:48,244 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:52:48,264 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 22:52:48,279 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 22:52:48,318 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 22:52:48,318 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 22:52:48,318 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 22:52:48,319 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 22:52:48,319 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 22:52:48,319 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 22:52:48,319 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 22:52:48,320 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:52:48,320 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:52:48,320 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 22:52:48,320 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 22:52:48,321 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-06 22:52:48,321 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-06 22:52:48,321 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2023-11-06 22:52:48,321 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2023-11-06 22:52:48,321 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-06 22:52:48,322 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-06 22:52:48,322 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 22:52:48,322 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 22:52:48,322 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 22:52:48,323 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 22:52:48,323 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 22:52:48,438 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 22:52:48,441 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 22:52:48,839 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 22:52:48,849 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 22:52:48,849 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 22:52:48,852 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:52:48 BoogieIcfgContainer [2023-11-06 22:52:48,853 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 22:52:48,856 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 22:52:48,857 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 22:52:48,861 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 22:52:48,861 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 10:52:47" (1/3) ... [2023-11-06 22:52:48,862 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@27a58a6c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:52:48, skipping insertion in model container [2023-11-06 22:52:48,862 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:52:48" (2/3) ... [2023-11-06 22:52:48,862 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@27a58a6c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:52:48, skipping insertion in model container [2023-11-06 22:52:48,862 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:52:48" (3/3) ... [2023-11-06 22:52:48,864 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product53.cil.c [2023-11-06 22:52:48,884 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 22:52:48,884 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 22:52:48,971 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 22:52:48,979 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@7362dae7, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 22:52:48,980 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 22:52:48,984 INFO L276 IsEmpty]: Start isEmpty. Operand has 105 states, 78 states have (on average 1.3717948717948718) internal successors, (107), 88 states have internal predecessors, (107), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-06 22:52:48,996 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2023-11-06 22:52:48,996 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:52:48,997 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:52:48,998 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:52:49,004 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:52:49,004 INFO L85 PathProgramCache]: Analyzing trace with hash 836117038, now seen corresponding path program 1 times [2023-11-06 22:52:49,013 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:52:49,014 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2120118685] [2023-11-06 22:52:49,014 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:52:49,014 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:52:49,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:49,288 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-06 22:52:49,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:49,298 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 22:52:49,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:49,315 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:52:49,319 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:52:49,319 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2120118685] [2023-11-06 22:52:49,320 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2120118685] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:52:49,320 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:52:49,321 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:52:49,323 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1555047349] [2023-11-06 22:52:49,324 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:52:49,330 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 22:52:49,330 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:52:49,379 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 22:52:49,381 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:52:49,386 INFO L87 Difference]: Start difference. First operand has 105 states, 78 states have (on average 1.3717948717948718) internal successors, (107), 88 states have internal predecessors, (107), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:52:49,447 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:52:49,448 INFO L93 Difference]: Finished difference Result 201 states and 272 transitions. [2023-11-06 22:52:49,449 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 22:52:49,450 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2023-11-06 22:52:49,450 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:52:49,461 INFO L225 Difference]: With dead ends: 201 [2023-11-06 22:52:49,461 INFO L226 Difference]: Without dead ends: 96 [2023-11-06 22:52:49,466 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:52:49,470 INFO L413 NwaCegarLoop]: 133 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 133 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:52:49,472 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 133 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:52:49,489 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 96 states. [2023-11-06 22:52:49,522 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 96 to 96. [2023-11-06 22:52:49,524 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 96 states, 71 states have (on average 1.3098591549295775) internal successors, (93), 80 states have internal predecessors, (93), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-06 22:52:49,528 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 96 states to 96 states and 124 transitions. [2023-11-06 22:52:49,530 INFO L78 Accepts]: Start accepts. Automaton has 96 states and 124 transitions. Word has length 32 [2023-11-06 22:52:49,531 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:52:49,531 INFO L495 AbstractCegarLoop]: Abstraction has 96 states and 124 transitions. [2023-11-06 22:52:49,532 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:52:49,532 INFO L276 IsEmpty]: Start isEmpty. Operand 96 states and 124 transitions. [2023-11-06 22:52:49,536 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2023-11-06 22:52:49,536 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:52:49,536 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:52:49,537 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 22:52:49,537 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:52:49,538 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:52:49,538 INFO L85 PathProgramCache]: Analyzing trace with hash 485124754, now seen corresponding path program 1 times [2023-11-06 22:52:49,539 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:52:49,539 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1811620765] [2023-11-06 22:52:49,539 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:52:49,540 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:52:49,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:49,731 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-06 22:52:49,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:49,741 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2023-11-06 22:52:49,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:49,747 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:52:49,747 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:52:49,748 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1811620765] [2023-11-06 22:52:49,748 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1811620765] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:52:49,748 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:52:49,748 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:52:49,749 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [977915970] [2023-11-06 22:52:49,749 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:52:49,751 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:52:49,751 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:52:49,752 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:52:49,752 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:52:49,753 INFO L87 Difference]: Start difference. First operand 96 states and 124 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:52:49,793 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:52:49,793 INFO L93 Difference]: Finished difference Result 184 states and 243 transitions. [2023-11-06 22:52:49,794 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:52:49,794 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2023-11-06 22:52:49,795 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:52:49,797 INFO L225 Difference]: With dead ends: 184 [2023-11-06 22:52:49,797 INFO L226 Difference]: Without dead ends: 96 [2023-11-06 22:52:49,800 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:52:49,802 INFO L413 NwaCegarLoop]: 122 mSDtfsCounter, 101 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 101 SdHoareTripleChecker+Valid, 122 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:52:49,802 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [101 Valid, 122 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:52:49,808 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 96 states. [2023-11-06 22:52:49,829 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 96 to 96. [2023-11-06 22:52:49,830 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 96 states, 71 states have (on average 1.295774647887324) internal successors, (92), 80 states have internal predecessors, (92), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-06 22:52:49,833 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 96 states to 96 states and 123 transitions. [2023-11-06 22:52:49,834 INFO L78 Accepts]: Start accepts. Automaton has 96 states and 123 transitions. Word has length 37 [2023-11-06 22:52:49,835 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:52:49,836 INFO L495 AbstractCegarLoop]: Abstraction has 96 states and 123 transitions. [2023-11-06 22:52:49,836 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:52:49,836 INFO L276 IsEmpty]: Start isEmpty. Operand 96 states and 123 transitions. [2023-11-06 22:52:49,840 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2023-11-06 22:52:49,840 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:52:49,840 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:52:49,840 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 22:52:49,841 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:52:49,842 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:52:49,842 INFO L85 PathProgramCache]: Analyzing trace with hash 88830114, now seen corresponding path program 1 times [2023-11-06 22:52:49,842 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:52:49,842 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [445438427] [2023-11-06 22:52:49,843 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:52:49,843 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:52:49,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:49,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-06 22:52:49,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:49,999 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2023-11-06 22:52:50,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:50,003 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2023-11-06 22:52:50,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:50,009 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:52:50,009 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:52:50,009 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [445438427] [2023-11-06 22:52:50,010 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [445438427] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:52:50,010 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:52:50,010 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-06 22:52:50,010 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [790164129] [2023-11-06 22:52:50,011 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:52:50,011 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-06 22:52:50,012 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:52:50,012 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-06 22:52:50,013 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-06 22:52:50,013 INFO L87 Difference]: Start difference. First operand 96 states and 123 transitions. Second operand has 4 states, 4 states have (on average 9.25) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:52:50,331 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:52:50,331 INFO L93 Difference]: Finished difference Result 288 states and 392 transitions. [2023-11-06 22:52:50,332 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 22:52:50,333 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.25) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2023-11-06 22:52:50,333 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:52:50,343 INFO L225 Difference]: With dead ends: 288 [2023-11-06 22:52:50,345 INFO L226 Difference]: Without dead ends: 200 [2023-11-06 22:52:50,350 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:52:50,355 INFO L413 NwaCegarLoop]: 124 mSDtfsCounter, 185 mSDsluCounter, 149 mSDsCounter, 0 mSdLazyCounter, 90 mSolverCounterSat, 60 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 191 SdHoareTripleChecker+Valid, 273 SdHoareTripleChecker+Invalid, 150 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Valid, 90 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:52:50,359 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [191 Valid, 273 Invalid, 150 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [60 Valid, 90 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:52:50,362 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 200 states. [2023-11-06 22:52:50,442 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 200 to 182. [2023-11-06 22:52:50,446 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 182 states, 135 states have (on average 1.2740740740740741) internal successors, (172), 143 states have internal predecessors, (172), 26 states have call successors, (26), 17 states have call predecessors, (26), 20 states have return successors, (43), 26 states have call predecessors, (43), 24 states have call successors, (43) [2023-11-06 22:52:50,454 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 182 states to 182 states and 241 transitions. [2023-11-06 22:52:50,455 INFO L78 Accepts]: Start accepts. Automaton has 182 states and 241 transitions. Word has length 46 [2023-11-06 22:52:50,456 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:52:50,456 INFO L495 AbstractCegarLoop]: Abstraction has 182 states and 241 transitions. [2023-11-06 22:52:50,457 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.25) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:52:50,457 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 241 transitions. [2023-11-06 22:52:50,471 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2023-11-06 22:52:50,471 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:52:50,472 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:52:50,472 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 22:52:50,473 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:52:50,476 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:52:50,476 INFO L85 PathProgramCache]: Analyzing trace with hash -2065653903, now seen corresponding path program 1 times [2023-11-06 22:52:50,477 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:52:50,477 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1749107324] [2023-11-06 22:52:50,478 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:52:50,478 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:52:50,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:50,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-06 22:52:50,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:50,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2023-11-06 22:52:50,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:50,739 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:52:50,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:50,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2023-11-06 22:52:50,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:50,820 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:52:50,820 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:52:50,820 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1749107324] [2023-11-06 22:52:50,821 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1749107324] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:52:50,822 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:52:50,823 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:52:50,823 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [831815706] [2023-11-06 22:52:50,823 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:52:50,824 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:52:50,825 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:52:50,826 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:52:50,826 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:52:50,827 INFO L87 Difference]: Start difference. First operand 182 states and 241 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:52:51,155 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:52:51,156 INFO L93 Difference]: Finished difference Result 376 states and 514 transitions. [2023-11-06 22:52:51,156 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:52:51,157 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2023-11-06 22:52:51,157 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:52:51,165 INFO L225 Difference]: With dead ends: 376 [2023-11-06 22:52:51,165 INFO L226 Difference]: Without dead ends: 202 [2023-11-06 22:52:51,167 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=61, Unknown=0, NotChecked=0, Total=90 [2023-11-06 22:52:51,179 INFO L413 NwaCegarLoop]: 121 mSDtfsCounter, 78 mSDsluCounter, 395 mSDsCounter, 0 mSdLazyCounter, 149 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 81 SdHoareTripleChecker+Valid, 516 SdHoareTripleChecker+Invalid, 177 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 149 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:52:51,180 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [81 Valid, 516 Invalid, 177 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 149 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:52:51,181 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 202 states. [2023-11-06 22:52:51,229 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 202 to 185. [2023-11-06 22:52:51,230 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 185 states, 138 states have (on average 1.2681159420289856) internal successors, (175), 146 states have internal predecessors, (175), 26 states have call successors, (26), 17 states have call predecessors, (26), 20 states have return successors, (43), 26 states have call predecessors, (43), 24 states have call successors, (43) [2023-11-06 22:52:51,234 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 185 states to 185 states and 244 transitions. [2023-11-06 22:52:51,234 INFO L78 Accepts]: Start accepts. Automaton has 185 states and 244 transitions. Word has length 56 [2023-11-06 22:52:51,236 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:52:51,236 INFO L495 AbstractCegarLoop]: Abstraction has 185 states and 244 transitions. [2023-11-06 22:52:51,237 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:52:51,237 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 244 transitions. [2023-11-06 22:52:51,239 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2023-11-06 22:52:51,240 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:52:51,241 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:52:51,241 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 22:52:51,241 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:52:51,242 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:52:51,242 INFO L85 PathProgramCache]: Analyzing trace with hash 808357194, now seen corresponding path program 1 times [2023-11-06 22:52:51,242 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:52:51,242 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [150492473] [2023-11-06 22:52:51,242 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:52:51,243 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:52:51,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:51,306 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-06 22:52:51,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:51,314 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 22:52:51,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:51,322 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:52:51,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:51,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2023-11-06 22:52:51,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:51,334 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:52:51,334 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:52:51,334 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [150492473] [2023-11-06 22:52:51,335 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [150492473] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:52:51,335 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:52:51,335 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-06 22:52:51,335 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [644942565] [2023-11-06 22:52:51,336 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:52:51,336 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-06 22:52:51,336 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:52:51,339 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-06 22:52:51,340 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-06 22:52:51,344 INFO L87 Difference]: Start difference. First operand 185 states and 244 transitions. Second operand has 4 states, 4 states have (on average 10.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:52:51,493 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:52:51,494 INFO L93 Difference]: Finished difference Result 310 states and 395 transitions. [2023-11-06 22:52:51,494 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-06 22:52:51,495 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 52 [2023-11-06 22:52:51,495 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:52:51,497 INFO L225 Difference]: With dead ends: 310 [2023-11-06 22:52:51,497 INFO L226 Difference]: Without dead ends: 169 [2023-11-06 22:52:51,498 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-06 22:52:51,499 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 72 mSDsluCounter, 124 mSDsCounter, 0 mSdLazyCounter, 66 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 229 SdHoareTripleChecker+Invalid, 82 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 66 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:52:51,500 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [79 Valid, 229 Invalid, 82 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 66 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:52:51,501 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 169 states. [2023-11-06 22:52:51,521 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 169 to 167. [2023-11-06 22:52:51,522 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 167 states, 126 states have (on average 1.2777777777777777) internal successors, (161), 134 states have internal predecessors, (161), 20 states have call successors, (20), 15 states have call predecessors, (20), 20 states have return successors, (31), 22 states have call predecessors, (31), 20 states have call successors, (31) [2023-11-06 22:52:51,524 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 167 states to 167 states and 212 transitions. [2023-11-06 22:52:51,524 INFO L78 Accepts]: Start accepts. Automaton has 167 states and 212 transitions. Word has length 52 [2023-11-06 22:52:51,525 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:52:51,525 INFO L495 AbstractCegarLoop]: Abstraction has 167 states and 212 transitions. [2023-11-06 22:52:51,525 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:52:51,525 INFO L276 IsEmpty]: Start isEmpty. Operand 167 states and 212 transitions. [2023-11-06 22:52:51,526 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2023-11-06 22:52:51,527 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:52:51,527 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:52:51,527 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-06 22:52:51,527 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:52:51,528 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:52:51,528 INFO L85 PathProgramCache]: Analyzing trace with hash -1642952077, now seen corresponding path program 1 times [2023-11-06 22:52:51,529 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:52:51,529 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1470302901] [2023-11-06 22:52:51,529 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:52:51,529 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:52:51,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:51,646 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-06 22:52:51,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:51,666 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2023-11-06 22:52:51,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:51,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:52:51,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:51,743 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2023-11-06 22:52:51,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:51,750 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:52:51,751 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:52:51,751 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1470302901] [2023-11-06 22:52:51,751 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1470302901] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:52:51,751 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:52:51,752 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:52:51,752 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1962709969] [2023-11-06 22:52:51,752 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:52:51,754 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:52:51,755 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:52:51,756 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:52:51,756 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:52:51,756 INFO L87 Difference]: Start difference. First operand 167 states and 212 transitions. Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:52:51,987 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:52:51,987 INFO L93 Difference]: Finished difference Result 336 states and 440 transitions. [2023-11-06 22:52:51,988 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 22:52:51,989 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2023-11-06 22:52:51,991 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:52:51,994 INFO L225 Difference]: With dead ends: 336 [2023-11-06 22:52:51,994 INFO L226 Difference]: Without dead ends: 177 [2023-11-06 22:52:51,996 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:52:51,998 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 73 mSDsluCounter, 238 mSDsCounter, 0 mSdLazyCounter, 110 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 343 SdHoareTripleChecker+Invalid, 127 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 110 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:52:52,000 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [77 Valid, 343 Invalid, 127 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 110 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:52:52,004 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 177 states. [2023-11-06 22:52:52,035 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 177 to 169. [2023-11-06 22:52:52,036 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 169 states, 128 states have (on average 1.2734375) internal successors, (163), 136 states have internal predecessors, (163), 20 states have call successors, (20), 15 states have call predecessors, (20), 20 states have return successors, (31), 22 states have call predecessors, (31), 20 states have call successors, (31) [2023-11-06 22:52:52,039 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 169 states to 169 states and 214 transitions. [2023-11-06 22:52:52,039 INFO L78 Accepts]: Start accepts. Automaton has 169 states and 214 transitions. Word has length 56 [2023-11-06 22:52:52,041 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:52:52,041 INFO L495 AbstractCegarLoop]: Abstraction has 169 states and 214 transitions. [2023-11-06 22:52:52,042 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:52:52,042 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 214 transitions. [2023-11-06 22:52:52,043 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2023-11-06 22:52:52,044 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:52:52,044 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:52:52,044 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-06 22:52:52,045 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:52:52,045 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:52:52,046 INFO L85 PathProgramCache]: Analyzing trace with hash 846576885, now seen corresponding path program 1 times [2023-11-06 22:52:52,046 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:52:52,046 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1806785356] [2023-11-06 22:52:52,046 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:52:52,047 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:52:52,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:52,206 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-06 22:52:52,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:52,216 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2023-11-06 22:52:52,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:52,242 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:52:52,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:52,276 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2023-11-06 22:52:52,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:52,281 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:52:52,281 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:52:52,282 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1806785356] [2023-11-06 22:52:52,282 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1806785356] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:52:52,282 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:52:52,282 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:52:52,283 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1883149898] [2023-11-06 22:52:52,283 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:52:52,284 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:52:52,284 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:52:52,285 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:52:52,286 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:52:52,286 INFO L87 Difference]: Start difference. First operand 169 states and 214 transitions. Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-06 22:52:52,648 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:52:52,649 INFO L93 Difference]: Finished difference Result 477 states and 626 transitions. [2023-11-06 22:52:52,649 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:52:52,650 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2023-11-06 22:52:52,650 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:52:52,654 INFO L225 Difference]: With dead ends: 477 [2023-11-06 22:52:52,655 INFO L226 Difference]: Without dead ends: 316 [2023-11-06 22:52:52,656 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:52:52,658 INFO L413 NwaCegarLoop]: 148 mSDtfsCounter, 234 mSDsluCounter, 194 mSDsCounter, 0 mSdLazyCounter, 158 mSolverCounterSat, 69 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 241 SdHoareTripleChecker+Valid, 342 SdHoareTripleChecker+Invalid, 227 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 69 IncrementalHoareTripleChecker+Valid, 158 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-06 22:52:52,658 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [241 Valid, 342 Invalid, 227 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [69 Valid, 158 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-06 22:52:52,661 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 316 states. [2023-11-06 22:52:52,722 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 316 to 308. [2023-11-06 22:52:52,724 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 308 states, 231 states have (on average 1.2467532467532467) internal successors, (288), 243 states have internal predecessors, (288), 40 states have call successors, (40), 33 states have call predecessors, (40), 36 states have return successors, (66), 41 states have call predecessors, (66), 40 states have call successors, (66) [2023-11-06 22:52:52,729 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 308 states to 308 states and 394 transitions. [2023-11-06 22:52:52,730 INFO L78 Accepts]: Start accepts. Automaton has 308 states and 394 transitions. Word has length 56 [2023-11-06 22:52:52,732 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:52:52,732 INFO L495 AbstractCegarLoop]: Abstraction has 308 states and 394 transitions. [2023-11-06 22:52:52,733 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-06 22:52:52,733 INFO L276 IsEmpty]: Start isEmpty. Operand 308 states and 394 transitions. [2023-11-06 22:52:52,735 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2023-11-06 22:52:52,735 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:52:52,736 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:52:52,736 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-06 22:52:52,738 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:52:52,739 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:52:52,739 INFO L85 PathProgramCache]: Analyzing trace with hash 1874240715, now seen corresponding path program 1 times [2023-11-06 22:52:52,739 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:52:52,740 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [168778847] [2023-11-06 22:52:52,740 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:52:52,740 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:52:52,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:52,871 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-06 22:52:52,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:52,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2023-11-06 22:52:52,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:52,902 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:52:52,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:52,915 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:52:52,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:52,918 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2023-11-06 22:52:52,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:52,935 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-06 22:52:52,936 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:52:52,936 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [168778847] [2023-11-06 22:52:52,936 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [168778847] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:52:52,937 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:52:52,937 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-06 22:52:52,937 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1663993867] [2023-11-06 22:52:52,937 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:52:52,938 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-06 22:52:52,938 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:52:52,939 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-06 22:52:52,939 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:52:52,939 INFO L87 Difference]: Start difference. First operand 308 states and 394 transitions. Second operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 22:52:53,341 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:52:53,341 INFO L93 Difference]: Finished difference Result 612 states and 789 transitions. [2023-11-06 22:52:53,342 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2023-11-06 22:52:53,342 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 58 [2023-11-06 22:52:53,343 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:52:53,346 INFO L225 Difference]: With dead ends: 612 [2023-11-06 22:52:53,347 INFO L226 Difference]: Without dead ends: 312 [2023-11-06 22:52:53,348 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2023-11-06 22:52:53,351 INFO L413 NwaCegarLoop]: 90 mSDtfsCounter, 126 mSDsluCounter, 356 mSDsCounter, 0 mSdLazyCounter, 204 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 132 SdHoareTripleChecker+Valid, 446 SdHoareTripleChecker+Invalid, 242 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 204 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:52:53,351 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [132 Valid, 446 Invalid, 242 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 204 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:52:53,353 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 312 states. [2023-11-06 22:52:53,399 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 312 to 304. [2023-11-06 22:52:53,401 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 304 states, 227 states have (on average 1.2158590308370043) internal successors, (276), 239 states have internal predecessors, (276), 40 states have call successors, (40), 33 states have call predecessors, (40), 36 states have return successors, (66), 41 states have call predecessors, (66), 40 states have call successors, (66) [2023-11-06 22:52:53,406 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 304 states to 304 states and 382 transitions. [2023-11-06 22:52:53,406 INFO L78 Accepts]: Start accepts. Automaton has 304 states and 382 transitions. Word has length 58 [2023-11-06 22:52:53,407 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:52:53,407 INFO L495 AbstractCegarLoop]: Abstraction has 304 states and 382 transitions. [2023-11-06 22:52:53,407 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 22:52:53,408 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 382 transitions. [2023-11-06 22:52:53,409 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2023-11-06 22:52:53,409 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:52:53,409 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:52:53,410 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-06 22:52:53,410 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:52:53,411 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:52:53,411 INFO L85 PathProgramCache]: Analyzing trace with hash -1421347697, now seen corresponding path program 1 times [2023-11-06 22:52:53,411 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:52:53,411 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [525828642] [2023-11-06 22:52:53,412 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:52:53,412 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:52:53,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:53,659 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:52:53,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:53,731 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-06 22:52:53,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:53,745 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2023-11-06 22:52:53,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:53,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:52:53,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:53,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2023-11-06 22:52:53,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:53,763 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:52:53,764 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:52:53,764 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [525828642] [2023-11-06 22:52:53,764 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [525828642] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:52:53,764 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:52:53,764 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2023-11-06 22:52:53,764 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [727527603] [2023-11-06 22:52:53,765 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:52:53,765 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2023-11-06 22:52:53,765 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:52:53,766 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2023-11-06 22:52:53,766 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2023-11-06 22:52:53,766 INFO L87 Difference]: Start difference. First operand 304 states and 382 transitions. Second operand has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 7 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-06 22:52:54,768 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:52:54,769 INFO L93 Difference]: Finished difference Result 920 states and 1203 transitions. [2023-11-06 22:52:54,769 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2023-11-06 22:52:54,770 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 7 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 60 [2023-11-06 22:52:54,771 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:52:54,778 INFO L225 Difference]: With dead ends: 920 [2023-11-06 22:52:54,778 INFO L226 Difference]: Without dead ends: 679 [2023-11-06 22:52:54,781 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 39 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 145 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=153, Invalid=549, Unknown=0, NotChecked=0, Total=702 [2023-11-06 22:52:54,784 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 470 mSDsluCounter, 427 mSDsCounter, 0 mSdLazyCounter, 543 mSolverCounterSat, 161 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 475 SdHoareTripleChecker+Valid, 527 SdHoareTripleChecker+Invalid, 704 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 161 IncrementalHoareTripleChecker+Valid, 543 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2023-11-06 22:52:54,784 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [475 Valid, 527 Invalid, 704 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [161 Valid, 543 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2023-11-06 22:52:54,786 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 679 states. [2023-11-06 22:52:54,881 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 679 to 585. [2023-11-06 22:52:54,883 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 585 states, 437 states have (on average 1.2151029748283753) internal successors, (531), 463 states have internal predecessors, (531), 77 states have call successors, (77), 58 states have call predecessors, (77), 70 states have return successors, (127), 79 states have call predecessors, (127), 77 states have call successors, (127) [2023-11-06 22:52:54,889 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 585 states to 585 states and 735 transitions. [2023-11-06 22:52:54,889 INFO L78 Accepts]: Start accepts. Automaton has 585 states and 735 transitions. Word has length 60 [2023-11-06 22:52:54,890 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:52:54,890 INFO L495 AbstractCegarLoop]: Abstraction has 585 states and 735 transitions. [2023-11-06 22:52:54,890 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 7 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-06 22:52:54,890 INFO L276 IsEmpty]: Start isEmpty. Operand 585 states and 735 transitions. [2023-11-06 22:52:54,892 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2023-11-06 22:52:54,893 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:52:54,893 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:52:54,894 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-06 22:52:54,894 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:52:54,894 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:52:54,895 INFO L85 PathProgramCache]: Analyzing trace with hash 118762499, now seen corresponding path program 1 times [2023-11-06 22:52:54,895 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:52:54,895 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [893205060] [2023-11-06 22:52:54,895 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:52:54,896 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:52:54,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:55,037 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:52:55,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:55,053 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:52:55,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:55,064 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:52:55,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:55,072 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-06 22:52:55,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:55,078 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:52:55,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:55,084 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2023-11-06 22:52:55,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:55,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2023-11-06 22:52:55,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:55,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-06 22:52:55,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:55,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:52:55,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:55,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2023-11-06 22:52:55,138 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:55,140 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 6 proven. 1 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2023-11-06 22:52:55,140 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:52:55,140 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [893205060] [2023-11-06 22:52:55,141 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [893205060] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:52:55,141 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2065314620] [2023-11-06 22:52:55,141 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:52:55,141 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:52:55,142 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:52:55,146 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:52:55,191 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-06 22:52:55,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:55,340 INFO L262 TraceCheckSpWp]: Trace formula consists of 365 conjuncts, 8 conjunts are in the unsatisfiable core [2023-11-06 22:52:55,351 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:52:55,655 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 26 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:52:55,655 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-06 22:52:56,001 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 18 proven. 10 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2023-11-06 22:52:56,002 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2065314620] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-06 22:52:56,002 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-06 22:52:56,002 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 6, 6] total 13 [2023-11-06 22:52:56,003 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [289121268] [2023-11-06 22:52:56,003 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-06 22:52:56,004 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2023-11-06 22:52:56,004 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:52:56,005 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2023-11-06 22:52:56,005 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=129, Unknown=0, NotChecked=0, Total=156 [2023-11-06 22:52:56,006 INFO L87 Difference]: Start difference. First operand 585 states and 735 transitions. Second operand has 13 states, 13 states have (on average 10.153846153846153) internal successors, (132), 9 states have internal predecessors, (132), 4 states have call successors, (23), 6 states have call predecessors, (23), 6 states have return successors, (21), 5 states have call predecessors, (21), 4 states have call successors, (21) [2023-11-06 22:52:57,532 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:52:57,532 INFO L93 Difference]: Finished difference Result 1227 states and 1586 transitions. [2023-11-06 22:52:57,533 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2023-11-06 22:52:57,533 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 10.153846153846153) internal successors, (132), 9 states have internal predecessors, (132), 4 states have call successors, (23), 6 states have call predecessors, (23), 6 states have return successors, (21), 5 states have call predecessors, (21), 4 states have call successors, (21) Word has length 109 [2023-11-06 22:52:57,534 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:52:57,540 INFO L225 Difference]: With dead ends: 1227 [2023-11-06 22:52:57,540 INFO L226 Difference]: Without dead ends: 703 [2023-11-06 22:52:57,544 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 276 GetRequests, 239 SyntacticMatches, 4 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 244 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=265, Invalid=925, Unknown=0, NotChecked=0, Total=1190 [2023-11-06 22:52:57,545 INFO L413 NwaCegarLoop]: 171 mSDtfsCounter, 266 mSDsluCounter, 1297 mSDsCounter, 0 mSdLazyCounter, 1116 mSolverCounterSat, 79 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 273 SdHoareTripleChecker+Valid, 1468 SdHoareTripleChecker+Invalid, 1195 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 79 IncrementalHoareTripleChecker+Valid, 1116 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2023-11-06 22:52:57,546 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [273 Valid, 1468 Invalid, 1195 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [79 Valid, 1116 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2023-11-06 22:52:57,548 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 703 states. [2023-11-06 22:52:57,686 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 703 to 641. [2023-11-06 22:52:57,688 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 641 states, 475 states have (on average 1.2) internal successors, (570), 507 states have internal predecessors, (570), 86 states have call successors, (86), 71 states have call predecessors, (86), 79 states have return successors, (114), 83 states have call predecessors, (114), 86 states have call successors, (114) [2023-11-06 22:52:57,694 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 641 states to 641 states and 770 transitions. [2023-11-06 22:52:57,694 INFO L78 Accepts]: Start accepts. Automaton has 641 states and 770 transitions. Word has length 109 [2023-11-06 22:52:57,695 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:52:57,695 INFO L495 AbstractCegarLoop]: Abstraction has 641 states and 770 transitions. [2023-11-06 22:52:57,695 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 10.153846153846153) internal successors, (132), 9 states have internal predecessors, (132), 4 states have call successors, (23), 6 states have call predecessors, (23), 6 states have return successors, (21), 5 states have call predecessors, (21), 4 states have call successors, (21) [2023-11-06 22:52:57,696 INFO L276 IsEmpty]: Start isEmpty. Operand 641 states and 770 transitions. [2023-11-06 22:52:57,700 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 188 [2023-11-06 22:52:57,700 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:52:57,701 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:52:57,721 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-06 22:52:57,908 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-06 22:52:57,909 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:52:57,909 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:52:57,909 INFO L85 PathProgramCache]: Analyzing trace with hash 430860499, now seen corresponding path program 1 times [2023-11-06 22:52:57,909 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:52:57,910 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2030112430] [2023-11-06 22:52:57,910 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:52:57,910 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:52:57,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:58,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:52:58,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:58,205 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:52:58,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:58,216 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:52:58,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:58,225 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-06 22:52:58,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:58,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:52:58,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:58,235 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2023-11-06 22:52:58,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:58,320 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:52:58,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:58,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-06 22:52:58,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:58,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-06 22:52:58,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:58,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:52:58,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:58,339 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2023-11-06 22:52:58,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:58,431 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:52:58,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:58,434 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-06 22:52:58,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:58,437 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 149 [2023-11-06 22:52:58,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:58,440 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2023-11-06 22:52:58,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:58,449 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:52:58,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:58,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 179 [2023-11-06 22:52:58,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:58,458 INFO L134 CoverageAnalysis]: Checked inductivity of 197 backedges. 96 proven. 7 refuted. 0 times theorem prover too weak. 94 trivial. 0 not checked. [2023-11-06 22:52:58,459 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:52:58,459 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2030112430] [2023-11-06 22:52:58,459 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2030112430] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:52:58,459 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1018300382] [2023-11-06 22:52:58,461 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:52:58,461 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:52:58,461 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:52:58,462 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:52:58,488 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-06 22:52:58,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:52:58,661 INFO L262 TraceCheckSpWp]: Trace formula consists of 569 conjuncts, 13 conjunts are in the unsatisfiable core [2023-11-06 22:52:58,671 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:52:58,989 INFO L134 CoverageAnalysis]: Checked inductivity of 197 backedges. 143 proven. 4 refuted. 0 times theorem prover too weak. 50 trivial. 0 not checked. [2023-11-06 22:52:58,990 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-06 22:52:59,661 INFO L134 CoverageAnalysis]: Checked inductivity of 197 backedges. 77 proven. 39 refuted. 0 times theorem prover too weak. 81 trivial. 0 not checked. [2023-11-06 22:52:59,662 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1018300382] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-06 22:52:59,662 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-06 22:52:59,662 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 10, 11] total 28 [2023-11-06 22:52:59,663 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1844034498] [2023-11-06 22:52:59,663 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-06 22:52:59,664 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2023-11-06 22:52:59,665 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:52:59,666 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2023-11-06 22:52:59,667 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=126, Invalid=630, Unknown=0, NotChecked=0, Total=756 [2023-11-06 22:52:59,668 INFO L87 Difference]: Start difference. First operand 641 states and 770 transitions. Second operand has 28 states, 28 states have (on average 7.857142857142857) internal successors, (220), 24 states have internal predecessors, (220), 10 states have call successors, (34), 8 states have call predecessors, (34), 10 states have return successors, (34), 9 states have call predecessors, (34), 10 states have call successors, (34) [2023-11-06 22:53:03,175 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:53:03,176 INFO L93 Difference]: Finished difference Result 1850 states and 2310 transitions. [2023-11-06 22:53:03,176 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 58 states. [2023-11-06 22:53:03,177 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 28 states have (on average 7.857142857142857) internal successors, (220), 24 states have internal predecessors, (220), 10 states have call successors, (34), 8 states have call predecessors, (34), 10 states have return successors, (34), 9 states have call predecessors, (34), 10 states have call successors, (34) Word has length 187 [2023-11-06 22:53:03,177 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:53:03,188 INFO L225 Difference]: With dead ends: 1850 [2023-11-06 22:53:03,189 INFO L226 Difference]: Without dead ends: 1217 [2023-11-06 22:53:03,200 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 498 GetRequests, 413 SyntacticMatches, 3 SemanticMatches, 82 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1872 ImplicationChecksByTransitivity, 1.8s TimeCoverageRelationStatistics Valid=1304, Invalid=5668, Unknown=0, NotChecked=0, Total=6972 [2023-11-06 22:53:03,201 INFO L413 NwaCegarLoop]: 146 mSDtfsCounter, 1473 mSDsluCounter, 1100 mSDsCounter, 0 mSdLazyCounter, 1971 mSolverCounterSat, 519 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1473 SdHoareTripleChecker+Valid, 1246 SdHoareTripleChecker+Invalid, 2490 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 519 IncrementalHoareTripleChecker+Valid, 1971 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2023-11-06 22:53:03,201 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1473 Valid, 1246 Invalid, 2490 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [519 Valid, 1971 Invalid, 0 Unknown, 0 Unchecked, 1.8s Time] [2023-11-06 22:53:03,204 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1217 states. [2023-11-06 22:53:03,400 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1217 to 1148. [2023-11-06 22:53:03,403 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1148 states, 862 states have (on average 1.1392111368909512) internal successors, (982), 903 states have internal predecessors, (982), 151 states have call successors, (151), 130 states have call predecessors, (151), 134 states have return successors, (188), 143 states have call predecessors, (188), 151 states have call successors, (188) [2023-11-06 22:53:03,412 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1148 states to 1148 states and 1321 transitions. [2023-11-06 22:53:03,413 INFO L78 Accepts]: Start accepts. Automaton has 1148 states and 1321 transitions. Word has length 187 [2023-11-06 22:53:03,413 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:53:03,413 INFO L495 AbstractCegarLoop]: Abstraction has 1148 states and 1321 transitions. [2023-11-06 22:53:03,414 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 28 states have (on average 7.857142857142857) internal successors, (220), 24 states have internal predecessors, (220), 10 states have call successors, (34), 8 states have call predecessors, (34), 10 states have return successors, (34), 9 states have call predecessors, (34), 10 states have call successors, (34) [2023-11-06 22:53:03,414 INFO L276 IsEmpty]: Start isEmpty. Operand 1148 states and 1321 transitions. [2023-11-06 22:53:03,425 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 208 [2023-11-06 22:53:03,425 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:53:03,426 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:53:03,440 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-06 22:53:03,633 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2023-11-06 22:53:03,633 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:53:03,634 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:53:03,634 INFO L85 PathProgramCache]: Analyzing trace with hash 1314092273, now seen corresponding path program 1 times [2023-11-06 22:53:03,634 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:53:03,634 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [107219004] [2023-11-06 22:53:03,634 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:53:03,635 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:53:03,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:03,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:53:03,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:03,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:53:03,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:03,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:53:03,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:03,971 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-06 22:53:03,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:03,983 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:53:03,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:03,994 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2023-11-06 22:53:04,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:04,062 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:53:04,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:04,064 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-06 22:53:04,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:04,073 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-06 22:53:04,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:04,077 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:53:04,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:04,080 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2023-11-06 22:53:04,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:04,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2023-11-06 22:53:04,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:04,105 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2023-11-06 22:53:04,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:04,114 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:53:04,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:04,116 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-06 22:53:04,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:04,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 22:53:04,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:04,121 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 159 [2023-11-06 22:53:04,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:04,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 169 [2023-11-06 22:53:04,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:04,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 178 [2023-11-06 22:53:04,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:04,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:53:04,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:04,139 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 199 [2023-11-06 22:53:04,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:04,143 INFO L134 CoverageAnalysis]: Checked inductivity of 243 backedges. 86 proven. 58 refuted. 0 times theorem prover too weak. 99 trivial. 0 not checked. [2023-11-06 22:53:04,143 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:53:04,143 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [107219004] [2023-11-06 22:53:04,144 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [107219004] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:53:04,144 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1651935871] [2023-11-06 22:53:04,144 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:53:04,144 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:53:04,145 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:53:04,146 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:53:04,176 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-06 22:53:04,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:04,354 INFO L262 TraceCheckSpWp]: Trace formula consists of 618 conjuncts, 12 conjunts are in the unsatisfiable core [2023-11-06 22:53:04,363 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:53:04,585 INFO L134 CoverageAnalysis]: Checked inductivity of 243 backedges. 186 proven. 11 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2023-11-06 22:53:04,586 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-06 22:53:05,371 INFO L134 CoverageAnalysis]: Checked inductivity of 243 backedges. 101 proven. 61 refuted. 0 times theorem prover too weak. 81 trivial. 0 not checked. [2023-11-06 22:53:05,372 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1651935871] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-06 22:53:05,372 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-06 22:53:05,372 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 8, 8] total 22 [2023-11-06 22:53:05,373 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [631344877] [2023-11-06 22:53:05,374 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-06 22:53:05,376 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2023-11-06 22:53:05,376 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:53:05,378 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2023-11-06 22:53:05,378 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=394, Unknown=0, NotChecked=0, Total=462 [2023-11-06 22:53:05,379 INFO L87 Difference]: Start difference. First operand 1148 states and 1321 transitions. Second operand has 22 states, 22 states have (on average 11.409090909090908) internal successors, (251), 15 states have internal predecessors, (251), 7 states have call successors, (47), 8 states have call predecessors, (47), 11 states have return successors, (41), 10 states have call predecessors, (41), 7 states have call successors, (41) [2023-11-06 22:53:07,530 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:53:07,530 INFO L93 Difference]: Finished difference Result 2242 states and 2613 transitions. [2023-11-06 22:53:07,530 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2023-11-06 22:53:07,531 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 11.409090909090908) internal successors, (251), 15 states have internal predecessors, (251), 7 states have call successors, (47), 8 states have call predecessors, (47), 11 states have return successors, (41), 10 states have call predecessors, (41), 7 states have call successors, (41) Word has length 207 [2023-11-06 22:53:07,532 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:53:07,542 INFO L225 Difference]: With dead ends: 2242 [2023-11-06 22:53:07,542 INFO L226 Difference]: Without dead ends: 1208 [2023-11-06 22:53:07,548 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 510 GetRequests, 462 SyntacticMatches, 1 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 442 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=483, Invalid=1869, Unknown=0, NotChecked=0, Total=2352 [2023-11-06 22:53:07,549 INFO L413 NwaCegarLoop]: 40 mSDtfsCounter, 675 mSDsluCounter, 366 mSDsCounter, 0 mSdLazyCounter, 1596 mSolverCounterSat, 248 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 678 SdHoareTripleChecker+Valid, 406 SdHoareTripleChecker+Invalid, 1844 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 248 IncrementalHoareTripleChecker+Valid, 1596 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:53:07,549 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [678 Valid, 406 Invalid, 1844 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [248 Valid, 1596 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2023-11-06 22:53:07,552 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1208 states. [2023-11-06 22:53:07,755 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1208 to 1172. [2023-11-06 22:53:07,758 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1172 states, 878 states have (on average 1.1309794988610478) internal successors, (993), 919 states have internal predecessors, (993), 151 states have call successors, (151), 138 states have call predecessors, (151), 142 states have return successors, (188), 143 states have call predecessors, (188), 151 states have call successors, (188) [2023-11-06 22:53:07,766 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1172 states to 1172 states and 1332 transitions. [2023-11-06 22:53:07,767 INFO L78 Accepts]: Start accepts. Automaton has 1172 states and 1332 transitions. Word has length 207 [2023-11-06 22:53:07,768 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:53:07,768 INFO L495 AbstractCegarLoop]: Abstraction has 1172 states and 1332 transitions. [2023-11-06 22:53:07,768 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 11.409090909090908) internal successors, (251), 15 states have internal predecessors, (251), 7 states have call successors, (47), 8 states have call predecessors, (47), 11 states have return successors, (41), 10 states have call predecessors, (41), 7 states have call successors, (41) [2023-11-06 22:53:07,769 INFO L276 IsEmpty]: Start isEmpty. Operand 1172 states and 1332 transitions. [2023-11-06 22:53:07,775 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 209 [2023-11-06 22:53:07,776 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:53:07,776 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:53:07,790 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2023-11-06 22:53:07,991 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2023-11-06 22:53:07,991 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:53:07,992 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:53:07,992 INFO L85 PathProgramCache]: Analyzing trace with hash -916420892, now seen corresponding path program 1 times [2023-11-06 22:53:07,993 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:53:07,993 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [691107844] [2023-11-06 22:53:07,993 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:53:07,993 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:53:08,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:08,538 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:53:08,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:08,552 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2023-11-06 22:53:08,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:08,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:53:08,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:08,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-06 22:53:08,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:08,643 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:53:08,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:08,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2023-11-06 22:53:08,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:08,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:53:08,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:08,725 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-06 22:53:08,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:08,733 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-06 22:53:08,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:08,736 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:53:08,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:08,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2023-11-06 22:53:08,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:08,753 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 117 [2023-11-06 22:53:08,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:08,756 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 123 [2023-11-06 22:53:08,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:08,805 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:53:08,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:08,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-06 22:53:08,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:08,812 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 22:53:08,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:08,816 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 160 [2023-11-06 22:53:08,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:08,840 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2023-11-06 22:53:08,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:08,844 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 179 [2023-11-06 22:53:08,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:08,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:53:08,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:08,875 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 200 [2023-11-06 22:53:08,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:08,879 INFO L134 CoverageAnalysis]: Checked inductivity of 244 backedges. 90 proven. 43 refuted. 0 times theorem prover too weak. 111 trivial. 0 not checked. [2023-11-06 22:53:08,879 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:53:08,879 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [691107844] [2023-11-06 22:53:08,880 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [691107844] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:53:08,880 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1532478023] [2023-11-06 22:53:08,880 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:53:08,880 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:53:08,880 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:53:08,882 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:53:08,902 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2023-11-06 22:53:09,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:53:09,108 INFO L262 TraceCheckSpWp]: Trace formula consists of 618 conjuncts, 18 conjunts are in the unsatisfiable core [2023-11-06 22:53:09,115 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:53:09,425 INFO L134 CoverageAnalysis]: Checked inductivity of 244 backedges. 131 proven. 26 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2023-11-06 22:53:09,425 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-06 22:53:10,269 INFO L134 CoverageAnalysis]: Checked inductivity of 244 backedges. 99 proven. 45 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2023-11-06 22:53:10,270 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1532478023] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-06 22:53:10,270 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-06 22:53:10,270 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 8, 13] total 23 [2023-11-06 22:53:10,274 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1411216495] [2023-11-06 22:53:10,274 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-06 22:53:10,276 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2023-11-06 22:53:10,276 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:53:10,278 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2023-11-06 22:53:10,279 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=109, Invalid=397, Unknown=0, NotChecked=0, Total=506 [2023-11-06 22:53:10,280 INFO L87 Difference]: Start difference. First operand 1172 states and 1332 transitions. Second operand has 23 states, 23 states have (on average 10.08695652173913) internal successors, (232), 19 states have internal predecessors, (232), 13 states have call successors, (47), 11 states have call predecessors, (47), 13 states have return successors, (41), 14 states have call predecessors, (41), 13 states have call successors, (41) [2023-11-06 22:53:13,091 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:53:13,092 INFO L93 Difference]: Finished difference Result 2198 states and 2562 transitions. [2023-11-06 22:53:13,092 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2023-11-06 22:53:13,093 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 10.08695652173913) internal successors, (232), 19 states have internal predecessors, (232), 13 states have call successors, (47), 11 states have call predecessors, (47), 13 states have return successors, (41), 14 states have call predecessors, (41), 13 states have call successors, (41) Word has length 208 [2023-11-06 22:53:13,094 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:53:13,096 INFO L225 Difference]: With dead ends: 2198 [2023-11-06 22:53:13,096 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 22:53:13,105 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 527 GetRequests, 460 SyntacticMatches, 7 SemanticMatches, 60 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 838 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=895, Invalid=2887, Unknown=0, NotChecked=0, Total=3782 [2023-11-06 22:53:13,106 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 687 mSDsluCounter, 557 mSDsCounter, 0 mSdLazyCounter, 1963 mSolverCounterSat, 242 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 690 SdHoareTripleChecker+Valid, 613 SdHoareTripleChecker+Invalid, 2205 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 242 IncrementalHoareTripleChecker+Valid, 1963 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2023-11-06 22:53:13,107 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [690 Valid, 613 Invalid, 2205 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [242 Valid, 1963 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2023-11-06 22:53:13,108 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 22:53:13,108 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 22:53:13,108 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:53:13,108 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 22:53:13,109 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 208 [2023-11-06 22:53:13,109 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:53:13,109 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 22:53:13,110 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 10.08695652173913) internal successors, (232), 19 states have internal predecessors, (232), 13 states have call successors, (47), 11 states have call predecessors, (47), 13 states have return successors, (41), 14 states have call predecessors, (41), 13 states have call successors, (41) [2023-11-06 22:53:13,110 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 22:53:13,110 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 22:53:13,114 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 22:53:13,124 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2023-11-06 22:53:13,322 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2023-11-06 22:53:13,324 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 22:53:36,107 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 551 558) no Hoare annotation was computed. [2023-11-06 22:53:36,108 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 551 558) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= 1 ~systemActive~0)) (< 1 ~waterLevel~0) (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1)) [2023-11-06 22:53:36,108 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 551 558) no Hoare annotation was computed. [2023-11-06 22:53:36,108 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 458 464) no Hoare annotation was computed. [2023-11-06 22:53:36,109 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 458 464) the Hoare annotation is: true [2023-11-06 22:53:36,109 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 943 954) the Hoare annotation is: (let ((.cse4 (not (= ~pumpRunning~0 0))) (.cse2 (not (= 2 ~waterLevel~0))) (.cse3 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse0 (< ~pumpRunning~0 1)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse3 (< 1 ~waterLevel~0)) (or .cse4 .cse1 .cse2 .cse3) (or (< 2 ~waterLevel~0) .cse0 (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 0) .cse1 (< ~switchedOnBeforeTS~0 1)))) [2023-11-06 22:53:36,109 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 943 954) no Hoare annotation was computed. [2023-11-06 22:53:36,109 INFO L899 garLoopResultBuilder]: For program point L947-1(lines 943 954) no Hoare annotation was computed. [2023-11-06 22:53:36,110 INFO L899 garLoopResultBuilder]: For program point L833(line 833) no Hoare annotation was computed. [2023-11-06 22:53:36,110 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 812 841) no Hoare annotation was computed. [2023-11-06 22:53:36,110 INFO L899 garLoopResultBuilder]: For program point L826(lines 826 830) no Hoare annotation was computed. [2023-11-06 22:53:36,110 INFO L902 garLoopResultBuilder]: At program point L826-1(lines 826 830) the Hoare annotation is: true [2023-11-06 22:53:36,110 INFO L899 garLoopResultBuilder]: For program point L823(line 823) no Hoare annotation was computed. [2023-11-06 22:53:36,111 INFO L902 garLoopResultBuilder]: At program point L822-2(lines 822 836) the Hoare annotation is: true [2023-11-06 22:53:36,111 INFO L902 garLoopResultBuilder]: At program point L818(line 818) the Hoare annotation is: true [2023-11-06 22:53:36,111 INFO L899 garLoopResultBuilder]: For program point L818-1(line 818) no Hoare annotation was computed. [2023-11-06 22:53:36,111 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 812 841) the Hoare annotation is: true [2023-11-06 22:53:36,111 INFO L902 garLoopResultBuilder]: At program point L837(lines 812 841) the Hoare annotation is: true [2023-11-06 22:53:36,112 INFO L899 garLoopResultBuilder]: For program point L923(lines 923 927) no Hoare annotation was computed. [2023-11-06 22:53:36,112 INFO L895 garLoopResultBuilder]: At program point L923-2(lines 919 930) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse7 (= 1 ~systemActive~0))) (let ((.cse4 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse0 (not .cse7)) (.cse5 (and .cse1 .cse7 (<= ~waterLevel~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) .cse2)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse6 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 (and .cse1 (= ~waterLevel~0 1) .cse2) (not (= |old(~waterLevel~0)| 2)) .cse3) (or .cse4 .cse0 .cse5 (< 0 |old(~waterLevel~0)|) .cse3) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse6) (or .cse4 .cse0 (and .cse1 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse2) .cse5 .cse3 .cse6)))) [2023-11-06 22:53:36,113 INFO L895 garLoopResultBuilder]: At program point L791(line 791) the Hoare annotation is: (let ((.cse18 (= ~methaneLevelCritical~0 0))) (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse15 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse9 (= ~waterLevel~0 1)) (.cse13 (not (= |old(~waterLevel~0)| 2))) (.cse17 (< 1 |old(~waterLevel~0)|)) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse7 (= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse16 (<= ~waterLevel~0 0)) (.cse8 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| ~waterLevel~0)) (.cse10 (<= 1 ~switchedOnBeforeTS~0)) (.cse11 (= |timeShift_isMethaneLevelCritical_#res#1| 0)) (.cse0 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not .cse18)) (.cse3 (< |old(~pumpRunning~0)| 1))) (and (or .cse0 .cse1 (< 0 |old(~waterLevel~0)|) .cse2 .cse3) (or .cse1 .cse4 (and .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse12 .cse7 .cse9 .cse10 (= |timeShift_getWaterLevel_#res#1| 1) .cse11 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 1)) .cse13 .cse3) (or (not (= |old(~pumpRunning~0)| 0)) .cse1 (and .cse5 .cse6 .cse8 .cse2 (<= |timeShift_getWaterLevel_#res#1| 1)) (< 2 |old(~waterLevel~0)|)) (or (and .cse14 .cse5 .cse6 .cse15 .cse16 .cse8 .cse10) .cse17 .cse18 .cse0 .cse1 .cse3) (or .cse18 .cse1 (and .cse14 .cse5 .cse6 .cse15 .cse8 .cse9 .cse10) .cse13 .cse3) (or .cse17 (and .cse12 .cse6 .cse7 .cse16 .cse8 .cse10 .cse11) (and .cse5 .cse6 .cse7 .cse16 .cse8 .cse10 .cse11) .cse0 .cse1 .cse4 .cse3)))) [2023-11-06 22:53:36,113 INFO L899 garLoopResultBuilder]: For program point L791-1(line 791) no Hoare annotation was computed. [2023-11-06 22:53:36,113 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 431 457) no Hoare annotation was computed. [2023-11-06 22:53:36,113 INFO L899 garLoopResultBuilder]: For program point L445-1(lines 445 451) no Hoare annotation was computed. [2023-11-06 22:53:36,114 INFO L895 garLoopResultBuilder]: At program point getWaterLevel_returnLabel#1(lines 987 995) the Hoare annotation is: (let ((.cse9 (= ~methaneLevelCritical~0 0)) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse17 (= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse16 (<= ~waterLevel~0 0)) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse19 (= |timeShift_isMethaneLevelCritical_#res#1| 0)) (.cse15 (= ~pumpRunning~0 0))) (let ((.cse2 (and .cse15 (= ~waterLevel~0 1))) (.cse5 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse7 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse13 (< 2 |old(~waterLevel~0)|)) (.cse14 (< 1 |old(~waterLevel~0)|)) (.cse20 (and .cse1 .cse6 .cse17 .cse16 .cse12 .cse8 .cse19)) (.cse10 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse11 (< 0 |old(~waterLevel~0)|)) (.cse21 (not .cse9)) (.cse22 (and .cse15 .cse6 .cse17 .cse16 .cse12 .cse8 .cse19)) (.cse4 (< |old(~pumpRunning~0)| 1)) (.cse23 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and .cse1 (= |timeShift_getWaterLevel_#res#1| 1)) .cse2 .cse3 .cse4) (or .cse0 (and .cse5 .cse6 .cse7 .cse8) .cse3 .cse4) (or .cse9 .cse10 .cse0 .cse11 .cse12 .cse4 .cse13) (or .cse9 .cse0 .cse2 .cse3 .cse4) (or .cse14 .cse9 .cse10 .cse0 .cse4 .cse13 (and .cse5 .cse15 .cse6 .cse7 .cse16 .cse8)) (let ((.cse18 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))) (or (and .cse1 .cse6 .cse17 .cse18 .cse8 .cse19) (and .cse15 .cse6 .cse17 .cse18 .cse8 .cse19) .cse20 .cse10 .cse0 .cse21 .cse22 .cse4 .cse13)) (or .cse14 .cse23 .cse0 (and .cse15 .cse6 .cse12)) (or .cse20 .cse10 .cse0 .cse11 .cse21 .cse22 .cse4) (let ((.cse24 (= 2 ~waterLevel~0)) (.cse25 (= 2 |timeShift_getWaterLevel_#res#1|))) (or .cse23 .cse0 (and .cse15 .cse24 .cse25) .cse3 (and (<= 1 ~pumpRunning~0) .cse24 .cse25)))))) [2023-11-06 22:53:36,115 INFO L895 garLoopResultBuilder]: At program point L532(line 532) the Hoare annotation is: (let ((.cse0 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse4 (= |timeShift_processEnvironment_~tmp~5#1| 0)) (.cse5 (= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse7 (= |timeShift_isMethaneLevelCritical_#res#1| 0)) (.cse8 (< |old(~pumpRunning~0)| 1))) (and (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5 (<= ~waterLevel~0 0) .cse6 .cse7) .cse8) (or (not (= |old(~pumpRunning~0)| 0)) .cse1 (< 2 |old(~waterLevel~0)|)) (or .cse0 .cse1 (< 0 |old(~waterLevel~0)|) (and .cse2 .cse3 .cse4 .cse5 (= |old(~waterLevel~0)| ~waterLevel~0) .cse6 .cse7) .cse8) (or .cse1 (and .cse2 .cse3 .cse4 .cse5 (= ~waterLevel~0 1) .cse6 .cse7) (not (= |old(~waterLevel~0)| 2)) .cse8))) [2023-11-06 22:53:36,115 INFO L895 garLoopResultBuilder]: At program point L528(line 528) the Hoare annotation is: (let ((.cse4 (= ~methaneLevelCritical~0 0))) (let ((.cse5 (< 0 |old(~waterLevel~0)|)) (.cse0 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse6 (< 2 |old(~waterLevel~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse7 (not (= |old(~waterLevel~0)| 2))) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse10 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse2 (not .cse4)) (.cse11 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse12 (<= 1 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse1 .cse5 (= |old(~waterLevel~0)| ~waterLevel~0) .cse3 .cse6) (or .cse1 .cse7 .cse3 (= ~waterLevel~0 1)) (or (not (= |old(~pumpRunning~0)| 0)) .cse1 .cse6) (or .cse0 .cse1 .cse5 .cse2 .cse3) (or (< 1 |old(~waterLevel~0)|) .cse4 .cse0 .cse1 (and .cse8 .cse9 .cse10 .cse11 (<= ~waterLevel~0 0) .cse12) .cse3 .cse6) (or .cse1 .cse7 .cse3 (and .cse8 .cse9 .cse10 .cse2 .cse11 .cse12))))) [2023-11-06 22:53:36,115 INFO L899 garLoopResultBuilder]: For program point L912(line 912) no Hoare annotation was computed. [2023-11-06 22:53:36,116 INFO L895 garLoopResultBuilder]: At program point L776(line 776) the Hoare annotation is: (let ((.cse7 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse4 (< |old(~pumpRunning~0)| 1)) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7 .cse8)) (.cse6 (< 1 |old(~waterLevel~0)|)) (.cse0 (and (= ~pumpRunning~0 0) .cse7 .cse8)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse2 .cse3 .cse4 .cse5) (or .cse6 (< |old(~switchedOnBeforeTS~0)| 1) .cse2 .cse4 .cse5) (or .cse6 .cse0 .cse1 .cse2)))) [2023-11-06 22:53:36,116 INFO L899 garLoopResultBuilder]: For program point L776-1(line 776) no Hoare annotation was computed. [2023-11-06 22:53:36,116 INFO L895 garLoopResultBuilder]: At program point L537(line 537) the Hoare annotation is: (let ((.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse0 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (< 0 |old(~waterLevel~0)|) .cse2) (or .cse1 .cse3 .cse2) (or .cse4 .cse1 (and .cse5 (= 2 ~waterLevel~0)) .cse3) (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2) (or (< 1 |old(~waterLevel~0)|) .cse4 (and .cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1))) [2023-11-06 22:53:36,117 INFO L899 garLoopResultBuilder]: For program point L793(lines 793 803) no Hoare annotation was computed. [2023-11-06 22:53:36,117 INFO L895 garLoopResultBuilder]: At program point L537-1(lines 518 542) the Hoare annotation is: (let ((.cse19 (= |old(~waterLevel~0)| 2)) (.cse5 (= ~pumpRunning~0 0)) (.cse17 (= ~waterLevel~0 1))) (let ((.cse8 (<= ~waterLevel~0 0)) (.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse18 (and .cse5 .cse17)) (.cse16 (not .cse19)) (.cse15 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (= ~methaneLevelCritical~0 0)) (.cse1 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse2 (not (= 1 ~systemActive~0))) (.cse14 (< 0 |old(~waterLevel~0)|)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse4 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse6 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse7 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse9 (<= 1 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5 .cse6 .cse7 .cse8 .cse9)) (let ((.cse10 (= |timeShift_processEnvironment_~tmp~5#1| 0)) (.cse11 (= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse12 (= |timeShift_isMethaneLevelCritical_#res#1| 0))) (or (< 1 |old(~waterLevel~0)|) .cse1 .cse2 (not .cse0) (and .cse5 .cse10 .cse11 .cse8 .cse9 .cse12) (and .cse13 .cse10 .cse11 .cse8 .cse9 .cse12) .cse3)) (or .cse1 .cse2 .cse14 .cse15 .cse3) (or .cse2 (and .cse4 .cse6 .cse7 .cse9) .cse16 .cse3) (or (and .cse13 .cse17) .cse2 .cse18 .cse16 .cse3) (or .cse0 .cse2 .cse18 .cse16 .cse3) (or (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0) .cse19) (not (= |old(~pumpRunning~0)| 0)) (and .cse5 .cse15) .cse2 (< 2 |old(~waterLevel~0)|)) (or .cse0 .cse1 .cse2 .cse14 .cse3 (and .cse4 .cse5 .cse6 .cse7 .cse9))))) [2023-11-06 22:53:36,118 INFO L899 garLoopResultBuilder]: For program point L438(lines 438 444) no Hoare annotation was computed. [2023-11-06 22:53:36,118 INFO L899 garLoopResultBuilder]: For program point L789(lines 789 806) no Hoare annotation was computed. [2023-11-06 22:53:36,118 INFO L899 garLoopResultBuilder]: For program point L438-2(lines 434 456) no Hoare annotation was computed. [2023-11-06 22:53:36,119 INFO L895 garLoopResultBuilder]: At program point L789-1(lines 781 809) the Hoare annotation is: (let ((.cse8 (= |old(~pumpRunning~0)| 0)) (.cse24 (= |old(~waterLevel~0)| 2)) (.cse5 (= ~pumpRunning~0 0))) (let ((.cse11 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse13 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse17 (and .cse5 (= ~waterLevel~0 1))) (.cse10 (not .cse24)) (.cse19 (< 1 |old(~waterLevel~0)|)) (.cse20 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse18 (<= ~waterLevel~0 0)) (.cse15 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse16 (= ~methaneLevelCritical~0 0)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse4 (not .cse8)) (.cse12 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse21 (<= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1|)) (.cse14 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| ~waterLevel~0)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (< 0 |old(~waterLevel~0)|) .cse2 .cse3) (let ((.cse6 (= 2 ~waterLevel~0)) (.cse7 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse9 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2))) (or .cse4 .cse1 (and .cse5 .cse6 .cse7 .cse8 .cse9) .cse10 (and (<= 1 ~pumpRunning~0) .cse6 .cse7 .cse9))) (or .cse1 .cse10 .cse3 (and .cse11 .cse12 .cse13 .cse14 .cse15)) (or .cse16 .cse1 .cse17 .cse10 .cse3) (or (and .cse11 .cse5 .cse12 .cse13 .cse18 .cse14 .cse15) .cse19 .cse16 .cse0 .cse1 .cse3) (or .cse1 .cse17 .cse10 .cse3 (and .cse20 .cse21 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 1))) (let ((.cse22 (= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse23 (= |timeShift_isMethaneLevelCritical_#res#1| 0))) (or .cse19 (and .cse20 .cse12 .cse21 .cse22 .cse18 .cse14 .cse15 .cse23) (and .cse5 .cse12 .cse22 .cse18 .cse14 .cse15 .cse23) .cse0 .cse1 (not .cse16) .cse3)) (or .cse4 (and .cse5 .cse12 .cse21 .cse8 .cse14 .cse2) .cse1 (< 2 |old(~waterLevel~0)|) .cse24)))) [2023-11-06 22:53:36,119 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 908 915) the Hoare annotation is: (let ((.cse0 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (< |old(~pumpRunning~0)| 1))) (and (or .cse0 .cse1 (< 0 |old(~waterLevel~0)|) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse1 (< 2 |old(~waterLevel~0)|)) (or .cse1 (not (= |old(~waterLevel~0)| 2)) .cse2) (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2))) [2023-11-06 22:53:36,120 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 431 457) the Hoare annotation is: (let ((.cse7 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse4 (< |old(~pumpRunning~0)| 1)) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7 .cse8)) (.cse6 (< 1 |old(~waterLevel~0)|)) (.cse0 (and (= ~pumpRunning~0 0) .cse7 .cse8)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse2 .cse3 .cse4 .cse5) (or .cse6 (< |old(~switchedOnBeforeTS~0)| 1) .cse2 .cse4 .cse5) (or .cse6 .cse0 .cse1 .cse2)))) [2023-11-06 22:53:36,120 INFO L899 garLoopResultBuilder]: For program point L794(lines 794 800) no Hoare annotation was computed. [2023-11-06 22:53:36,120 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification5_spec__2_returnLabel#1(lines 771 780) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse4 (< |old(~pumpRunning~0)| 1)) (.cse5 (= 2 ~waterLevel~0)) (.cse6 (not (= |old(~waterLevel~0)| 2))) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (= ~pumpRunning~0 0)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (= 1 ~systemActive~0)))) (and (or (and .cse0 .cse1 .cse2) (< |old(~switchedOnBeforeTS~0)| 1) .cse3 .cse4 (< 2 |old(~waterLevel~0)|)) (or .cse3 (and .cse0 .cse5 .cse2) .cse6 .cse4) (or .cse7 .cse3 (and .cse8 .cse5) .cse6) (or (< 1 |old(~waterLevel~0)|) .cse7 (and .cse8 .cse1) .cse3))) [2023-11-06 22:53:36,120 INFO L899 garLoopResultBuilder]: For program point L526(lines 526 534) no Hoare annotation was computed. [2023-11-06 22:53:36,121 INFO L895 garLoopResultBuilder]: At program point isMethaneLevelCritical_returnLabel#1(lines 955 963) the Hoare annotation is: (let ((.cse0 (= ~methaneLevelCritical~0 0))) (let ((.cse7 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse12 (not .cse0)) (.cse14 (= 1 ~systemActive~0)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse15 (<= ~waterLevel~0 0)) (.cse16 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse13 (= |timeShift_isMethaneLevelCritical_#res#1| 0))) (let ((.cse10 (and .cse6 .cse15 .cse16 .cse9 .cse13)) (.cse8 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse1 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse2 (not .cse14)) (.cse11 (< 0 |old(~waterLevel~0)|)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse4 (< 2 |old(~waterLevel~0)|)) (.cse5 (and .cse6 .cse7 .cse14 .cse12 .cse15 .cse16 .cse9))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (and .cse6 .cse7 .cse8 .cse9)) (or .cse1 .cse2 .cse10 .cse11 .cse12 .cse3) (or (not (= |old(~pumpRunning~0)| 0)) .cse2 .cse4) (or .cse2 (and .cse6 .cse7 (= ~waterLevel~0 1) .cse9) (not (= |old(~waterLevel~0)| 2)) .cse3) (or .cse1 .cse2 .cse10 .cse12 (and .cse6 .cse8 .cse9 .cse13) .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse11 .cse3 .cse4 .cse5))))) [2023-11-06 22:53:36,121 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 431 457) no Hoare annotation was computed. [2023-11-06 22:53:36,121 INFO L899 garLoopResultBuilder]: For program point L522(lines 522 539) no Hoare annotation was computed. [2023-11-06 22:53:36,122 INFO L895 garLoopResultBuilder]: At program point isMethaneAlarm_returnLabel#1(lines 559 569) the Hoare annotation is: (let ((.cse0 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse5 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0))) (and (or .cse0 .cse1 (< 0 |old(~waterLevel~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse1 (< 2 |old(~waterLevel~0)|)) (or .cse1 (and .cse3 .cse4 .cse5 (= ~waterLevel~0 1) .cse6) (not (= |old(~waterLevel~0)| 2)) .cse2) (or (< 1 |old(~waterLevel~0)|) .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5 (<= ~waterLevel~0 0) .cse6)))) [2023-11-06 22:53:36,122 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 912) no Hoare annotation was computed. [2023-11-06 22:53:36,122 INFO L899 garLoopResultBuilder]: For program point L894(lines 894 901) no Hoare annotation was computed. [2023-11-06 22:53:36,122 INFO L899 garLoopResultBuilder]: For program point L894-2(lines 894 901) no Hoare annotation was computed. [2023-11-06 22:53:36,122 INFO L899 garLoopResultBuilder]: For program point L725(lines 725 731) no Hoare annotation was computed. [2023-11-06 22:53:36,123 INFO L899 garLoopResultBuilder]: For program point L725-1(lines 725 731) no Hoare annotation was computed. [2023-11-06 22:53:36,123 INFO L902 garLoopResultBuilder]: At program point L754(lines 695 758) the Hoare annotation is: true [2023-11-06 22:53:36,123 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 873 883) the Hoare annotation is: true [2023-11-06 22:53:36,123 INFO L895 garLoopResultBuilder]: At program point L717(line 717) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3) (and .cse0 (<= ~waterLevel~0 1) .cse2 .cse3) (and .cse4 .cse5 .cse2 .cse3 (<= ~waterLevel~0 0) .cse6) (and .cse4 .cse5 .cse2 .cse3 (= ~waterLevel~0 1) .cse6))) [2023-11-06 22:53:36,124 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 668 674) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:53:36,124 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 884 906) the Hoare annotation is: true [2023-11-06 22:53:36,124 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 22:53:36,124 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 22:53:36,124 INFO L895 garLoopResultBuilder]: At program point L751(lines 704 752) the Hoare annotation is: false [2023-11-06 22:53:36,125 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 866 872) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:53:36,125 INFO L899 garLoopResultBuilder]: For program point L706(lines 705 750) no Hoare annotation was computed. [2023-11-06 22:53:36,125 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 22:53:36,125 INFO L899 garLoopResultBuilder]: For program point L735(lines 735 746) no Hoare annotation was computed. [2023-11-06 22:53:36,125 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification5_spec__1_returnLabel#1(lines 763 770) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:53:36,126 INFO L895 garLoopResultBuilder]: At program point L727(line 727) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3) (and .cse0 (<= ~waterLevel~0 1) .cse2 .cse3) (and .cse4 .cse5 .cse2 .cse3 (<= ~waterLevel~0 0) .cse6) (and .cse4 .cse5 .cse2 .cse3 (= ~waterLevel~0 1) .cse6))) [2023-11-06 22:53:36,126 INFO L895 garLoopResultBuilder]: At program point L748(lines 705 750) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3) (and .cse0 (<= ~waterLevel~0 1) .cse2 .cse3) (and .cse4 .cse5 .cse2 .cse3 (<= ~waterLevel~0 0) .cse6) (and .cse4 .cse5 .cse2 .cse3 (= ~waterLevel~0 1) .cse6))) [2023-11-06 22:53:36,126 INFO L899 garLoopResultBuilder]: For program point L715(lines 715 721) no Hoare annotation was computed. [2023-11-06 22:53:36,126 INFO L899 garLoopResultBuilder]: For program point L715-1(lines 715 721) no Hoare annotation was computed. [2023-11-06 22:53:36,127 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 22:53:36,127 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 675 681) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:53:36,127 INFO L899 garLoopResultBuilder]: For program point L707(lines 707 711) no Hoare annotation was computed. [2023-11-06 22:53:36,127 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 682 690) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:53:36,127 INFO L899 garLoopResultBuilder]: For program point L741(lines 741 745) no Hoare annotation was computed. [2023-11-06 22:53:36,128 INFO L895 garLoopResultBuilder]: At program point L741-2(lines 735 746) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3) (and .cse4 .cse2 .cse3 (<= ~waterLevel~0 2) (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 (<= ~waterLevel~0 1) .cse2 .cse3))) [2023-11-06 22:53:36,128 INFO L895 garLoopResultBuilder]: At program point activatePump_returnLabel#1(lines 543 550) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (< 1 ~waterLevel~0) (< ~switchedOnBeforeTS~0 1) (not (= ~methaneLevelCritical~0 0)) (< |old(~pumpRunning~0)| 1)) (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0))))) [2023-11-06 22:53:36,128 INFO L899 garLoopResultBuilder]: For program point L624(lines 624 628) no Hoare annotation was computed. [2023-11-06 22:53:36,128 INFO L899 garLoopResultBuilder]: For program point L624-2(lines 624 628) no Hoare annotation was computed. [2023-11-06 22:53:36,129 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 466 490) the Hoare annotation is: (let ((.cse3 (< 1 ~waterLevel~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse3 (< ~switchedOnBeforeTS~0 1) (not (= ~methaneLevelCritical~0 0)) (< |old(~pumpRunning~0)| 1)) (or .cse0 .cse1 .cse2 (not (= 2 ~waterLevel~0))))) [2023-11-06 22:53:36,129 INFO L899 garLoopResultBuilder]: For program point L1000(lines 1000 1006) no Hoare annotation was computed. [2023-11-06 22:53:36,129 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 996 1009) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0))) (let ((.cse2 (and .cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (< 0 ~waterLevel~0) .cse2) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse1 (< 1 ~waterLevel~0) (< ~switchedOnBeforeTS~0 1) (not (= ~methaneLevelCritical~0 0)) (< |old(~pumpRunning~0)| 1)) (or .cse0 .cse3 .cse1 (not (= 2 ~waterLevel~0)))))) [2023-11-06 22:53:36,129 INFO L895 garLoopResultBuilder]: At program point L480(line 480) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0)) .cse0) (or .cse0 (< 1 ~waterLevel~0) (< ~switchedOnBeforeTS~0 1) (not (= ~methaneLevelCritical~0 0)) (< |old(~pumpRunning~0)| 1)))) [2023-11-06 22:53:36,130 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 615 633) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (< 1 ~waterLevel~0))) (and (or .cse0 .cse1 (< ~switchedOnBeforeTS~0 1) (not (= ~methaneLevelCritical~0 0)) (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse3 .cse0 (not (= 2 ~waterLevel~0))) (or .cse2 (and .cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)) .cse0 .cse1))) [2023-11-06 22:53:36,130 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 466 490) no Hoare annotation was computed. [2023-11-06 22:53:36,130 INFO L899 garLoopResultBuilder]: For program point L474(lines 474 482) no Hoare annotation was computed. [2023-11-06 22:53:36,130 INFO L899 garLoopResultBuilder]: For program point L470(lines 470 487) no Hoare annotation was computed. [2023-11-06 22:53:36,131 INFO L895 garLoopResultBuilder]: At program point L485(line 485) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (< 1 ~waterLevel~0) (< ~switchedOnBeforeTS~0 1) (not (= ~methaneLevelCritical~0 0)) (< |old(~pumpRunning~0)| 1)))) [2023-11-06 22:53:36,131 INFO L899 garLoopResultBuilder]: For program point L485-1(lines 466 490) no Hoare annotation was computed. [2023-11-06 22:53:36,131 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 931 942) no Hoare annotation was computed. [2023-11-06 22:53:36,131 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 931 942) the Hoare annotation is: (let ((.cse0 (< ~pumpRunning~0 1)) (.cse1 (= 2 ~waterLevel~0)) (.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse4 (< 1 |old(~waterLevel~0)|)) (.cse6 (not (= ~pumpRunning~0 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse2 (< ~switchedOnBeforeTS~0 1) (not (= ~methaneLevelCritical~0 0)) .cse5) (or .cse6 .cse1 .cse2 .cse3) (or .cse4 .cse6 .cse2 .cse5))) [2023-11-06 22:53:36,131 INFO L899 garLoopResultBuilder]: For program point L935-1(lines 931 942) no Hoare annotation was computed. [2023-11-06 22:53:36,132 INFO L895 garLoopResultBuilder]: At program point L506(line 506) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (< 1 ~waterLevel~0) (< ~switchedOnBeforeTS~0 1) (not (= ~methaneLevelCritical~0 0)) (< |old(~pumpRunning~0)| 1)))) [2023-11-06 22:53:36,132 INFO L895 garLoopResultBuilder]: At program point L502(line 502) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (< 1 ~waterLevel~0) (< ~switchedOnBeforeTS~0 1) (not (= ~methaneLevelCritical~0 0)) (< |old(~pumpRunning~0)| 1)))) [2023-11-06 22:53:36,132 INFO L899 garLoopResultBuilder]: For program point L500(lines 500 508) no Hoare annotation was computed. [2023-11-06 22:53:36,132 INFO L899 garLoopResultBuilder]: For program point L496(lines 496 513) no Hoare annotation was computed. [2023-11-06 22:53:36,133 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 1010 1018) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (< 1 ~waterLevel~0) (< ~switchedOnBeforeTS~0 1) (not (= ~methaneLevelCritical~0 0)) (< |old(~pumpRunning~0)| 1)))) [2023-11-06 22:53:36,133 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 492 516) the Hoare annotation is: (let ((.cse3 (< 1 ~waterLevel~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse3 (< ~switchedOnBeforeTS~0 1) (not (= ~methaneLevelCritical~0 0)) (< |old(~pumpRunning~0)| 1)) (or .cse0 .cse1 .cse2 (not (= 2 ~waterLevel~0))))) [2023-11-06 22:53:36,133 INFO L899 garLoopResultBuilder]: For program point L643(lines 643 647) no Hoare annotation was computed. [2023-11-06 22:53:36,133 INFO L899 garLoopResultBuilder]: For program point L643-2(lines 643 647) no Hoare annotation was computed. [2023-11-06 22:53:36,134 INFO L895 garLoopResultBuilder]: At program point L511(line 511) the Hoare annotation is: (let ((.cse1 (< 1 ~waterLevel~0)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (< ~switchedOnBeforeTS~0 1) (not (= ~methaneLevelCritical~0 0)) (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse3 .cse0 .cse1) (or .cse2 .cse3 .cse0 (not (= 2 ~waterLevel~0))))) [2023-11-06 22:53:36,134 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 634 652) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (< 1 ~waterLevel~0) (< ~switchedOnBeforeTS~0 1) (not (= ~methaneLevelCritical~0 0)) (< |old(~pumpRunning~0)| 1)))) [2023-11-06 22:53:36,134 INFO L899 garLoopResultBuilder]: For program point L511-1(lines 492 516) no Hoare annotation was computed. [2023-11-06 22:53:36,134 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 492 516) no Hoare annotation was computed. [2023-11-06 22:53:36,134 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 570 578) no Hoare annotation was computed. [2023-11-06 22:53:36,135 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 570 578) no Hoare annotation was computed. [2023-11-06 22:53:36,135 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 570 578) the Hoare annotation is: true [2023-11-06 22:53:36,138 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:53:36,141 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 22:53:36,243 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 10:53:36 BoogieIcfgContainer [2023-11-06 22:53:36,253 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 22:53:36,254 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 22:53:36,254 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 22:53:36,255 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 22:53:36,255 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:52:48" (3/4) ... [2023-11-06 22:53:36,258 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 22:53:36,263 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-06 22:53:36,264 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 22:53:36,264 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 22:53:36,264 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 22:53:36,264 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 22:53:36,265 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:53:36,265 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 22:53:36,265 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2023-11-06 22:53:36,265 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2023-11-06 22:53:36,284 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 18 nodes and edges [2023-11-06 22:53:36,285 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 22:53:36,286 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 22:53:36,287 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:53:36,288 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:53:36,333 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) && (((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (2 == waterLevel)) && (1 <= switchedOnBeforeTS))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2)))) && ((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive)))) [2023-11-06 22:53:36,333 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) && (((((\old(switchedOnBeforeTS) < 1) || !((1 == systemActive))) || (((((pumpRunning == \old(pumpRunning)) && (1 == systemActive)) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) || (0 < \old(waterLevel))) || (\old(pumpRunning) < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel)))) && ((((((\old(switchedOnBeforeTS) < 1) || !((1 == systemActive))) || (((pumpRunning == \old(pumpRunning)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (((((pumpRunning == \old(pumpRunning)) && (1 == systemActive)) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) [2023-11-06 22:53:36,335 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((\old(switchedOnBeforeTS) < 1) || !((1 == systemActive))) || (0 < \old(waterLevel))) || (\old(waterLevel) == waterLevel)) || (\old(pumpRunning) < 1)) && ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result)) && (\old(pumpRunning) == 0)) && (tmp == 2))) || !((\old(waterLevel) == 2))) || ((((1 <= pumpRunning) && (2 == waterLevel)) && (2 == \result)) && (tmp == 2)))) && (((!((1 == systemActive)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (((((methaneLevelCritical == \result) && (waterLevel == \result)) && (\result == methaneLevelCritical)) && (tmp == waterLevel)) && (1 <= switchedOnBeforeTS)))) && (((((methaneLevelCritical == 0) || !((1 == systemActive))) || ((pumpRunning == 0) && (waterLevel == 1))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && ((((((((((((methaneLevelCritical == \result) && (pumpRunning == 0)) && (waterLevel == \result)) && (\result == methaneLevelCritical)) && (waterLevel <= 0)) && (tmp == waterLevel)) && (1 <= switchedOnBeforeTS)) || (1 < \old(waterLevel))) || (methaneLevelCritical == 0)) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (\old(pumpRunning) < 1))) && ((((!((1 == systemActive)) || ((pumpRunning == 0) && (waterLevel == 1))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (((pumpRunning == \old(pumpRunning)) && (pumpRunning <= tmp___0)) && (tmp == 1)))) && (((((((1 < \old(waterLevel)) || ((((((((pumpRunning == \old(pumpRunning)) && (waterLevel == \result)) && (pumpRunning <= tmp___0)) && (\result == 0)) && (waterLevel <= 0)) && (tmp == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || (((((((pumpRunning == 0) && (waterLevel == \result)) && (\result == 0)) && (waterLevel <= 0)) && (tmp == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && ((((!((\old(pumpRunning) == 0)) || ((((((pumpRunning == 0) && (waterLevel == \result)) && (pumpRunning <= tmp___0)) && (\old(pumpRunning) == 0)) && (tmp == waterLevel)) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || (2 < \old(waterLevel))) || (\old(waterLevel) == 2))) [2023-11-06 22:53:36,336 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!((\old(waterLevel) == 1)) || (methaneLevelCritical == 0)) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || ((((((methaneLevelCritical == \result) && (pumpRunning == 0)) && (\result == methaneLevelCritical)) && (tmp == methaneLevelCritical)) && (waterLevel <= 0)) && (1 <= switchedOnBeforeTS))) && (((((((1 < \old(waterLevel)) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((((((pumpRunning == 0) && (tmp == 0)) && (\result == 0)) && (waterLevel <= 0)) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || ((((((pumpRunning == \old(pumpRunning)) && (tmp == 0)) && (\result == 0)) && (waterLevel <= 0)) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || (\old(pumpRunning) < 1))) && (((((\old(switchedOnBeforeTS) < 1) || !((1 == systemActive))) || (0 < \old(waterLevel))) || (\old(waterLevel) == waterLevel)) || (\old(pumpRunning) < 1))) && (((!((1 == systemActive)) || ((((methaneLevelCritical == \result) && (\result == methaneLevelCritical)) && (tmp == methaneLevelCritical)) && (1 <= switchedOnBeforeTS))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && ((((((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) || !((1 == systemActive))) || ((pumpRunning == 0) && (waterLevel == 1))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && (((((methaneLevelCritical == 0) || !((1 == systemActive))) || ((pumpRunning == 0) && (waterLevel == 1))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && (((((((1 <= pumpRunning) && (2 == waterLevel)) && (\old(waterLevel) == 2)) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || (2 < \old(waterLevel)))) && ((((((methaneLevelCritical == 0) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (0 < \old(waterLevel))) || (\old(pumpRunning) < 1)) || (((((methaneLevelCritical == \result) && (pumpRunning == 0)) && (\result == methaneLevelCritical)) && (tmp == methaneLevelCritical)) && (1 <= switchedOnBeforeTS)))) [2023-11-06 22:53:36,336 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((\old(switchedOnBeforeTS) < 1) || !((1 == systemActive))) || (0 < \old(waterLevel))) || (\old(pumpRunning) < 1)) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel)))) && ((!((1 == systemActive)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && (((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (\old(pumpRunning) < 1))) [2023-11-06 22:53:36,337 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!((1 == systemActive)) || ((pumpRunning == \old(pumpRunning)) && (\result == 1))) || ((pumpRunning == 0) && (waterLevel == 1))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) && (((!((1 == systemActive)) || ((((methaneLevelCritical == \result) && (waterLevel == \result)) && (\result == methaneLevelCritical)) && (1 <= switchedOnBeforeTS))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && (((((((methaneLevelCritical == 0) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (0 < \old(waterLevel))) || (\old(waterLevel) == waterLevel)) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && (((((methaneLevelCritical == 0) || !((1 == systemActive))) || ((pumpRunning == 0) && (waterLevel == 1))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && (((((((1 < \old(waterLevel)) || (methaneLevelCritical == 0)) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || ((((((methaneLevelCritical == \result) && (pumpRunning == 0)) && (waterLevel == \result)) && (\result == methaneLevelCritical)) && (waterLevel <= 0)) && (1 <= switchedOnBeforeTS)))) && ((((((((((((((pumpRunning == \old(pumpRunning)) && (waterLevel == \result)) && (\result == 0)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)) && (\result == 0)) || ((((((pumpRunning == 0) && (waterLevel == \result)) && (\result == 0)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || (((((((pumpRunning == \old(pumpRunning)) && (waterLevel == \result)) && (\result == 0)) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (((((((pumpRunning == 0) && (waterLevel == \result)) && (\result == 0)) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && ((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (((pumpRunning == 0) && (waterLevel == \result)) && (\old(waterLevel) == waterLevel)))) && (((((((((((((pumpRunning == \old(pumpRunning)) && (waterLevel == \result)) && (\result == 0)) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result == 0)) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (0 < \old(waterLevel))) || !((methaneLevelCritical == 0))) || (((((((pumpRunning == 0) && (waterLevel == \result)) && (\result == 0)) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || (\old(pumpRunning) < 1))) && ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result))) || !((\old(waterLevel) == 2))) || (((1 <= pumpRunning) && (2 == waterLevel)) && (2 == \result)))) [2023-11-06 22:53:36,338 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((methaneLevelCritical == 0) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (((((((pumpRunning == \old(pumpRunning)) && (\result == methaneLevelCritical)) && (1 == systemActive)) && !((methaneLevelCritical == 0))) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) || ((((pumpRunning == \old(pumpRunning)) && (\result == methaneLevelCritical)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) && ((((((\old(switchedOnBeforeTS) < 1) || !((1 == systemActive))) || (((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || (0 < \old(waterLevel))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel)))) && (((!((1 == systemActive)) || ((((pumpRunning == \old(pumpRunning)) && (\result == methaneLevelCritical)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && (((((((\old(switchedOnBeforeTS) < 1) || !((1 == systemActive))) || (((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || !((methaneLevelCritical == 0))) || ((((pumpRunning == \old(pumpRunning)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && (((((((methaneLevelCritical == 0) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (0 < \old(waterLevel))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (((((((pumpRunning == \old(pumpRunning)) && (\result == methaneLevelCritical)) && (1 == systemActive)) && !((methaneLevelCritical == 0))) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)))) [2023-11-06 22:53:36,338 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) && ((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || (1 < waterLevel)) || (switchedOnBeforeTS < 1)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) [2023-11-06 22:53:36,338 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((\old(switchedOnBeforeTS) < 1) || !((1 == systemActive))) || (0 < \old(waterLevel))) || (\old(waterLevel) == waterLevel)) || (\old(pumpRunning) < 1)) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel)))) && (((!((1 == systemActive)) || (((((pumpRunning == \old(pumpRunning)) && (methaneLevelCritical == \result)) && (\result == methaneLevelCritical)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && (((((1 < \old(waterLevel)) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (((((pumpRunning == \old(pumpRunning)) && (methaneLevelCritical == \result)) && (\result == methaneLevelCritical)) && (waterLevel <= 0)) && (1 <= switchedOnBeforeTS)))) [2023-11-06 22:53:36,339 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (0 < waterLevel)) || ((pumpRunning == 0) && (\result == 1))) && (((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 1)))) && ((((!((1 == systemActive)) || (1 < waterLevel)) || (switchedOnBeforeTS < 1)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || !((1 == systemActive))) || !((2 == waterLevel)))) [2023-11-06 22:53:36,344 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) && ((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || (1 < waterLevel)) || (switchedOnBeforeTS < 1)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) [2023-11-06 22:53:36,344 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((1 == systemActive)) || (1 < waterLevel)) || (switchedOnBeforeTS < 1)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || !((1 == systemActive))) || !((2 == waterLevel)))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\result == 0)) && (tmp___0 == 0))) || !((1 == systemActive))) || (1 < waterLevel))) [2023-11-06 22:53:36,348 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((1 == systemActive)) || (1 < waterLevel)) || (switchedOnBeforeTS < 1)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((1 <= pumpRunning) && (2 == waterLevel)))) [2023-11-06 22:53:36,420 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) && (((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (2 == waterLevel)) && (1 <= switchedOnBeforeTS))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2)))) && ((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive)))) [2023-11-06 22:53:36,421 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) && (((((\old(switchedOnBeforeTS) < 1) || !((1 == systemActive))) || (((((pumpRunning == \old(pumpRunning)) && (1 == systemActive)) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) || (0 < \old(waterLevel))) || (\old(pumpRunning) < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel)))) && ((((((\old(switchedOnBeforeTS) < 1) || !((1 == systemActive))) || (((pumpRunning == \old(pumpRunning)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (((((pumpRunning == \old(pumpRunning)) && (1 == systemActive)) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) [2023-11-06 22:53:36,421 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((\old(switchedOnBeforeTS) < 1) || !((1 == systemActive))) || (0 < \old(waterLevel))) || (\old(waterLevel) == waterLevel)) || (\old(pumpRunning) < 1)) && ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result)) && (\old(pumpRunning) == 0)) && (tmp == 2))) || !((\old(waterLevel) == 2))) || ((((1 <= pumpRunning) && (2 == waterLevel)) && (2 == \result)) && (tmp == 2)))) && (((!((1 == systemActive)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (((((methaneLevelCritical == \result) && (waterLevel == \result)) && (\result == methaneLevelCritical)) && (tmp == waterLevel)) && (1 <= switchedOnBeforeTS)))) && (((((methaneLevelCritical == 0) || !((1 == systemActive))) || ((pumpRunning == 0) && (waterLevel == 1))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && ((((((((((((methaneLevelCritical == \result) && (pumpRunning == 0)) && (waterLevel == \result)) && (\result == methaneLevelCritical)) && (waterLevel <= 0)) && (tmp == waterLevel)) && (1 <= switchedOnBeforeTS)) || (1 < \old(waterLevel))) || (methaneLevelCritical == 0)) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (\old(pumpRunning) < 1))) && ((((!((1 == systemActive)) || ((pumpRunning == 0) && (waterLevel == 1))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (((pumpRunning == \old(pumpRunning)) && (pumpRunning <= tmp___0)) && (tmp == 1)))) && (((((((1 < \old(waterLevel)) || ((((((((pumpRunning == \old(pumpRunning)) && (waterLevel == \result)) && (pumpRunning <= tmp___0)) && (\result == 0)) && (waterLevel <= 0)) && (tmp == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || (((((((pumpRunning == 0) && (waterLevel == \result)) && (\result == 0)) && (waterLevel <= 0)) && (tmp == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && ((((!((\old(pumpRunning) == 0)) || ((((((pumpRunning == 0) && (waterLevel == \result)) && (pumpRunning <= tmp___0)) && (\old(pumpRunning) == 0)) && (tmp == waterLevel)) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || (2 < \old(waterLevel))) || (\old(waterLevel) == 2))) [2023-11-06 22:53:36,422 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!((\old(waterLevel) == 1)) || (methaneLevelCritical == 0)) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || ((((((methaneLevelCritical == \result) && (pumpRunning == 0)) && (\result == methaneLevelCritical)) && (tmp == methaneLevelCritical)) && (waterLevel <= 0)) && (1 <= switchedOnBeforeTS))) && (((((((1 < \old(waterLevel)) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((((((pumpRunning == 0) && (tmp == 0)) && (\result == 0)) && (waterLevel <= 0)) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || ((((((pumpRunning == \old(pumpRunning)) && (tmp == 0)) && (\result == 0)) && (waterLevel <= 0)) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || (\old(pumpRunning) < 1))) && (((((\old(switchedOnBeforeTS) < 1) || !((1 == systemActive))) || (0 < \old(waterLevel))) || (\old(waterLevel) == waterLevel)) || (\old(pumpRunning) < 1))) && (((!((1 == systemActive)) || ((((methaneLevelCritical == \result) && (\result == methaneLevelCritical)) && (tmp == methaneLevelCritical)) && (1 <= switchedOnBeforeTS))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && ((((((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) || !((1 == systemActive))) || ((pumpRunning == 0) && (waterLevel == 1))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && (((((methaneLevelCritical == 0) || !((1 == systemActive))) || ((pumpRunning == 0) && (waterLevel == 1))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && (((((((1 <= pumpRunning) && (2 == waterLevel)) && (\old(waterLevel) == 2)) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || (2 < \old(waterLevel)))) && ((((((methaneLevelCritical == 0) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (0 < \old(waterLevel))) || (\old(pumpRunning) < 1)) || (((((methaneLevelCritical == \result) && (pumpRunning == 0)) && (\result == methaneLevelCritical)) && (tmp == methaneLevelCritical)) && (1 <= switchedOnBeforeTS)))) [2023-11-06 22:53:36,422 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((\old(switchedOnBeforeTS) < 1) || !((1 == systemActive))) || (0 < \old(waterLevel))) || (\old(pumpRunning) < 1)) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel)))) && ((!((1 == systemActive)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && (((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (\old(pumpRunning) < 1))) [2023-11-06 22:53:36,422 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!((1 == systemActive)) || ((pumpRunning == \old(pumpRunning)) && (\result == 1))) || ((pumpRunning == 0) && (waterLevel == 1))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) && (((!((1 == systemActive)) || ((((methaneLevelCritical == \result) && (waterLevel == \result)) && (\result == methaneLevelCritical)) && (1 <= switchedOnBeforeTS))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && (((((((methaneLevelCritical == 0) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (0 < \old(waterLevel))) || (\old(waterLevel) == waterLevel)) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && (((((methaneLevelCritical == 0) || !((1 == systemActive))) || ((pumpRunning == 0) && (waterLevel == 1))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && (((((((1 < \old(waterLevel)) || (methaneLevelCritical == 0)) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || ((((((methaneLevelCritical == \result) && (pumpRunning == 0)) && (waterLevel == \result)) && (\result == methaneLevelCritical)) && (waterLevel <= 0)) && (1 <= switchedOnBeforeTS)))) && ((((((((((((((pumpRunning == \old(pumpRunning)) && (waterLevel == \result)) && (\result == 0)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)) && (\result == 0)) || ((((((pumpRunning == 0) && (waterLevel == \result)) && (\result == 0)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || (((((((pumpRunning == \old(pumpRunning)) && (waterLevel == \result)) && (\result == 0)) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (((((((pumpRunning == 0) && (waterLevel == \result)) && (\result == 0)) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && ((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (((pumpRunning == 0) && (waterLevel == \result)) && (\old(waterLevel) == waterLevel)))) && (((((((((((((pumpRunning == \old(pumpRunning)) && (waterLevel == \result)) && (\result == 0)) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result == 0)) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (0 < \old(waterLevel))) || !((methaneLevelCritical == 0))) || (((((((pumpRunning == 0) && (waterLevel == \result)) && (\result == 0)) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || (\old(pumpRunning) < 1))) && ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result))) || !((\old(waterLevel) == 2))) || (((1 <= pumpRunning) && (2 == waterLevel)) && (2 == \result)))) [2023-11-06 22:53:36,423 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((methaneLevelCritical == 0) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (((((((pumpRunning == \old(pumpRunning)) && (\result == methaneLevelCritical)) && (1 == systemActive)) && !((methaneLevelCritical == 0))) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) || ((((pumpRunning == \old(pumpRunning)) && (\result == methaneLevelCritical)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) && ((((((\old(switchedOnBeforeTS) < 1) || !((1 == systemActive))) || (((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || (0 < \old(waterLevel))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel)))) && (((!((1 == systemActive)) || ((((pumpRunning == \old(pumpRunning)) && (\result == methaneLevelCritical)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && (((((((\old(switchedOnBeforeTS) < 1) || !((1 == systemActive))) || (((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || !((methaneLevelCritical == 0))) || ((((pumpRunning == \old(pumpRunning)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && (((((((methaneLevelCritical == 0) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (0 < \old(waterLevel))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (((((((pumpRunning == \old(pumpRunning)) && (\result == methaneLevelCritical)) && (1 == systemActive)) && !((methaneLevelCritical == 0))) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)))) [2023-11-06 22:53:36,423 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) && ((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || (1 < waterLevel)) || (switchedOnBeforeTS < 1)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) [2023-11-06 22:53:36,423 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((\old(switchedOnBeforeTS) < 1) || !((1 == systemActive))) || (0 < \old(waterLevel))) || (\old(waterLevel) == waterLevel)) || (\old(pumpRunning) < 1)) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel)))) && (((!((1 == systemActive)) || (((((pumpRunning == \old(pumpRunning)) && (methaneLevelCritical == \result)) && (\result == methaneLevelCritical)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && (((((1 < \old(waterLevel)) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (((((pumpRunning == \old(pumpRunning)) && (methaneLevelCritical == \result)) && (\result == methaneLevelCritical)) && (waterLevel <= 0)) && (1 <= switchedOnBeforeTS)))) [2023-11-06 22:53:36,423 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (0 < waterLevel)) || ((pumpRunning == 0) && (\result == 1))) && (((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 1)))) && ((((!((1 == systemActive)) || (1 < waterLevel)) || (switchedOnBeforeTS < 1)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || !((1 == systemActive))) || !((2 == waterLevel)))) [2023-11-06 22:53:36,426 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) && ((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || (1 < waterLevel)) || (switchedOnBeforeTS < 1)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) [2023-11-06 22:53:36,426 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((1 == systemActive)) || (1 < waterLevel)) || (switchedOnBeforeTS < 1)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || !((1 == systemActive))) || !((2 == waterLevel)))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\result == 0)) && (tmp___0 == 0))) || !((1 == systemActive))) || (1 < waterLevel))) [2023-11-06 22:53:36,430 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((1 == systemActive)) || (1 < waterLevel)) || (switchedOnBeforeTS < 1)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((1 <= pumpRunning) && (2 == waterLevel)))) [2023-11-06 22:53:36,455 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 22:53:36,456 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 22:53:36,456 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 22:53:36,457 INFO L158 Benchmark]: Toolchain (without parser) took 49096.21ms. Allocated memory was 192.9MB in the beginning and 453.0MB in the end (delta: 260.0MB). Free memory was 145.1MB in the beginning and 168.2MB in the end (delta: -23.1MB). Peak memory consumption was 238.3MB. Max. memory is 16.1GB. [2023-11-06 22:53:36,458 INFO L158 Benchmark]: CDTParser took 0.35ms. Allocated memory is still 111.1MB. Free memory is still 58.3MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:53:36,458 INFO L158 Benchmark]: CACSL2BoogieTranslator took 711.54ms. Allocated memory is still 192.9MB. Free memory was 144.5MB in the beginning and 125.5MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-06 22:53:36,459 INFO L158 Benchmark]: Boogie Procedure Inliner took 77.85ms. Allocated memory is still 192.9MB. Free memory was 124.9MB in the beginning and 122.8MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:53:36,459 INFO L158 Benchmark]: Boogie Preprocessor took 53.71ms. Allocated memory is still 192.9MB. Free memory was 122.8MB in the beginning and 121.4MB in the end (delta: 1.4MB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:53:36,460 INFO L158 Benchmark]: RCFGBuilder took 643.91ms. Allocated memory is still 192.9MB. Free memory was 121.4MB in the beginning and 103.3MB in the end (delta: 18.2MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-06 22:53:36,460 INFO L158 Benchmark]: TraceAbstraction took 47397.20ms. Allocated memory was 192.9MB in the beginning and 453.0MB in the end (delta: 260.0MB). Free memory was 102.6MB in the beginning and 177.7MB in the end (delta: -75.1MB). Peak memory consumption was 217.8MB. Max. memory is 16.1GB. [2023-11-06 22:53:36,461 INFO L158 Benchmark]: Witness Printer took 202.20ms. Allocated memory is still 453.0MB. Free memory was 176.6MB in the beginning and 168.2MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-06 22:53:36,463 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.35ms. Allocated memory is still 111.1MB. Free memory is still 58.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 711.54ms. Allocated memory is still 192.9MB. Free memory was 144.5MB in the beginning and 125.5MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 77.85ms. Allocated memory is still 192.9MB. Free memory was 124.9MB in the beginning and 122.8MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 53.71ms. Allocated memory is still 192.9MB. Free memory was 122.8MB in the beginning and 121.4MB in the end (delta: 1.4MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 643.91ms. Allocated memory is still 192.9MB. Free memory was 121.4MB in the beginning and 103.3MB in the end (delta: 18.2MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 47397.20ms. Allocated memory was 192.9MB in the beginning and 453.0MB in the end (delta: 260.0MB). Free memory was 102.6MB in the beginning and 177.7MB in the end (delta: -75.1MB). Peak memory consumption was 217.8MB. Max. memory is 16.1GB. * Witness Printer took 202.20ms. Allocated memory is still 453.0MB. Free memory was 176.6MB in the beginning and 168.2MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] - GenericResultAtLocation [Line: 415]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [415] - GenericResultAtLocation [Line: 653]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [653] - GenericResultAtLocation [Line: 691]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [691] - GenericResultAtLocation [Line: 759]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [759] - GenericResultAtLocation [Line: 810]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [810] - GenericResultAtLocation [Line: 907]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [907] - GenericResultAtLocation [Line: 916]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [916] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 912]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 105 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 47.2s, OverallIterations: 13, TraceHistogramMax: 7, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 13.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 22.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 4491 SdHoareTripleChecker+Valid, 7.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 4440 mSDsluCounter, 6664 SdHoareTripleChecker+Invalid, 6.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5203 mSDsCounter, 1477 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 7967 IncrementalHoareTripleChecker+Invalid, 9444 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1477 mSolverCounterUnsat, 1461 mSDtfsCounter, 7967 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1964 GetRequests, 1664 SyntacticMatches, 16 SemanticMatches, 284 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3572 ImplicationChecksByTransitivity, 4.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1172occurred in iteration=12, InterpolantAutomatonStates: 233, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.1s AutomataMinimizationTime, 13 MinimizatonAttempts, 322 StatesRemovedByMinimization, 10 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 49 LocationsWithAnnotation, 3271 PreInvPairs, 3809 NumberOfFragments, 3274 HoareAnnotationTreeSize, 3271 FomulaSimplifications, 21759 FormulaSimplificationTreeSizeReduction, 2.4s HoareSimplificationTime, 49 FomulaSimplificationsInter, 46708 FormulaSimplificationTreeSizeReductionInter, 20.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 7.5s InterpolantComputationTime, 1875 NumberOfCodeBlocks, 1875 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 2565 ConstructedInterpolants, 0 QuantifiedInterpolants, 5572 SizeOfPredicates, 9 NumberOfNonLiveVariables, 2170 ConjunctsInSsa, 51 ConjunctsInUnsatCore, 21 InterpolantComputations, 9 PerfectInterpolantSequences, 1874/2190 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 866]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 1010]: Loop Invariant Derived loop invariant: ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) && ((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || (1 < waterLevel)) || (switchedOnBeforeTS < 1)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) - InvariantResult [Line: 695]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 705]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == 0) && (2 == waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0)) || ((((1 <= pumpRunning) && (2 == waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0))) || ((((((1 <= pumpRunning) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel <= 0)) && (1 <= switchedOnBeforeTS))) || ((((((1 <= pumpRunning) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS))) - InvariantResult [Line: 668]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 543]: Loop Invariant Derived loop invariant: (((((!((1 == systemActive)) || (1 < waterLevel)) || (switchedOnBeforeTS < 1)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((1 <= pumpRunning) && (2 == waterLevel)))) - InvariantResult [Line: 955]: Loop Invariant Derived loop invariant: ((((((((((((methaneLevelCritical == 0) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (((((((pumpRunning == \old(pumpRunning)) && (\result == methaneLevelCritical)) && (1 == systemActive)) && !((methaneLevelCritical == 0))) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) || ((((pumpRunning == \old(pumpRunning)) && (\result == methaneLevelCritical)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) && ((((((\old(switchedOnBeforeTS) < 1) || !((1 == systemActive))) || (((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || (0 < \old(waterLevel))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel)))) && (((!((1 == systemActive)) || ((((pumpRunning == \old(pumpRunning)) && (\result == methaneLevelCritical)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && (((((((\old(switchedOnBeforeTS) < 1) || !((1 == systemActive))) || (((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || !((methaneLevelCritical == 0))) || ((((pumpRunning == \old(pumpRunning)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && (((((((methaneLevelCritical == 0) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (0 < \old(waterLevel))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (((((((pumpRunning == \old(pumpRunning)) && (\result == methaneLevelCritical)) && (1 == systemActive)) && !((methaneLevelCritical == 0))) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)))) - InvariantResult [Line: 559]: Loop Invariant Derived loop invariant: ((((((((\old(switchedOnBeforeTS) < 1) || !((1 == systemActive))) || (0 < \old(waterLevel))) || (\old(waterLevel) == waterLevel)) || (\old(pumpRunning) < 1)) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel)))) && (((!((1 == systemActive)) || (((((pumpRunning == \old(pumpRunning)) && (methaneLevelCritical == \result)) && (\result == methaneLevelCritical)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && (((((1 < \old(waterLevel)) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (((((pumpRunning == \old(pumpRunning)) && (methaneLevelCritical == \result)) && (\result == methaneLevelCritical)) && (waterLevel <= 0)) && (1 <= switchedOnBeforeTS)))) - InvariantResult [Line: 919]: Loop Invariant Derived loop invariant: ((((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) && (((((\old(switchedOnBeforeTS) < 1) || !((1 == systemActive))) || (((((pumpRunning == \old(pumpRunning)) && (1 == systemActive)) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) || (0 < \old(waterLevel))) || (\old(pumpRunning) < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel)))) && ((((((\old(switchedOnBeforeTS) < 1) || !((1 == systemActive))) || (((pumpRunning == \old(pumpRunning)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (((((pumpRunning == \old(pumpRunning)) && (1 == systemActive)) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) - InvariantResult [Line: 996]: Loop Invariant Derived loop invariant: ((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (0 < waterLevel)) || ((pumpRunning == 0) && (\result == 1))) && (((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 1)))) && ((((!((1 == systemActive)) || (1 < waterLevel)) || (switchedOnBeforeTS < 1)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && (((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || !((1 == systemActive))) || !((2 == waterLevel)))) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: ((((((!((1 == systemActive)) || (1 < waterLevel)) || (switchedOnBeforeTS < 1)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1)) && (((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || !((1 == systemActive))) || !((2 == waterLevel)))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\result == 0)) && (tmp___0 == 0))) || !((1 == systemActive))) || (1 < waterLevel))) - InvariantResult [Line: 873]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 518]: Loop Invariant Derived loop invariant: ((((((((((((!((\old(waterLevel) == 1)) || (methaneLevelCritical == 0)) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || ((((((methaneLevelCritical == \result) && (pumpRunning == 0)) && (\result == methaneLevelCritical)) && (tmp == methaneLevelCritical)) && (waterLevel <= 0)) && (1 <= switchedOnBeforeTS))) && (((((((1 < \old(waterLevel)) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((((((pumpRunning == 0) && (tmp == 0)) && (\result == 0)) && (waterLevel <= 0)) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || ((((((pumpRunning == \old(pumpRunning)) && (tmp == 0)) && (\result == 0)) && (waterLevel <= 0)) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || (\old(pumpRunning) < 1))) && (((((\old(switchedOnBeforeTS) < 1) || !((1 == systemActive))) || (0 < \old(waterLevel))) || (\old(waterLevel) == waterLevel)) || (\old(pumpRunning) < 1))) && (((!((1 == systemActive)) || ((((methaneLevelCritical == \result) && (\result == methaneLevelCritical)) && (tmp == methaneLevelCritical)) && (1 <= switchedOnBeforeTS))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && ((((((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) || !((1 == systemActive))) || ((pumpRunning == 0) && (waterLevel == 1))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && (((((methaneLevelCritical == 0) || !((1 == systemActive))) || ((pumpRunning == 0) && (waterLevel == 1))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && (((((((1 <= pumpRunning) && (2 == waterLevel)) && (\old(waterLevel) == 2)) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || (2 < \old(waterLevel)))) && ((((((methaneLevelCritical == 0) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (0 < \old(waterLevel))) || (\old(pumpRunning) < 1)) || (((((methaneLevelCritical == \result) && (pumpRunning == 0)) && (\result == methaneLevelCritical)) && (tmp == methaneLevelCritical)) && (1 <= switchedOnBeforeTS)))) - InvariantResult [Line: 763]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 634]: Loop Invariant Derived loop invariant: ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) && ((((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || (1 < waterLevel)) || (switchedOnBeforeTS < 1)) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) - InvariantResult [Line: 908]: Loop Invariant Derived loop invariant: (((((((\old(switchedOnBeforeTS) < 1) || !((1 == systemActive))) || (0 < \old(waterLevel))) || (\old(pumpRunning) < 1)) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel)))) && ((!((1 == systemActive)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && (((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (\old(pumpRunning) < 1))) - InvariantResult [Line: 987]: Loop Invariant Derived loop invariant: ((((((((((((!((1 == systemActive)) || ((pumpRunning == \old(pumpRunning)) && (\result == 1))) || ((pumpRunning == 0) && (waterLevel == 1))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) && (((!((1 == systemActive)) || ((((methaneLevelCritical == \result) && (waterLevel == \result)) && (\result == methaneLevelCritical)) && (1 <= switchedOnBeforeTS))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && (((((((methaneLevelCritical == 0) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (0 < \old(waterLevel))) || (\old(waterLevel) == waterLevel)) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && (((((methaneLevelCritical == 0) || !((1 == systemActive))) || ((pumpRunning == 0) && (waterLevel == 1))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && (((((((1 < \old(waterLevel)) || (methaneLevelCritical == 0)) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || ((((((methaneLevelCritical == \result) && (pumpRunning == 0)) && (waterLevel == \result)) && (\result == methaneLevelCritical)) && (waterLevel <= 0)) && (1 <= switchedOnBeforeTS)))) && ((((((((((((((pumpRunning == \old(pumpRunning)) && (waterLevel == \result)) && (\result == 0)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)) && (\result == 0)) || ((((((pumpRunning == 0) && (waterLevel == \result)) && (\result == 0)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || (((((((pumpRunning == \old(pumpRunning)) && (waterLevel == \result)) && (\result == 0)) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (((((((pumpRunning == 0) && (waterLevel == \result)) && (\result == 0)) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && ((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (((pumpRunning == 0) && (waterLevel == \result)) && (\old(waterLevel) == waterLevel)))) && (((((((((((((pumpRunning == \old(pumpRunning)) && (waterLevel == \result)) && (\result == 0)) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result == 0)) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (0 < \old(waterLevel))) || !((methaneLevelCritical == 0))) || (((((((pumpRunning == 0) && (waterLevel == \result)) && (\result == 0)) && (waterLevel <= 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || (\old(pumpRunning) < 1))) && ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result))) || !((\old(waterLevel) == 2))) || (((1 <= pumpRunning) && (2 == waterLevel)) && (2 == \result)))) - InvariantResult [Line: 682]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 704]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 675]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 771]: Loop Invariant Derived loop invariant: ((((((((((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) && (((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (2 == waterLevel)) && (1 <= switchedOnBeforeTS))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2)))) && ((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive)))) - InvariantResult [Line: 781]: Loop Invariant Derived loop invariant: ((((((((((((\old(switchedOnBeforeTS) < 1) || !((1 == systemActive))) || (0 < \old(waterLevel))) || (\old(waterLevel) == waterLevel)) || (\old(pumpRunning) < 1)) && ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result)) && (\old(pumpRunning) == 0)) && (tmp == 2))) || !((\old(waterLevel) == 2))) || ((((1 <= pumpRunning) && (2 == waterLevel)) && (2 == \result)) && (tmp == 2)))) && (((!((1 == systemActive)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (((((methaneLevelCritical == \result) && (waterLevel == \result)) && (\result == methaneLevelCritical)) && (tmp == waterLevel)) && (1 <= switchedOnBeforeTS)))) && (((((methaneLevelCritical == 0) || !((1 == systemActive))) || ((pumpRunning == 0) && (waterLevel == 1))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1))) && ((((((((((((methaneLevelCritical == \result) && (pumpRunning == 0)) && (waterLevel == \result)) && (\result == methaneLevelCritical)) && (waterLevel <= 0)) && (tmp == waterLevel)) && (1 <= switchedOnBeforeTS)) || (1 < \old(waterLevel))) || (methaneLevelCritical == 0)) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || (\old(pumpRunning) < 1))) && ((((!((1 == systemActive)) || ((pumpRunning == 0) && (waterLevel == 1))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (((pumpRunning == \old(pumpRunning)) && (pumpRunning <= tmp___0)) && (tmp == 1)))) && (((((((1 < \old(waterLevel)) || ((((((((pumpRunning == \old(pumpRunning)) && (waterLevel == \result)) && (pumpRunning <= tmp___0)) && (\result == 0)) && (waterLevel <= 0)) && (tmp == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || (((((((pumpRunning == 0) && (waterLevel == \result)) && (\result == 0)) && (waterLevel <= 0)) && (tmp == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result == 0))) || (\old(switchedOnBeforeTS) < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(pumpRunning) < 1))) && ((((!((\old(pumpRunning) == 0)) || ((((((pumpRunning == 0) && (waterLevel == \result)) && (pumpRunning <= tmp___0)) && (\old(pumpRunning) == 0)) && (tmp == waterLevel)) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || (2 < \old(waterLevel))) || (\old(waterLevel) == 2))) - InvariantResult [Line: 884]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 822]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-06 22:53:36,525 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_523ab1f8-c6ee-40ba-a4c3-9d8786e21829/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE