./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 6c24879c Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 73b8e020dd9d30fdd676c81009d4f1b850aa716d63ef29ce3d475a261546f853 --- Real Ultimate output --- This is Ultimate 0.2.2-?-6c24879 [2022-07-12 06:20:54,026 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-12 06:20:54,028 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-12 06:20:54,103 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-12 06:20:54,103 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-12 06:20:54,104 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-12 06:20:54,105 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-12 06:20:54,107 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-12 06:20:54,109 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-12 06:20:54,113 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-12 06:20:54,114 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-12 06:20:54,116 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-12 06:20:54,116 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-12 06:20:54,117 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-12 06:20:54,118 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-12 06:20:54,121 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-12 06:20:54,133 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-12 06:20:54,135 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-12 06:20:54,136 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-12 06:20:54,141 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-12 06:20:54,142 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-12 06:20:54,143 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-12 06:20:54,144 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-12 06:20:54,145 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-12 06:20:54,146 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-12 06:20:54,148 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-12 06:20:54,148 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-12 06:20:54,149 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-12 06:20:54,150 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-12 06:20:54,150 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-12 06:20:54,151 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-12 06:20:54,151 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-12 06:20:54,152 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-12 06:20:54,164 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-12 06:20:54,165 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-12 06:20:54,165 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-12 06:20:54,166 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-12 06:20:54,166 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-12 06:20:54,166 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-12 06:20:54,166 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-12 06:20:54,167 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-12 06:20:54,168 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-12 06:20:54,169 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-12 06:20:54,214 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-12 06:20:54,215 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-12 06:20:54,215 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-12 06:20:54,215 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-12 06:20:54,216 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-12 06:20:54,216 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-12 06:20:54,216 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-12 06:20:54,216 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-12 06:20:54,217 INFO L138 SettingsManager]: * Use SBE=true [2022-07-12 06:20:54,217 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-12 06:20:54,217 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-12 06:20:54,218 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-12 06:20:54,218 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-12 06:20:54,218 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-12 06:20:54,218 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-12 06:20:54,218 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-12 06:20:54,218 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-12 06:20:54,219 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-12 06:20:54,219 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-12 06:20:54,219 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-12 06:20:54,219 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-12 06:20:54,219 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-12 06:20:54,219 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-12 06:20:54,220 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-12 06:20:54,220 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-12 06:20:54,220 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-12 06:20:54,220 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-12 06:20:54,220 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-12 06:20:54,220 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-12 06:20:54,221 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-12 06:20:54,221 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-12 06:20:54,221 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-12 06:20:54,221 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-12 06:20:54,221 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 73b8e020dd9d30fdd676c81009d4f1b850aa716d63ef29ce3d475a261546f853 [2022-07-12 06:20:54,572 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-12 06:20:54,595 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-12 06:20:54,596 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-12 06:20:54,597 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-12 06:20:54,598 INFO L275 PluginConnector]: CDTParser initialized [2022-07-12 06:20:54,598 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c [2022-07-12 06:20:54,699 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ee7ee6dd7/82b069e17c0b4176a08016d944ac1701/FLAGce6bce856 [2022-07-12 06:20:55,350 INFO L306 CDTParser]: Found 1 translation units. [2022-07-12 06:20:55,367 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c [2022-07-12 06:20:55,380 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ee7ee6dd7/82b069e17c0b4176a08016d944ac1701/FLAGce6bce856 [2022-07-12 06:20:55,639 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ee7ee6dd7/82b069e17c0b4176a08016d944ac1701 [2022-07-12 06:20:55,640 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-12 06:20:55,641 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-12 06:20:55,642 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-12 06:20:55,642 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-12 06:20:55,644 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-12 06:20:55,659 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.07 06:20:55" (1/1) ... [2022-07-12 06:20:55,660 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1fead407 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:55, skipping insertion in model container [2022-07-12 06:20:55,661 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.07 06:20:55" (1/1) ... [2022-07-12 06:20:55,665 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-12 06:20:55,713 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-12 06:20:56,073 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c[15211,15224] [2022-07-12 06:20:56,086 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-12 06:20:56,094 INFO L203 MainTranslator]: Completed pre-run [2022-07-12 06:20:56,170 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c[15211,15224] [2022-07-12 06:20:56,176 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-12 06:20:56,187 INFO L208 MainTranslator]: Completed translation [2022-07-12 06:20:56,187 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:56 WrapperNode [2022-07-12 06:20:56,187 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-12 06:20:56,188 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-12 06:20:56,188 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-12 06:20:56,188 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-12 06:20:56,202 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:56" (1/1) ... [2022-07-12 06:20:56,219 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:56" (1/1) ... [2022-07-12 06:20:56,256 INFO L137 Inliner]: procedures = 57, calls = 159, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 267 [2022-07-12 06:20:56,256 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-12 06:20:56,257 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-12 06:20:56,257 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-12 06:20:56,257 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-12 06:20:56,262 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:56" (1/1) ... [2022-07-12 06:20:56,262 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:56" (1/1) ... [2022-07-12 06:20:56,264 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:56" (1/1) ... [2022-07-12 06:20:56,264 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:56" (1/1) ... [2022-07-12 06:20:56,267 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:56" (1/1) ... [2022-07-12 06:20:56,284 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:56" (1/1) ... [2022-07-12 06:20:56,285 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:56" (1/1) ... [2022-07-12 06:20:56,287 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-12 06:20:56,287 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-12 06:20:56,287 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-12 06:20:56,287 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-12 06:20:56,298 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:56" (1/1) ... [2022-07-12 06:20:56,303 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-12 06:20:56,321 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 06:20:56,345 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-12 06:20:56,376 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-12 06:20:56,385 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-12 06:20:56,393 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-12 06:20:56,393 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-12 06:20:56,393 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-12 06:20:56,393 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-12 06:20:56,393 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-12 06:20:56,393 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-12 06:20:56,393 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-12 06:20:56,394 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-12 06:20:56,394 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-07-12 06:20:56,394 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-07-12 06:20:56,394 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-07-12 06:20:56,394 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-07-12 06:20:56,394 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-07-12 06:20:56,394 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-07-12 06:20:56,394 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-12 06:20:56,395 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-12 06:20:56,395 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-12 06:20:56,395 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-12 06:20:56,395 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-12 06:20:56,476 INFO L234 CfgBuilder]: Building ICFG [2022-07-12 06:20:56,492 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-12 06:20:56,689 INFO L275 CfgBuilder]: Performing block encoding [2022-07-12 06:20:56,695 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-12 06:20:56,695 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-12 06:20:56,696 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 06:20:56 BoogieIcfgContainer [2022-07-12 06:20:56,696 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-12 06:20:56,698 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-12 06:20:56,698 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-12 06:20:56,700 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-12 06:20:56,700 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 12.07 06:20:55" (1/3) ... [2022-07-12 06:20:56,701 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@50ff20d0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.07 06:20:56, skipping insertion in model container [2022-07-12 06:20:56,701 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:20:56" (2/3) ... [2022-07-12 06:20:56,701 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@50ff20d0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.07 06:20:56, skipping insertion in model container [2022-07-12 06:20:56,701 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 06:20:56" (3/3) ... [2022-07-12 06:20:56,702 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product46.cil.c [2022-07-12 06:20:56,712 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-12 06:20:56,712 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-12 06:20:56,762 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-12 06:20:56,767 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@1120c936, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@1e937244 [2022-07-12 06:20:56,768 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-12 06:20:56,778 INFO L276 IsEmpty]: Start isEmpty. Operand has 99 states, 75 states have (on average 1.36) internal successors, (102), 83 states have internal predecessors, (102), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2022-07-12 06:20:56,788 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-07-12 06:20:56,788 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:20:56,789 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:20:56,790 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:20:56,795 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:20:56,795 INFO L85 PathProgramCache]: Analyzing trace with hash -1607314381, now seen corresponding path program 1 times [2022-07-12 06:20:56,801 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:20:56,801 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [710353151] [2022-07-12 06:20:56,802 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:20:56,802 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:20:56,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:56,969 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-12 06:20:56,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:56,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-12 06:20:56,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:56,978 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-12 06:20:56,978 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:20:56,978 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [710353151] [2022-07-12 06:20:56,979 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [710353151] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:20:56,979 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:20:56,979 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-12 06:20:56,980 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2050923351] [2022-07-12 06:20:56,981 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:20:56,984 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-12 06:20:56,984 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:20:57,001 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-12 06:20:57,002 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-12 06:20:57,004 INFO L87 Difference]: Start difference. First operand has 99 states, 75 states have (on average 1.36) internal successors, (102), 83 states have internal predecessors, (102), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-12 06:20:57,049 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:20:57,049 INFO L93 Difference]: Finished difference Result 189 states and 254 transitions. [2022-07-12 06:20:57,050 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-12 06:20:57,051 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-07-12 06:20:57,052 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:20:57,059 INFO L225 Difference]: With dead ends: 189 [2022-07-12 06:20:57,059 INFO L226 Difference]: Without dead ends: 90 [2022-07-12 06:20:57,063 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-12 06:20:57,066 INFO L413 NwaCegarLoop]: 124 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 124 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 06:20:57,067 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 124 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 06:20:57,078 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90 states. [2022-07-12 06:20:57,102 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90 to 90. [2022-07-12 06:20:57,103 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 68 states have (on average 1.2941176470588236) internal successors, (88), 75 states have internal predecessors, (88), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2022-07-12 06:20:57,109 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 115 transitions. [2022-07-12 06:20:57,110 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 115 transitions. Word has length 32 [2022-07-12 06:20:57,111 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:20:57,111 INFO L495 AbstractCegarLoop]: Abstraction has 90 states and 115 transitions. [2022-07-12 06:20:57,111 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-12 06:20:57,112 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 115 transitions. [2022-07-12 06:20:57,115 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-07-12 06:20:57,115 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:20:57,131 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:20:57,131 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-12 06:20:57,132 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:20:57,133 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:20:57,133 INFO L85 PathProgramCache]: Analyzing trace with hash -824221923, now seen corresponding path program 1 times [2022-07-12 06:20:57,133 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:20:57,134 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [642947722] [2022-07-12 06:20:57,134 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:20:57,134 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:20:57,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:57,227 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-12 06:20:57,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:57,236 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-12 06:20:57,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:57,238 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-12 06:20:57,238 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:20:57,239 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [642947722] [2022-07-12 06:20:57,239 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [642947722] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:20:57,239 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:20:57,239 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-12 06:20:57,239 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [379189380] [2022-07-12 06:20:57,240 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:20:57,240 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-12 06:20:57,243 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:20:57,244 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-12 06:20:57,244 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-12 06:20:57,244 INFO L87 Difference]: Start difference. First operand 90 states and 115 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-12 06:20:57,255 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:20:57,255 INFO L93 Difference]: Finished difference Result 144 states and 184 transitions. [2022-07-12 06:20:57,256 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-12 06:20:57,256 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2022-07-12 06:20:57,256 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:20:57,257 INFO L225 Difference]: With dead ends: 144 [2022-07-12 06:20:57,257 INFO L226 Difference]: Without dead ends: 81 [2022-07-12 06:20:57,258 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-12 06:20:57,258 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 13 mSDsluCounter, 85 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 187 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 06:20:57,259 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 187 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 06:20:57,260 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2022-07-12 06:20:57,264 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 81. [2022-07-12 06:20:57,265 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 69 states have internal predecessors, (81), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-07-12 06:20:57,265 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 103 transitions. [2022-07-12 06:20:57,265 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 103 transitions. Word has length 33 [2022-07-12 06:20:57,266 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:20:57,266 INFO L495 AbstractCegarLoop]: Abstraction has 81 states and 103 transitions. [2022-07-12 06:20:57,266 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-12 06:20:57,266 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 103 transitions. [2022-07-12 06:20:57,267 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-07-12 06:20:57,267 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:20:57,267 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:20:57,267 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-12 06:20:57,268 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:20:57,268 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:20:57,268 INFO L85 PathProgramCache]: Analyzing trace with hash 534456794, now seen corresponding path program 1 times [2022-07-12 06:20:57,268 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:20:57,268 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1370643376] [2022-07-12 06:20:57,268 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:20:57,269 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:20:57,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:57,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-12 06:20:57,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:57,326 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-07-12 06:20:57,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:57,328 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-12 06:20:57,328 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:20:57,328 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1370643376] [2022-07-12 06:20:57,328 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1370643376] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:20:57,329 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:20:57,329 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-12 06:20:57,329 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [260033320] [2022-07-12 06:20:57,329 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:20:57,329 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-12 06:20:57,330 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:20:57,330 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-12 06:20:57,330 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-12 06:20:57,330 INFO L87 Difference]: Start difference. First operand 81 states and 103 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-12 06:20:57,380 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:20:57,380 INFO L93 Difference]: Finished difference Result 154 states and 199 transitions. [2022-07-12 06:20:57,381 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-12 06:20:57,381 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2022-07-12 06:20:57,381 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:20:57,382 INFO L225 Difference]: With dead ends: 154 [2022-07-12 06:20:57,382 INFO L226 Difference]: Without dead ends: 81 [2022-07-12 06:20:57,383 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-12 06:20:57,384 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 126 mSDsluCounter, 158 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 126 SdHoareTripleChecker+Valid, 254 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 06:20:57,384 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [126 Valid, 254 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 06:20:57,385 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2022-07-12 06:20:57,389 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 81. [2022-07-12 06:20:57,390 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 62 states have (on average 1.2903225806451613) internal successors, (80), 69 states have internal predecessors, (80), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-07-12 06:20:57,390 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 102 transitions. [2022-07-12 06:20:57,391 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 102 transitions. Word has length 38 [2022-07-12 06:20:57,391 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:20:57,392 INFO L495 AbstractCegarLoop]: Abstraction has 81 states and 102 transitions. [2022-07-12 06:20:57,392 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-12 06:20:57,392 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 102 transitions. [2022-07-12 06:20:57,393 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-07-12 06:20:57,393 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:20:57,393 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:20:57,393 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-12 06:20:57,394 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:20:57,394 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:20:57,394 INFO L85 PathProgramCache]: Analyzing trace with hash -216434858, now seen corresponding path program 1 times [2022-07-12 06:20:57,394 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:20:57,394 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [722103122] [2022-07-12 06:20:57,395 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:20:57,395 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:20:57,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:57,428 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-12 06:20:57,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:57,433 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-12 06:20:57,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:57,442 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:20:57,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:57,444 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-07-12 06:20:57,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:57,446 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-12 06:20:57,446 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:20:57,447 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [722103122] [2022-07-12 06:20:57,447 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [722103122] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:20:57,447 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:20:57,447 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-12 06:20:57,447 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [919953222] [2022-07-12 06:20:57,447 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:20:57,448 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-12 06:20:57,448 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:20:57,448 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-12 06:20:57,448 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-12 06:20:57,449 INFO L87 Difference]: Start difference. First operand 81 states and 102 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-12 06:20:57,588 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:20:57,588 INFO L93 Difference]: Finished difference Result 238 states and 300 transitions. [2022-07-12 06:20:57,588 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-12 06:20:57,589 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 48 [2022-07-12 06:20:57,589 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:20:57,590 INFO L225 Difference]: With dead ends: 238 [2022-07-12 06:20:57,590 INFO L226 Difference]: Without dead ends: 165 [2022-07-12 06:20:57,591 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-07-12 06:20:57,591 INFO L413 NwaCegarLoop]: 132 mSDtfsCounter, 187 mSDsluCounter, 175 mSDsCounter, 0 mSdLazyCounter, 104 mSolverCounterSat, 54 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 190 SdHoareTripleChecker+Valid, 307 SdHoareTripleChecker+Invalid, 158 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 54 IncrementalHoareTripleChecker+Valid, 104 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-12 06:20:57,592 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [190 Valid, 307 Invalid, 158 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [54 Valid, 104 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-12 06:20:57,592 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 165 states. [2022-07-12 06:20:57,602 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 165 to 159. [2022-07-12 06:20:57,602 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 159 states, 122 states have (on average 1.2540983606557377) internal successors, (153), 130 states have internal predecessors, (153), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-07-12 06:20:57,603 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 159 states to 159 states and 194 transitions. [2022-07-12 06:20:57,603 INFO L78 Accepts]: Start accepts. Automaton has 159 states and 194 transitions. Word has length 48 [2022-07-12 06:20:57,603 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:20:57,604 INFO L495 AbstractCegarLoop]: Abstraction has 159 states and 194 transitions. [2022-07-12 06:20:57,604 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-12 06:20:57,604 INFO L276 IsEmpty]: Start isEmpty. Operand 159 states and 194 transitions. [2022-07-12 06:20:57,605 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-07-12 06:20:57,605 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:20:57,605 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:20:57,605 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-12 06:20:57,605 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:20:57,606 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:20:57,606 INFO L85 PathProgramCache]: Analyzing trace with hash 1219044606, now seen corresponding path program 1 times [2022-07-12 06:20:57,606 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:20:57,606 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2111350361] [2022-07-12 06:20:57,606 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:20:57,606 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:20:57,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:57,647 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-12 06:20:57,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:57,653 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-12 06:20:57,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:57,669 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:20:57,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:57,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-07-12 06:20:57,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:57,687 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-07-12 06:20:57,688 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:20:57,688 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2111350361] [2022-07-12 06:20:57,688 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2111350361] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:20:57,688 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:20:57,688 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-12 06:20:57,690 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1835431624] [2022-07-12 06:20:57,690 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:20:57,690 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-12 06:20:57,691 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:20:57,691 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-12 06:20:57,691 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-12 06:20:57,692 INFO L87 Difference]: Start difference. First operand 159 states and 194 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-12 06:20:57,884 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:20:57,884 INFO L93 Difference]: Finished difference Result 322 states and 394 transitions. [2022-07-12 06:20:57,884 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-07-12 06:20:57,884 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) Word has length 54 [2022-07-12 06:20:57,885 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:20:57,886 INFO L225 Difference]: With dead ends: 322 [2022-07-12 06:20:57,886 INFO L226 Difference]: Without dead ends: 171 [2022-07-12 06:20:57,887 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-07-12 06:20:57,887 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 120 mSDsluCounter, 348 mSDsCounter, 0 mSdLazyCounter, 210 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 127 SdHoareTripleChecker+Valid, 450 SdHoareTripleChecker+Invalid, 245 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 210 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-12 06:20:57,888 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [127 Valid, 450 Invalid, 245 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 210 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-12 06:20:57,888 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 171 states. [2022-07-12 06:20:57,896 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 171 to 157. [2022-07-12 06:20:57,897 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 120 states have (on average 1.225) internal successors, (147), 128 states have internal predecessors, (147), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-07-12 06:20:57,898 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 188 transitions. [2022-07-12 06:20:57,898 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 188 transitions. Word has length 54 [2022-07-12 06:20:57,898 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:20:57,898 INFO L495 AbstractCegarLoop]: Abstraction has 157 states and 188 transitions. [2022-07-12 06:20:57,899 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-12 06:20:57,899 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 188 transitions. [2022-07-12 06:20:57,900 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-07-12 06:20:57,900 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:20:57,900 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:20:57,900 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-12 06:20:57,900 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:20:57,901 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:20:57,901 INFO L85 PathProgramCache]: Analyzing trace with hash 175038302, now seen corresponding path program 1 times [2022-07-12 06:20:57,901 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:20:57,901 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1607252209] [2022-07-12 06:20:57,901 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:20:57,901 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:20:57,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:57,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-12 06:20:57,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:57,936 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-12 06:20:57,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:57,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:20:57,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:57,956 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-07-12 06:20:57,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:57,958 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-12 06:20:57,958 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:20:57,958 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1607252209] [2022-07-12 06:20:57,958 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1607252209] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:20:57,958 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:20:57,959 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-12 06:20:57,959 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [720894087] [2022-07-12 06:20:57,959 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:20:57,959 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-12 06:20:57,959 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:20:57,960 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-12 06:20:57,960 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-12 06:20:57,960 INFO L87 Difference]: Start difference. First operand 157 states and 188 transitions. Second operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-12 06:20:58,057 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:20:58,058 INFO L93 Difference]: Finished difference Result 316 states and 385 transitions. [2022-07-12 06:20:58,058 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-12 06:20:58,058 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 60 [2022-07-12 06:20:58,059 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:20:58,060 INFO L225 Difference]: With dead ends: 316 [2022-07-12 06:20:58,060 INFO L226 Difference]: Without dead ends: 167 [2022-07-12 06:20:58,060 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-07-12 06:20:58,061 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 69 mSDsluCounter, 268 mSDsCounter, 0 mSdLazyCounter, 121 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 359 SdHoareTripleChecker+Invalid, 144 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 121 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-12 06:20:58,061 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [74 Valid, 359 Invalid, 144 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-12 06:20:58,062 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167 states. [2022-07-12 06:20:58,068 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167 to 160. [2022-07-12 06:20:58,069 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 160 states, 123 states have (on average 1.2195121951219512) internal successors, (150), 131 states have internal predecessors, (150), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-07-12 06:20:58,069 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 160 states to 160 states and 191 transitions. [2022-07-12 06:20:58,070 INFO L78 Accepts]: Start accepts. Automaton has 160 states and 191 transitions. Word has length 60 [2022-07-12 06:20:58,070 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:20:58,070 INFO L495 AbstractCegarLoop]: Abstraction has 160 states and 191 transitions. [2022-07-12 06:20:58,070 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-12 06:20:58,070 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 191 transitions. [2022-07-12 06:20:58,071 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-07-12 06:20:58,071 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:20:58,071 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:20:58,072 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-12 06:20:58,072 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:20:58,072 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:20:58,072 INFO L85 PathProgramCache]: Analyzing trace with hash 2098266336, now seen corresponding path program 1 times [2022-07-12 06:20:58,072 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:20:58,073 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2025814864] [2022-07-12 06:20:58,073 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:20:58,073 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:20:58,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:58,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-12 06:20:58,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:58,106 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-12 06:20:58,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:58,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:20:58,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:58,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-07-12 06:20:58,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:58,137 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-12 06:20:58,137 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:20:58,137 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2025814864] [2022-07-12 06:20:58,137 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2025814864] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:20:58,137 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:20:58,137 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-12 06:20:58,138 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1151202763] [2022-07-12 06:20:58,138 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:20:58,138 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-12 06:20:58,138 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:20:58,139 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-12 06:20:58,139 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-12 06:20:58,139 INFO L87 Difference]: Start difference. First operand 160 states and 191 transitions. Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-12 06:20:58,261 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:20:58,262 INFO L93 Difference]: Finished difference Result 325 states and 395 transitions. [2022-07-12 06:20:58,262 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-12 06:20:58,263 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 60 [2022-07-12 06:20:58,263 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:20:58,264 INFO L225 Difference]: With dead ends: 325 [2022-07-12 06:20:58,264 INFO L226 Difference]: Without dead ends: 173 [2022-07-12 06:20:58,265 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=30, Invalid=80, Unknown=0, NotChecked=0, Total=110 [2022-07-12 06:20:58,265 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 112 mSDsluCounter, 304 mSDsCounter, 0 mSdLazyCounter, 166 mSolverCounterSat, 30 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 118 SdHoareTripleChecker+Valid, 395 SdHoareTripleChecker+Invalid, 196 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 166 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-12 06:20:58,265 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [118 Valid, 395 Invalid, 196 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 166 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-12 06:20:58,266 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 173 states. [2022-07-12 06:20:58,272 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 173 to 162. [2022-07-12 06:20:58,273 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 162 states, 125 states have (on average 1.216) internal successors, (152), 133 states have internal predecessors, (152), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-07-12 06:20:58,273 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 162 states to 162 states and 193 transitions. [2022-07-12 06:20:58,274 INFO L78 Accepts]: Start accepts. Automaton has 162 states and 193 transitions. Word has length 60 [2022-07-12 06:20:58,274 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:20:58,274 INFO L495 AbstractCegarLoop]: Abstraction has 162 states and 193 transitions. [2022-07-12 06:20:58,274 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-12 06:20:58,274 INFO L276 IsEmpty]: Start isEmpty. Operand 162 states and 193 transitions. [2022-07-12 06:20:58,275 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-07-12 06:20:58,275 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:20:58,275 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:20:58,275 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-12 06:20:58,276 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:20:58,276 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:20:58,276 INFO L85 PathProgramCache]: Analyzing trace with hash -810497566, now seen corresponding path program 1 times [2022-07-12 06:20:58,276 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:20:58,276 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [403695097] [2022-07-12 06:20:58,277 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:20:58,277 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:20:58,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:58,305 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-12 06:20:58,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:58,310 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-12 06:20:58,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:58,320 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:20:58,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:58,328 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-07-12 06:20:58,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:58,329 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-12 06:20:58,329 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:20:58,329 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [403695097] [2022-07-12 06:20:58,330 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [403695097] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:20:58,330 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:20:58,330 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-12 06:20:58,330 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1904064866] [2022-07-12 06:20:58,330 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:20:58,331 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-12 06:20:58,331 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:20:58,331 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-12 06:20:58,331 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-12 06:20:58,331 INFO L87 Difference]: Start difference. First operand 162 states and 193 transitions. Second operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-12 06:20:58,479 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:20:58,479 INFO L93 Difference]: Finished difference Result 448 states and 559 transitions. [2022-07-12 06:20:58,479 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-12 06:20:58,479 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 60 [2022-07-12 06:20:58,480 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:20:58,481 INFO L225 Difference]: With dead ends: 448 [2022-07-12 06:20:58,481 INFO L226 Difference]: Without dead ends: 294 [2022-07-12 06:20:58,482 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 11 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-07-12 06:20:58,482 INFO L413 NwaCegarLoop]: 142 mSDtfsCounter, 216 mSDsluCounter, 165 mSDsCounter, 0 mSdLazyCounter, 153 mSolverCounterSat, 68 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 224 SdHoareTripleChecker+Valid, 307 SdHoareTripleChecker+Invalid, 221 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 68 IncrementalHoareTripleChecker+Valid, 153 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-12 06:20:58,483 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [224 Valid, 307 Invalid, 221 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [68 Valid, 153 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-12 06:20:58,483 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2022-07-12 06:20:58,492 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 292. [2022-07-12 06:20:58,493 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 292 states, 223 states have (on average 1.201793721973094) internal successors, (268), 235 states have internal predecessors, (268), 36 states have call successors, (36), 31 states have call predecessors, (36), 32 states have return successors, (51), 36 states have call predecessors, (51), 36 states have call successors, (51) [2022-07-12 06:20:58,494 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 292 states to 292 states and 355 transitions. [2022-07-12 06:20:58,495 INFO L78 Accepts]: Start accepts. Automaton has 292 states and 355 transitions. Word has length 60 [2022-07-12 06:20:58,495 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:20:58,495 INFO L495 AbstractCegarLoop]: Abstraction has 292 states and 355 transitions. [2022-07-12 06:20:58,495 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-12 06:20:58,495 INFO L276 IsEmpty]: Start isEmpty. Operand 292 states and 355 transitions. [2022-07-12 06:20:58,496 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2022-07-12 06:20:58,496 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:20:58,496 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:20:58,496 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-12 06:20:58,497 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:20:58,497 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:20:58,497 INFO L85 PathProgramCache]: Analyzing trace with hash -1779897540, now seen corresponding path program 1 times [2022-07-12 06:20:58,497 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:20:58,497 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1263014673] [2022-07-12 06:20:58,497 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:20:58,497 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:20:58,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:58,544 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:20:58,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:58,567 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-12 06:20:58,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:58,574 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-07-12 06:20:58,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:58,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:20:58,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:58,593 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-07-12 06:20:58,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:58,594 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-12 06:20:58,594 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:20:58,594 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1263014673] [2022-07-12 06:20:58,595 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1263014673] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:20:58,595 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:20:58,595 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-07-12 06:20:58,595 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1518261198] [2022-07-12 06:20:58,595 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:20:58,595 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-07-12 06:20:58,596 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:20:58,596 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-07-12 06:20:58,596 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-07-12 06:20:58,596 INFO L87 Difference]: Start difference. First operand 292 states and 355 transitions. Second operand has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-07-12 06:20:59,157 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:20:59,157 INFO L93 Difference]: Finished difference Result 864 states and 1087 transitions. [2022-07-12 06:20:59,158 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-07-12 06:20:59,158 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 64 [2022-07-12 06:20:59,158 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:20:59,160 INFO L225 Difference]: With dead ends: 864 [2022-07-12 06:20:59,161 INFO L226 Difference]: Without dead ends: 631 [2022-07-12 06:20:59,162 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 206 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=187, Invalid=743, Unknown=0, NotChecked=0, Total=930 [2022-07-12 06:20:59,162 INFO L413 NwaCegarLoop]: 151 mSDtfsCounter, 605 mSDsluCounter, 555 mSDsCounter, 0 mSdLazyCounter, 694 mSolverCounterSat, 194 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 612 SdHoareTripleChecker+Valid, 706 SdHoareTripleChecker+Invalid, 888 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 194 IncrementalHoareTripleChecker+Valid, 694 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-07-12 06:20:59,162 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [612 Valid, 706 Invalid, 888 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [194 Valid, 694 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-07-12 06:20:59,163 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 631 states. [2022-07-12 06:20:59,197 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 631 to 542. [2022-07-12 06:20:59,198 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 542 states, 414 states have (on average 1.1956521739130435) internal successors, (495), 438 states have internal predecessors, (495), 66 states have call successors, (66), 55 states have call predecessors, (66), 61 states have return successors, (90), 66 states have call predecessors, (90), 66 states have call successors, (90) [2022-07-12 06:20:59,200 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 542 states to 542 states and 651 transitions. [2022-07-12 06:20:59,200 INFO L78 Accepts]: Start accepts. Automaton has 542 states and 651 transitions. Word has length 64 [2022-07-12 06:20:59,201 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:20:59,201 INFO L495 AbstractCegarLoop]: Abstraction has 542 states and 651 transitions. [2022-07-12 06:20:59,201 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-07-12 06:20:59,201 INFO L276 IsEmpty]: Start isEmpty. Operand 542 states and 651 transitions. [2022-07-12 06:20:59,202 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2022-07-12 06:20:59,202 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:20:59,202 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:20:59,202 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-12 06:20:59,203 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:20:59,203 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:20:59,203 INFO L85 PathProgramCache]: Analyzing trace with hash 2079059227, now seen corresponding path program 1 times [2022-07-12 06:20:59,203 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:20:59,203 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [520214482] [2022-07-12 06:20:59,203 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:20:59,204 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:20:59,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:59,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:20:59,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:59,270 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-12 06:20:59,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:59,292 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 06:20:59,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:59,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-12 06:20:59,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:59,308 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:20:59,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:59,309 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-07-12 06:20:59,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:59,320 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2022-07-12 06:20:59,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:59,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-07-12 06:20:59,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:59,326 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:20:59,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:59,328 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2022-07-12 06:20:59,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:59,330 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 18 proven. 9 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-07-12 06:20:59,330 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:20:59,331 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [520214482] [2022-07-12 06:20:59,331 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [520214482] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-12 06:20:59,331 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2042606093] [2022-07-12 06:20:59,331 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:20:59,331 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-12 06:20:59,331 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 06:20:59,348 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-12 06:20:59,350 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-12 06:20:59,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:20:59,439 INFO L263 TraceCheckSpWp]: Trace formula consists of 501 conjuncts, 8 conjunts are in the unsatisfiable core [2022-07-12 06:20:59,444 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 06:20:59,554 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 29 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:20:59,554 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-12 06:20:59,709 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 19 proven. 8 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-07-12 06:20:59,709 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2042606093] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-12 06:20:59,709 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-12 06:20:59,709 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 6, 6] total 16 [2022-07-12 06:20:59,709 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [372734133] [2022-07-12 06:20:59,710 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-12 06:20:59,710 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2022-07-12 06:20:59,710 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:20:59,710 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2022-07-12 06:20:59,710 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2022-07-12 06:20:59,711 INFO L87 Difference]: Start difference. First operand 542 states and 651 transitions. Second operand has 16 states, 16 states have (on average 7.875) internal successors, (126), 11 states have internal predecessors, (126), 5 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 5 states have call successors, (20) [2022-07-12 06:21:00,669 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:21:00,670 INFO L93 Difference]: Finished difference Result 1212 states and 1496 transitions. [2022-07-12 06:21:00,670 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2022-07-12 06:21:00,670 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 7.875) internal successors, (126), 11 states have internal predecessors, (126), 5 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 5 states have call successors, (20) Word has length 108 [2022-07-12 06:21:00,671 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:21:00,673 INFO L225 Difference]: With dead ends: 1212 [2022-07-12 06:21:00,673 INFO L226 Difference]: Without dead ends: 727 [2022-07-12 06:21:00,675 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 291 GetRequests, 246 SyntacticMatches, 1 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 493 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=361, Invalid=1709, Unknown=0, NotChecked=0, Total=2070 [2022-07-12 06:21:00,675 INFO L413 NwaCegarLoop]: 233 mSDtfsCounter, 495 mSDsluCounter, 1311 mSDsCounter, 0 mSdLazyCounter, 1241 mSolverCounterSat, 249 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 496 SdHoareTripleChecker+Valid, 1544 SdHoareTripleChecker+Invalid, 1490 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 249 IncrementalHoareTripleChecker+Valid, 1241 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-07-12 06:21:00,675 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [496 Valid, 1544 Invalid, 1490 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [249 Valid, 1241 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-07-12 06:21:00,676 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 727 states. [2022-07-12 06:21:00,702 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 727 to 614. [2022-07-12 06:21:00,703 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 614 states, 464 states have (on average 1.1939655172413792) internal successors, (554), 496 states have internal predecessors, (554), 77 states have call successors, (77), 66 states have call predecessors, (77), 72 states have return successors, (101), 74 states have call predecessors, (101), 77 states have call successors, (101) [2022-07-12 06:21:00,705 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 614 states to 614 states and 732 transitions. [2022-07-12 06:21:00,705 INFO L78 Accepts]: Start accepts. Automaton has 614 states and 732 transitions. Word has length 108 [2022-07-12 06:21:00,705 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:21:00,705 INFO L495 AbstractCegarLoop]: Abstraction has 614 states and 732 transitions. [2022-07-12 06:21:00,706 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 7.875) internal successors, (126), 11 states have internal predecessors, (126), 5 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 5 states have call successors, (20) [2022-07-12 06:21:00,706 INFO L276 IsEmpty]: Start isEmpty. Operand 614 states and 732 transitions. [2022-07-12 06:21:00,707 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 193 [2022-07-12 06:21:00,707 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:21:00,708 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:21:00,737 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-12 06:21:00,925 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-07-12 06:21:00,926 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:21:00,926 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:21:00,926 INFO L85 PathProgramCache]: Analyzing trace with hash -2082434884, now seen corresponding path program 1 times [2022-07-12 06:21:00,926 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:21:00,927 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1606013994] [2022-07-12 06:21:00,927 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:21:00,927 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:21:00,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:00,963 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:21:00,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:00,970 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-12 06:21:00,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:00,975 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 06:21:00,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:00,979 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-12 06:21:00,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:00,982 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:21:00,983 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:00,984 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-07-12 06:21:00,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:00,989 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 06:21:00,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:00,990 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:21:00,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:00,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-12 06:21:00,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:00,992 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:21:00,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:00,993 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2022-07-12 06:21:00,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:01,010 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 06:21:01,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:01,011 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:21:01,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:01,025 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 151 [2022-07-12 06:21:01,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:01,026 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 160 [2022-07-12 06:21:01,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:01,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:21:01,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:01,031 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 184 [2022-07-12 06:21:01,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:01,032 INFO L134 CoverageAnalysis]: Checked inductivity of 218 backedges. 86 proven. 3 refuted. 0 times theorem prover too weak. 129 trivial. 0 not checked. [2022-07-12 06:21:01,032 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:21:01,032 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1606013994] [2022-07-12 06:21:01,032 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1606013994] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-12 06:21:01,033 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [76622340] [2022-07-12 06:21:01,033 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:21:01,033 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-12 06:21:01,033 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 06:21:01,056 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-12 06:21:01,071 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-12 06:21:01,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:01,202 INFO L263 TraceCheckSpWp]: Trace formula consists of 725 conjuncts, 13 conjunts are in the unsatisfiable core [2022-07-12 06:21:01,206 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 06:21:01,365 INFO L134 CoverageAnalysis]: Checked inductivity of 218 backedges. 158 proven. 4 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2022-07-12 06:21:01,365 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-12 06:21:01,666 INFO L134 CoverageAnalysis]: Checked inductivity of 218 backedges. 81 proven. 39 refuted. 0 times theorem prover too weak. 98 trivial. 0 not checked. [2022-07-12 06:21:01,667 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [76622340] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-12 06:21:01,667 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-12 06:21:01,667 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 10, 11] total 26 [2022-07-12 06:21:01,667 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [743746080] [2022-07-12 06:21:01,667 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-12 06:21:01,669 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-07-12 06:21:01,669 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:21:01,670 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-07-12 06:21:01,671 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=116, Invalid=534, Unknown=0, NotChecked=0, Total=650 [2022-07-12 06:21:01,671 INFO L87 Difference]: Start difference. First operand 614 states and 732 transitions. Second operand has 26 states, 26 states have (on average 7.6923076923076925) internal successors, (200), 21 states have internal predecessors, (200), 9 states have call successors, (31), 8 states have call predecessors, (31), 10 states have return successors, (34), 9 states have call predecessors, (34), 9 states have call successors, (34) [2022-07-12 06:21:03,323 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:21:03,323 INFO L93 Difference]: Finished difference Result 1795 states and 2235 transitions. [2022-07-12 06:21:03,323 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2022-07-12 06:21:03,324 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 7.6923076923076925) internal successors, (200), 21 states have internal predecessors, (200), 9 states have call successors, (31), 8 states have call predecessors, (31), 10 states have return successors, (34), 9 states have call predecessors, (34), 9 states have call successors, (34) Word has length 192 [2022-07-12 06:21:03,324 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:21:03,328 INFO L225 Difference]: With dead ends: 1795 [2022-07-12 06:21:03,328 INFO L226 Difference]: Without dead ends: 1189 [2022-07-12 06:21:03,330 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 486 GetRequests, 412 SyntacticMatches, 2 SemanticMatches, 72 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1310 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=976, Invalid=4426, Unknown=0, NotChecked=0, Total=5402 [2022-07-12 06:21:03,331 INFO L413 NwaCegarLoop]: 179 mSDtfsCounter, 1464 mSDsluCounter, 1251 mSDsCounter, 0 mSdLazyCounter, 2287 mSolverCounterSat, 609 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1464 SdHoareTripleChecker+Valid, 1430 SdHoareTripleChecker+Invalid, 2896 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 609 IncrementalHoareTripleChecker+Valid, 2287 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-07-12 06:21:03,331 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1464 Valid, 1430 Invalid, 2896 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [609 Valid, 2287 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-07-12 06:21:03,332 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1189 states. [2022-07-12 06:21:03,373 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1189 to 1089. [2022-07-12 06:21:03,374 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1089 states, 829 states have (on average 1.1399276236429432) internal successors, (945), 874 states have internal predecessors, (945), 138 states have call successors, (138), 121 states have call predecessors, (138), 121 states have return successors, (160), 127 states have call predecessors, (160), 138 states have call successors, (160) [2022-07-12 06:21:03,401 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1089 states to 1089 states and 1243 transitions. [2022-07-12 06:21:03,401 INFO L78 Accepts]: Start accepts. Automaton has 1089 states and 1243 transitions. Word has length 192 [2022-07-12 06:21:03,402 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:21:03,402 INFO L495 AbstractCegarLoop]: Abstraction has 1089 states and 1243 transitions. [2022-07-12 06:21:03,402 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 7.6923076923076925) internal successors, (200), 21 states have internal predecessors, (200), 9 states have call successors, (31), 8 states have call predecessors, (31), 10 states have return successors, (34), 9 states have call predecessors, (34), 9 states have call successors, (34) [2022-07-12 06:21:03,402 INFO L276 IsEmpty]: Start isEmpty. Operand 1089 states and 1243 transitions. [2022-07-12 06:21:03,405 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 213 [2022-07-12 06:21:03,405 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:21:03,405 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:21:03,425 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-12 06:21:03,622 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-07-12 06:21:03,623 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:21:03,623 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:21:03,623 INFO L85 PathProgramCache]: Analyzing trace with hash 940649722, now seen corresponding path program 1 times [2022-07-12 06:21:03,624 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:21:03,624 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [308393683] [2022-07-12 06:21:03,624 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:21:03,624 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:21:03,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,689 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:21:03,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-12 06:21:03,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,707 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 06:21:03,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,712 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-12 06:21:03,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,717 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:21:03,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-07-12 06:21:03,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 06:21:03,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,740 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:21:03,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,741 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-12 06:21:03,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,744 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:21:03,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,745 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-07-12 06:21:03,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,758 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2022-07-12 06:21:03,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-07-12 06:21:03,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,762 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 06:21:03,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,763 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:21:03,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,764 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-12 06:21:03,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,765 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 160 [2022-07-12 06:21:03,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,766 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 171 [2022-07-12 06:21:03,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 180 [2022-07-12 06:21:03,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,769 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:21:03,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,770 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 204 [2022-07-12 06:21:03,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,771 INFO L134 CoverageAnalysis]: Checked inductivity of 264 backedges. 100 proven. 44 refuted. 0 times theorem prover too weak. 120 trivial. 0 not checked. [2022-07-12 06:21:03,772 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:21:03,772 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [308393683] [2022-07-12 06:21:03,772 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [308393683] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-12 06:21:03,772 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1573046027] [2022-07-12 06:21:03,772 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:21:03,772 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-12 06:21:03,772 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 06:21:03,773 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-12 06:21:03,832 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-07-12 06:21:03,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:03,914 INFO L263 TraceCheckSpWp]: Trace formula consists of 774 conjuncts, 10 conjunts are in the unsatisfiable core [2022-07-12 06:21:03,918 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 06:21:04,025 INFO L134 CoverageAnalysis]: Checked inductivity of 264 backedges. 200 proven. 9 refuted. 0 times theorem prover too weak. 55 trivial. 0 not checked. [2022-07-12 06:21:04,026 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-12 06:21:04,323 INFO L134 CoverageAnalysis]: Checked inductivity of 264 backedges. 104 proven. 54 refuted. 0 times theorem prover too weak. 106 trivial. 0 not checked. [2022-07-12 06:21:04,324 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1573046027] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-12 06:21:04,324 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-12 06:21:04,324 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 8, 8] total 23 [2022-07-12 06:21:04,324 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [576345421] [2022-07-12 06:21:04,324 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-12 06:21:04,325 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-07-12 06:21:04,325 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:21:04,325 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-07-12 06:21:04,325 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=70, Invalid=436, Unknown=0, NotChecked=0, Total=506 [2022-07-12 06:21:04,326 INFO L87 Difference]: Start difference. First operand 1089 states and 1243 transitions. Second operand has 23 states, 23 states have (on average 9.391304347826088) internal successors, (216), 16 states have internal predecessors, (216), 6 states have call successors, (45), 8 states have call predecessors, (45), 11 states have return successors, (39), 9 states have call predecessors, (39), 6 states have call successors, (39) [2022-07-12 06:21:05,534 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:21:05,534 INFO L93 Difference]: Finished difference Result 2130 states and 2461 transitions. [2022-07-12 06:21:05,534 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-07-12 06:21:05,535 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 9.391304347826088) internal successors, (216), 16 states have internal predecessors, (216), 6 states have call successors, (45), 8 states have call predecessors, (45), 11 states have return successors, (39), 9 states have call predecessors, (39), 6 states have call successors, (39) Word has length 212 [2022-07-12 06:21:05,535 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:21:05,539 INFO L225 Difference]: With dead ends: 2130 [2022-07-12 06:21:05,539 INFO L226 Difference]: Without dead ends: 1147 [2022-07-12 06:21:05,541 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 520 GetRequests, 469 SyntacticMatches, 2 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 501 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=426, Invalid=2124, Unknown=0, NotChecked=0, Total=2550 [2022-07-12 06:21:05,541 INFO L413 NwaCegarLoop]: 144 mSDtfsCounter, 538 mSDsluCounter, 422 mSDsCounter, 0 mSdLazyCounter, 1974 mSolverCounterSat, 237 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 538 SdHoareTripleChecker+Valid, 566 SdHoareTripleChecker+Invalid, 2211 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 237 IncrementalHoareTripleChecker+Valid, 1974 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-07-12 06:21:05,541 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [538 Valid, 566 Invalid, 2211 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [237 Valid, 1974 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-07-12 06:21:05,542 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1147 states. [2022-07-12 06:21:05,581 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1147 to 1085. [2022-07-12 06:21:05,582 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1085 states, 827 states have (on average 1.1293833131801694) internal successors, (934), 870 states have internal predecessors, (934), 132 states have call successors, (132), 123 states have call predecessors, (132), 125 states have return successors, (154), 125 states have call predecessors, (154), 132 states have call successors, (154) [2022-07-12 06:21:05,585 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1085 states to 1085 states and 1220 transitions. [2022-07-12 06:21:05,586 INFO L78 Accepts]: Start accepts. Automaton has 1085 states and 1220 transitions. Word has length 212 [2022-07-12 06:21:05,586 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:21:05,586 INFO L495 AbstractCegarLoop]: Abstraction has 1085 states and 1220 transitions. [2022-07-12 06:21:05,586 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 9.391304347826088) internal successors, (216), 16 states have internal predecessors, (216), 6 states have call successors, (45), 8 states have call predecessors, (45), 11 states have return successors, (39), 9 states have call predecessors, (39), 6 states have call successors, (39) [2022-07-12 06:21:05,586 INFO L276 IsEmpty]: Start isEmpty. Operand 1085 states and 1220 transitions. [2022-07-12 06:21:05,589 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 214 [2022-07-12 06:21:05,589 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:21:05,589 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:21:05,607 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-07-12 06:21:05,807 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-12 06:21:05,807 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:21:05,807 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:21:05,808 INFO L85 PathProgramCache]: Analyzing trace with hash 1948196260, now seen corresponding path program 1 times [2022-07-12 06:21:05,808 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:21:05,808 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1997512105] [2022-07-12 06:21:05,808 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:21:05,808 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:21:05,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:05,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:21:05,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:05,854 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-12 06:21:05,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:05,858 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 06:21:05,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:05,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-12 06:21:05,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:05,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:21:05,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:05,866 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-07-12 06:21:05,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:05,870 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 06:21:05,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:05,871 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:21:05,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:05,872 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-12 06:21:05,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:05,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:21:05,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:05,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-07-12 06:21:05,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:05,878 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-07-12 06:21:05,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:05,885 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 123 [2022-07-12 06:21:05,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:05,889 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 06:21:05,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:05,890 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:21:05,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:05,891 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-12 06:21:05,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:05,892 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2022-07-12 06:21:05,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:05,893 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 172 [2022-07-12 06:21:05,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:05,894 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2022-07-12 06:21:05,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:05,915 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:21:05,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:05,933 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 205 [2022-07-12 06:21:05,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:05,935 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 90 proven. 3 refuted. 0 times theorem prover too weak. 172 trivial. 0 not checked. [2022-07-12 06:21:05,935 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:21:05,935 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1997512105] [2022-07-12 06:21:05,935 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1997512105] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-12 06:21:05,936 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [253765858] [2022-07-12 06:21:05,936 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:21:05,936 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-12 06:21:05,936 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 06:21:05,958 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-12 06:21:05,999 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-07-12 06:21:06,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:06,138 INFO L263 TraceCheckSpWp]: Trace formula consists of 774 conjuncts, 18 conjunts are in the unsatisfiable core [2022-07-12 06:21:06,162 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 06:21:09,002 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 142 proven. 26 refuted. 0 times theorem prover too weak. 97 trivial. 0 not checked. [2022-07-12 06:21:09,003 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-12 06:21:09,494 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 103 proven. 45 refuted. 0 times theorem prover too weak. 117 trivial. 0 not checked. [2022-07-12 06:21:09,494 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [253765858] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-12 06:21:09,494 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-12 06:21:09,494 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 8, 13] total 29 [2022-07-12 06:21:09,494 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [986902284] [2022-07-12 06:21:09,494 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-12 06:21:09,495 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-07-12 06:21:09,495 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:21:09,495 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-07-12 06:21:09,495 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=118, Invalid=694, Unknown=0, NotChecked=0, Total=812 [2022-07-12 06:21:09,496 INFO L87 Difference]: Start difference. First operand 1085 states and 1220 transitions. Second operand has 29 states, 29 states have (on average 8.862068965517242) internal successors, (257), 23 states have internal predecessors, (257), 13 states have call successors, (47), 12 states have call predecessors, (47), 15 states have return successors, (48), 14 states have call predecessors, (48), 13 states have call successors, (48) [2022-07-12 06:21:13,244 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:21:13,244 INFO L93 Difference]: Finished difference Result 2414 states and 2767 transitions. [2022-07-12 06:21:13,244 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 65 states. [2022-07-12 06:21:13,245 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 29 states have (on average 8.862068965517242) internal successors, (257), 23 states have internal predecessors, (257), 13 states have call successors, (47), 12 states have call predecessors, (47), 15 states have return successors, (48), 14 states have call predecessors, (48), 13 states have call successors, (48) Word has length 213 [2022-07-12 06:21:13,245 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:21:13,250 INFO L225 Difference]: With dead ends: 2414 [2022-07-12 06:21:13,250 INFO L226 Difference]: Without dead ends: 1441 [2022-07-12 06:21:13,255 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 563 GetRequests, 472 SyntacticMatches, 1 SemanticMatches, 90 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2153 ImplicationChecksByTransitivity, 2.6s TimeCoverageRelationStatistics Valid=1427, Invalid=6945, Unknown=0, NotChecked=0, Total=8372 [2022-07-12 06:21:13,256 INFO L413 NwaCegarLoop]: 358 mSDtfsCounter, 2087 mSDsluCounter, 1013 mSDsCounter, 0 mSdLazyCounter, 4646 mSolverCounterSat, 1047 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2087 SdHoareTripleChecker+Valid, 1371 SdHoareTripleChecker+Invalid, 5693 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1047 IncrementalHoareTripleChecker+Valid, 4646 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2022-07-12 06:21:13,257 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2087 Valid, 1371 Invalid, 5693 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1047 Valid, 4646 Invalid, 0 Unknown, 0 Unchecked, 2.4s Time] [2022-07-12 06:21:13,258 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1441 states. [2022-07-12 06:21:13,373 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1441 to 1289. [2022-07-12 06:21:13,377 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1289 states, 984 states have (on average 1.125) internal successors, (1107), 1020 states have internal predecessors, (1107), 160 states have call successors, (160), 151 states have call predecessors, (160), 144 states have return successors, (176), 144 states have call predecessors, (176), 160 states have call successors, (176) [2022-07-12 06:21:13,395 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1289 states to 1289 states and 1443 transitions. [2022-07-12 06:21:13,396 INFO L78 Accepts]: Start accepts. Automaton has 1289 states and 1443 transitions. Word has length 213 [2022-07-12 06:21:13,397 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:21:13,397 INFO L495 AbstractCegarLoop]: Abstraction has 1289 states and 1443 transitions. [2022-07-12 06:21:13,397 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 29 states have (on average 8.862068965517242) internal successors, (257), 23 states have internal predecessors, (257), 13 states have call successors, (47), 12 states have call predecessors, (47), 15 states have return successors, (48), 14 states have call predecessors, (48), 13 states have call successors, (48) [2022-07-12 06:21:13,397 INFO L276 IsEmpty]: Start isEmpty. Operand 1289 states and 1443 transitions. [2022-07-12 06:21:13,402 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 269 [2022-07-12 06:21:13,402 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:21:13,402 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:21:13,435 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-07-12 06:21:13,618 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-12 06:21:13,618 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:21:13,618 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:21:13,618 INFO L85 PathProgramCache]: Analyzing trace with hash 648735380, now seen corresponding path program 1 times [2022-07-12 06:21:13,618 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:21:13,619 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [82115484] [2022-07-12 06:21:13,619 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:21:13,619 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:21:13,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:13,801 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:21:13,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:13,811 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-12 06:21:13,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:13,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 06:21:13,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:13,824 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-12 06:21:13,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:13,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:21:13,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:13,828 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-07-12 06:21:13,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:13,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 06:21:13,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:13,848 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:21:13,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:13,849 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-12 06:21:13,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:13,851 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:21:13,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:13,854 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-07-12 06:21:13,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:13,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-07-12 06:21:13,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:13,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 123 [2022-07-12 06:21:13,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:13,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 06:21:13,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:13,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:21:13,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:13,896 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-12 06:21:13,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:13,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2022-07-12 06:21:13,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:13,907 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 167 [2022-07-12 06:21:13,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:13,911 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 174 [2022-07-12 06:21:13,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:13,929 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-12 06:21:13,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:13,930 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-12 06:21:13,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:13,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:21:13,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:13,956 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-12 06:21:13,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:13,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 216 [2022-07-12 06:21:13,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:13,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 227 [2022-07-12 06:21:13,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:13,976 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2022-07-12 06:21:13,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:14,003 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:21:14,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:14,006 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 260 [2022-07-12 06:21:14,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:14,008 INFO L134 CoverageAnalysis]: Checked inductivity of 452 backedges. 201 proven. 36 refuted. 0 times theorem prover too weak. 215 trivial. 0 not checked. [2022-07-12 06:21:14,008 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:21:14,008 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [82115484] [2022-07-12 06:21:14,009 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [82115484] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-12 06:21:14,009 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [387008185] [2022-07-12 06:21:14,009 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:21:14,009 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-12 06:21:14,009 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 06:21:14,024 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-12 06:21:14,065 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-07-12 06:21:14,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:21:14,220 INFO L263 TraceCheckSpWp]: Trace formula consists of 914 conjuncts, 30 conjunts are in the unsatisfiable core [2022-07-12 06:21:14,224 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 06:21:14,636 INFO L134 CoverageAnalysis]: Checked inductivity of 452 backedges. 159 proven. 91 refuted. 0 times theorem prover too weak. 202 trivial. 0 not checked. [2022-07-12 06:21:14,637 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-12 06:21:15,269 INFO L134 CoverageAnalysis]: Checked inductivity of 452 backedges. 100 proven. 138 refuted. 0 times theorem prover too weak. 214 trivial. 0 not checked. [2022-07-12 06:21:15,270 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [387008185] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-12 06:21:15,270 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-12 06:21:15,270 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 11, 16] total 29 [2022-07-12 06:21:15,270 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1441617258] [2022-07-12 06:21:15,270 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-12 06:21:15,272 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-07-12 06:21:15,272 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:21:15,273 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-07-12 06:21:15,273 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=150, Invalid=662, Unknown=0, NotChecked=0, Total=812 [2022-07-12 06:21:15,273 INFO L87 Difference]: Start difference. First operand 1289 states and 1443 transitions. Second operand has 29 states, 29 states have (on average 10.793103448275861) internal successors, (313), 25 states have internal predecessors, (313), 18 states have call successors, (59), 13 states have call predecessors, (59), 19 states have return successors, (62), 18 states have call predecessors, (62), 18 states have call successors, (62) [2022-07-12 06:21:16,848 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:21:16,861 INFO L93 Difference]: Finished difference Result 2028 states and 2287 transitions. [2022-07-12 06:21:16,862 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-07-12 06:21:16,862 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 29 states have (on average 10.793103448275861) internal successors, (313), 25 states have internal predecessors, (313), 18 states have call successors, (59), 13 states have call predecessors, (59), 19 states have return successors, (62), 18 states have call predecessors, (62), 18 states have call successors, (62) Word has length 268 [2022-07-12 06:21:16,863 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:21:16,863 INFO L225 Difference]: With dead ends: 2028 [2022-07-12 06:21:16,863 INFO L226 Difference]: Without dead ends: 0 [2022-07-12 06:21:16,867 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 634 GetRequests, 580 SyntacticMatches, 5 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 551 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=579, Invalid=1971, Unknown=0, NotChecked=0, Total=2550 [2022-07-12 06:21:16,868 INFO L413 NwaCegarLoop]: 208 mSDtfsCounter, 1523 mSDsluCounter, 475 mSDsCounter, 0 mSdLazyCounter, 1674 mSolverCounterSat, 650 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1525 SdHoareTripleChecker+Valid, 683 SdHoareTripleChecker+Invalid, 2324 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 650 IncrementalHoareTripleChecker+Valid, 1674 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-07-12 06:21:16,868 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1525 Valid, 683 Invalid, 2324 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [650 Valid, 1674 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-07-12 06:21:16,869 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-12 06:21:16,869 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-12 06:21:16,869 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-12 06:21:16,869 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-12 06:21:16,869 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 268 [2022-07-12 06:21:16,870 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:21:16,870 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-12 06:21:16,870 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 29 states have (on average 10.793103448275861) internal successors, (313), 25 states have internal predecessors, (313), 18 states have call successors, (59), 13 states have call predecessors, (59), 19 states have return successors, (62), 18 states have call predecessors, (62), 18 states have call successors, (62) [2022-07-12 06:21:16,870 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-12 06:21:16,870 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-12 06:21:16,872 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-12 06:21:16,913 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-07-12 06:21:17,087 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-07-12 06:21:17,089 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-12 06:21:29,993 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 748 754) no Hoare annotation was computed. [2022-07-12 06:21:29,993 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 748 754) the Hoare annotation is: true [2022-07-12 06:21:29,993 INFO L899 garLoopResultBuilder]: For program point L607-1(lines 603 614) no Hoare annotation was computed. [2022-07-12 06:21:29,993 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 603 614) the Hoare annotation is: (let ((.cse6 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse4 (not (<= ~waterLevel~0 1))) (.cse2 (not (<= 0 ~waterLevel~0))) (.cse9 (not (<= 1 ~pumpRunning~0))) (.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (not (= ~pumpRunning~0 0))) (.cse3 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse8 (not (<= 2 ~waterLevel~0))) (.cse7 (not (<= ~waterLevel~0 2))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or (not (< 1 ~waterLevel~0)) .cse1 .cse3 .cse6 .cse7 .cse5) (or .cse0 .cse3 .cse8 .cse9 .cse7 .cse5) (or .cse1 .cse2 .cse3 .cse6 .cse4 .cse5) (or .cse0 .cse2 .cse3 .cse9 .cse7 .cse5 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 .cse3 .cse8 .cse7 .cse5))) [2022-07-12 06:21:29,993 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 603 614) no Hoare annotation was computed. [2022-07-12 06:21:29,994 INFO L899 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2022-07-12 06:21:29,994 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 721 747) no Hoare annotation was computed. [2022-07-12 06:21:29,994 INFO L895 garLoopResultBuilder]: At program point L69(lines 62 71) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse15 (<= 1 ~switchedOnBeforeTS~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse14 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse7 .cse14)) (.cse8 (and .cse13 .cse14 .cse15)) (.cse5 (not (<= 0 |old(~waterLevel~0)|))) (.cse10 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse12 (and .cse13 .cse14 .cse15 (not .cse3))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (not (< 1 |old(~waterLevel~0)|))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse5 .cse6 .cse3 (not (<= |old(~waterLevel~0)| 0))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse5 .cse2 .cse3) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse6 (and .cse7 (= ~waterLevel~0 1)) .cse3) (or .cse8 .cse9 .cse5 .cse6 .cse3 .cse4 .cse10) (or .cse0 .cse1 .cse11 .cse6 .cse3 .cse4) (or .cse8 .cse9 .cse5 .cse2 .cse3 .cse4 .cse10) (or .cse12 .cse9 .cse11 .cse2 .cse3 .cse4) (or .cse12 .cse9 .cse11 .cse6 .cse3 .cse4)))) [2022-07-12 06:21:29,994 INFO L895 garLoopResultBuilder]: At program point L837(lines 832 839) the Hoare annotation is: (let ((.cse1 (not (< 1 |old(~waterLevel~0)|))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (= ~pumpRunning~0 0)) (.cse10 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse11 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (not (<= |old(~waterLevel~0)| 0))) (.cse12 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse13 (not (<= |old(~waterLevel~0)| 1))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse3 .cse8) (or .cse0 .cse1 .cse7 .cse3 .cse4 (and .cse9 .cse10 (= ~waterLevel~0 1) .cse11)) (or .cse0 .cse6 .cse2 .cse3 .cse4 .cse12) (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse7 .cse3 (and .cse9 .cse10 (<= ~waterLevel~0 0) .cse11 (<= 0 ~waterLevel~0)) .cse12) (or .cse5 .cse1 .cse7 .cse3 .cse4) (or .cse13 .cse5 (not (<= 1 |old(~waterLevel~0)|)) .cse7 .cse3) (or .cse0 .cse6 .cse7 (and .cse9 .cse10 (= |old(~waterLevel~0)| ~waterLevel~0) .cse11) .cse3 .cse8 .cse12) (or .cse13 .cse5 .cse6 .cse2 .cse3))) [2022-07-12 06:21:29,995 INFO L895 garLoopResultBuilder]: At program point L796(line 796) the Hoare annotation is: (let ((.cse7 (not (<= |old(~waterLevel~0)| 0))) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse11 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (< 1 |old(~waterLevel~0)|))) (.cse12 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse13 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse2 .cse3 .cse7 .cse8 (and .cse9 .cse10 (= |old(~waterLevel~0)| ~waterLevel~0) .cse11)) (or .cse5 .cse2 .cse3 .cse4 (and .cse9 .cse10 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0) .cse11) (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse6 .cse12 .cse3 .cse4 .cse8) (or .cse0 .cse6 .cse12 .cse3 .cse7) (or .cse0 .cse1 .cse12 .cse3 .cse4) (or (not (= |old(~waterLevel~0)| 1)) .cse5 .cse2 (and .cse9 .cse10 (<= ~waterLevel~0 0) .cse11 (<= 0 ~waterLevel~0)) .cse3 .cse8) (or .cse13 .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse12 .cse3) (or .cse5 .cse1 .cse12 .cse3 .cse4) (or .cse13 .cse0 .cse6 .cse2 .cse3))) [2022-07-12 06:21:29,995 INFO L895 garLoopResultBuilder]: At program point L788(line 788) the Hoare annotation is: (let ((.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= 0 ~systemActive~0)) (.cse14 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse15 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse16 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse10 (and .cse15 (= ~waterLevel~0 1) .cse16)) (.cse1 (not (< 1 |old(~waterLevel~0)|))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse13 (and .cse15 (= |old(~waterLevel~0)| ~waterLevel~0) .cse16)) (.cse12 (not (<= |old(~waterLevel~0)| 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (not (<= 0 |old(~waterLevel~0)|))) (.cse5 (not (<= |old(~waterLevel~0)| 1))) (.cse6 (and (or .cse9 .cse3 (not (<= 2 |old(~waterLevel~0)|)) (= |old(~switchedOnBeforeTS~0)| 0)) (or (not (= |old(~waterLevel~0)| 1)) .cse9 .cse3 .cse14))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse8 (and .cse15 (<= ~waterLevel~0 0) .cse16 (<= 0 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse8) (or .cse9 .cse1 .cse7 .cse10 .cse3 .cse4) (or .cse0 .cse11 .cse7 .cse3 .cse12) (or .cse9 .cse1 .cse2 .cse10 .cse3 .cse4) (or .cse0 .cse1 .cse7 .cse3 .cse4) (or .cse13 .cse9 .cse11 .cse7 .cse3 .cse12 .cse14) (or .cse13 .cse9 .cse11 .cse2 .cse3 .cse12 .cse14) (or .cse5 .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse7 .cse3) (or .cse5 .cse0 .cse11 .cse2 .cse3) (or .cse5 .cse6 .cse2 .cse8)))) [2022-07-12 06:21:29,995 INFO L899 garLoopResultBuilder]: For program point L788-1(line 788) no Hoare annotation was computed. [2022-07-12 06:21:30,011 INFO L895 garLoopResultBuilder]: At program point L82(line 82) the Hoare annotation is: (let ((.cse21 (not (= |old(~waterLevel~0)| 1))) (.cse11 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= 0 ~systemActive~0)) (.cse14 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse23 (= ~pumpRunning~0 0)) (.cse6 (< |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)) (.cse7 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse25 (and .cse23 .cse6 .cse7 .cse9)) (.cse12 (not (<= 0 |old(~waterLevel~0)|))) (.cse13 (not (<= |old(~waterLevel~0)| 0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse24 (= ~waterLevel~0 1)) (.cse1 (not (< 1 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse15 (not (<= |old(~waterLevel~0)| 1))) (.cse16 (and (or .cse11 .cse3 (not (<= 2 |old(~waterLevel~0)|)) (= |old(~switchedOnBeforeTS~0)| 0)) (or .cse21 .cse11 .cse3 .cse14))) (.cse22 (not (<= 1 ~methaneLevelCritical~0))) (.cse17 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse8 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse18 (<= ~waterLevel~0 0)) (.cse19 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse10 (<= 1 ~switchedOnBeforeTS~0)) (.cse20 (<= 0 ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (and .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) .cse11 .cse12 .cse2 .cse3 .cse13 .cse14) (or .cse15 .cse16 (and .cse5 .cse17 .cse8 .cse18 .cse19 .cse10 .cse20) .cse2) (or .cse0 .cse21 .cse22 (and .cse23 .cse6 .cse7 .cse24) .cse3) (or .cse0 .cse1 .cse22 .cse3 .cse4) (or .cse11 .cse1 .cse22 .cse3 .cse4 (and .cse17 .cse23 .cse8 .cse19 .cse24 .cse10)) (or .cse0 .cse25 .cse12 .cse22 .cse3 .cse13) (or .cse15 .cse0 .cse25 .cse12 .cse2 .cse3) (or .cse11 .cse12 .cse22 .cse3 .cse13 (and .cse23 .cse6 .cse7 .cse8 .cse9 .cse10) .cse14) (or (and .cse5 .cse17 .cse8 .cse19 .cse24 .cse10) .cse11 .cse1 .cse2 .cse3 .cse4) (or .cse15 .cse16 .cse22 (and .cse17 .cse23 .cse8 .cse18 .cse19 .cse10 .cse20))))) [2022-07-12 06:21:30,012 INFO L899 garLoopResultBuilder]: For program point L82-1(line 82) no Hoare annotation was computed. [2022-07-12 06:21:30,012 INFO L895 garLoopResultBuilder]: At program point L652(lines 647 655) the Hoare annotation is: (let ((.cse25 (not (= |old(~waterLevel~0)| 1))) (.cse15 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (= 0 ~systemActive~0)) (.cse23 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse24 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse10 (= ~pumpRunning~0 0)) (.cse21 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse22 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse4 (and .cse10 .cse21 .cse22)) (.cse2 (not (<= 0 |old(~waterLevel~0)|))) (.cse7 (not (<= |old(~waterLevel~0)| 0))) (.cse20 (and .cse10 .cse24 .cse22)) (.cse16 (not (< 1 |old(~waterLevel~0)|))) (.cse17 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse8 (and (or .cse15 .cse5 (not (<= 2 |old(~waterLevel~0)|)) (= |old(~switchedOnBeforeTS~0)| 0)) (or .cse25 .cse15 .cse5 .cse23))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse18 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse11 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse12 (<= ~waterLevel~0 0)) (.cse13 (<= 1 ~switchedOnBeforeTS~0)) (.cse14 (<= 0 ~waterLevel~0)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse19 (= ~waterLevel~0 1)) (.cse6 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse2 .cse6 .cse4 .cse5 .cse7) (or .cse0 .cse8 .cse6 (and .cse9 .cse10 .cse11 .cse12 .cse13 .cse14)) (or .cse15 .cse16 .cse6 (and .cse9 .cse10 .cse11 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0) .cse13) .cse5 .cse17) (or .cse15 .cse16 .cse3 .cse5 .cse17 (and .cse18 .cse9 .cse11 .cse19 .cse13)) (or .cse20 .cse1 .cse16 .cse6 .cse5 .cse17) (or .cse15 .cse2 .cse6 .cse5 (and .cse10 .cse21 .cse11 .cse22 .cse13) .cse7 .cse23) (or .cse15 .cse2 .cse3 (and .cse18 .cse21 .cse11 .cse22 .cse13) .cse5 .cse7 .cse23) (or .cse20 .cse1 .cse16 .cse3 (and (<= 1 ~pumpRunning~0) .cse24 .cse22) .cse5 .cse17) (or .cse0 .cse8 .cse3 (and .cse18 .cse9 .cse11 .cse12 .cse13 .cse14)) (or .cse1 .cse25 (and .cse10 .cse21 .cse19) .cse6 .cse5)))) [2022-07-12 06:21:30,012 INFO L899 garLoopResultBuilder]: For program point L710(line 710) no Hoare annotation was computed. [2022-07-12 06:21:30,012 INFO L895 garLoopResultBuilder]: At program point L801(line 801) the Hoare annotation is: (let ((.cse10 (= ~pumpRunning~0 0))) (let ((.cse1 (and .cse10 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse11 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (not (< 1 |old(~waterLevel~0)|))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse6 .cse7 .cse3 (not (<= |old(~waterLevel~0)| 0))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse6 .cse2 .cse3) (or .cse8 .cse9 .cse2 .cse3 .cse4) (or .cse0 .cse7 .cse3 .cse4 (and .cse10 (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse5) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse7 (and .cse10 (= ~waterLevel~0 1)) .cse3) (or .cse8 .cse6 .cse7 .cse3 .cse4 .cse11) (or .cse8 .cse6 .cse2 .cse3 .cse4 .cse11) (or .cse8 .cse9 .cse7 .cse3 .cse4)))) [2022-07-12 06:21:30,012 INFO L895 garLoopResultBuilder]: At program point L801-1(lines 782 806) the Hoare annotation is: (let ((.cse20 (= ~pumpRunning~0 0)) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse18 (not (<= 2 |old(~waterLevel~0)|))) (.cse19 (not (= |old(~waterLevel~0)| 1))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse21 (= ~waterLevel~0 1)) (.cse22 (not (< 1 |old(~waterLevel~0)|))) (.cse6 (not (<= |old(~waterLevel~0)| 1))) (.cse14 (and (or .cse8 .cse4 .cse18 (= |old(~switchedOnBeforeTS~0)| 0)) (or .cse19 .cse8 .cse4 .cse9))) (.cse15 (<= ~waterLevel~0 0)) (.cse16 (<= 0 ~waterLevel~0)) (.cse2 (not (<= 0 |old(~waterLevel~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse11 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse13 (<= 1 ~switchedOnBeforeTS~0)) (.cse5 (not (<= |old(~waterLevel~0)| 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse20 .cse12)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse17 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse0 .cse1 .cse2 .cse7 .cse4) (or .cse8 .cse2 .cse7 .cse4 .cse5 .cse9 (and .cse10 .cse11 .cse12 .cse13)) (or .cse6 .cse14 .cse7 (and .cse10 .cse11 .cse15 .cse13 .cse16)) (or .cse8 .cse7 .cse4 .cse17 (and .cse10 .cse11 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0) .cse13) .cse18) (or .cse0 .cse19 .cse3 (and .cse20 .cse21) .cse4) (or .cse8 .cse22 .cse3 .cse4 .cse17 (and .cse20 .cse11 .cse21 .cse13)) (or .cse0 .cse1 .cse22 .cse3 .cse4 .cse17) (or .cse6 .cse14 .cse3 (and .cse20 .cse11 .cse15 .cse13 .cse16)) (or .cse8 .cse2 .cse3 (and .cse20 .cse11 .cse12 .cse13) .cse4 .cse5 .cse9) (or .cse0 .cse1 .cse7 (and (<= 1 ~pumpRunning~0) .cse12) .cse4 .cse17 .cse18)))) [2022-07-12 06:21:30,013 INFO L899 garLoopResultBuilder]: For program point L735-1(lines 735 741) no Hoare annotation was computed. [2022-07-12 06:21:30,013 INFO L899 garLoopResultBuilder]: For program point L583(lines 583 587) no Hoare annotation was computed. [2022-07-12 06:21:30,013 INFO L895 garLoopResultBuilder]: At program point L711(lines 706 713) the Hoare annotation is: (let ((.cse8 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (< 1 |old(~waterLevel~0)|))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (not (<= |old(~waterLevel~0)| 1))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse6 .cse7 .cse3 .cse4 .cse8) (or .cse5 .cse6 .cse7 .cse3 (not (<= |old(~waterLevel~0)| 0))) (or .cse0 .cse6 .cse2 .cse3 .cse4 .cse8) (or .cse5 .cse1 .cse7 .cse3 .cse4) (or .cse9 .cse5 (not (<= 1 |old(~waterLevel~0)|)) .cse7 .cse3) (or .cse0 .cse1 .cse7 .cse3 .cse4) (or .cse9 .cse5 .cse6 .cse2 .cse3))) [2022-07-12 06:21:30,013 INFO L895 garLoopResultBuilder]: At program point L583-2(lines 579 590) the Hoare annotation is: (let ((.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= 0 ~systemActive~0)) (.cse14 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse15 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse16 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse10 (and .cse15 (= ~waterLevel~0 1) .cse16)) (.cse1 (not (< 1 |old(~waterLevel~0)|))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse13 (and .cse15 (= |old(~waterLevel~0)| ~waterLevel~0) .cse16)) (.cse12 (not (<= |old(~waterLevel~0)| 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (not (<= 0 |old(~waterLevel~0)|))) (.cse5 (not (<= |old(~waterLevel~0)| 1))) (.cse6 (and (or .cse9 .cse3 (not (<= 2 |old(~waterLevel~0)|)) (= |old(~switchedOnBeforeTS~0)| 0)) (or (not (= |old(~waterLevel~0)| 1)) .cse9 .cse3 .cse14))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse8 (and .cse15 (<= ~waterLevel~0 0) .cse16 (<= 0 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse8) (or .cse9 .cse1 .cse7 .cse10 .cse3 .cse4) (or .cse0 .cse11 .cse7 .cse3 .cse12) (or .cse9 .cse1 .cse2 .cse10 .cse3 .cse4) (or .cse0 .cse1 .cse7 .cse3 .cse4) (or .cse13 .cse9 .cse11 .cse7 .cse3 .cse12 .cse14) (or .cse13 .cse9 .cse11 .cse2 .cse3 .cse12 .cse14) (or .cse5 .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse7 .cse3) (or .cse5 .cse0 .cse11 .cse2 .cse3) (or .cse5 .cse6 .cse2 .cse8)))) [2022-07-12 06:21:30,013 INFO L895 garLoopResultBuilder]: At program point L67(line 67) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0)) (.cse9 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (<= 0 |old(~waterLevel~0)|))) (.cse11 (and .cse8 .cse9 .cse13)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse12 (not (< 1 |old(~waterLevel~0)|))) (.cse10 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse9 .cse13))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse7 .cse2 (and .cse8 .cse9 (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse10 .cse3 .cse4 .cse5 .cse6) (or .cse11 .cse7 .cse1 .cse2 .cse3 (not (<= |old(~waterLevel~0)| 0))) (or .cse0 .cse12 .cse2 .cse3 .cse4 .cse5) (or (and .cse8 .cse9 (= ~waterLevel~0 1)) .cse7 (not (= |old(~waterLevel~0)| 1)) .cse2 .cse3) (or .cse11 (not (<= |old(~waterLevel~0)| 1)) .cse7 .cse1 .cse10 .cse3) (or .cse11 .cse7 .cse12 .cse10 .cse3 .cse4) (or .cse0 .cse12 .cse10 .cse3 .cse4 .cse5)))) [2022-07-12 06:21:30,013 INFO L899 garLoopResultBuilder]: For program point L67-1(line 67) no Hoare annotation was computed. [2022-07-12 06:21:30,013 INFO L899 garLoopResultBuilder]: For program point L728(lines 728 734) no Hoare annotation was computed. [2022-07-12 06:21:30,014 INFO L899 garLoopResultBuilder]: For program point L728-2(lines 724 746) no Hoare annotation was computed. [2022-07-12 06:21:30,014 INFO L899 garLoopResultBuilder]: For program point L790(lines 790 798) no Hoare annotation was computed. [2022-07-12 06:21:30,014 INFO L899 garLoopResultBuilder]: For program point L84(lines 84 94) no Hoare annotation was computed. [2022-07-12 06:21:30,014 INFO L899 garLoopResultBuilder]: For program point L786(lines 786 803) no Hoare annotation was computed. [2022-07-12 06:21:30,014 INFO L899 garLoopResultBuilder]: For program point L80(lines 80 97) no Hoare annotation was computed. [2022-07-12 06:21:30,014 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 721 747) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0)) (.cse9 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (<= 0 |old(~waterLevel~0)|))) (.cse11 (and .cse8 .cse9 .cse13)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse12 (not (< 1 |old(~waterLevel~0)|))) (.cse10 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse9 .cse13))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse7 .cse2 (and .cse8 .cse9 (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse10 .cse3 .cse4 .cse5 .cse6) (or .cse11 .cse7 .cse1 .cse2 .cse3 (not (<= |old(~waterLevel~0)| 0))) (or .cse0 .cse12 .cse2 .cse3 .cse4 .cse5) (or (and .cse8 .cse9 (= ~waterLevel~0 1)) .cse7 (not (= |old(~waterLevel~0)| 1)) .cse2 .cse3) (or .cse11 (not (<= |old(~waterLevel~0)| 1)) .cse7 .cse1 .cse10 .cse3) (or .cse11 .cse7 .cse12 .cse10 .cse3 .cse4) (or .cse0 .cse12 .cse10 .cse3 .cse4 .cse5)))) [2022-07-12 06:21:30,014 INFO L895 garLoopResultBuilder]: At program point L80-1(lines 72 100) the Hoare annotation is: (let ((.cse11 (= 0 ~systemActive~0))) (let ((.cse19 (< |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)) (.cse20 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse14 (<= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|)) (.cse28 (= ~methaneLevelCritical~0 0)) (.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= ~pumpRunning~0 0)) (.cse25 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse21 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse10 (not .cse11)) (.cse26 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2))) (let ((.cse15 (<= ~waterLevel~0 0)) (.cse16 (<= 0 ~waterLevel~0)) (.cse1 (not (< 1 |old(~waterLevel~0)|))) (.cse3 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse7 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse8 (= ~waterLevel~0 1)) (.cse24 (and .cse13 .cse5 .cse25 (<= 2 ~waterLevel~0) .cse21 .cse10 .cse26)) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse12 (not (<= |old(~waterLevel~0)| 2))) (.cse23 (not (<= |old(~waterLevel~0)| 0))) (.cse18 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse22 (not (<= 0 |old(~waterLevel~0)|))) (.cse17 (not .cse28)) (.cse27 (not (<= |old(~waterLevel~0)| 1))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse30 (and .cse13 .cse5 .cse19 .cse20 .cse14 .cse21 .cse10)) (.cse29 (not (<= 1 |old(~waterLevel~0)|))) (.cse2 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) .cse11 .cse12) (or (and .cse13 .cse3 .cse4 .cse6 .cse14 .cse15 .cse7 .cse9 .cse10 .cse16) (not (= |old(~waterLevel~0)| 1)) .cse0 .cse17 .cse11 .cse18) (or (and .cse13 .cse4 .cse19 .cse20 .cse6 .cse14 .cse21 .cse9 .cse10) .cse0 .cse22 .cse17 .cse11 .cse23 .cse18) (or .cse4 .cse1 .cse24 .cse17 (and (<= 1 ~pumpRunning~0) .cse25 .cse21 .cse26) .cse11 .cse12) (or .cse27 .cse28 .cse0 .cse29 (and .cse3 .cse4 .cse5 .cse6 .cse15 .cse7 .cse9 .cse10 .cse16) .cse2 .cse11 .cse12 .cse18) (or .cse0 .cse1 (and .cse13 .cse3 .cse4 .cse6 .cse14 .cse7 .cse8 .cse9 .cse10) .cse17 .cse11 .cse12) (or .cse4 .cse22 .cse30 .cse2 .cse11 .cse23) (or .cse4 .cse24 .cse2 .cse11 .cse12 (not (<= 2 |old(~waterLevel~0)|))) (or .cse28 .cse0 .cse22 (and .cse4 .cse5 .cse19 .cse20 .cse6 .cse21 .cse9 .cse10) .cse2 .cse11 .cse12 .cse23 .cse18) (or .cse27 .cse4 .cse22 .cse30 .cse17 .cse11) (or .cse27 .cse4 .cse30 .cse29 .cse2 .cse11))))) [2022-07-12 06:21:30,015 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 721 747) no Hoare annotation was computed. [2022-07-12 06:21:30,015 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 710) no Hoare annotation was computed. [2022-07-12 06:21:30,015 INFO L902 garLoopResultBuilder]: At program point L129(lines 104 133) the Hoare annotation is: true [2022-07-12 06:21:30,015 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 104 133) no Hoare annotation was computed. [2022-07-12 06:21:30,015 INFO L899 garLoopResultBuilder]: For program point L125(line 125) no Hoare annotation was computed. [2022-07-12 06:21:30,015 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 104 133) the Hoare annotation is: true [2022-07-12 06:21:30,015 INFO L899 garLoopResultBuilder]: For program point L118(lines 118 122) no Hoare annotation was computed. [2022-07-12 06:21:30,015 INFO L902 garLoopResultBuilder]: At program point L118-1(lines 118 122) the Hoare annotation is: true [2022-07-12 06:21:30,015 INFO L899 garLoopResultBuilder]: For program point L115(line 115) no Hoare annotation was computed. [2022-07-12 06:21:30,016 INFO L902 garLoopResultBuilder]: At program point L114-2(lines 114 128) the Hoare annotation is: true [2022-07-12 06:21:30,019 INFO L902 garLoopResultBuilder]: At program point L110(line 110) the Hoare annotation is: true [2022-07-12 06:21:30,020 INFO L899 garLoopResultBuilder]: For program point L110-1(line 110) no Hoare annotation was computed. [2022-07-12 06:21:30,020 INFO L895 garLoopResultBuilder]: At program point L956(line 956) the Hoare annotation is: (let ((.cse6 (<= 0 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse10 (< 1 ~waterLevel~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse9 (<= ~waterLevel~0 2)) (.cse4 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 1) .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse3 .cse9 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5 .cse6) (and .cse0 .cse8 .cse2 .cse3 (<= ~waterLevel~0 0) .cse4 .cse5 .cse6) (and .cse0 .cse8 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse5) (and .cse0 .cse8 .cse2 .cse10 .cse3 .cse9 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse10 .cse3 .cse9 .cse4 .cse5) (and .cse7 .cse8 .cse2 .cse10 .cse3 .cse9 .cse4 .cse5))) [2022-07-12 06:21:30,020 INFO L902 garLoopResultBuilder]: At program point L985(lines 924 989) the Hoare annotation is: true [2022-07-12 06:21:30,020 INFO L899 garLoopResultBuilder]: For program point L944(lines 944 950) no Hoare annotation was computed. [2022-07-12 06:21:30,020 INFO L899 garLoopResultBuilder]: For program point L944-1(lines 944 950) no Hoare annotation was computed. [2022-07-12 06:21:30,020 INFO L899 garLoopResultBuilder]: For program point L936(lines 936 940) no Hoare annotation was computed. [2022-07-12 06:21:30,020 INFO L899 garLoopResultBuilder]: For program point L193(lines 193 200) no Hoare annotation was computed. [2022-07-12 06:21:30,021 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-12 06:21:30,021 INFO L899 garLoopResultBuilder]: For program point L193-2(lines 193 200) no Hoare annotation was computed. [2022-07-12 06:21:30,021 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-12 06:21:30,021 INFO L895 garLoopResultBuilder]: At program point L701(lines 696 704) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-12 06:21:30,021 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-12 06:21:30,021 INFO L895 garLoopResultBuilder]: At program point L920(lines 915 922) the Hoare annotation is: (let ((.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse11 (<= 2 ~waterLevel~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse12 (< 1 ~waterLevel~0)) (.cse4 (<= ~waterLevel~0 2)) (.cse10 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse7 (not (= 0 ~systemActive~0))) (.cse8 (<= 0 ~waterLevel~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse9 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse10 .cse1 .cse2 .cse3 .cse5 (= ~waterLevel~0 1) .cse7) (and .cse10 .cse9 .cse2 (<= ~waterLevel~0 1) .cse3 .cse5 .cse7 .cse8) (and .cse0 .cse1 .cse2 .cse11 .cse3 .cse4 .cse5 .cse7) (and .cse10 .cse1 .cse2 .cse12 .cse3 .cse4 .cse5 .cse7) (and .cse10 .cse9 .cse2 .cse11 .cse3 .cse4 .cse5 .cse7) (and .cse0 .cse9 .cse2 .cse12 .cse3 .cse4 .cse5 .cse7) (and .cse10 .cse1 .cse2 .cse3 (<= ~waterLevel~0 0) .cse5 .cse7 .cse8))) [2022-07-12 06:21:30,021 INFO L895 garLoopResultBuilder]: At program point L982(lines 933 983) the Hoare annotation is: false [2022-07-12 06:21:30,022 INFO L895 garLoopResultBuilder]: At program point L693(lines 689 695) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-12 06:21:30,022 INFO L902 garLoopResultBuilder]: At program point L177(lines 169 179) the Hoare annotation is: true [2022-07-12 06:21:30,022 INFO L902 garLoopResultBuilder]: At program point L202(lines 183 205) the Hoare annotation is: true [2022-07-12 06:21:30,022 INFO L895 garLoopResultBuilder]: At program point L165(lines 161 167) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~1#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-12 06:21:30,022 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-12 06:21:30,022 INFO L899 garLoopResultBuilder]: For program point L954(lines 954 960) no Hoare annotation was computed. [2022-07-12 06:21:30,022 INFO L899 garLoopResultBuilder]: For program point L954-1(lines 954 960) no Hoare annotation was computed. [2022-07-12 06:21:30,022 INFO L895 garLoopResultBuilder]: At program point L979(lines 934 981) the Hoare annotation is: (let ((.cse3 (<= 2 ~waterLevel~0)) (.cse5 (<= ~waterLevel~0 2)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse10 (<= ~waterLevel~0 0)) (.cse12 (<= 0 ~waterLevel~0)) (.cse8 (<= 1 ~pumpRunning~0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse13 (<= ~waterLevel~0 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse14 (<= 1 ~waterLevel~0)) (.cse6 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse11 (<= 1 ~switchedOnBeforeTS~0)) (.cse7 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse8 .cse9 .cse2 .cse4 .cse10 .cse6 .cse11 .cse7 .cse12) (and .cse0 .cse9 .cse2 .cse4 .cse10 .cse6 .cse7 .cse12) (and .cse8 .cse9 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse9 .cse2 .cse4 .cse6 (= ~waterLevel~0 1) .cse7) (and .cse0 .cse1 .cse2 .cse13 .cse4 .cse14 .cse6 .cse7) (and .cse0 .cse9 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse1 .cse2 .cse4 .cse10 .cse6 .cse7 .cse12) (and .cse8 .cse9 .cse2 .cse13 .cse4 .cse14 .cse6 .cse11 .cse7))) [2022-07-12 06:21:30,023 INFO L895 garLoopResultBuilder]: At program point L946(line 946) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse12 (<= ~waterLevel~0 0)) (.cse7 (<= 0 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse8 (<= 2 ~waterLevel~0)) (.cse9 (<= ~waterLevel~0 2)) (.cse10 (<= 1 ~pumpRunning~0)) (.cse11 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (<= ~waterLevel~0 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse13 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse1 .cse2 .cse8 .cse4 .cse9 .cse5 .cse6) (and .cse10 .cse11 .cse2 .cse4 .cse12 .cse5 .cse13 .cse6 .cse7) (and .cse0 .cse11 .cse2 .cse4 .cse12 .cse5 .cse6 .cse7) (and .cse10 .cse11 .cse2 .cse8 .cse4 .cse9 .cse5 .cse6) (and .cse0 .cse11 .cse2 .cse4 .cse5 (= ~waterLevel~0 1) .cse6) (and .cse0 .cse11 .cse2 .cse8 .cse4 .cse9 .cse5 .cse6) (and .cse10 .cse11 .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0) .cse5 .cse13 .cse6))) [2022-07-12 06:21:30,023 INFO L895 garLoopResultBuilder]: At program point L686(lines 682 688) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-12 06:21:30,023 INFO L895 garLoopResultBuilder]: At program point L59(lines 54 61) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~1#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-12 06:21:30,023 INFO L899 garLoopResultBuilder]: For program point L972(lines 972 976) no Hoare annotation was computed. [2022-07-12 06:21:30,023 INFO L895 garLoopResultBuilder]: At program point L972-2(lines 964 977) the Hoare annotation is: (let ((.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse11 (<= 2 ~waterLevel~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse12 (< 1 ~waterLevel~0)) (.cse4 (<= ~waterLevel~0 2)) (.cse10 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse7 (not (= 0 ~systemActive~0))) (.cse8 (<= 0 ~waterLevel~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse9 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse10 .cse1 .cse2 .cse3 .cse5 (= ~waterLevel~0 1) .cse7) (and .cse10 .cse9 .cse2 (<= ~waterLevel~0 1) .cse3 .cse5 .cse7 .cse8) (and .cse0 .cse1 .cse2 .cse11 .cse3 .cse4 .cse5 .cse7) (and .cse10 .cse1 .cse2 .cse12 .cse3 .cse4 .cse5 .cse7) (and .cse10 .cse9 .cse2 .cse11 .cse3 .cse4 .cse5 .cse7) (and .cse0 .cse9 .cse2 .cse12 .cse3 .cse4 .cse5 .cse7) (and .cse10 .cse1 .cse2 .cse3 (<= ~waterLevel~0 0) .cse5 .cse7 .cse8))) [2022-07-12 06:21:30,023 INFO L899 garLoopResultBuilder]: For program point L935(lines 934 981) no Hoare annotation was computed. [2022-07-12 06:21:30,023 INFO L899 garLoopResultBuilder]: For program point L964(lines 964 977) no Hoare annotation was computed. [2022-07-12 06:21:30,023 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 591 602) no Hoare annotation was computed. [2022-07-12 06:21:30,024 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 591 602) the Hoare annotation is: (let ((.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse10 (not (<= 0 |old(~waterLevel~0)|))) (.cse9 (not (<= 1 ~pumpRunning~0))) (.cse12 (not (<= |old(~waterLevel~0)| 0))) (.cse11 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (= ~pumpRunning~0 0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (= 0 ~systemActive~0)) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse6 .cse4 .cse5 .cse7 .cse8) (or .cse3 .cse9 .cse4 .cse5 .cse7 .cse8) (or .cse0 .cse1 .cse10 .cse6 .cse4 .cse5) (or .cse0 .cse2 .cse3 .cse9 .cse4 .cse5 .cse11) (or .cse1 .cse10 .cse3 .cse4 .cse5 .cse12) (or .cse10 .cse3 .cse9 .cse4 .cse5 .cse12 .cse11) (or .cse1 .cse3 .cse4 .cse5 .cse7 .cse8))) [2022-07-12 06:21:30,025 INFO L899 garLoopResultBuilder]: For program point L595-1(lines 591 602) no Hoare annotation was computed. [2022-07-12 06:21:30,025 INFO L899 garLoopResultBuilder]: For program point L764(lines 764 772) no Hoare annotation was computed. [2022-07-12 06:21:30,025 INFO L895 garLoopResultBuilder]: At program point L665(lines 656 669) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0))) (let ((.cse3 (not (<= ~waterLevel~0 2))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (<= 1 ~waterLevel~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (<= ~waterLevel~0 0))) (.cse8 (and .cse1 (not (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0)))) (.cse10 (not (<= 0 ~waterLevel~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= ~waterLevel~0 1))) (.cse4 (= 0 ~systemActive~0))) (and (or (not (< 1 ~waterLevel~0)) .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse5 .cse3 .cse4) (or .cse0 .cse6 .cse2 .cse7 .cse4 .cse8) (or .cse0 .cse9 .cse10 .cse2 .cse4 .cse8) (or .cse0 .cse6 .cse5 .cse7 .cse4 .cse8) (or .cse0 .cse9 .cse10 .cse5 .cse4 .cse8) (or .cse10 (not (<= 1 |old(~pumpRunning~0)|)) .cse5 .cse7 .cse4 (not (<= 1 ~switchedOnBeforeTS~0)))))) [2022-07-12 06:21:30,025 INFO L899 garLoopResultBuilder]: For program point L760(lines 760 777) no Hoare annotation was computed. [2022-07-12 06:21:30,025 INFO L899 garLoopResultBuilder]: For program point L822(lines 822 828) no Hoare annotation was computed. [2022-07-12 06:21:30,025 INFO L895 garLoopResultBuilder]: At program point L820(line 820) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse3 (not (<= ~waterLevel~0 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (<= 0 ~waterLevel~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= ~waterLevel~0 1))) (.cse4 (= 0 ~systemActive~0))) (and (or (not (< 1 ~waterLevel~0)) .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse5 .cse3 .cse4) (or .cse0 .cse6 .cse5 .cse7 .cse4) (or .cse0 .cse6 .cse2 .cse7 .cse4) (or .cse6 (not (<= 1 |old(~pumpRunning~0)|)) .cse5 .cse7 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-07-12 06:21:30,025 INFO L895 garLoopResultBuilder]: At program point L822-2(lines 815 831) the Hoare annotation is: (let ((.cse0 (not (< 1 ~waterLevel~0))) (.cse3 (not (<= ~waterLevel~0 2))) (.cse4 (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~7#1| ~methaneLevelCritical~0)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (<= 0 ~waterLevel~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (<= ~waterLevel~0 1))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 (and (= ~pumpRunning~0 0) .cse4) .cse5) (or .cse0 .cse1 .cse6 .cse3 (and (<= 1 ~pumpRunning~0) .cse4) .cse5) (or .cse1 .cse7 .cse6 .cse8 .cse5) (or .cse1 .cse7 .cse2 .cse8 .cse5) (or .cse7 (not (<= 1 |old(~pumpRunning~0)|)) .cse6 .cse8 .cse5 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-07-12 06:21:30,026 INFO L899 garLoopResultBuilder]: For program point L820-1(line 820) no Hoare annotation was computed. [2022-07-12 06:21:30,026 INFO L895 garLoopResultBuilder]: At program point L911(lines 896 914) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse4 (= 0 ~systemActive~0))) (let ((.cse5 (and (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (not (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~8#1| 0)) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0) (not .cse4))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (<= 0 ~waterLevel~0))) (.cse8 (not (<= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2 .cse3 .cse4) (or .cse0 .cse5 (not (<= ~waterLevel~0 0)) .cse6 .cse2 .cse4) (or .cse0 .cse5 .cse6 .cse7 .cse8 .cse4) (or .cse0 .cse5 (not (<= 1 ~waterLevel~0)) .cse2 .cse8 .cse4) (or .cse6 (not (<= 1 |old(~pumpRunning~0)|)) .cse7 .cse8 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (< 1 ~waterLevel~0)) .cse0 .cse1 .cse7 .cse3 .cse4)))) [2022-07-12 06:21:30,026 INFO L895 garLoopResultBuilder]: At program point L812(lines 807 814) the Hoare annotation is: (let ((.cse0 (not (< 1 ~waterLevel~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (<= ~waterLevel~0 2))) (.cse5 (not (<= 0 ~waterLevel~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (<= ~waterLevel~0 1))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 (and (<= 1 ~pumpRunning~0) (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~7#1| ~methaneLevelCritical~0)) .cse4) (or .cse1 .cse5 .cse2 .cse6 .cse4) (or .cse1 .cse5 .cse7 .cse6 .cse4) (or .cse0 .cse1 .cse7 .cse3 .cse4) (or .cse5 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse6 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-07-12 06:21:30,026 INFO L899 garLoopResultBuilder]: For program point L905(lines 905 909) no Hoare annotation was computed. [2022-07-12 06:21:30,026 INFO L899 garLoopResultBuilder]: For program point L905-2(lines 905 909) no Hoare annotation was computed. [2022-07-12 06:21:30,026 INFO L895 garLoopResultBuilder]: At program point L775(line 775) the Hoare annotation is: (let ((.cse3 (not (<= ~waterLevel~0 1))) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 0 ~waterLevel~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse9 (not (< 1 ~waterLevel~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (not (<= ~waterLevel~0 2))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse3 .cse4) (or .cse6 .cse7 (not (<= 1 ~waterLevel~0)) .cse2 .cse3 .cse4 .cse8) (or .cse9 .cse0 .cse2 .cse10 .cse4) (or .cse6 (not (<= ~waterLevel~0 0)) .cse1 .cse7 .cse2 .cse4 .cse8) (or .cse9 .cse0 .cse5 .cse10 .cse4))) [2022-07-12 06:21:30,028 INFO L899 garLoopResultBuilder]: For program point L775-1(lines 756 780) no Hoare annotation was computed. [2022-07-12 06:21:30,028 INFO L899 garLoopResultBuilder]: For program point L660(lines 660 666) no Hoare annotation was computed. [2022-07-12 06:21:30,028 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 756 780) the Hoare annotation is: (let ((.cse2 (not (<= 2 ~waterLevel~0))) (.cse4 (not (<= ~waterLevel~0 2))) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse12 (not (<= ~waterLevel~0 0))) (.cse13 (not (<= 0 ~waterLevel~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse9 (not (<= 1 ~waterLevel~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (not (<= ~waterLevel~0 1))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (or .cse7 .cse8 .cse9 .cse6 .cse10 .cse5 .cse11) (or .cse0 .cse1 .cse12 .cse13 .cse3 .cse5) (or .cse7 .cse12 .cse13 .cse8 .cse6 .cse5 .cse11) (or .cse0 .cse1 .cse12 .cse13 .cse6 .cse5) (or .cse0 .cse1 .cse9 .cse6 .cse10 .cse5) (or .cse0 .cse1 .cse9 .cse3 .cse10 .cse5))) [2022-07-12 06:21:30,028 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 756 780) no Hoare annotation was computed. [2022-07-12 06:21:30,028 INFO L895 garLoopResultBuilder]: At program point L770(line 770) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0))) (let ((.cse1 (not (<= ~waterLevel~0 0))) (.cse6 (not (<= 1 ~waterLevel~0))) (.cse2 (not (<= 0 ~waterLevel~0))) (.cse7 (not (<= ~waterLevel~0 1))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (< 1 ~waterLevel~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse10 (not (<= ~waterLevel~0 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__methaneQuery_~tmp~5#1| 0) (not .cse4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse6 .cse3 .cse7 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse8 .cse4 .cse5) (or .cse0 .cse6 .cse8 .cse7 .cse4 .cse5) (or .cse2 (not (<= 1 |old(~pumpRunning~0)|)) .cse3 .cse7 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse9 .cse0 .cse8 .cse10 .cse4 .cse5) (or .cse9 .cse0 .cse3 .cse10 .cse4 .cse5)))) [2022-07-12 06:21:30,029 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 851 859) no Hoare annotation was computed. [2022-07-12 06:21:30,029 INFO L902 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 851 859) the Hoare annotation is: true [2022-07-12 06:21:30,029 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 851 859) no Hoare annotation was computed. [2022-07-12 06:21:30,029 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 840 850) the Hoare annotation is: true [2022-07-12 06:21:30,030 INFO L895 garLoopResultBuilder]: At program point L620(lines 615 623) the Hoare annotation is: (let ((.cse7 (not (<= 1 ~waterLevel~0))) (.cse9 (not (<= ~waterLevel~0 1))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (<= ~waterLevel~0 0))) (.cse1 (not (<= 0 ~waterLevel~0))) (.cse3 (not (<= 1 ~pumpRunning~0))) (.cse6 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse10 (not (= ~pumpRunning~0 0))) (.cse11 (not (<= 2 ~waterLevel~0))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse12 (not (<= ~waterLevel~0 2))) (.cse4 (= 0 ~systemActive~0)) (.cse5 (= |isMethaneAlarm_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse7 .cse8 .cse3 .cse9 .cse4 .cse5 .cse6) (or .cse7 .cse2 .cse3 .cse9 .cse4 .cse5 .cse6) (or .cse10 .cse11 .cse2 .cse12 .cse4 .cse5) (or .cse0 .cse1 .cse8 .cse3 .cse4 .cse5 .cse6) (or .cse10 .cse11 .cse8 .cse12 .cse4 .cse5))) [2022-07-12 06:21:30,030 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 840 850) no Hoare annotation was computed. [2022-07-12 06:21:30,030 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 840 850) no Hoare annotation was computed. [2022-07-12 06:21:30,033 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:21:30,035 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-12 06:21:30,156 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 12.07 06:21:30 BoogieIcfgContainer [2022-07-12 06:21:30,158 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-12 06:21:30,159 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-12 06:21:30,159 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-12 06:21:30,159 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-12 06:21:30,160 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 06:20:56" (3/4) ... [2022-07-12 06:21:30,162 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-12 06:21:30,166 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-12 06:21:30,179 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-12 06:21:30,179 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-12 06:21:30,179 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-12 06:21:30,180 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-12 06:21:30,180 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-07-12 06:21:30,180 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-07-12 06:21:30,180 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-07-12 06:21:30,189 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 51 nodes and edges [2022-07-12 06:21:30,189 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-12 06:21:30,190 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-12 06:21:30,190 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-12 06:21:30,190 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-12 06:21:30,191 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-12 06:21:30,191 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-12 06:21:30,217 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-12 06:21:30,217 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-12 06:21:30,231 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-12 06:21:30,231 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive)) || ((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel)) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && waterLevel == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && waterLevel <= 1) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && waterLevel <= 1) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) [2022-07-12 06:21:30,233 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2022-07-12 06:21:30,233 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) [2022-07-12 06:21:30,233 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel) || ((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && waterLevel == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel <= 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel)) || (((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && 1 < waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && 1 < waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel) [2022-07-12 06:21:30,234 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && tmp == methaneLevelCritical) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((((((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && tmp == methaneLevelCritical) && pumpRunning <= tmp___0) && waterLevel <= 0) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel) || !(\old(waterLevel) == 1)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && tmp < 2) && \result < 2) && tmp == methaneLevelCritical) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) && tmp == 2)) || !(methaneLevelCritical == 0)) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || ((((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel <= 0) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || ((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && tmp == methaneLevelCritical) && pumpRunning <= tmp___0) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp < 2) && \result < 2) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(\old(pumpRunning) == 0) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) && tmp == 2)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((methaneLevelCritical == 0 || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && tmp < 2) && \result < 2) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp < 2) && \result < 2) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp < 2) && \result < 2) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) [2022-07-12 06:21:30,234 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS))) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-07-12 06:21:30,235 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-12 06:21:30,235 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \result < 2) && \old(waterLevel) == waterLevel)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result < 2) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(1 <= methaneLevelCritical)) || (((((\result <= waterLevel && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((\result <= waterLevel && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((((pumpRunning == 0 && \result < 2) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && \result < 2) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((pumpRunning == 0 && \result < 2) && waterLevel == 1)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) [2022-07-12 06:21:30,235 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-12 06:21:30,235 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(waterLevel <= 0) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS)) && ((((((!(1 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && ((((((!(1 <= waterLevel) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(pumpRunning == 0) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive) || \result == methaneLevelCritical)) && ((((((!(waterLevel <= 0) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(pumpRunning == 0) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) || \result == methaneLevelCritical) [2022-07-12 06:21:30,236 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2022-07-12 06:21:30,236 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || (pumpRunning == 0 && tmp == methaneLevelCritical)) || 0 == systemActive) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && tmp == methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2022-07-12 06:21:30,236 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && tmp == methaneLevelCritical)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2022-07-12 06:21:30,236 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && !(tmp == 0)) && \result == 0) && !(0 == systemActive))) || !(waterLevel <= 0)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && !(tmp == 0)) && \result == 0) && !(0 == systemActive))) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && !(tmp == 0)) && \result == 0) && !(0 == systemActive))) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS))) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive) [2022-07-12 06:21:30,261 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-12 06:21:30,265 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-12 06:21:30,265 INFO L158 Benchmark]: Toolchain (without parser) took 34624.30ms. Allocated memory was 88.1MB in the beginning and 371.2MB in the end (delta: 283.1MB). Free memory was 62.6MB in the beginning and 198.5MB in the end (delta: -136.0MB). Peak memory consumption was 146.6MB. Max. memory is 16.1GB. [2022-07-12 06:21:30,266 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 88.1MB. Free memory was 61.0MB in the beginning and 61.0MB in the end (delta: 45.5kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-12 06:21:30,266 INFO L158 Benchmark]: CACSL2BoogieTranslator took 545.72ms. Allocated memory is still 88.1MB. Free memory was 62.4MB in the beginning and 53.2MB in the end (delta: 9.2MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-07-12 06:21:30,266 INFO L158 Benchmark]: Boogie Procedure Inliner took 68.40ms. Allocated memory is still 88.1MB. Free memory was 53.2MB in the beginning and 50.7MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-12 06:21:30,267 INFO L158 Benchmark]: Boogie Preprocessor took 29.81ms. Allocated memory is still 88.1MB. Free memory was 50.7MB in the beginning and 49.1MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-12 06:21:30,267 INFO L158 Benchmark]: RCFGBuilder took 409.31ms. Allocated memory was 88.1MB in the beginning and 107.0MB in the end (delta: 18.9MB). Free memory was 48.9MB in the beginning and 72.0MB in the end (delta: -23.0MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-07-12 06:21:30,267 INFO L158 Benchmark]: TraceAbstraction took 33460.77ms. Allocated memory was 107.0MB in the beginning and 371.2MB in the end (delta: 264.2MB). Free memory was 71.6MB in the beginning and 204.8MB in the end (delta: -133.2MB). Peak memory consumption was 215.0MB. Max. memory is 16.1GB. [2022-07-12 06:21:30,268 INFO L158 Benchmark]: Witness Printer took 106.30ms. Allocated memory is still 371.2MB. Free memory was 204.8MB in the beginning and 198.5MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-12 06:21:30,271 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 88.1MB. Free memory was 61.0MB in the beginning and 61.0MB in the end (delta: 45.5kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 545.72ms. Allocated memory is still 88.1MB. Free memory was 62.4MB in the beginning and 53.2MB in the end (delta: 9.2MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 68.40ms. Allocated memory is still 88.1MB. Free memory was 53.2MB in the beginning and 50.7MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 29.81ms. Allocated memory is still 88.1MB. Free memory was 50.7MB in the beginning and 49.1MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 409.31ms. Allocated memory was 88.1MB in the beginning and 107.0MB in the end (delta: 18.9MB). Free memory was 48.9MB in the beginning and 72.0MB in the end (delta: -23.0MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * TraceAbstraction took 33460.77ms. Allocated memory was 107.0MB in the beginning and 371.2MB in the end (delta: 264.2MB). Free memory was 71.6MB in the beginning and 204.8MB in the end (delta: -133.2MB). Peak memory consumption was 215.0MB. Max. memory is 16.1GB. * Witness Printer took 106.30ms. Allocated memory is still 371.2MB. Free memory was 204.8MB in the beginning and 198.5MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 710]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 99 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 33.3s, OverallIterations: 14, TraceHistogramMax: 9, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 10.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 12.9s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 7597 SdHoareTripleChecker+Valid, 6.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 7555 mSDsluCounter, 8683 SdHoareTripleChecker+Invalid, 5.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 6530 mSDsCounter, 3205 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 13280 IncrementalHoareTripleChecker+Invalid, 16485 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 3205 mSolverCounterUnsat, 2153 mSDtfsCounter, 13280 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 2659 GetRequests, 2266 SyntacticMatches, 13 SemanticMatches, 380 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5251 ImplicationChecksByTransitivity, 5.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1289occurred in iteration=13, InterpolantAutomatonStates: 291, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 14 MinimizatonAttempts, 556 StatesRemovedByMinimization, 10 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 46 LocationsWithAnnotation, 3046 PreInvPairs, 3396 NumberOfFragments, 7200 HoareAnnotationTreeSize, 3046 FomulaSimplifications, 7088 FormulaSimplificationTreeSizeReduction, 1.7s HoareSimplificationTime, 46 FomulaSimplificationsInter, 69238 FormulaSimplificationTreeSizeReductionInter, 11.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 6.8s InterpolantComputationTime, 2435 NumberOfCodeBlocks, 2435 NumberOfCodeBlocksAsserted, 19 NumberOfCheckSat, 3404 ConstructedInterpolants, 0 QuantifiedInterpolants, 8009 SizeOfPredicates, 13 NumberOfNonLiveVariables, 3688 ConjunctsInSsa, 79 ConjunctsInUnsatCore, 24 InterpolantComputations, 9 PerfectInterpolantSequences, 3220/3738 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 933]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 832]: Loop Invariant Derived loop invariant: ((((((((((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 114]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 815]: Loop Invariant Derived loop invariant: ((((((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || (pumpRunning == 0 && tmp == methaneLevelCritical)) || 0 == systemActive) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && tmp == methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 579]: Loop Invariant Derived loop invariant: (((((((((((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) - InvariantResult [Line: 706]: Loop Invariant Derived loop invariant: (((((((((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 104]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 934]: Loop Invariant Derived loop invariant: ((((((((((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive)) || ((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel)) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && waterLevel == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && waterLevel <= 1) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && waterLevel <= 1) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) - InvariantResult [Line: 183]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: ((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 647]: Loop Invariant Derived loop invariant: ((((((((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \result < 2) && \old(waterLevel) == waterLevel)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result < 2) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(1 <= methaneLevelCritical)) || (((((\result <= waterLevel && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((\result <= waterLevel && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((((pumpRunning == 0 && \result < 2) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && \result < 2) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((pumpRunning == 0 && \result < 2) && waterLevel == 1)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 169]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 689]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 915]: Loop Invariant Derived loop invariant: (((((((((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel) || ((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && waterLevel == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel <= 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel)) || (((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && 1 < waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && 1 < waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel) - InvariantResult [Line: 696]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 72]: Loop Invariant Derived loop invariant: ((((((((((((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && tmp == methaneLevelCritical) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((((((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && tmp == methaneLevelCritical) && pumpRunning <= tmp___0) && waterLevel <= 0) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel) || !(\old(waterLevel) == 1)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && tmp < 2) && \result < 2) && tmp == methaneLevelCritical) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) && tmp == 2)) || !(methaneLevelCritical == 0)) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || ((((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel <= 0) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || ((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && tmp == methaneLevelCritical) && pumpRunning <= tmp___0) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp < 2) && \result < 2) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(\old(pumpRunning) == 0) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) && tmp == 2)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((methaneLevelCritical == 0 || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && tmp < 2) && \result < 2) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp < 2) && \result < 2) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp < 2) && \result < 2) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 807]: Loop Invariant Derived loop invariant: ((((((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && tmp == methaneLevelCritical)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: ((((((((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: ((((((((((!(waterLevel <= 0) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS)) && ((((((!(1 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && ((((((!(1 <= waterLevel) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(pumpRunning == 0) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive) || \result == methaneLevelCritical)) && ((((((!(waterLevel <= 0) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(pumpRunning == 0) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) || \result == methaneLevelCritical) - InvariantResult [Line: 896]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && !(tmp == 0)) && \result == 0) && !(0 == systemActive))) || !(waterLevel <= 0)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && !(tmp == 0)) && \result == 0) && !(0 == systemActive))) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && !(tmp == 0)) && \result == 0) && !(0 == systemActive))) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS))) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive) - InvariantResult [Line: 924]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 682]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 782]: Loop Invariant Derived loop invariant: ((((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS))) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) RESULT: Ultimate proved your program to be correct! [2022-07-12 06:21:30,394 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE