./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version eb692b52 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 68c6d60a43782147acd714b0904a144255717c2aa47fb6b6f8991672a1483369 --- Real Ultimate output --- This is Ultimate 0.2.2-?-eb692b5 [2022-07-19 17:25:54,214 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-19 17:25:54,216 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-19 17:25:54,250 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-19 17:25:54,250 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-19 17:25:54,251 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-19 17:25:54,253 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-19 17:25:54,255 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-19 17:25:54,256 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-19 17:25:54,259 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-19 17:25:54,259 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-19 17:25:54,261 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-19 17:25:54,261 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-19 17:25:54,263 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-19 17:25:54,263 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-19 17:25:54,266 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-19 17:25:54,266 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-19 17:25:54,267 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-19 17:25:54,269 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-19 17:25:54,272 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-19 17:25:54,274 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-19 17:25:54,279 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-19 17:25:54,280 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-19 17:25:54,281 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-19 17:25:54,282 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-19 17:25:54,286 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-19 17:25:54,287 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-19 17:25:54,287 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-19 17:25:54,288 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-19 17:25:54,288 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-19 17:25:54,289 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-19 17:25:54,289 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-19 17:25:54,290 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-19 17:25:54,291 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-19 17:25:54,291 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-19 17:25:54,292 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-19 17:25:54,292 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-19 17:25:54,293 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-19 17:25:54,293 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-19 17:25:54,293 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-19 17:25:54,294 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-19 17:25:54,295 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-19 17:25:54,296 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-19 17:25:54,318 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-19 17:25:54,319 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-19 17:25:54,319 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-19 17:25:54,319 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-19 17:25:54,320 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-19 17:25:54,320 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-19 17:25:54,320 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-19 17:25:54,321 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-19 17:25:54,321 INFO L138 SettingsManager]: * Use SBE=true [2022-07-19 17:25:54,321 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-19 17:25:54,322 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-19 17:25:54,322 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-19 17:25:54,322 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-19 17:25:54,322 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-19 17:25:54,322 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-19 17:25:54,322 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-19 17:25:54,322 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-19 17:25:54,323 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-19 17:25:54,323 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-19 17:25:54,323 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-19 17:25:54,324 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-19 17:25:54,324 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-19 17:25:54,324 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-19 17:25:54,324 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-19 17:25:54,324 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-19 17:25:54,325 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-19 17:25:54,325 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-19 17:25:54,325 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-19 17:25:54,325 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-19 17:25:54,325 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-19 17:25:54,325 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-19 17:25:54,326 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-19 17:25:54,326 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-19 17:25:54,326 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 68c6d60a43782147acd714b0904a144255717c2aa47fb6b6f8991672a1483369 [2022-07-19 17:25:54,535 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-19 17:25:54,553 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-19 17:25:54,555 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-19 17:25:54,556 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-19 17:25:54,565 INFO L275 PluginConnector]: CDTParser initialized [2022-07-19 17:25:54,566 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c [2022-07-19 17:25:54,608 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1217237ba/e0361583f942402d9ffff93bcb81522d/FLAGd40860610 [2022-07-19 17:25:55,065 INFO L306 CDTParser]: Found 1 translation units. [2022-07-19 17:25:55,066 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c [2022-07-19 17:25:55,084 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1217237ba/e0361583f942402d9ffff93bcb81522d/FLAGd40860610 [2022-07-19 17:25:55,594 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1217237ba/e0361583f942402d9ffff93bcb81522d [2022-07-19 17:25:55,596 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-19 17:25:55,597 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-19 17:25:55,598 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-19 17:25:55,598 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-19 17:25:55,601 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-19 17:25:55,601 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.07 05:25:55" (1/1) ... [2022-07-19 17:25:55,602 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7758d823 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:25:55, skipping insertion in model container [2022-07-19 17:25:55,602 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.07 05:25:55" (1/1) ... [2022-07-19 17:25:55,606 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-19 17:25:55,650 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-19 17:25:55,774 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c[1605,1618] [2022-07-19 17:25:55,852 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-19 17:25:55,862 INFO L203 MainTranslator]: Completed pre-run [2022-07-19 17:25:55,876 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c[1605,1618] [2022-07-19 17:25:55,914 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-19 17:25:55,925 INFO L208 MainTranslator]: Completed translation [2022-07-19 17:25:55,927 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:25:55 WrapperNode [2022-07-19 17:25:55,928 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-19 17:25:55,929 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-19 17:25:55,929 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-19 17:25:55,929 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-19 17:25:55,934 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:25:55" (1/1) ... [2022-07-19 17:25:55,946 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:25:55" (1/1) ... [2022-07-19 17:25:55,973 INFO L137 Inliner]: procedures = 56, calls = 157, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 259 [2022-07-19 17:25:55,974 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-19 17:25:55,974 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-19 17:25:55,975 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-19 17:25:55,975 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-19 17:25:55,980 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:25:55" (1/1) ... [2022-07-19 17:25:55,980 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:25:55" (1/1) ... [2022-07-19 17:25:55,985 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:25:55" (1/1) ... [2022-07-19 17:25:55,993 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:25:55" (1/1) ... [2022-07-19 17:25:55,997 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:25:55" (1/1) ... [2022-07-19 17:25:56,012 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:25:55" (1/1) ... [2022-07-19 17:25:56,013 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:25:55" (1/1) ... [2022-07-19 17:25:56,015 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-19 17:25:56,016 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-19 17:25:56,016 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-19 17:25:56,016 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-19 17:25:56,017 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:25:55" (1/1) ... [2022-07-19 17:25:56,027 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-19 17:25:56,036 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:25:56,046 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-19 17:25:56,065 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-19 17:25:56,080 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-19 17:25:56,081 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-19 17:25:56,081 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-19 17:25:56,081 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-19 17:25:56,081 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-19 17:25:56,081 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-19 17:25:56,081 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-19 17:25:56,081 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-19 17:25:56,081 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-19 17:25:56,082 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-19 17:25:56,082 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-19 17:25:56,082 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-07-19 17:25:56,082 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-07-19 17:25:56,082 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-19 17:25:56,082 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-19 17:25:56,082 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-19 17:25:56,082 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-19 17:25:56,083 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-19 17:25:56,149 INFO L234 CfgBuilder]: Building ICFG [2022-07-19 17:25:56,150 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-19 17:25:56,383 INFO L275 CfgBuilder]: Performing block encoding [2022-07-19 17:25:56,387 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-19 17:25:56,387 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-19 17:25:56,389 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.07 05:25:56 BoogieIcfgContainer [2022-07-19 17:25:56,389 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-19 17:25:56,397 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-19 17:25:56,398 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-19 17:25:56,405 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-19 17:25:56,405 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.07 05:25:55" (1/3) ... [2022-07-19 17:25:56,406 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@54b3dc21 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.07 05:25:56, skipping insertion in model container [2022-07-19 17:25:56,406 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:25:55" (2/3) ... [2022-07-19 17:25:56,406 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@54b3dc21 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.07 05:25:56, skipping insertion in model container [2022-07-19 17:25:56,406 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.07 05:25:56" (3/3) ... [2022-07-19 17:25:56,407 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product38.cil.c [2022-07-19 17:25:56,416 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-19 17:25:56,417 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-19 17:25:56,451 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-19 17:25:56,455 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@1b4b2d8c, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@6eed6c9e [2022-07-19 17:25:56,455 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-19 17:25:56,460 INFO L276 IsEmpty]: Start isEmpty. Operand has 91 states, 70 states have (on average 1.3714285714285714) internal successors, (96), 78 states have internal predecessors, (96), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2022-07-19 17:25:56,473 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-07-19 17:25:56,473 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:25:56,474 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:25:56,474 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:25:56,477 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:25:56,478 INFO L85 PathProgramCache]: Analyzing trace with hash 849031785, now seen corresponding path program 1 times [2022-07-19 17:25:56,483 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:25:56,484 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [894070765] [2022-07-19 17:25:56,484 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:25:56,484 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:25:56,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:56,631 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-19 17:25:56,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:56,642 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-19 17:25:56,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:56,654 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-19 17:25:56,654 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:25:56,655 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [894070765] [2022-07-19 17:25:56,655 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [894070765] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:25:56,656 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:25:56,656 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-19 17:25:56,657 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [124485697] [2022-07-19 17:25:56,658 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:25:56,662 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-19 17:25:56,662 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:25:56,685 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-19 17:25:56,686 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-19 17:25:56,691 INFO L87 Difference]: Start difference. First operand has 91 states, 70 states have (on average 1.3714285714285714) internal successors, (96), 78 states have internal predecessors, (96), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-19 17:25:56,718 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:25:56,718 INFO L93 Difference]: Finished difference Result 173 states and 234 transitions. [2022-07-19 17:25:56,719 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-19 17:25:56,720 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-07-19 17:25:56,720 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:25:56,725 INFO L225 Difference]: With dead ends: 173 [2022-07-19 17:25:56,726 INFO L226 Difference]: Without dead ends: 82 [2022-07-19 17:25:56,728 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-19 17:25:56,730 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 114 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-19 17:25:56,731 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 114 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-19 17:25:56,742 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82 states. [2022-07-19 17:25:56,756 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82 to 82. [2022-07-19 17:25:56,758 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82 states, 63 states have (on average 1.3015873015873016) internal successors, (82), 70 states have internal predecessors, (82), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-07-19 17:25:56,762 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 105 transitions. [2022-07-19 17:25:56,763 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 105 transitions. Word has length 32 [2022-07-19 17:25:56,764 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:25:56,764 INFO L495 AbstractCegarLoop]: Abstraction has 82 states and 105 transitions. [2022-07-19 17:25:56,764 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-19 17:25:56,765 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 105 transitions. [2022-07-19 17:25:56,766 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-07-19 17:25:56,766 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:25:56,766 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:25:56,767 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-19 17:25:56,767 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:25:56,767 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:25:56,767 INFO L85 PathProgramCache]: Analyzing trace with hash 79054015, now seen corresponding path program 1 times [2022-07-19 17:25:56,767 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:25:56,768 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [871112163] [2022-07-19 17:25:56,768 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:25:56,768 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:25:56,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:56,825 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-19 17:25:56,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:56,828 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-19 17:25:56,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:56,836 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-19 17:25:56,836 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:25:56,836 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [871112163] [2022-07-19 17:25:56,837 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [871112163] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:25:56,837 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:25:56,839 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-19 17:25:56,839 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1764284553] [2022-07-19 17:25:56,839 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:25:56,840 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-19 17:25:56,844 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:25:56,845 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-19 17:25:56,845 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-19 17:25:56,846 INFO L87 Difference]: Start difference. First operand 82 states and 105 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-19 17:25:56,856 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:25:56,856 INFO L93 Difference]: Finished difference Result 128 states and 164 transitions. [2022-07-19 17:25:56,857 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-19 17:25:56,857 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2022-07-19 17:25:56,857 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:25:56,858 INFO L225 Difference]: With dead ends: 128 [2022-07-19 17:25:56,858 INFO L226 Difference]: Without dead ends: 73 [2022-07-19 17:25:56,859 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-19 17:25:56,860 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 13 mSDsluCounter, 75 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 167 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-19 17:25:56,860 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 167 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-19 17:25:56,861 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73 states. [2022-07-19 17:25:56,865 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73 to 73. [2022-07-19 17:25:56,865 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73 states, 57 states have (on average 1.3157894736842106) internal successors, (75), 64 states have internal predecessors, (75), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-07-19 17:25:56,866 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 93 transitions. [2022-07-19 17:25:56,866 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 93 transitions. Word has length 33 [2022-07-19 17:25:56,866 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:25:56,866 INFO L495 AbstractCegarLoop]: Abstraction has 73 states and 93 transitions. [2022-07-19 17:25:56,867 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-19 17:25:56,867 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 93 transitions. [2022-07-19 17:25:56,868 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-07-19 17:25:56,868 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:25:56,868 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:25:56,868 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-19 17:25:56,868 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:25:56,869 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:25:56,869 INFO L85 PathProgramCache]: Analyzing trace with hash 321911882, now seen corresponding path program 1 times [2022-07-19 17:25:56,869 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:25:56,869 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1329801253] [2022-07-19 17:25:56,869 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:25:56,870 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:25:56,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:56,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-19 17:25:56,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:56,944 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-07-19 17:25:56,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:56,946 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-19 17:25:56,946 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:25:56,946 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1329801253] [2022-07-19 17:25:56,946 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1329801253] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:25:56,946 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:25:56,947 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-19 17:25:56,947 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1872951165] [2022-07-19 17:25:56,947 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:25:56,947 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-19 17:25:56,947 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:25:56,948 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-19 17:25:56,948 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-19 17:25:56,948 INFO L87 Difference]: Start difference. First operand 73 states and 93 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-19 17:25:57,018 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:25:57,018 INFO L93 Difference]: Finished difference Result 138 states and 179 transitions. [2022-07-19 17:25:57,019 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-19 17:25:57,019 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2022-07-19 17:25:57,019 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:25:57,020 INFO L225 Difference]: With dead ends: 138 [2022-07-19 17:25:57,020 INFO L226 Difference]: Without dead ends: 73 [2022-07-19 17:25:57,021 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-19 17:25:57,022 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 116 mSDsluCounter, 138 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 116 SdHoareTripleChecker+Valid, 224 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-19 17:25:57,030 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [116 Valid, 224 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-19 17:25:57,031 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73 states. [2022-07-19 17:25:57,037 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73 to 73. [2022-07-19 17:25:57,040 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73 states, 57 states have (on average 1.2982456140350878) internal successors, (74), 64 states have internal predecessors, (74), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-07-19 17:25:57,041 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 92 transitions. [2022-07-19 17:25:57,045 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 92 transitions. Word has length 38 [2022-07-19 17:25:57,046 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:25:57,046 INFO L495 AbstractCegarLoop]: Abstraction has 73 states and 92 transitions. [2022-07-19 17:25:57,047 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-19 17:25:57,047 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 92 transitions. [2022-07-19 17:25:57,048 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-07-19 17:25:57,050 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:25:57,050 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:25:57,050 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-19 17:25:57,050 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:25:57,051 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:25:57,051 INFO L85 PathProgramCache]: Analyzing trace with hash 1433797075, now seen corresponding path program 1 times [2022-07-19 17:25:57,052 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:25:57,052 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1888074017] [2022-07-19 17:25:57,052 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:25:57,053 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:25:57,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:57,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-19 17:25:57,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:57,128 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-07-19 17:25:57,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:57,130 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-19 17:25:57,132 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:25:57,132 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1888074017] [2022-07-19 17:25:57,132 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1888074017] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:25:57,133 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:25:57,133 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-19 17:25:57,133 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [485771613] [2022-07-19 17:25:57,133 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:25:57,133 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-19 17:25:57,134 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:25:57,134 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-19 17:25:57,134 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-19 17:25:57,134 INFO L87 Difference]: Start difference. First operand 73 states and 92 transitions. Second operand has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-19 17:25:57,157 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:25:57,158 INFO L93 Difference]: Finished difference Result 186 states and 241 transitions. [2022-07-19 17:25:57,158 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-19 17:25:57,158 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2022-07-19 17:25:57,158 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:25:57,159 INFO L225 Difference]: With dead ends: 186 [2022-07-19 17:25:57,159 INFO L226 Difference]: Without dead ends: 121 [2022-07-19 17:25:57,160 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-19 17:25:57,161 INFO L413 NwaCegarLoop]: 111 mSDtfsCounter, 54 mSDsluCounter, 64 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 175 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-19 17:25:57,161 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [54 Valid, 175 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-19 17:25:57,162 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 121 states. [2022-07-19 17:25:57,171 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 121 to 119. [2022-07-19 17:25:57,171 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 119 states, 92 states have (on average 1.2826086956521738) internal successors, (118), 99 states have internal predecessors, (118), 14 states have call successors, (14), 12 states have call predecessors, (14), 12 states have return successors, (18), 14 states have call predecessors, (18), 14 states have call successors, (18) [2022-07-19 17:25:57,172 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 119 states to 119 states and 150 transitions. [2022-07-19 17:25:57,172 INFO L78 Accepts]: Start accepts. Automaton has 119 states and 150 transitions. Word has length 44 [2022-07-19 17:25:57,172 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:25:57,173 INFO L495 AbstractCegarLoop]: Abstraction has 119 states and 150 transitions. [2022-07-19 17:25:57,173 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-19 17:25:57,173 INFO L276 IsEmpty]: Start isEmpty. Operand 119 states and 150 transitions. [2022-07-19 17:25:57,174 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-07-19 17:25:57,174 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:25:57,174 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:25:57,174 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-19 17:25:57,174 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:25:57,175 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:25:57,175 INFO L85 PathProgramCache]: Analyzing trace with hash -464428248, now seen corresponding path program 1 times [2022-07-19 17:25:57,175 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:25:57,175 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [524284587] [2022-07-19 17:25:57,175 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:25:57,176 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:25:57,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:57,220 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-19 17:25:57,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:57,227 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-19 17:25:57,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:57,250 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-07-19 17:25:57,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:57,252 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-19 17:25:57,252 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:25:57,252 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [524284587] [2022-07-19 17:25:57,253 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [524284587] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:25:57,253 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:25:57,253 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-19 17:25:57,253 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [556707949] [2022-07-19 17:25:57,253 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:25:57,254 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-19 17:25:57,254 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:25:57,254 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-19 17:25:57,254 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-19 17:25:57,254 INFO L87 Difference]: Start difference. First operand 119 states and 150 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-19 17:25:57,402 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:25:57,403 INFO L93 Difference]: Finished difference Result 262 states and 338 transitions. [2022-07-19 17:25:57,403 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-19 17:25:57,403 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 52 [2022-07-19 17:25:57,403 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:25:57,405 INFO L225 Difference]: With dead ends: 262 [2022-07-19 17:25:57,405 INFO L226 Difference]: Without dead ends: 151 [2022-07-19 17:25:57,406 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-07-19 17:25:57,407 INFO L413 NwaCegarLoop]: 94 mSDtfsCounter, 63 mSDsluCounter, 286 mSDsCounter, 0 mSdLazyCounter, 109 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 380 SdHoareTripleChecker+Invalid, 128 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 109 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-19 17:25:57,410 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 380 Invalid, 128 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 109 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-19 17:25:57,411 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 151 states. [2022-07-19 17:25:57,425 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 151 to 146. [2022-07-19 17:25:57,426 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 146 states, 114 states have (on average 1.280701754385965) internal successors, (146), 121 states have internal predecessors, (146), 16 states have call successors, (16), 12 states have call predecessors, (16), 15 states have return successors, (23), 17 states have call predecessors, (23), 16 states have call successors, (23) [2022-07-19 17:25:57,428 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 146 states to 146 states and 185 transitions. [2022-07-19 17:25:57,429 INFO L78 Accepts]: Start accepts. Automaton has 146 states and 185 transitions. Word has length 52 [2022-07-19 17:25:57,429 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:25:57,429 INFO L495 AbstractCegarLoop]: Abstraction has 146 states and 185 transitions. [2022-07-19 17:25:57,430 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-19 17:25:57,430 INFO L276 IsEmpty]: Start isEmpty. Operand 146 states and 185 transitions. [2022-07-19 17:25:57,432 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-07-19 17:25:57,433 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:25:57,433 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:25:57,434 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-19 17:25:57,434 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:25:57,435 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:25:57,435 INFO L85 PathProgramCache]: Analyzing trace with hash 2141595306, now seen corresponding path program 1 times [2022-07-19 17:25:57,436 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:25:57,436 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1521493066] [2022-07-19 17:25:57,436 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:25:57,436 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:25:57,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:57,464 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-19 17:25:57,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:57,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-19 17:25:57,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:57,480 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-07-19 17:25:57,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:57,482 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-19 17:25:57,482 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:25:57,483 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1521493066] [2022-07-19 17:25:57,483 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1521493066] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:25:57,483 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:25:57,483 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-19 17:25:57,483 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1943084539] [2022-07-19 17:25:57,483 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:25:57,484 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-19 17:25:57,484 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:25:57,484 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-19 17:25:57,484 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-19 17:25:57,485 INFO L87 Difference]: Start difference. First operand 146 states and 185 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-19 17:25:57,569 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:25:57,569 INFO L93 Difference]: Finished difference Result 294 states and 382 transitions. [2022-07-19 17:25:57,570 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-19 17:25:57,570 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 52 [2022-07-19 17:25:57,570 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:25:57,573 INFO L225 Difference]: With dead ends: 294 [2022-07-19 17:25:57,573 INFO L226 Difference]: Without dead ends: 156 [2022-07-19 17:25:57,574 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-19 17:25:57,582 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 65 mSDsluCounter, 204 mSDsCounter, 0 mSdLazyCounter, 81 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 299 SdHoareTripleChecker+Invalid, 96 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 81 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-19 17:25:57,585 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [69 Valid, 299 Invalid, 96 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 81 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-19 17:25:57,586 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 156 states. [2022-07-19 17:25:57,597 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 156 to 148. [2022-07-19 17:25:57,598 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 148 states, 116 states have (on average 1.2758620689655173) internal successors, (148), 123 states have internal predecessors, (148), 16 states have call successors, (16), 12 states have call predecessors, (16), 15 states have return successors, (23), 17 states have call predecessors, (23), 16 states have call successors, (23) [2022-07-19 17:25:57,599 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148 states to 148 states and 187 transitions. [2022-07-19 17:25:57,599 INFO L78 Accepts]: Start accepts. Automaton has 148 states and 187 transitions. Word has length 52 [2022-07-19 17:25:57,599 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:25:57,600 INFO L495 AbstractCegarLoop]: Abstraction has 148 states and 187 transitions. [2022-07-19 17:25:57,600 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-19 17:25:57,600 INFO L276 IsEmpty]: Start isEmpty. Operand 148 states and 187 transitions. [2022-07-19 17:25:57,601 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-07-19 17:25:57,601 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:25:57,601 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:25:57,601 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-19 17:25:57,601 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:25:57,602 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:25:57,602 INFO L85 PathProgramCache]: Analyzing trace with hash -1730670164, now seen corresponding path program 1 times [2022-07-19 17:25:57,602 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:25:57,602 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1494906037] [2022-07-19 17:25:57,602 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:25:57,602 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:25:57,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:57,639 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-19 17:25:57,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:57,643 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-19 17:25:57,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:57,652 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-07-19 17:25:57,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:57,654 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-19 17:25:57,655 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:25:57,655 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1494906037] [2022-07-19 17:25:57,655 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1494906037] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:25:57,655 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:25:57,655 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-19 17:25:57,655 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [128436051] [2022-07-19 17:25:57,655 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:25:57,656 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-19 17:25:57,656 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:25:57,656 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-19 17:25:57,656 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-19 17:25:57,656 INFO L87 Difference]: Start difference. First operand 148 states and 187 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-19 17:25:57,873 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:25:57,873 INFO L93 Difference]: Finished difference Result 428 states and 559 transitions. [2022-07-19 17:25:57,873 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-19 17:25:57,873 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 52 [2022-07-19 17:25:57,874 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:25:57,877 INFO L225 Difference]: With dead ends: 428 [2022-07-19 17:25:57,877 INFO L226 Difference]: Without dead ends: 288 [2022-07-19 17:25:57,878 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-07-19 17:25:57,879 INFO L413 NwaCegarLoop]: 147 mSDtfsCounter, 209 mSDsluCounter, 168 mSDsCounter, 0 mSdLazyCounter, 150 mSolverCounterSat, 61 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 216 SdHoareTripleChecker+Valid, 315 SdHoareTripleChecker+Invalid, 211 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 61 IncrementalHoareTripleChecker+Valid, 150 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-19 17:25:57,879 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [216 Valid, 315 Invalid, 211 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [61 Valid, 150 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-19 17:25:57,883 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 288 states. [2022-07-19 17:25:57,903 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 288 to 280. [2022-07-19 17:25:57,904 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 280 states, 216 states have (on average 1.25) internal successors, (270), 227 states have internal predecessors, (270), 34 states have call successors, (34), 28 states have call predecessors, (34), 29 states have return successors, (53), 34 states have call predecessors, (53), 34 states have call successors, (53) [2022-07-19 17:25:57,905 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 280 states to 280 states and 357 transitions. [2022-07-19 17:25:57,905 INFO L78 Accepts]: Start accepts. Automaton has 280 states and 357 transitions. Word has length 52 [2022-07-19 17:25:57,905 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:25:57,905 INFO L495 AbstractCegarLoop]: Abstraction has 280 states and 357 transitions. [2022-07-19 17:25:57,905 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-19 17:25:57,905 INFO L276 IsEmpty]: Start isEmpty. Operand 280 states and 357 transitions. [2022-07-19 17:25:57,906 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-07-19 17:25:57,906 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:25:57,906 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:25:57,906 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-19 17:25:57,906 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:25:57,907 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:25:57,907 INFO L85 PathProgramCache]: Analyzing trace with hash 742025993, now seen corresponding path program 1 times [2022-07-19 17:25:57,907 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:25:57,907 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1492313414] [2022-07-19 17:25:57,907 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:25:57,907 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:25:57,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:57,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-19 17:25:57,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:57,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-19 17:25:57,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:57,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:25:57,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:57,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-07-19 17:25:57,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:57,981 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-07-19 17:25:57,982 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:25:57,982 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1492313414] [2022-07-19 17:25:57,982 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1492313414] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:25:57,982 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:25:57,982 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-19 17:25:57,982 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1110471406] [2022-07-19 17:25:57,982 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:25:57,983 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-19 17:25:57,983 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:25:57,983 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-19 17:25:57,983 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-19 17:25:57,983 INFO L87 Difference]: Start difference. First operand 280 states and 357 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-19 17:25:58,162 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:25:58,163 INFO L93 Difference]: Finished difference Result 568 states and 737 transitions. [2022-07-19 17:25:58,163 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-07-19 17:25:58,163 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) Word has length 54 [2022-07-19 17:25:58,164 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:25:58,165 INFO L225 Difference]: With dead ends: 568 [2022-07-19 17:25:58,165 INFO L226 Difference]: Without dead ends: 296 [2022-07-19 17:25:58,166 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-07-19 17:25:58,167 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 105 mSDsluCounter, 334 mSDsCounter, 0 mSdLazyCounter, 194 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 111 SdHoareTripleChecker+Valid, 429 SdHoareTripleChecker+Invalid, 226 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 194 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-19 17:25:58,167 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [111 Valid, 429 Invalid, 226 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 194 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-19 17:25:58,167 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 296 states. [2022-07-19 17:25:58,191 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 296 to 276. [2022-07-19 17:25:58,206 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 276 states, 212 states have (on average 1.2169811320754718) internal successors, (258), 223 states have internal predecessors, (258), 34 states have call successors, (34), 28 states have call predecessors, (34), 29 states have return successors, (53), 34 states have call predecessors, (53), 34 states have call successors, (53) [2022-07-19 17:25:58,207 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 276 states to 276 states and 345 transitions. [2022-07-19 17:25:58,207 INFO L78 Accepts]: Start accepts. Automaton has 276 states and 345 transitions. Word has length 54 [2022-07-19 17:25:58,208 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:25:58,208 INFO L495 AbstractCegarLoop]: Abstraction has 276 states and 345 transitions. [2022-07-19 17:25:58,208 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-19 17:25:58,208 INFO L276 IsEmpty]: Start isEmpty. Operand 276 states and 345 transitions. [2022-07-19 17:25:58,208 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-07-19 17:25:58,209 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:25:58,209 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:25:58,209 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-19 17:25:58,209 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:25:58,209 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:25:58,209 INFO L85 PathProgramCache]: Analyzing trace with hash -731489466, now seen corresponding path program 1 times [2022-07-19 17:25:58,209 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:25:58,209 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1000225182] [2022-07-19 17:25:58,210 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:25:58,210 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:25:58,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:58,302 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-19 17:25:58,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:58,322 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-19 17:25:58,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:58,330 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-07-19 17:25:58,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:58,347 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-07-19 17:25:58,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:58,350 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-19 17:25:58,350 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:25:58,350 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1000225182] [2022-07-19 17:25:58,350 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1000225182] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:25:58,350 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:25:58,350 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-07-19 17:25:58,350 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [82311339] [2022-07-19 17:25:58,350 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:25:58,352 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-07-19 17:25:58,352 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:25:58,352 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-07-19 17:25:58,352 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-07-19 17:25:58,352 INFO L87 Difference]: Start difference. First operand 276 states and 345 transitions. Second operand has 10 states, 10 states have (on average 4.5) internal successors, (45), 8 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-19 17:25:58,965 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:25:58,965 INFO L93 Difference]: Finished difference Result 873 states and 1145 transitions. [2022-07-19 17:25:58,965 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-07-19 17:25:58,965 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.5) internal successors, (45), 8 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2022-07-19 17:25:58,966 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:25:58,969 INFO L225 Difference]: With dead ends: 873 [2022-07-19 17:25:58,969 INFO L226 Difference]: Without dead ends: 656 [2022-07-19 17:25:58,971 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 43 GetRequests, 10 SyntacticMatches, 1 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 262 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=215, Invalid=907, Unknown=0, NotChecked=0, Total=1122 [2022-07-19 17:25:58,972 INFO L413 NwaCegarLoop]: 161 mSDtfsCounter, 471 mSDsluCounter, 684 mSDsCounter, 0 mSdLazyCounter, 730 mSolverCounterSat, 180 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 478 SdHoareTripleChecker+Valid, 845 SdHoareTripleChecker+Invalid, 910 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 180 IncrementalHoareTripleChecker+Valid, 730 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-07-19 17:25:58,972 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [478 Valid, 845 Invalid, 910 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [180 Valid, 730 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-07-19 17:25:58,973 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 656 states. [2022-07-19 17:25:59,012 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 656 to 533. [2022-07-19 17:25:59,013 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 533 states, 410 states have (on average 1.2146341463414634) internal successors, (498), 434 states have internal predecessors, (498), 65 states have call successors, (65), 49 states have call predecessors, (65), 57 states have return successors, (104), 67 states have call predecessors, (104), 65 states have call successors, (104) [2022-07-19 17:25:59,016 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 533 states to 533 states and 667 transitions. [2022-07-19 17:25:59,016 INFO L78 Accepts]: Start accepts. Automaton has 533 states and 667 transitions. Word has length 56 [2022-07-19 17:25:59,016 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:25:59,016 INFO L495 AbstractCegarLoop]: Abstraction has 533 states and 667 transitions. [2022-07-19 17:25:59,016 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.5) internal successors, (45), 8 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-19 17:25:59,016 INFO L276 IsEmpty]: Start isEmpty. Operand 533 states and 667 transitions. [2022-07-19 17:25:59,017 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2022-07-19 17:25:59,017 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:25:59,017 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:25:59,017 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-19 17:25:59,018 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:25:59,018 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:25:59,018 INFO L85 PathProgramCache]: Analyzing trace with hash -981985599, now seen corresponding path program 1 times [2022-07-19 17:25:59,018 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:25:59,018 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1117389471] [2022-07-19 17:25:59,018 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:25:59,018 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:25:59,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:59,085 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-19 17:25:59,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:59,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-19 17:25:59,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:59,110 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:25:59,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:59,116 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-19 17:25:59,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:59,121 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-07-19 17:25:59,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:59,139 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2022-07-19 17:25:59,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:59,141 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:25:59,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:59,142 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-07-19 17:25:59,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:59,143 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 18 proven. 9 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-07-19 17:25:59,143 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:25:59,143 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1117389471] [2022-07-19 17:25:59,143 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1117389471] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-19 17:25:59,144 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [788629729] [2022-07-19 17:25:59,144 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:25:59,144 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:25:59,144 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:25:59,152 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-19 17:25:59,158 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-19 17:25:59,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:25:59,275 INFO L263 TraceCheckSpWp]: Trace formula consists of 472 conjuncts, 8 conjunts are in the unsatisfiable core [2022-07-19 17:25:59,280 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-19 17:25:59,432 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 25 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:25:59,432 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-19 17:25:59,546 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 19 proven. 8 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-07-19 17:25:59,546 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [788629729] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-19 17:25:59,546 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-19 17:25:59,546 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 6, 6] total 16 [2022-07-19 17:25:59,546 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1349478107] [2022-07-19 17:25:59,546 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-19 17:25:59,547 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2022-07-19 17:25:59,547 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:25:59,547 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2022-07-19 17:25:59,547 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2022-07-19 17:25:59,547 INFO L87 Difference]: Start difference. First operand 533 states and 667 transitions. Second operand has 16 states, 16 states have (on average 7.4375) internal successors, (119), 11 states have internal predecessors, (119), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) [2022-07-19 17:26:00,295 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:00,295 INFO L93 Difference]: Finished difference Result 1171 states and 1508 transitions. [2022-07-19 17:26:00,296 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2022-07-19 17:26:00,296 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 7.4375) internal successors, (119), 11 states have internal predecessors, (119), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) Word has length 96 [2022-07-19 17:26:00,296 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:00,298 INFO L225 Difference]: With dead ends: 1171 [2022-07-19 17:26:00,298 INFO L226 Difference]: Without dead ends: 695 [2022-07-19 17:26:00,300 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 263 GetRequests, 218 SyntacticMatches, 1 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 493 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=361, Invalid=1709, Unknown=0, NotChecked=0, Total=2070 [2022-07-19 17:26:00,301 INFO L413 NwaCegarLoop]: 220 mSDtfsCounter, 431 mSDsluCounter, 1114 mSDsCounter, 0 mSdLazyCounter, 882 mSolverCounterSat, 198 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 432 SdHoareTripleChecker+Valid, 1334 SdHoareTripleChecker+Invalid, 1080 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 198 IncrementalHoareTripleChecker+Valid, 882 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:00,301 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [432 Valid, 1334 Invalid, 1080 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [198 Valid, 882 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-07-19 17:26:00,302 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 695 states. [2022-07-19 17:26:00,326 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 695 to 598. [2022-07-19 17:26:00,327 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 598 states, 454 states have (on average 1.2026431718061674) internal successors, (546), 486 states have internal predecessors, (546), 75 states have call successors, (75), 63 states have call predecessors, (75), 68 states have return successors, (100), 70 states have call predecessors, (100), 75 states have call successors, (100) [2022-07-19 17:26:00,329 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 598 states to 598 states and 721 transitions. [2022-07-19 17:26:00,329 INFO L78 Accepts]: Start accepts. Automaton has 598 states and 721 transitions. Word has length 96 [2022-07-19 17:26:00,329 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:00,329 INFO L495 AbstractCegarLoop]: Abstraction has 598 states and 721 transitions. [2022-07-19 17:26:00,329 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 7.4375) internal successors, (119), 11 states have internal predecessors, (119), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) [2022-07-19 17:26:00,329 INFO L276 IsEmpty]: Start isEmpty. Operand 598 states and 721 transitions. [2022-07-19 17:26:00,331 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 169 [2022-07-19 17:26:00,331 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:00,331 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:00,351 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-19 17:26:00,549 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-07-19 17:26:00,549 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:00,549 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:00,550 INFO L85 PathProgramCache]: Analyzing trace with hash -1684606529, now seen corresponding path program 1 times [2022-07-19 17:26:00,550 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:00,550 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [507749877] [2022-07-19 17:26:00,550 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:00,550 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:00,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:00,591 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-19 17:26:00,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:00,597 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-19 17:26:00,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:00,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:00,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:00,606 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-19 17:26:00,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:00,608 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-07-19 17:26:00,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:00,612 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:00,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:00,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-19 17:26:00,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:00,614 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:26:00,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:00,615 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2022-07-19 17:26:00,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:00,652 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:00,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:00,654 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 135 [2022-07-19 17:26:00,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:00,655 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 144 [2022-07-19 17:26:00,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:00,657 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 160 [2022-07-19 17:26:00,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:00,658 INFO L134 CoverageAnalysis]: Checked inductivity of 190 backedges. 81 proven. 0 refuted. 0 times theorem prover too weak. 109 trivial. 0 not checked. [2022-07-19 17:26:00,658 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:00,658 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [507749877] [2022-07-19 17:26:00,658 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [507749877] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:26:00,658 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:26:00,658 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-07-19 17:26:00,658 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [861339730] [2022-07-19 17:26:00,658 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:26:00,659 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-07-19 17:26:00,659 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:00,659 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-07-19 17:26:00,659 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2022-07-19 17:26:00,659 INFO L87 Difference]: Start difference. First operand 598 states and 721 transitions. Second operand has 10 states, 10 states have (on average 8.7) internal successors, (87), 7 states have internal predecessors, (87), 3 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2022-07-19 17:26:01,128 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:01,129 INFO L93 Difference]: Finished difference Result 1713 states and 2093 transitions. [2022-07-19 17:26:01,129 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-07-19 17:26:01,129 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 8.7) internal successors, (87), 7 states have internal predecessors, (87), 3 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) Word has length 168 [2022-07-19 17:26:01,130 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:01,134 INFO L225 Difference]: With dead ends: 1713 [2022-07-19 17:26:01,134 INFO L226 Difference]: Without dead ends: 1123 [2022-07-19 17:26:01,136 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 62 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 26 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 150 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=178, Invalid=578, Unknown=0, NotChecked=0, Total=756 [2022-07-19 17:26:01,136 INFO L413 NwaCegarLoop]: 209 mSDtfsCounter, 484 mSDsluCounter, 519 mSDsCounter, 0 mSdLazyCounter, 514 mSolverCounterSat, 162 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 488 SdHoareTripleChecker+Valid, 728 SdHoareTripleChecker+Invalid, 676 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 162 IncrementalHoareTripleChecker+Valid, 514 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:01,136 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [488 Valid, 728 Invalid, 676 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [162 Valid, 514 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-19 17:26:01,138 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1123 states. [2022-07-19 17:26:01,197 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1123 to 1121. [2022-07-19 17:26:01,199 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1121 states, 849 states have (on average 1.171967020023557) internal successors, (995), 904 states have internal predecessors, (995), 143 states have call successors, (143), 122 states have call predecessors, (143), 128 states have return successors, (186), 130 states have call predecessors, (186), 143 states have call successors, (186) [2022-07-19 17:26:01,204 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1121 states to 1121 states and 1324 transitions. [2022-07-19 17:26:01,204 INFO L78 Accepts]: Start accepts. Automaton has 1121 states and 1324 transitions. Word has length 168 [2022-07-19 17:26:01,205 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:01,205 INFO L495 AbstractCegarLoop]: Abstraction has 1121 states and 1324 transitions. [2022-07-19 17:26:01,205 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 8.7) internal successors, (87), 7 states have internal predecessors, (87), 3 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2022-07-19 17:26:01,205 INFO L276 IsEmpty]: Start isEmpty. Operand 1121 states and 1324 transitions. [2022-07-19 17:26:01,209 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 173 [2022-07-19 17:26:01,209 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:01,209 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:01,209 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-07-19 17:26:01,210 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:01,210 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:01,210 INFO L85 PathProgramCache]: Analyzing trace with hash 734259323, now seen corresponding path program 1 times [2022-07-19 17:26:01,210 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:01,212 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1615358107] [2022-07-19 17:26:01,212 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:01,212 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:01,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:01,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-19 17:26:01,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:01,259 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-19 17:26:01,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:01,276 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-19 17:26:01,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:01,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:01,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:01,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-19 17:26:01,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:01,288 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2022-07-19 17:26:01,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:01,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:01,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:01,325 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-19 17:26:01,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:01,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:26:01,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:01,328 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-07-19 17:26:01,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:01,332 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:01,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:01,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 139 [2022-07-19 17:26:01,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:01,334 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 148 [2022-07-19 17:26:01,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:01,335 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2022-07-19 17:26:01,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:01,337 INFO L134 CoverageAnalysis]: Checked inductivity of 190 backedges. 87 proven. 10 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2022-07-19 17:26:01,337 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:01,337 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1615358107] [2022-07-19 17:26:01,337 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1615358107] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-19 17:26:01,337 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1807323041] [2022-07-19 17:26:01,337 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:01,337 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:26:01,338 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:26:01,339 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-19 17:26:01,355 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-19 17:26:01,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:01,455 INFO L263 TraceCheckSpWp]: Trace formula consists of 677 conjuncts, 7 conjunts are in the unsatisfiable core [2022-07-19 17:26:01,459 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-19 17:26:01,561 INFO L134 CoverageAnalysis]: Checked inductivity of 190 backedges. 131 proven. 0 refuted. 0 times theorem prover too weak. 59 trivial. 0 not checked. [2022-07-19 17:26:01,561 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-19 17:26:01,561 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1807323041] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:26:01,562 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-19 17:26:01,562 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [11] total 15 [2022-07-19 17:26:01,562 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1026064866] [2022-07-19 17:26:01,562 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:26:01,562 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-19 17:26:01,562 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:01,563 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-19 17:26:01,563 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=37, Invalid=173, Unknown=0, NotChecked=0, Total=210 [2022-07-19 17:26:01,563 INFO L87 Difference]: Start difference. First operand 1121 states and 1324 transitions. Second operand has 6 states, 6 states have (on average 17.666666666666668) internal successors, (106), 6 states have internal predecessors, (106), 3 states have call successors, (11), 3 states have call predecessors, (11), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2022-07-19 17:26:01,686 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:01,686 INFO L93 Difference]: Finished difference Result 2058 states and 2439 transitions. [2022-07-19 17:26:01,687 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-19 17:26:01,687 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 17.666666666666668) internal successors, (106), 6 states have internal predecessors, (106), 3 states have call successors, (11), 3 states have call predecessors, (11), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) Word has length 172 [2022-07-19 17:26:01,687 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:01,691 INFO L225 Difference]: With dead ends: 2058 [2022-07-19 17:26:01,691 INFO L226 Difference]: Without dead ends: 1043 [2022-07-19 17:26:01,693 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 208 GetRequests, 192 SyntacticMatches, 1 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=52, Invalid=220, Unknown=0, NotChecked=0, Total=272 [2022-07-19 17:26:01,693 INFO L413 NwaCegarLoop]: 164 mSDtfsCounter, 65 mSDsluCounter, 415 mSDsCounter, 0 mSdLazyCounter, 75 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 65 SdHoareTripleChecker+Valid, 579 SdHoareTripleChecker+Invalid, 78 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 75 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:01,694 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [65 Valid, 579 Invalid, 78 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 75 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-19 17:26:01,695 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1043 states. [2022-07-19 17:26:01,736 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1043 to 1027. [2022-07-19 17:26:01,737 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1027 states, 784 states have (on average 1.1658163265306123) internal successors, (914), 830 states have internal predecessors, (914), 128 states have call successors, (128), 111 states have call predecessors, (128), 114 states have return successors, (164), 116 states have call predecessors, (164), 128 states have call successors, (164) [2022-07-19 17:26:01,740 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1027 states to 1027 states and 1206 transitions. [2022-07-19 17:26:01,741 INFO L78 Accepts]: Start accepts. Automaton has 1027 states and 1206 transitions. Word has length 172 [2022-07-19 17:26:01,741 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:01,741 INFO L495 AbstractCegarLoop]: Abstraction has 1027 states and 1206 transitions. [2022-07-19 17:26:01,741 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 17.666666666666668) internal successors, (106), 6 states have internal predecessors, (106), 3 states have call successors, (11), 3 states have call predecessors, (11), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2022-07-19 17:26:01,742 INFO L276 IsEmpty]: Start isEmpty. Operand 1027 states and 1206 transitions. [2022-07-19 17:26:01,744 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 177 [2022-07-19 17:26:01,744 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:01,745 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:01,764 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-07-19 17:26:01,962 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-07-19 17:26:01,962 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:01,963 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:01,963 INFO L85 PathProgramCache]: Analyzing trace with hash 1208270879, now seen corresponding path program 1 times [2022-07-19 17:26:01,963 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:01,963 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1326700656] [2022-07-19 17:26:01,963 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:01,963 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:01,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:02,007 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-19 17:26:02,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:02,013 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-19 17:26:02,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:02,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:02,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:02,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-19 17:26:02,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:02,041 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-07-19 17:26:02,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:02,068 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:02,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:02,069 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-19 17:26:02,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:02,071 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:26:02,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:02,077 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2022-07-19 17:26:02,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:02,079 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-07-19 17:26:02,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:02,082 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:02,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:02,083 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2022-07-19 17:26:02,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:02,084 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 143 [2022-07-19 17:26:02,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:02,085 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2022-07-19 17:26:02,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:02,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 168 [2022-07-19 17:26:02,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:02,088 INFO L134 CoverageAnalysis]: Checked inductivity of 194 backedges. 93 proven. 28 refuted. 0 times theorem prover too weak. 73 trivial. 0 not checked. [2022-07-19 17:26:02,088 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:02,088 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1326700656] [2022-07-19 17:26:02,088 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1326700656] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-19 17:26:02,088 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [611773766] [2022-07-19 17:26:02,088 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:02,089 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:26:02,089 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:26:02,090 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-19 17:26:02,091 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-07-19 17:26:02,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:02,190 INFO L263 TraceCheckSpWp]: Trace formula consists of 684 conjuncts, 13 conjunts are in the unsatisfiable core [2022-07-19 17:26:02,194 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-19 17:26:02,361 INFO L134 CoverageAnalysis]: Checked inductivity of 194 backedges. 142 proven. 4 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2022-07-19 17:26:02,361 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-19 17:26:02,678 INFO L134 CoverageAnalysis]: Checked inductivity of 194 backedges. 82 proven. 42 refuted. 0 times theorem prover too weak. 70 trivial. 0 not checked. [2022-07-19 17:26:02,678 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [611773766] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-19 17:26:02,678 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-19 17:26:02,678 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 10, 11] total 26 [2022-07-19 17:26:02,678 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2144220568] [2022-07-19 17:26:02,678 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-19 17:26:02,679 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-07-19 17:26:02,679 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:02,679 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-07-19 17:26:02,679 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=125, Invalid=525, Unknown=0, NotChecked=0, Total=650 [2022-07-19 17:26:02,680 INFO L87 Difference]: Start difference. First operand 1027 states and 1206 transitions. Second operand has 26 states, 26 states have (on average 8.115384615384615) internal successors, (211), 22 states have internal predecessors, (211), 10 states have call successors, (34), 9 states have call predecessors, (34), 9 states have return successors, (31), 9 states have call predecessors, (31), 10 states have call successors, (31) [2022-07-19 17:26:03,556 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:03,557 INFO L93 Difference]: Finished difference Result 2232 states and 2683 transitions. [2022-07-19 17:26:03,557 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-07-19 17:26:03,557 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 8.115384615384615) internal successors, (211), 22 states have internal predecessors, (211), 10 states have call successors, (34), 9 states have call predecessors, (34), 9 states have return successors, (31), 9 states have call predecessors, (31), 10 states have call successors, (31) Word has length 176 [2022-07-19 17:26:03,558 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:03,562 INFO L225 Difference]: With dead ends: 2232 [2022-07-19 17:26:03,562 INFO L226 Difference]: Without dead ends: 1213 [2022-07-19 17:26:03,565 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 426 GetRequests, 376 SyntacticMatches, 4 SemanticMatches, 46 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 448 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=492, Invalid=1764, Unknown=0, NotChecked=0, Total=2256 [2022-07-19 17:26:03,566 INFO L413 NwaCegarLoop]: 142 mSDtfsCounter, 728 mSDsluCounter, 394 mSDsCounter, 0 mSdLazyCounter, 1362 mSolverCounterSat, 278 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 731 SdHoareTripleChecker+Valid, 536 SdHoareTripleChecker+Invalid, 1640 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 278 IncrementalHoareTripleChecker+Valid, 1362 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:03,566 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [731 Valid, 536 Invalid, 1640 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [278 Valid, 1362 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-07-19 17:26:03,567 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1213 states. [2022-07-19 17:26:03,607 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1213 to 1055. [2022-07-19 17:26:03,608 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1055 states, 809 states have (on average 1.145859085290482) internal successors, (927), 851 states have internal predecessors, (927), 132 states have call successors, (132), 115 states have call predecessors, (132), 113 states have return successors, (155), 117 states have call predecessors, (155), 132 states have call successors, (155) [2022-07-19 17:26:03,611 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1055 states to 1055 states and 1214 transitions. [2022-07-19 17:26:03,611 INFO L78 Accepts]: Start accepts. Automaton has 1055 states and 1214 transitions. Word has length 176 [2022-07-19 17:26:03,612 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:03,612 INFO L495 AbstractCegarLoop]: Abstraction has 1055 states and 1214 transitions. [2022-07-19 17:26:03,612 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 8.115384615384615) internal successors, (211), 22 states have internal predecessors, (211), 10 states have call successors, (34), 9 states have call predecessors, (34), 9 states have return successors, (31), 9 states have call predecessors, (31), 10 states have call successors, (31) [2022-07-19 17:26:03,612 INFO L276 IsEmpty]: Start isEmpty. Operand 1055 states and 1214 transitions. [2022-07-19 17:26:03,614 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 189 [2022-07-19 17:26:03,614 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:03,615 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:03,635 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-07-19 17:26:03,832 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:26:03,833 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:03,833 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:03,833 INFO L85 PathProgramCache]: Analyzing trace with hash 870331069, now seen corresponding path program 1 times [2022-07-19 17:26:03,833 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:03,833 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [76132887] [2022-07-19 17:26:03,833 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:03,833 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:03,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:03,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-19 17:26:03,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:03,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-19 17:26:03,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:03,894 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:03,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:03,899 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-19 17:26:03,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:03,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-07-19 17:26:03,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:03,920 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:03,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:03,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-19 17:26:03,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:03,923 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:26:03,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:03,926 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-07-19 17:26:03,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:03,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2022-07-19 17:26:03,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:03,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2022-07-19 17:26:03,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:03,943 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:03,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:03,944 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-19 17:26:03,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:03,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 144 [2022-07-19 17:26:03,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:03,947 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 155 [2022-07-19 17:26:03,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:03,948 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2022-07-19 17:26:03,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:03,962 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 180 [2022-07-19 17:26:03,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:03,964 INFO L134 CoverageAnalysis]: Checked inductivity of 236 backedges. 100 proven. 43 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2022-07-19 17:26:03,964 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:03,964 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [76132887] [2022-07-19 17:26:03,964 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [76132887] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-19 17:26:03,964 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1368346351] [2022-07-19 17:26:03,965 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:03,965 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:26:03,965 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:26:03,966 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-19 17:26:03,967 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-07-19 17:26:04,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:04,070 INFO L263 TraceCheckSpWp]: Trace formula consists of 716 conjuncts, 10 conjunts are in the unsatisfiable core [2022-07-19 17:26:04,073 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-19 17:26:04,190 INFO L134 CoverageAnalysis]: Checked inductivity of 236 backedges. 180 proven. 9 refuted. 0 times theorem prover too weak. 47 trivial. 0 not checked. [2022-07-19 17:26:04,190 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-19 17:26:04,468 INFO L134 CoverageAnalysis]: Checked inductivity of 236 backedges. 104 proven. 53 refuted. 0 times theorem prover too weak. 79 trivial. 0 not checked. [2022-07-19 17:26:04,469 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1368346351] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-19 17:26:04,469 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-19 17:26:04,469 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 8, 8] total 23 [2022-07-19 17:26:04,469 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [988712577] [2022-07-19 17:26:04,469 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-19 17:26:04,470 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-07-19 17:26:04,470 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:04,470 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-07-19 17:26:04,471 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=70, Invalid=436, Unknown=0, NotChecked=0, Total=506 [2022-07-19 17:26:04,471 INFO L87 Difference]: Start difference. First operand 1055 states and 1214 transitions. Second operand has 23 states, 23 states have (on average 9.043478260869565) internal successors, (208), 16 states have internal predecessors, (208), 6 states have call successors, (38), 8 states have call predecessors, (38), 11 states have return successors, (32), 9 states have call predecessors, (32), 6 states have call successors, (32) [2022-07-19 17:26:05,436 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:05,437 INFO L93 Difference]: Finished difference Result 2062 states and 2406 transitions. [2022-07-19 17:26:05,437 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-07-19 17:26:05,437 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 9.043478260869565) internal successors, (208), 16 states have internal predecessors, (208), 6 states have call successors, (38), 8 states have call predecessors, (38), 11 states have return successors, (32), 9 states have call predecessors, (32), 6 states have call successors, (32) Word has length 188 [2022-07-19 17:26:05,437 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:05,441 INFO L225 Difference]: With dead ends: 2062 [2022-07-19 17:26:05,441 INFO L226 Difference]: Without dead ends: 1113 [2022-07-19 17:26:05,443 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 464 GetRequests, 413 SyntacticMatches, 2 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 501 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=426, Invalid=2124, Unknown=0, NotChecked=0, Total=2550 [2022-07-19 17:26:05,443 INFO L413 NwaCegarLoop]: 133 mSDtfsCounter, 607 mSDsluCounter, 331 mSDsCounter, 0 mSdLazyCounter, 1346 mSolverCounterSat, 277 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 607 SdHoareTripleChecker+Valid, 464 SdHoareTripleChecker+Invalid, 1623 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 277 IncrementalHoareTripleChecker+Valid, 1346 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:05,443 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [607 Valid, 464 Invalid, 1623 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [277 Valid, 1346 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-07-19 17:26:05,444 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1113 states. [2022-07-19 17:26:05,482 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1113 to 1051. [2022-07-19 17:26:05,483 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1051 states, 807 states have (on average 1.1350681536555143) internal successors, (916), 847 states have internal predecessors, (916), 126 states have call successors, (126), 117 states have call predecessors, (126), 117 states have return successors, (149), 115 states have call predecessors, (149), 126 states have call successors, (149) [2022-07-19 17:26:05,487 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1051 states to 1051 states and 1191 transitions. [2022-07-19 17:26:05,487 INFO L78 Accepts]: Start accepts. Automaton has 1051 states and 1191 transitions. Word has length 188 [2022-07-19 17:26:05,488 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:05,488 INFO L495 AbstractCegarLoop]: Abstraction has 1051 states and 1191 transitions. [2022-07-19 17:26:05,488 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 9.043478260869565) internal successors, (208), 16 states have internal predecessors, (208), 6 states have call successors, (38), 8 states have call predecessors, (38), 11 states have return successors, (32), 9 states have call predecessors, (32), 6 states have call successors, (32) [2022-07-19 17:26:05,488 INFO L276 IsEmpty]: Start isEmpty. Operand 1051 states and 1191 transitions. [2022-07-19 17:26:05,490 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 190 [2022-07-19 17:26:05,490 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:05,490 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:05,510 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-07-19 17:26:05,703 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13,5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:26:05,703 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:05,703 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:05,704 INFO L85 PathProgramCache]: Analyzing trace with hash -1613211939, now seen corresponding path program 1 times [2022-07-19 17:26:05,704 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:05,704 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1710992056] [2022-07-19 17:26:05,704 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:05,704 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:05,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:05,758 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-19 17:26:05,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:05,765 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-19 17:26:05,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:05,786 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:05,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:05,794 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-19 17:26:05,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:05,797 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-07-19 17:26:05,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:05,812 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:05,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:05,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-19 17:26:05,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:05,814 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:26:05,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:05,815 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-07-19 17:26:05,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:05,821 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-07-19 17:26:05,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:05,822 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2022-07-19 17:26:05,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:05,833 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:05,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:05,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-19 17:26:05,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:05,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 145 [2022-07-19 17:26:05,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:05,844 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 156 [2022-07-19 17:26:05,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:05,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 165 [2022-07-19 17:26:05,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:05,856 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2022-07-19 17:26:05,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:05,865 INFO L134 CoverageAnalysis]: Checked inductivity of 237 backedges. 89 proven. 45 refuted. 0 times theorem prover too weak. 103 trivial. 0 not checked. [2022-07-19 17:26:05,865 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:05,865 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1710992056] [2022-07-19 17:26:05,865 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1710992056] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-19 17:26:05,865 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [766392344] [2022-07-19 17:26:05,865 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:05,866 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:26:05,866 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:26:05,867 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-19 17:26:05,868 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-07-19 17:26:05,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:05,982 INFO L263 TraceCheckSpWp]: Trace formula consists of 716 conjuncts, 18 conjunts are in the unsatisfiable core [2022-07-19 17:26:05,984 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-19 17:26:06,149 INFO L134 CoverageAnalysis]: Checked inductivity of 237 backedges. 126 proven. 26 refuted. 0 times theorem prover too weak. 85 trivial. 0 not checked. [2022-07-19 17:26:06,149 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-19 17:26:06,528 INFO L134 CoverageAnalysis]: Checked inductivity of 237 backedges. 99 proven. 45 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2022-07-19 17:26:06,528 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [766392344] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-19 17:26:06,528 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-19 17:26:06,528 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 8, 13] total 23 [2022-07-19 17:26:06,528 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1412407987] [2022-07-19 17:26:06,528 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-19 17:26:06,529 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-07-19 17:26:06,529 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:06,529 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-07-19 17:26:06,529 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=111, Invalid=395, Unknown=0, NotChecked=0, Total=506 [2022-07-19 17:26:06,529 INFO L87 Difference]: Start difference. First operand 1051 states and 1191 transitions. Second operand has 23 states, 23 states have (on average 9.608695652173912) internal successors, (221), 19 states have internal predecessors, (221), 13 states have call successors, (39), 11 states have call predecessors, (39), 13 states have return successors, (35), 13 states have call predecessors, (35), 13 states have call successors, (35) [2022-07-19 17:26:07,630 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:07,630 INFO L93 Difference]: Finished difference Result 2020 states and 2334 transitions. [2022-07-19 17:26:07,630 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 40 states. [2022-07-19 17:26:07,630 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 9.608695652173912) internal successors, (221), 19 states have internal predecessors, (221), 13 states have call successors, (39), 11 states have call predecessors, (39), 13 states have return successors, (35), 13 states have call predecessors, (35), 13 states have call successors, (35) Word has length 189 [2022-07-19 17:26:07,631 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:07,637 INFO L225 Difference]: With dead ends: 2020 [2022-07-19 17:26:07,637 INFO L226 Difference]: Without dead ends: 1453 [2022-07-19 17:26:07,640 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 475 GetRequests, 418 SyntacticMatches, 2 SemanticMatches, 55 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 653 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=797, Invalid=2395, Unknown=0, NotChecked=0, Total=3192 [2022-07-19 17:26:07,640 INFO L413 NwaCegarLoop]: 203 mSDtfsCounter, 1181 mSDsluCounter, 361 mSDsCounter, 0 mSdLazyCounter, 1104 mSolverCounterSat, 589 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1184 SdHoareTripleChecker+Valid, 564 SdHoareTripleChecker+Invalid, 1693 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 589 IncrementalHoareTripleChecker+Valid, 1104 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:07,640 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1184 Valid, 564 Invalid, 1693 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [589 Valid, 1104 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-07-19 17:26:07,641 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1453 states. [2022-07-19 17:26:07,707 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1453 to 1319. [2022-07-19 17:26:07,709 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1319 states, 1013 states have (on average 1.134254689042448) internal successors, (1149), 1057 states have internal predecessors, (1149), 160 states have call successors, (160), 149 states have call predecessors, (160), 145 states have return successors, (185), 145 states have call predecessors, (185), 160 states have call successors, (185) [2022-07-19 17:26:07,712 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1319 states to 1319 states and 1494 transitions. [2022-07-19 17:26:07,712 INFO L78 Accepts]: Start accepts. Automaton has 1319 states and 1494 transitions. Word has length 189 [2022-07-19 17:26:07,712 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:07,712 INFO L495 AbstractCegarLoop]: Abstraction has 1319 states and 1494 transitions. [2022-07-19 17:26:07,713 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 9.608695652173912) internal successors, (221), 19 states have internal predecessors, (221), 13 states have call successors, (39), 11 states have call predecessors, (39), 13 states have return successors, (35), 13 states have call predecessors, (35), 13 states have call successors, (35) [2022-07-19 17:26:07,713 INFO L276 IsEmpty]: Start isEmpty. Operand 1319 states and 1494 transitions. [2022-07-19 17:26:07,716 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 241 [2022-07-19 17:26:07,716 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:07,716 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:07,735 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-07-19 17:26:07,935 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2022-07-19 17:26:07,936 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:07,936 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:07,936 INFO L85 PathProgramCache]: Analyzing trace with hash 2097382224, now seen corresponding path program 1 times [2022-07-19 17:26:07,936 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:07,936 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [112762574] [2022-07-19 17:26:07,936 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:07,936 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:07,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:08,016 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-19 17:26:08,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:08,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-19 17:26:08,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:08,026 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:08,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:08,034 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-19 17:26:08,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:08,036 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-07-19 17:26:08,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:08,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:08,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:08,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-19 17:26:08,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:08,041 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:26:08,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:08,041 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-07-19 17:26:08,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:08,047 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-07-19 17:26:08,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:08,048 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2022-07-19 17:26:08,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:08,053 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:08,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:08,054 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-19 17:26:08,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:08,055 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 145 [2022-07-19 17:26:08,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:08,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 154 [2022-07-19 17:26:08,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:08,078 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:08,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:08,080 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-19 17:26:08,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:08,088 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:26:08,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:08,090 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-19 17:26:08,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:08,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 196 [2022-07-19 17:26:08,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:08,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 207 [2022-07-19 17:26:08,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:08,104 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 216 [2022-07-19 17:26:08,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:08,113 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 232 [2022-07-19 17:26:08,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:08,115 INFO L134 CoverageAnalysis]: Checked inductivity of 420 backedges. 196 proven. 36 refuted. 0 times theorem prover too weak. 188 trivial. 0 not checked. [2022-07-19 17:26:08,115 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:08,115 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [112762574] [2022-07-19 17:26:08,115 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [112762574] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-19 17:26:08,115 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1970977578] [2022-07-19 17:26:08,115 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:08,115 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:26:08,115 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:26:08,116 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-19 17:26:08,118 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-07-19 17:26:08,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:08,222 INFO L263 TraceCheckSpWp]: Trace formula consists of 847 conjuncts, 30 conjunts are in the unsatisfiable core [2022-07-19 17:26:08,226 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-19 17:26:08,498 INFO L134 CoverageAnalysis]: Checked inductivity of 420 backedges. 143 proven. 91 refuted. 0 times theorem prover too weak. 186 trivial. 0 not checked. [2022-07-19 17:26:08,499 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-19 17:26:09,022 INFO L134 CoverageAnalysis]: Checked inductivity of 420 backedges. 96 proven. 138 refuted. 0 times theorem prover too weak. 186 trivial. 0 not checked. [2022-07-19 17:26:09,023 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1970977578] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-19 17:26:09,023 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-19 17:26:09,023 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 11, 16] total 29 [2022-07-19 17:26:09,023 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1222836144] [2022-07-19 17:26:09,023 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-19 17:26:09,024 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-07-19 17:26:09,024 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:09,024 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-07-19 17:26:09,024 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=150, Invalid=662, Unknown=0, NotChecked=0, Total=812 [2022-07-19 17:26:09,024 INFO L87 Difference]: Start difference. First operand 1319 states and 1494 transitions. Second operand has 29 states, 29 states have (on average 10.379310344827585) internal successors, (301), 25 states have internal predecessors, (301), 17 states have call successors, (50), 13 states have call predecessors, (50), 19 states have return successors, (53), 17 states have call predecessors, (53), 17 states have call successors, (53) [2022-07-19 17:26:10,094 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:10,094 INFO L93 Difference]: Finished difference Result 2056 states and 2348 transitions. [2022-07-19 17:26:10,094 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-07-19 17:26:10,095 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 29 states have (on average 10.379310344827585) internal successors, (301), 25 states have internal predecessors, (301), 17 states have call successors, (50), 13 states have call predecessors, (50), 19 states have return successors, (53), 17 states have call predecessors, (53), 17 states have call successors, (53) Word has length 240 [2022-07-19 17:26:10,095 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:10,096 INFO L225 Difference]: With dead ends: 2056 [2022-07-19 17:26:10,096 INFO L226 Difference]: Without dead ends: 0 [2022-07-19 17:26:10,100 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 571 GetRequests, 517 SyntacticMatches, 5 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 546 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=579, Invalid=1971, Unknown=0, NotChecked=0, Total=2550 [2022-07-19 17:26:10,100 INFO L413 NwaCegarLoop]: 200 mSDtfsCounter, 1192 mSDsluCounter, 538 mSDsCounter, 0 mSdLazyCounter, 1657 mSolverCounterSat, 486 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1194 SdHoareTripleChecker+Valid, 738 SdHoareTripleChecker+Invalid, 2143 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 486 IncrementalHoareTripleChecker+Valid, 1657 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:10,100 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1194 Valid, 738 Invalid, 2143 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [486 Valid, 1657 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-07-19 17:26:10,101 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-19 17:26:10,101 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-19 17:26:10,101 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-19 17:26:10,101 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-19 17:26:10,101 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 240 [2022-07-19 17:26:10,102 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:10,102 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-19 17:26:10,102 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 29 states have (on average 10.379310344827585) internal successors, (301), 25 states have internal predecessors, (301), 17 states have call successors, (50), 13 states have call predecessors, (50), 19 states have return successors, (53), 17 states have call predecessors, (53), 17 states have call successors, (53) [2022-07-19 17:26:10,102 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-19 17:26:10,102 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-19 17:26:10,104 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-19 17:26:10,137 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-07-19 17:26:10,321 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2022-07-19 17:26:10,323 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-19 17:26:24,310 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 713 719) no Hoare annotation was computed. [2022-07-19 17:26:24,311 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 713 719) the Hoare annotation is: true [2022-07-19 17:26:24,311 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 612 623) the Hoare annotation is: (let ((.cse6 (not (= 2 ~waterLevel~0))) (.cse9 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse4 (not (<= ~waterLevel~0 1))) (.cse2 (not (<= 0 ~waterLevel~0))) (.cse7 (not (<= 1 ~pumpRunning~0))) (.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (not (= ~pumpRunning~0 0))) (.cse3 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse8 (not (<= 2 ~waterLevel~0))) (.cse10 (not (<= ~waterLevel~0 2))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse6 .cse3 .cse7 .cse5) (or .cse3 .cse8 .cse7 .cse9 .cse10 .cse5) (or .cse1 .cse6 .cse3 .cse9 .cse5) (or .cse1 .cse2 .cse3 .cse9 .cse4 .cse5) (or .cse0 .cse2 .cse3 .cse7 .cse10 .cse5 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 .cse3 .cse8 .cse10 .cse5))) [2022-07-19 17:26:24,311 INFO L899 garLoopResultBuilder]: For program point L616-1(lines 612 623) no Hoare annotation was computed. [2022-07-19 17:26:24,311 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 612 623) no Hoare annotation was computed. [2022-07-19 17:26:24,311 INFO L895 garLoopResultBuilder]: At program point L766(line 766) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 0))) (let ((.cse6 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (<= |old(~waterLevel~0)| 0))) (.cse10 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse11 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse6 .cse7 .cse3 .cse8) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse6 .cse2 .cse3) (or .cse9 (not (<= 1 |old(~waterLevel~0)|)) .cse2 .cse3 .cse4 .cse10) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse7 (and .cse11 (= ~waterLevel~0 1)) .cse3) (or .cse9 .cse6 .cse7 .cse3 .cse4 .cse10) (or .cse9 .cse2 .cse3 .cse4 .cse5) (or .cse9 .cse6 .cse2 .cse3 .cse8 .cse10) (or .cse0 .cse1 .cse7 .cse3 .cse4 .cse5) (or .cse9 (not (< 1 |old(~waterLevel~0)|)) .cse7 .cse3 .cse4)))) [2022-07-19 17:26:24,312 INFO L895 garLoopResultBuilder]: At program point L766-1(lines 747 771) the Hoare annotation is: (let ((.cse20 (= ~pumpRunning~0 0)) (.cse27 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse8 (not (= |old(~waterLevel~0)| 1))) (.cse6 (not (<= |old(~waterLevel~0)| 1))) (.cse16 (<= ~waterLevel~0 0)) (.cse19 (<= 0 ~waterLevel~0)) (.cse25 (<= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse26 (<= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~6#1|)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse20 .cse27)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse23 (and (<= 1 ~pumpRunning~0) .cse27)) (.cse2 (not (<= 0 |old(~waterLevel~0)|))) (.cse5 (not (<= |old(~waterLevel~0)| 0))) (.cse10 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (< 0 (+ |timeShift_processEnvironment_~tmp~6#1| 1))) (.cse13 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse14 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse15 (<= |timeShift_processEnvironment_~tmp~6#1| 0)) (.cse21 (= ~waterLevel~0 1)) (.cse17 (<= 1 ~switchedOnBeforeTS~0)) (.cse18 (<= 0 |timeShift_isMethaneAlarm_#res#1|)) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse22 (not (< 1 |old(~waterLevel~0)|))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0)) (.cse24 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse0 .cse1 .cse2 .cse7 .cse4) (or .cse8 .cse9 .cse7 .cse4 .cse10 (and .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19)) (or .cse0 .cse8 .cse3 (and .cse20 .cse21) .cse4) (or .cse0 .cse1 .cse22 .cse7 .cse23 .cse4 .cse24) (or .cse6 .cse9 (not (<= 1 |old(~waterLevel~0)|)) .cse3 (and .cse20 .cse13 .cse16 .cse17 .cse25 .cse19 .cse26) .cse4 .cse24 .cse10) (or .cse9 .cse22 .cse3 (and .cse20 .cse13 .cse21 .cse17 .cse25 .cse26) .cse4 .cse24) (or (and .cse20 .cse13 .cse27 .cse17 .cse25 .cse26) .cse9 .cse2 .cse3 .cse4 .cse24 .cse5 .cse10) (or .cse0 .cse1 .cse3 .cse23 .cse4 .cse24 (not (<= 2 |old(~waterLevel~0)|))) (or .cse9 .cse2 .cse7 (and .cse11 .cse12 .cse13 .cse14 .cse15 .cse27 .cse17 .cse18) .cse4 .cse5 .cse10) (or (and .cse11 .cse12 .cse13 .cse14 .cse15 .cse21 .cse17 .cse18) .cse9 .cse22 .cse7 .cse4 .cse24)))) [2022-07-19 17:26:24,312 INFO L895 garLoopResultBuilder]: At program point L795(lines 788 798) the Hoare annotation is: (let ((.cse5 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse16 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (<= 0 |timeShift_isMethaneAlarm_#res#1|)) (.cse15 (not (<= |old(~waterLevel~0)| 0))) (.cse20 (not (<= 1 |old(~waterLevel~0)|))) (.cse21 (<= ~waterLevel~0 0)) (.cse22 (<= 0 ~waterLevel~0)) (.cse18 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse14 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse4 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse6 (<= 1 ~waterLevel~0)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse17 (<= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse11 (not (<= 2 |old(~waterLevel~0)|))) (.cse19 (not (<= |old(~waterLevel~0)| 1))) (.cse12 (not (= |old(~pumpRunning~0)| 0))) (.cse13 (not (<= 0 |old(~waterLevel~0)|))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse9 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) .cse9 .cse10 .cse11) (or .cse12 .cse13 .cse14 .cse9 .cse15) (or .cse12 .cse14 .cse9 .cse10 .cse11) (or (and .cse2 .cse3 .cse16 .cse7 .cse17) .cse0 .cse13 .cse14 .cse9 .cse15 .cse18) (or .cse19 .cse0 .cse20 .cse1 (and .cse2 .cse3 .cse5 .cse21 .cse7 .cse8 .cse22) .cse9 .cse18) (or .cse0 .cse13 .cse1 .cse9 (and .cse2 .cse3 .cse5 .cse16 .cse7 .cse8) .cse15 .cse18) (or .cse12 .cse1 .cse9 .cse10 .cse11) (or .cse19 .cse12 .cse20 .cse14 .cse9) (or .cse19 .cse0 .cse20 (and .cse2 .cse3 .cse21 .cse7 .cse17 .cse22) .cse14 .cse9 .cse18) (or .cse0 .cse14 .cse9 .cse10 (and .cse2 .cse3 .cse4 .cse6 .cse7 .cse17) .cse11) (or .cse19 .cse12 .cse13 .cse1 .cse9))) [2022-07-19 17:26:24,312 INFO L899 garLoopResultBuilder]: For program point L700-1(lines 700 706) no Hoare annotation was computed. [2022-07-19 17:26:24,312 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 686 712) no Hoare annotation was computed. [2022-07-19 17:26:24,312 INFO L895 garLoopResultBuilder]: At program point L181(line 181) the Hoare annotation is: (let ((.cse16 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (= ~pumpRunning~0 0)) (.cse15 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|))) (let ((.cse7 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (and .cse14 .cse15 (= ~waterLevel~0 1))) (.cse2 (not (= |old(~waterLevel~0)| 1))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse15 .cse16)) (.cse10 (not (<= 2 |old(~waterLevel~0)|))) (.cse13 (and .cse14 .cse15 .cse16)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (not (<= 0 |old(~waterLevel~0)|))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0)) (.cse12 (not (<= |old(~waterLevel~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (not (<= |old(~waterLevel~0)| 1)) .cse5 (not (<= 1 |old(~waterLevel~0)|)) .cse3 .cse4 .cse6 .cse7) (or .cse5 .cse8 .cse4 .cse9 .cse6 .cse10) (or .cse5 .cse11 .cse3 .cse4 .cse6 .cse12 .cse7) (or .cse5 .cse11 .cse8 .cse4 .cse9 .cse6 .cse7) (or .cse13 .cse1 .cse11 .cse8 .cse4 .cse12) (or .cse0 .cse1 .cse2 .cse8 .cse4) (or .cse13 .cse1 .cse8 .cse4 .cse9 .cse10) (or .cse13 .cse1 (not (< 1 |old(~waterLevel~0)|)) .cse3 .cse4 .cse9) (or .cse5 .cse3 .cse4 .cse9 .cse6 .cse10) (or .cse13 .cse1 .cse11 .cse3 .cse4 .cse12)))) [2022-07-19 17:26:24,313 INFO L899 garLoopResultBuilder]: For program point L693(lines 693 699) no Hoare annotation was computed. [2022-07-19 17:26:24,313 INFO L899 garLoopResultBuilder]: For program point L181-1(line 181) no Hoare annotation was computed. [2022-07-19 17:26:24,313 INFO L899 garLoopResultBuilder]: For program point L693-2(lines 689 711) no Hoare annotation was computed. [2022-07-19 17:26:24,313 INFO L899 garLoopResultBuilder]: For program point L755(lines 755 763) no Hoare annotation was computed. [2022-07-19 17:26:24,313 INFO L899 garLoopResultBuilder]: For program point L751(lines 751 768) no Hoare annotation was computed. [2022-07-19 17:26:24,313 INFO L899 garLoopResultBuilder]: For program point L198(lines 198 208) no Hoare annotation was computed. [2022-07-19 17:26:24,313 INFO L899 garLoopResultBuilder]: For program point L194(lines 194 211) no Hoare annotation was computed. [2022-07-19 17:26:24,313 INFO L895 garLoopResultBuilder]: At program point L194-1(lines 186 214) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse10 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse28 (<= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|)) (.cse14 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~1#1| ~waterLevel~0)) (.cse26 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~pumpRunning~0 0)) (.cse35 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse36 (<= 2 ~waterLevel~0)) (.cse37 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~1#1| 2)) (.cse24 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse17 (not .cse5))) (let ((.cse3 (not (<= 0 |old(~waterLevel~0)|))) (.cse7 (not (<= |old(~waterLevel~0)| 0))) (.cse21 (not (< 1 |old(~waterLevel~0)|))) (.cse22 (and .cse26 .cse9 .cse35 .cse36 .cse37 .cse24 .cse17)) (.cse23 (and (<= 1 ~pumpRunning~0) .cse35 .cse36 .cse37 .cse24 .cse17)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (and .cse26 .cse9 .cse10 .cse28 .cse14 .cse24 .cse17)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse27 (< 0 (+ |timeShift_processEnvironment_~tmp~6#1| 1))) (.cse12 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse29 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse13 (<= 1 ~waterLevel~0)) (.cse30 (<= |timeShift_processEnvironment_~tmp~6#1| 0)) (.cse31 (<= 0 |timeShift_isMethaneAlarm_#res#1|)) (.cse20 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse34 (not (<= 1 |old(~waterLevel~0)|))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse11 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse32 (<= ~waterLevel~0 0)) (.cse15 (<= 1 ~switchedOnBeforeTS~0)) (.cse16 (<= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse33 (<= 0 ~waterLevel~0)) (.cse18 (<= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~6#1|)) (.cse19 (not (<= |old(~waterLevel~0)| 2))) (.cse25 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse2 .cse3 .cse6 .cse5 .cse7) (or .cse8 (and .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18) .cse6 .cse5 .cse19 .cse20) (or .cse1 .cse21 .cse6 .cse22 .cse23 .cse5 .cse19) (or (and .cse9 .cse10 .cse11 .cse14 .cse24 .cse15 .cse16 .cse17 .cse18) .cse8 .cse3 .cse6 .cse5 .cse19 .cse7 .cse25) (or .cse8 .cse3 .cse4 .cse5 (and .cse26 .cse10 .cse27 .cse11 .cse28 .cse29 .cse30 .cse14 .cse24 .cse15 .cse31) .cse7 .cse25) (or (and .cse26 .cse10 .cse27 .cse11 .cse28 .cse29 .cse30 .cse14 .cse32 .cse15 .cse31 .cse33) .cse0 .cse8 .cse34 .cse4 .cse5 .cse25) (or .cse1 .cse21 .cse4 .cse22 .cse23 .cse5 .cse19) (or .cse0 .cse1 .cse2 .cse34 .cse6 .cse5) (or .cse8 .cse4 (and .cse26 .cse10 .cse27 .cse11 .cse28 .cse12 .cse29 .cse13 .cse30 .cse14 .cse15 .cse31) .cse5 .cse19 .cse20) (or .cse0 .cse8 .cse34 .cse6 .cse5 (and .cse9 .cse10 .cse11 .cse14 .cse32 .cse15 .cse16 .cse17 .cse33 .cse18) .cse19 .cse25))))) [2022-07-19 17:26:24,314 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2022-07-19 17:26:24,314 INFO L895 garLoopResultBuilder]: At program point L661(lines 656 664) the Hoare annotation is: (let ((.cse30 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse5 (= 0 ~systemActive~0)) (.cse9 (= ~pumpRunning~0 0)) (.cse10 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse6 (not (<= 1 |old(~waterLevel~0)|))) (.cse22 (<= ~waterLevel~0 0)) (.cse24 (<= 0 ~waterLevel~0)) (.cse3 (and .cse9 .cse10 .cse12)) (.cse2 (not (<= 0 |old(~waterLevel~0)|))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse25 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse26 (< 0 (+ |timeShift_processEnvironment_~tmp~6#1| 1))) (.cse27 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse28 (<= |timeShift_processEnvironment_~tmp~6#1| 0)) (.cse29 (<= 0 |timeShift_isMethaneAlarm_#res#1|)) (.cse16 (not (<= |old(~waterLevel~0)| 0))) (.cse17 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse13 (<= 1 ~switchedOnBeforeTS~0)) (.cse14 (<= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse23 (not .cse5)) (.cse15 (<= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~6#1|)) (.cse18 (and .cse9 .cse30 .cse12)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse19 (and (<= 1 ~pumpRunning~0) .cse30 .cse12)) (.cse20 (not (<= |old(~waterLevel~0)| 2))) (.cse21 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse6 .cse3 .cse7 .cse5) (or .cse8 .cse2 (and .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15) .cse7 .cse5 .cse16 .cse17) (or .cse18 .cse1 .cse4 .cse19 .cse5 .cse20 .cse21) (or (and .cse9 .cse10 .cse11 .cse22 .cse13 .cse14 .cse23 .cse24 .cse15) .cse0 .cse8 .cse6 .cse7 .cse5 .cse17) (or .cse0 .cse8 .cse6 .cse4 .cse5 (and .cse25 .cse10 .cse26 .cse11 .cse27 .cse28 .cse22 .cse13 .cse29 .cse24) .cse17) (or .cse1 .cse2 .cse3 .cse7 .cse5 .cse16) (or .cse8 (not (< 1 |old(~waterLevel~0)|)) .cse4 (and .cse25 .cse10 .cse26 .cse11 .cse27 .cse28 (= ~waterLevel~0 1) .cse13 .cse29) .cse5 .cse20) (or .cse8 .cse2 .cse4 .cse5 (and .cse25 .cse10 .cse26 .cse11 .cse27 .cse28 .cse12 .cse13 .cse29) .cse16 .cse17) (or .cse8 .cse7 (and .cse9 .cse10 .cse11 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0) .cse13 .cse14 .cse23 .cse15) .cse5 .cse20 .cse21) (or .cse18 .cse1 .cse7 .cse19 .cse5 .cse20 .cse21)))) [2022-07-19 17:26:24,314 INFO L895 garLoopResultBuilder]: At program point L785(lines 780 787) the Hoare annotation is: (let ((.cse10 (not (<= 2 |old(~waterLevel~0)|))) (.cse12 (= ~pumpRunning~0 0)) (.cse13 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse14 (<= 1 ~switchedOnBeforeTS~0)) (.cse15 (<= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse16 (<= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~6#1|)) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (not (<= |old(~waterLevel~0)| 0))) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse1 (not (<= 1 |old(~waterLevel~0)|))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse11 (not (<= |old(~waterLevel~0)| 1))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse8 .cse3 .cse9) (or .cse6 .cse8 .cse3 .cse4 .cse10) (or .cse0 .cse2 .cse3 .cse4 .cse10) (or .cse0 .cse7 .cse2 .cse3 .cse9 .cse5) (or .cse6 .cse2 .cse3 .cse4 .cse10) (or .cse11 .cse0 .cse1 .cse8 (and .cse12 .cse13 (<= ~waterLevel~0 0) .cse14 .cse15 (<= 0 ~waterLevel~0) .cse16) .cse3 .cse4 .cse5) (or .cse0 (not (< 1 |old(~waterLevel~0)|)) .cse8 (and .cse12 .cse13 (= ~waterLevel~0 1) .cse14 .cse15 .cse16) .cse3 .cse4) (or (and .cse12 .cse13 (= |old(~waterLevel~0)| ~waterLevel~0) .cse14 .cse15 .cse16) .cse0 .cse7 .cse8 .cse3 .cse4 .cse9 .cse5) (or .cse11 .cse6 .cse1 .cse8 .cse3) (or .cse11 .cse6 .cse7 .cse2 .cse3))) [2022-07-19 17:26:24,314 INFO L899 garLoopResultBuilder]: For program point L199(lines 199 205) no Hoare annotation was computed. [2022-07-19 17:26:24,314 INFO L895 garLoopResultBuilder]: At program point L761(line 761) the Hoare annotation is: (let ((.cse16 (not (<= 2 |old(~waterLevel~0)|))) (.cse12 (not (<= 1 ~methaneLevelCritical~0))) (.cse15 (not (<= |old(~waterLevel~0)| 0))) (.cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (< 0 (+ |timeShift_processEnvironment_~tmp~6#1| 1))) (.cse6 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse7 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse8 (<= |timeShift_processEnvironment_~tmp~6#1| 0)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse10 (<= 0 |timeShift_isMethaneAlarm_#res#1|)) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse18 (not (< 1 |old(~waterLevel~0)|))) (.cse13 (not (<= |old(~waterLevel~0)| 2))) (.cse17 (not (<= |old(~waterLevel~0)| 1))) (.cse14 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (not (<= 0 |old(~waterLevel~0)|))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5 .cse6 .cse7 .cse8 (<= ~waterLevel~0 0) .cse9 .cse10 (<= 0 ~waterLevel~0))) (or .cse0 .cse11 .cse12 .cse2 .cse13 .cse3) (or .cse14 .cse11 .cse12 .cse2 .cse15) (or .cse14 .cse12 .cse2 .cse13 .cse16) (or .cse14 .cse1 .cse2 .cse13 .cse16) (or .cse17 .cse14 (not (<= 1 |old(~waterLevel~0)|)) .cse12 .cse2) (or .cse0 .cse18 .cse12 .cse2 .cse13) (or .cse0 .cse11 .cse1 (and .cse4 .cse5 .cse6 .cse7 .cse8 (= |old(~waterLevel~0)| ~waterLevel~0) .cse9 .cse10) .cse2 .cse15 .cse3) (or (and .cse4 .cse5 .cse6 .cse7 .cse8 (= ~waterLevel~0 1) .cse9 .cse10) .cse0 .cse18 .cse1 .cse2 .cse13) (or .cse17 .cse14 .cse11 .cse1 .cse2))) [2022-07-19 17:26:24,315 INFO L895 garLoopResultBuilder]: At program point L183(lines 176 185) the Hoare annotation is: (let ((.cse11 (= ~waterLevel~0 1)) (.cse19 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse20 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= 0 ~systemActive~0))) (let ((.cse10 (= ~pumpRunning~0 0)) (.cse17 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse18 (let ((.cse21 (<= 1 ~pumpRunning~0)) (.cse22 (not .cse3))) (or (and .cse21 .cse19 .cse11 .cse20 .cse22) (and .cse21 .cse19 (<= 2 ~waterLevel~0) .cse20 .cse22))))) (let ((.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse12 (and (= 2 ~waterLevel~0) .cse17 .cse18)) (.cse14 (and (<= ~waterLevel~0 1) .cse17 .cse18)) (.cse15 (and .cse19 .cse17 .cse20)) (.cse13 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (<= |old(~waterLevel~0)| 0))) (.cse16 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse10 .cse17)) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse6 .cse7 .cse3 .cse8) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse6 .cse2 .cse3) (or .cse0 .cse9 .cse7 (and .cse10 .cse11) .cse3) (or .cse12 .cse13 .cse2 .cse14 .cse3 .cse4 .cse5) (or .cse15 .cse13 .cse6 .cse7 .cse3 .cse4 .cse16) (or .cse13 (and .cse17 .cse18) .cse7 .cse3 .cse4 .cse5) (or .cse9 .cse12 .cse13 .cse2 .cse14 .cse3 .cse16) (or .cse15 .cse13 .cse6 .cse2 .cse3 .cse8 .cse16) (or .cse0 .cse1 .cse7 .cse3 .cse4 .cse5))))) [2022-07-19 17:26:24,315 INFO L895 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: (let ((.cse9 (not (<= |old(~waterLevel~0)| 0))) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse10 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (<= 1 |old(~waterLevel~0)|))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse11 (not (<= |old(~waterLevel~0)| 1))) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse6 .cse7 .cse3 .cse4 .cse5) (or .cse8 .cse6 .cse7 .cse3 .cse9) (or .cse8 .cse7 .cse3 .cse4 .cse10) (or .cse0 .cse2 .cse3 .cse4 .cse10) (or .cse0 .cse6 .cse2 .cse3 .cse9 .cse5) (or .cse8 .cse2 .cse3 .cse4 .cse10) (or .cse11 .cse8 .cse1 .cse7 .cse3) (or .cse0 (not (< 1 |old(~waterLevel~0)|)) .cse7 .cse3 .cse4) (or .cse11 .cse8 .cse6 .cse2 .cse3))) [2022-07-19 17:26:24,315 INFO L895 garLoopResultBuilder]: At program point L629(lines 624 632) the Hoare annotation is: (let ((.cse15 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse16 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse17 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse14 (and .cse15 .cse16 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0) .cse17)) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse13 (and .cse15 .cse16 (= |old(~waterLevel~0)| ~waterLevel~0) .cse17)) (.cse4 (not (<= |old(~waterLevel~0)| 0))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (not (<= 1 |old(~waterLevel~0)|))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse11 (and .cse15 .cse16 (<= ~waterLevel~0 0) .cse17 (<= 0 ~waterLevel~0))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse12 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse7 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 0 |old(~waterLevel~0)|))) (.cse10 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse2 .cse3 .cse5 .cse6) (or .cse7 .cse8 .cse9 .cse10 .cse11 .cse3 .cse12) (or .cse13 .cse8 .cse1 .cse2 .cse3 .cse5 .cse4 .cse12) (or .cse14 .cse8 .cse10 .cse3 .cse5 .cse6) (or .cse14 .cse8 .cse2 .cse3 .cse5 .cse6) (or .cse0 .cse10 .cse3 .cse5 .cse6) (or .cse7 .cse0 .cse9 .cse2 .cse3) (or .cse13 .cse8 .cse1 .cse10 .cse3 .cse4 .cse12) (or .cse7 .cse8 .cse9 .cse2 .cse11 .cse3 .cse5 .cse12) (or .cse7 .cse0 .cse1 .cse10 .cse3)))) [2022-07-19 17:26:24,315 INFO L899 garLoopResultBuilder]: For program point L592(lines 592 596) no Hoare annotation was computed. [2022-07-19 17:26:24,315 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 686 712) the Hoare annotation is: (let ((.cse16 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (= ~pumpRunning~0 0)) (.cse15 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|))) (let ((.cse7 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (and .cse14 .cse15 (= ~waterLevel~0 1))) (.cse2 (not (= |old(~waterLevel~0)| 1))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse15 .cse16)) (.cse10 (not (<= 2 |old(~waterLevel~0)|))) (.cse13 (and .cse14 .cse15 .cse16)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (not (<= 0 |old(~waterLevel~0)|))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0)) (.cse12 (not (<= |old(~waterLevel~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (not (<= |old(~waterLevel~0)| 1)) .cse5 (not (<= 1 |old(~waterLevel~0)|)) .cse3 .cse4 .cse6 .cse7) (or .cse5 .cse8 .cse4 .cse9 .cse6 .cse10) (or .cse5 .cse11 .cse3 .cse4 .cse6 .cse12 .cse7) (or .cse5 .cse11 .cse8 .cse4 .cse9 .cse6 .cse7) (or .cse13 .cse1 .cse11 .cse8 .cse4 .cse12) (or .cse0 .cse1 .cse2 .cse8 .cse4) (or .cse13 .cse1 .cse8 .cse4 .cse9 .cse10) (or .cse13 .cse1 (not (< 1 |old(~waterLevel~0)|)) .cse3 .cse4 .cse9) (or .cse5 .cse3 .cse4 .cse9 .cse6 .cse10) (or .cse13 .cse1 .cse11 .cse3 .cse4 .cse12)))) [2022-07-19 17:26:24,316 INFO L895 garLoopResultBuilder]: At program point L592-2(lines 588 599) the Hoare annotation is: (let ((.cse15 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse16 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse12 (and .cse15 (<= ~waterLevel~0 0) .cse16 (<= 0 ~waterLevel~0))) (.cse14 (and .cse15 (= |old(~waterLevel~0)| ~waterLevel~0) .cse16)) (.cse4 (not (<= |old(~waterLevel~0)| 0))) (.cse13 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse11 (not (<= 1 |old(~waterLevel~0)|))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (and .cse15 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0) .cse16)) (.cse8 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (not (<= 2 |old(~waterLevel~0)|))) (.cse10 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 0 |old(~waterLevel~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse3 .cse8 .cse9) (or .cse0 .cse2 .cse3 .cse8 .cse9) (or .cse10 .cse5 .cse11 .cse2 .cse3 .cse8 .cse12 .cse13) (or (not (= |old(~waterLevel~0)| 1)) .cse5 .cse6 .cse3 .cse12 .cse13) (or .cse14 .cse5 .cse1 .cse6 .cse3 .cse4 .cse13) (or .cse0 .cse6 .cse3 .cse8 .cse9) (or .cse14 .cse5 .cse1 .cse2 .cse3 .cse8 .cse4 .cse13) (or .cse10 .cse0 .cse11 .cse2 .cse3) (or .cse5 .cse2 .cse7 .cse3 .cse8 .cse9) (or .cse10 .cse0 .cse1 .cse6 .cse3)))) [2022-07-19 17:26:24,316 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 686 712) no Hoare annotation was computed. [2022-07-19 17:26:24,316 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-07-19 17:26:24,316 INFO L895 garLoopResultBuilder]: At program point L196(line 196) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0)) (.cse22 (= ~pumpRunning~0 0)) (.cse9 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse14 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~1#1| ~waterLevel~0)) (.cse30 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse5 (and .cse22 .cse9 .cse14 .cse30)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse28 (not (<= 0 |old(~waterLevel~0)|))) (.cse29 (not (<= |old(~waterLevel~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (< 0 (+ |timeShift_processEnvironment_~tmp~6#1| 1))) (.cse23 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse12 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse24 (<= 1 ~waterLevel~0)) (.cse13 (<= |timeShift_processEnvironment_~tmp~6#1| 0)) (.cse17 (<= 0 |timeShift_isMethaneAlarm_#res#1|)) (.cse21 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse11 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse15 (<= ~waterLevel~0 0)) (.cse16 (<= 1 ~switchedOnBeforeTS~0)) (.cse25 (<= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse26 (not .cse4)) (.cse18 (<= 0 ~waterLevel~0)) (.cse27 (<= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~6#1|)) (.cse20 (not (<= |old(~waterLevel~0)| 2))) (.cse19 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or (not (= |old(~waterLevel~0)| 1)) .cse6 .cse7 (and .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18) .cse4 .cse19) (or .cse1 .cse3 .cse4 .cse20 .cse21) (or .cse6 (and .cse22 .cse9 .cse11 .cse23 .cse24 .cse14 .cse16 .cse25 .cse26 .cse27) .cse3 .cse4 .cse20 .cse21) (or .cse1 .cse28 .cse3 .cse4 .cse5 .cse29) (or .cse0 .cse1 .cse28 .cse7 .cse4 .cse5) (or (and .cse22 .cse9 .cse11 .cse14 .cse30 .cse16 .cse25 .cse27) .cse6 .cse28 .cse3 .cse4 .cse20 .cse29 .cse19) (or .cse1 .cse7 .cse4 .cse20 .cse21) (or (and .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse30 .cse16 .cse17) .cse6 .cse28 .cse7 .cse4 .cse29 .cse19) (or .cse6 .cse7 (and .cse8 .cse9 .cse10 .cse11 .cse23 .cse12 .cse24 .cse13 .cse14 .cse16 .cse17) .cse4 .cse20 .cse21) (or .cse0 .cse6 .cse2 .cse3 .cse4 (and .cse22 .cse9 .cse11 .cse14 .cse15 .cse16 .cse25 .cse26 .cse18 .cse27) .cse20 .cse19)))) [2022-07-19 17:26:24,316 INFO L899 garLoopResultBuilder]: For program point L196-1(line 196) no Hoare annotation was computed. [2022-07-19 17:26:24,316 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 61 90) no Hoare annotation was computed. [2022-07-19 17:26:24,317 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 61 90) the Hoare annotation is: true [2022-07-19 17:26:24,317 INFO L902 garLoopResultBuilder]: At program point L86(lines 61 90) the Hoare annotation is: true [2022-07-19 17:26:24,317 INFO L899 garLoopResultBuilder]: For program point L82(line 82) no Hoare annotation was computed. [2022-07-19 17:26:24,317 INFO L899 garLoopResultBuilder]: For program point L75(lines 75 79) no Hoare annotation was computed. [2022-07-19 17:26:24,317 INFO L902 garLoopResultBuilder]: At program point L75-1(lines 75 79) the Hoare annotation is: true [2022-07-19 17:26:24,317 INFO L899 garLoopResultBuilder]: For program point L72(line 72) no Hoare annotation was computed. [2022-07-19 17:26:24,317 INFO L902 garLoopResultBuilder]: At program point L71-2(lines 71 85) the Hoare annotation is: true [2022-07-19 17:26:24,317 INFO L902 garLoopResultBuilder]: At program point L67(line 67) the Hoare annotation is: true [2022-07-19 17:26:24,317 INFO L899 garLoopResultBuilder]: For program point L67-1(line 67) no Hoare annotation was computed. [2022-07-19 17:26:24,317 INFO L899 garLoopResultBuilder]: For program point L927(lines 927 933) no Hoare annotation was computed. [2022-07-19 17:26:24,318 INFO L895 garLoopResultBuilder]: At program point L894(lines 890 896) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-19 17:26:24,318 INFO L899 garLoopResultBuilder]: For program point L927-1(lines 927 933) no Hoare annotation was computed. [2022-07-19 17:26:24,318 INFO L895 garLoopResultBuilder]: At program point L122(lines 118 124) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-19 17:26:24,318 INFO L899 garLoopResultBuilder]: For program point L151(lines 151 158) no Hoare annotation was computed. [2022-07-19 17:26:24,318 INFO L899 garLoopResultBuilder]: For program point L919(lines 919 923) no Hoare annotation was computed. [2022-07-19 17:26:24,318 INFO L899 garLoopResultBuilder]: For program point L151-2(lines 151 158) no Hoare annotation was computed. [2022-07-19 17:26:24,318 INFO L902 garLoopResultBuilder]: At program point L135(lines 127 137) the Hoare annotation is: true [2022-07-19 17:26:24,318 INFO L895 garLoopResultBuilder]: At program point L965(lines 916 966) the Hoare annotation is: false [2022-07-19 17:26:24,318 INFO L902 garLoopResultBuilder]: At program point L160(lines 141 163) the Hoare annotation is: true [2022-07-19 17:26:24,318 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-19 17:26:24,319 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-19 17:26:24,319 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-19 17:26:24,319 INFO L895 garLoopResultBuilder]: At program point L887(lines 883 889) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-19 17:26:24,319 INFO L895 garLoopResultBuilder]: At program point L173(lines 168 175) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-19 17:26:24,319 INFO L899 garLoopResultBuilder]: For program point L937(lines 937 943) no Hoare annotation was computed. [2022-07-19 17:26:24,319 INFO L899 garLoopResultBuilder]: For program point L937-1(lines 937 943) no Hoare annotation was computed. [2022-07-19 17:26:24,319 INFO L895 garLoopResultBuilder]: At program point L962(lines 917 964) the Hoare annotation is: (let ((.cse5 (<= ~waterLevel~0 0)) (.cse8 (<= 0 ~waterLevel~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse11 (= ~waterLevel~0 1)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse10 (<= 1 ~methaneLevelCritical~0)) (.cse9 (= ~pumpRunning~0 0)) (.cse12 (= 2 ~waterLevel~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse7 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse9 .cse10 .cse2 .cse3 .cse4 .cse11 .cse7) (and .cse9 .cse1 .cse2 .cse3 .cse4 .cse5 .cse7 .cse8) (and .cse0 .cse12 .cse1 .cse2 .cse3 .cse4 .cse7) (and .cse9 .cse10 .cse2 .cse3 .cse4 .cse5 .cse7 .cse8) (and .cse0 .cse10 .cse12 .cse2 .cse3 .cse4 .cse7) (and .cse9 .cse1 .cse2 .cse3 (<= ~waterLevel~0 1) .cse4 (<= 1 ~waterLevel~0) .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse11 .cse6 .cse7) (and .cse9 .cse10 .cse12 .cse2 .cse3 .cse4 .cse7) (and .cse9 .cse12 .cse1 .cse2 .cse3 .cse4 .cse7))) [2022-07-19 17:26:24,319 INFO L895 garLoopResultBuilder]: At program point L929(line 929) the Hoare annotation is: (let ((.cse9 (<= ~waterLevel~0 0)) (.cse6 (<= 0 ~waterLevel~0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse12 (= ~waterLevel~0 1)) (.cse10 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse11 (= 2 ~waterLevel~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (<= ~waterLevel~0 1) .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse3 .cse4 .cse9 .cse10 .cse5 .cse6) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse9 .cse5 .cse6) (and .cse7 .cse11 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse7 .cse1 .cse11 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse12 .cse5) (and .cse7 .cse8 .cse2 .cse3 .cse4 .cse12 .cse10 .cse5) (and .cse0 .cse1 .cse11 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse11 .cse8 .cse2 .cse3 .cse4 .cse5))) [2022-07-19 17:26:24,320 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-19 17:26:24,320 INFO L895 garLoopResultBuilder]: At program point L868(lines 863 870) the Hoare annotation is: (let ((.cse8 (<= ~waterLevel~0 0)) (.cse6 (<= 0 ~waterLevel~0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse11 (= ~waterLevel~0 1)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse10 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse12 (= 2 ~waterLevel~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (<= ~waterLevel~0 1) .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse8 .cse9 .cse5 .cse6) (and .cse0 .cse10 .cse2 .cse3 .cse4 .cse11 .cse5) (and .cse7 .cse10 .cse2 .cse3 .cse4 (<= ~waterLevel~0 2) .cse9 .cse5 .cse6) (and .cse7 .cse12 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse10 .cse2 .cse3 .cse4 .cse8 .cse5 .cse6) (and .cse7 .cse10 .cse12 .cse2 .cse3 .cse4 .cse5) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse11 .cse9 .cse5) (and .cse0 .cse10 .cse12 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse12 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-07-19 17:26:24,320 INFO L899 garLoopResultBuilder]: For program point L955(lines 955 959) no Hoare annotation was computed. [2022-07-19 17:26:24,320 INFO L895 garLoopResultBuilder]: At program point L955-2(lines 947 960) the Hoare annotation is: (let ((.cse8 (<= ~waterLevel~0 0)) (.cse6 (<= 0 ~waterLevel~0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse11 (= ~waterLevel~0 1)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse10 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse12 (= 2 ~waterLevel~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (<= ~waterLevel~0 1) .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse8 .cse9 .cse5 .cse6) (and .cse0 .cse10 .cse2 .cse3 .cse4 .cse11 .cse5) (and .cse7 .cse10 .cse2 .cse3 .cse4 (<= ~waterLevel~0 2) .cse9 .cse5 .cse6) (and .cse7 .cse12 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse10 .cse2 .cse3 .cse4 .cse8 .cse5 .cse6) (and .cse7 .cse10 .cse12 .cse2 .cse3 .cse4 .cse5) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse11 .cse9 .cse5) (and .cse0 .cse10 .cse12 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse12 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-07-19 17:26:24,320 INFO L899 garLoopResultBuilder]: For program point L918(lines 917 964) no Hoare annotation was computed. [2022-07-19 17:26:24,320 INFO L899 garLoopResultBuilder]: For program point L947(lines 947 960) no Hoare annotation was computed. [2022-07-19 17:26:24,320 INFO L895 garLoopResultBuilder]: At program point L939(line 939) the Hoare annotation is: (let ((.cse7 (<= 0 ~waterLevel~0)) (.cse8 (<= 1 ~pumpRunning~0)) (.cse4 (<= ~waterLevel~0 1)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse10 (= 2 ~waterLevel~0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse8 .cse9 .cse2 .cse3 .cse5 (<= ~waterLevel~0 2) (<= 1 ~switchedOnBeforeTS~0) .cse6 .cse7) (and .cse0 .cse9 .cse2 .cse3 .cse5 (<= ~waterLevel~0 0) .cse6 .cse7) (and .cse8 .cse10 .cse9 .cse2 .cse3 .cse5 .cse6) (and .cse8 .cse1 .cse10 .cse2 .cse3 .cse5 .cse6) (and .cse0 .cse9 .cse2 .cse3 .cse4 .cse5 (<= 1 ~waterLevel~0) .cse6) (and .cse0 .cse1 .cse10 .cse2 .cse3 .cse5 .cse6) (and .cse0 .cse10 .cse9 .cse2 .cse3 .cse5 .cse6))) [2022-07-19 17:26:24,321 INFO L902 garLoopResultBuilder]: At program point L968(lines 907 972) the Hoare annotation is: true [2022-07-19 17:26:24,321 INFO L895 garLoopResultBuilder]: At program point L902(lines 897 905) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-19 17:26:24,321 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 721 745) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse10 (not (<= ~waterLevel~0 0))) (.cse11 (not (<= 0 ~waterLevel~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse7 (not (<= 1 ~waterLevel~0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (<= ~waterLevel~0 1))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2 .cse3) (or (not (< 1 ~waterLevel~0)) .cse0 .cse1 .cse4 (not (<= ~waterLevel~0 2)) .cse3) (or .cse5 .cse6 .cse7 .cse2 .cse8 .cse3 .cse9) (or .cse0 .cse1 .cse10 .cse11 .cse4 .cse3) (or .cse5 .cse10 .cse11 .cse6 .cse2 .cse3 .cse9) (or .cse0 .cse1 .cse10 .cse11 .cse2 .cse3) (or .cse0 .cse1 .cse7 .cse2 .cse8 .cse3) (or .cse0 .cse1 .cse7 .cse4 .cse8 .cse3))) [2022-07-19 17:26:24,321 INFO L895 garLoopResultBuilder]: At program point L735(line 735) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse1 (not (<= ~waterLevel~0 0))) (.cse2 (not (<= 0 ~waterLevel~0))) (.cse6 (not (<= 1 ~waterLevel~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (<= ~waterLevel~0 1))) (.cse9 (not (< 1 ~waterLevel~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse10 (not (<= ~waterLevel~0 2))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0) (not .cse5)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse6 .cse7 .cse8 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse7 .cse4 .cse5) (or .cse9 .cse0 .cse3 .cse10 .cse4 .cse5) (or .cse2 (not (<= 1 |old(~pumpRunning~0)|)) .cse7 .cse8 .cse5 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse6 .cse3 .cse8 .cse4 .cse5) (or .cse9 .cse0 .cse7 .cse10 .cse4 .cse5)))) [2022-07-19 17:26:24,321 INFO L899 garLoopResultBuilder]: For program point L669(lines 669 675) no Hoare annotation was computed. [2022-07-19 17:26:24,321 INFO L895 garLoopResultBuilder]: At program point L859(lines 844 862) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse5 (= 0 ~systemActive~0))) (let ((.cse2 (not (<= 1 ~waterLevel~0))) (.cse4 (not (<= ~waterLevel~0 1))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (<= ~waterLevel~0 0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (not .cse5))) (.cse9 (not (<= 0 ~waterLevel~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse6 (not (= 2 ~waterLevel~0)) .cse3 .cse5) (or .cse0 .cse1 .cse2 .cse7 .cse4 .cse5) (or .cse0 .cse8 .cse1 .cse9 .cse7 .cse5) (or .cse9 (not (<= 1 |old(~pumpRunning~0)|)) .cse7 .cse4 .cse5 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (< 1 ~waterLevel~0)) .cse0 .cse6 .cse7 (not (<= ~waterLevel~0 2)) .cse5) (or .cse0 .cse8 .cse1 .cse9 .cse3 .cse5)))) [2022-07-19 17:26:24,321 INFO L899 garLoopResultBuilder]: For program point L729(lines 729 737) no Hoare annotation was computed. [2022-07-19 17:26:24,322 INFO L899 garLoopResultBuilder]: For program point L725(lines 725 742) no Hoare annotation was computed. [2022-07-19 17:26:24,322 INFO L899 garLoopResultBuilder]: For program point L853(lines 853 857) no Hoare annotation was computed. [2022-07-19 17:26:24,322 INFO L899 garLoopResultBuilder]: For program point L853-2(lines 853 857) no Hoare annotation was computed. [2022-07-19 17:26:24,322 INFO L895 garLoopResultBuilder]: At program point L777(lines 772 779) the Hoare annotation is: (let ((.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (<= 1 ~pumpRunning~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 0 ~waterLevel~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (<= ~waterLevel~0 1))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (not (< 1 ~waterLevel~0)) .cse5 .cse0 .cse6 (not (<= ~waterLevel~0 2)) .cse4) (or .cse0 .cse1 .cse6 .cse3 .cse4) (or .cse5 .cse0 (not (= 2 ~waterLevel~0)) .cse2 .cse4) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-07-19 17:26:24,322 INFO L895 garLoopResultBuilder]: At program point L740(line 740) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (<= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 0 ~waterLevel~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0)) (.cse8 (not (<= 1 ~switchedOnBeforeTS~0)))) (and (or .cse0 (not (= 2 ~waterLevel~0)) .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse5 .cse2) (or .cse0 .cse3 .cse1 .cse5 .cse2) (or .cse6 .cse7 (not (<= 1 ~waterLevel~0)) .cse4 .cse5 .cse2 .cse8) (or (not (< 1 ~waterLevel~0)) .cse0 .cse4 (not (<= ~waterLevel~0 2)) .cse2) (or .cse6 (not (<= ~waterLevel~0 0)) .cse3 .cse7 .cse4 .cse2 .cse8))) [2022-07-19 17:26:24,322 INFO L899 garLoopResultBuilder]: For program point L740-1(lines 721 745) no Hoare annotation was computed. [2022-07-19 17:26:24,322 INFO L895 garLoopResultBuilder]: At program point L674(lines 665 678) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0))) (let ((.cse7 (and .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (<= 0 ~waterLevel~0))) (.cse9 (not (<= ~waterLevel~0 1))) (.cse0 (not (< 1 ~waterLevel~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= ~waterLevel~0 2))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 (not (<= ~waterLevel~0 0)) .cse6 .cse7 .cse8 .cse5) (or .cse1 .cse7 (not (<= 1 ~waterLevel~0)) .cse8 .cse9 .cse5) (or .cse1 .cse6 .cse7 .cse3 .cse9 .cse5) (or .cse6 (not (<= 1 |old(~pumpRunning~0)|)) .cse8 .cse9 .cse5 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 .cse2 .cse8 .cse4 .cse5)))) [2022-07-19 17:26:24,322 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 721 745) no Hoare annotation was computed. [2022-07-19 17:26:24,323 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 600 611) no Hoare annotation was computed. [2022-07-19 17:26:24,323 INFO L899 garLoopResultBuilder]: For program point L604-1(lines 600 611) no Hoare annotation was computed. [2022-07-19 17:26:24,323 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 600 611) the Hoare annotation is: (let ((.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse10 (not (<= 0 |old(~waterLevel~0)|))) (.cse7 (not (<= 1 ~pumpRunning~0))) (.cse12 (not (<= |old(~waterLevel~0)| 0))) (.cse11 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (= ~pumpRunning~0 0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (= 0 ~systemActive~0)) (.cse8 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse4 .cse5 .cse8 .cse9) (or .cse1 .cse6 .cse4 .cse5 .cse8 .cse9) (or .cse3 .cse7 .cse4 .cse5 .cse8 .cse9) (or .cse0 .cse1 .cse10 .cse6 .cse4 .cse5) (or .cse0 .cse2 .cse3 .cse7 .cse4 .cse5 .cse11) (or .cse1 .cse10 .cse3 .cse4 .cse5 .cse12) (or .cse10 .cse3 .cse7 .cse4 .cse5 .cse12 .cse11) (or .cse1 .cse3 .cse4 .cse5 .cse8 .cse9))) [2022-07-19 17:26:24,323 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 799 807) no Hoare annotation was computed. [2022-07-19 17:26:24,323 INFO L902 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 799 807) the Hoare annotation is: true [2022-07-19 17:26:24,323 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 799 807) no Hoare annotation was computed. [2022-07-19 17:26:24,326 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:24,327 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-19 17:26:24,401 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.07 05:26:24 BoogieIcfgContainer [2022-07-19 17:26:24,402 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-19 17:26:24,402 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-19 17:26:24,402 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-19 17:26:24,402 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-19 17:26:24,403 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.07 05:25:56" (3/4) ... [2022-07-19 17:26:24,405 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-19 17:26:24,409 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-19 17:26:24,409 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-19 17:26:24,409 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-19 17:26:24,409 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-19 17:26:24,409 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-19 17:26:24,409 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-19 17:26:24,410 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-07-19 17:26:24,423 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 52 nodes and edges [2022-07-19 17:26:24,424 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-19 17:26:24,424 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-19 17:26:24,424 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-19 17:26:24,425 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-19 17:26:24,425 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-19 17:26:24,425 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-19 17:26:24,442 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-19 17:26:24,442 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-19 17:26:24,442 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-19 17:26:24,443 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 0) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((1 <= pumpRunning && 2 == waterLevel) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 0) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && 1 <= waterLevel) && !(0 == systemActive))) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 2 == waterLevel) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) [2022-07-19 17:26:24,444 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && ((((((((2 == waterLevel && \old(waterLevel) == waterLevel) && (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)))) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((waterLevel <= 1 && \old(waterLevel) == waterLevel) && (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || (\old(waterLevel) == waterLevel && (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(waterLevel) == 1) || ((2 == waterLevel && \old(waterLevel) == waterLevel) && (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))))) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((waterLevel <= 1 && \old(waterLevel) == waterLevel) && (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-07-19 17:26:24,444 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-19 17:26:24,444 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && !(0 == systemActive)) && 0 <= waterLevel) || ((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive))) || ((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((1 <= pumpRunning && 2 == waterLevel) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 0) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 2 == waterLevel) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) [2022-07-19 17:26:24,445 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && pumpRunning <= tmp___0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && pumpRunning <= tmp___0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(1 <= \old(pumpRunning)) || (((((((((pumpRunning == 0 && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && tmp == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && !(0 == systemActive)) && methaneLevelCritical <= tmp)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && 2 <= waterLevel) && tmp == 2) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || (((((1 <= pumpRunning && 2 == \result) && 2 <= waterLevel) && tmp == 2) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((((((((((((pumpRunning == 0 && waterLevel == \result) && \result == methaneLevelCritical) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && !(0 == systemActive)) && methaneLevelCritical <= tmp) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || ((((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && 0 < tmp + 1) && \result == methaneLevelCritical) && pumpRunning <= tmp___0) && \result <= 0) && tmp <= 0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && 0 < tmp + 1) && \result == methaneLevelCritical) && pumpRunning <= tmp___0) && \result <= 0) && tmp <= 0) && tmp == waterLevel) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result) && 0 <= waterLevel) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && 2 <= waterLevel) && tmp == 2) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || (((((1 <= pumpRunning && 2 == \result) && 2 <= waterLevel) && tmp == 2) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && pumpRunning <= tmp___0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || (((((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && 0 < tmp + 1) && \result == methaneLevelCritical) && pumpRunning <= tmp___0) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= waterLevel) && tmp <= 0) && tmp == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (((((((((pumpRunning == 0 && waterLevel == \result) && \result == methaneLevelCritical) && tmp == waterLevel) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && !(0 == systemActive)) && 0 <= waterLevel) && methaneLevelCritical <= tmp)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2022-07-19 17:26:24,445 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) || ((((((((pumpRunning == \old(pumpRunning) && 0 < tmp + 1) && \result == methaneLevelCritical) && \result <= 0) && tmp <= 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result) && 0 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == 0 && \result == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && 0 <= waterLevel) && methaneLevelCritical <= tmp)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((((((pumpRunning == 0 && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || (((((((pumpRunning == \old(pumpRunning) && 0 < tmp + 1) && \result == methaneLevelCritical) && \result <= 0) && tmp <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((((pumpRunning == \old(pumpRunning) && 0 < tmp + 1) && \result == methaneLevelCritical) && \result <= 0) && tmp <= 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2022-07-19 17:26:24,446 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(1 <= \old(pumpRunning)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-19 17:26:24,446 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || ((((((pumpRunning == 0 && waterLevel == \result) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((((((((pumpRunning == 0 && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && !(0 == systemActive)) && 0 <= waterLevel) && methaneLevelCritical <= tmp) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && 0 < tmp + 1) && \result == methaneLevelCritical) && \result <= 0) && tmp <= 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && 0 < tmp + 1) && \result == methaneLevelCritical) && \result <= 0) && tmp <= 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || ((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && 0 < tmp + 1) && \result == methaneLevelCritical) && \result <= 0) && tmp <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || ((((((((pumpRunning == 0 && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && !(0 == systemActive)) && methaneLevelCritical <= tmp)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-07-19 17:26:24,446 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-19 17:26:24,446 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \result <= 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result) && 0 <= waterLevel)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \result <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || (((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && 0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-19 17:26:24,446 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(0 <= waterLevel)) || (pumpRunning == 0 && \result == 1)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS))) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive) [2022-07-19 17:26:24,447 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(1 <= \old(pumpRunning)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == 0 && \result == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && 0 <= waterLevel) && methaneLevelCritical <= tmp)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((((((pumpRunning == 0 && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-19 17:26:24,447 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS))) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) [2022-07-19 17:26:24,447 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) && (((((!(1 < waterLevel) || 1 <= pumpRunning) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((1 <= pumpRunning || !(\old(pumpRunning) == 0)) || !(2 == waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2022-07-19 17:26:24,467 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-19 17:26:24,467 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-19 17:26:24,468 INFO L158 Benchmark]: Toolchain (without parser) took 28870.89ms. Allocated memory was 102.8MB in the beginning and 337.6MB in the end (delta: 234.9MB). Free memory was 69.9MB in the beginning and 255.8MB in the end (delta: -185.9MB). Peak memory consumption was 48.4MB. Max. memory is 16.1GB. [2022-07-19 17:26:24,468 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 102.8MB. Free memory was 57.7MB in the beginning and 57.6MB in the end (delta: 48.1kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-19 17:26:24,468 INFO L158 Benchmark]: CACSL2BoogieTranslator took 330.42ms. Allocated memory is still 102.8MB. Free memory was 69.6MB in the beginning and 68.7MB in the end (delta: 985.4kB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-07-19 17:26:24,469 INFO L158 Benchmark]: Boogie Procedure Inliner took 45.35ms. Allocated memory is still 102.8MB. Free memory was 68.7MB in the beginning and 66.2MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-19 17:26:24,469 INFO L158 Benchmark]: Boogie Preprocessor took 40.62ms. Allocated memory is still 102.8MB. Free memory was 66.2MB in the beginning and 64.9MB in the end (delta: 1.4MB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-19 17:26:24,470 INFO L158 Benchmark]: RCFGBuilder took 373.31ms. Allocated memory was 102.8MB in the beginning and 132.1MB in the end (delta: 29.4MB). Free memory was 64.8MB in the beginning and 106.6MB in the end (delta: -41.8MB). Peak memory consumption was 21.4MB. Max. memory is 16.1GB. [2022-07-19 17:26:24,470 INFO L158 Benchmark]: TraceAbstraction took 28004.16ms. Allocated memory was 132.1MB in the beginning and 337.6MB in the end (delta: 205.5MB). Free memory was 107.4MB in the beginning and 261.0MB in the end (delta: -153.6MB). Peak memory consumption was 207.8MB. Max. memory is 16.1GB. [2022-07-19 17:26:24,470 INFO L158 Benchmark]: Witness Printer took 65.23ms. Allocated memory is still 337.6MB. Free memory was 261.0MB in the beginning and 255.8MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-07-19 17:26:24,473 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 102.8MB. Free memory was 57.7MB in the beginning and 57.6MB in the end (delta: 48.1kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 330.42ms. Allocated memory is still 102.8MB. Free memory was 69.6MB in the beginning and 68.7MB in the end (delta: 985.4kB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 45.35ms. Allocated memory is still 102.8MB. Free memory was 68.7MB in the beginning and 66.2MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 40.62ms. Allocated memory is still 102.8MB. Free memory was 66.2MB in the beginning and 64.9MB in the end (delta: 1.4MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 373.31ms. Allocated memory was 102.8MB in the beginning and 132.1MB in the end (delta: 29.4MB). Free memory was 64.8MB in the beginning and 106.6MB in the end (delta: -41.8MB). Peak memory consumption was 21.4MB. Max. memory is 16.1GB. * TraceAbstraction took 28004.16ms. Allocated memory was 132.1MB in the beginning and 337.6MB in the end (delta: 205.5MB). Free memory was 107.4MB in the beginning and 261.0MB in the end (delta: -153.6MB). Peak memory consumption was 207.8MB. Max. memory is 16.1GB. * Witness Printer took 65.23ms. Allocated memory is still 337.6MB. Free memory was 261.0MB in the beginning and 255.8MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 91 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 27.9s, OverallIterations: 16, TraceHistogramMax: 9, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 6.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 14.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 5827 SdHoareTripleChecker+Valid, 4.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 5784 mSDsluCounter, 7891 SdHoareTripleChecker+Invalid, 3.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5625 mSDsCounter, 2315 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 8223 IncrementalHoareTripleChecker+Invalid, 10538 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 2315 mSolverCounterUnsat, 2266 mSDtfsCounter, 8223 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 2613 GetRequests, 2242 SyntacticMatches, 17 SemanticMatches, 354 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3111 ImplicationChecksByTransitivity, 2.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1319occurred in iteration=15, InterpolantAutomatonStates: 267, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 16 MinimizatonAttempts, 635 StatesRemovedByMinimization, 12 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 43 LocationsWithAnnotation, 3930 PreInvPairs, 4310 NumberOfFragments, 7876 HoareAnnotationTreeSize, 3930 FomulaSimplifications, 9385 FormulaSimplificationTreeSizeReduction, 1.2s HoareSimplificationTime, 43 FomulaSimplificationsInter, 86271 FormulaSimplificationTreeSizeReductionInter, 12.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 4.0s InterpolantComputationTime, 2703 NumberOfCodeBlocks, 2703 NumberOfCodeBlocksAsserted, 22 NumberOfCheckSat, 3565 ConstructedInterpolants, 0 QuantifiedInterpolants, 8654 SizeOfPredicates, 18 NumberOfNonLiveVariables, 4112 ConjunctsInSsa, 86 ConjunctsInUnsatCore, 27 InterpolantComputations, 11 PerfectInterpolantSequences, 3364/3960 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 588]: Loop Invariant Derived loop invariant: (((((((((((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 780]: Loop Invariant Derived loop invariant: ((((((((((((((!(1 <= \old(pumpRunning)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == 0 && \result == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && 0 <= waterLevel) && methaneLevelCritical <= tmp)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((((((pumpRunning == 0 && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 788]: Loop Invariant Derived loop invariant: ((((((((((((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \result <= 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result) && 0 <= waterLevel)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \result <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || (((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && 0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 176]: Loop Invariant Derived loop invariant: (((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && ((((((((2 == waterLevel && \old(waterLevel) == waterLevel) && (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)))) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((waterLevel <= 1 && \old(waterLevel) == waterLevel) && (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || (\old(waterLevel) == waterLevel && (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(waterLevel) == 1) || ((2 == waterLevel && \old(waterLevel) == waterLevel) && (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))))) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((waterLevel <= 1 && \old(waterLevel) == waterLevel) && (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 186]: Loop Invariant Derived loop invariant: ((((((((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && pumpRunning <= tmp___0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && pumpRunning <= tmp___0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(1 <= \old(pumpRunning)) || (((((((((pumpRunning == 0 && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && tmp == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && !(0 == systemActive)) && methaneLevelCritical <= tmp)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && 2 <= waterLevel) && tmp == 2) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || (((((1 <= pumpRunning && 2 == \result) && 2 <= waterLevel) && tmp == 2) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((((((((((((pumpRunning == 0 && waterLevel == \result) && \result == methaneLevelCritical) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && !(0 == systemActive)) && methaneLevelCritical <= tmp) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || ((((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && 0 < tmp + 1) && \result == methaneLevelCritical) && pumpRunning <= tmp___0) && \result <= 0) && tmp <= 0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && 0 < tmp + 1) && \result == methaneLevelCritical) && pumpRunning <= tmp___0) && \result <= 0) && tmp <= 0) && tmp == waterLevel) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result) && 0 <= waterLevel) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && 2 <= waterLevel) && tmp == 2) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || (((((1 <= pumpRunning && 2 == \result) && 2 <= waterLevel) && tmp == 2) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && pumpRunning <= tmp___0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || (((((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && 0 < tmp + 1) && \result == methaneLevelCritical) && pumpRunning <= tmp___0) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= waterLevel) && tmp <= 0) && tmp == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (((((((((pumpRunning == 0 && waterLevel == \result) && \result == methaneLevelCritical) && tmp == waterLevel) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && !(0 == systemActive)) && 0 <= waterLevel) && methaneLevelCritical <= tmp)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 916]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 907]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 118]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 61]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: ((((((((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || ((((((pumpRunning == 0 && waterLevel == \result) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((((((((pumpRunning == 0 && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && !(0 == systemActive)) && 0 <= waterLevel) && methaneLevelCritical <= tmp) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && 0 < tmp + 1) && \result == methaneLevelCritical) && \result <= 0) && tmp <= 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && 0 < tmp + 1) && \result == methaneLevelCritical) && \result <= 0) && tmp <= 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || ((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && 0 < tmp + 1) && \result == methaneLevelCritical) && \result <= 0) && tmp <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || ((((((((pumpRunning == 0 && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && !(0 == systemActive)) && methaneLevelCritical <= tmp)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 883]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 168]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 141]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 747]: Loop Invariant Derived loop invariant: ((((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) || ((((((((pumpRunning == \old(pumpRunning) && 0 < tmp + 1) && \result == methaneLevelCritical) && \result <= 0) && tmp <= 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result) && 0 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == 0 && \result == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && 0 <= waterLevel) && methaneLevelCritical <= tmp)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((((((pumpRunning == 0 && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || (((((((pumpRunning == \old(pumpRunning) && 0 < tmp + 1) && \result == methaneLevelCritical) && \result <= 0) && tmp <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((((pumpRunning == \old(pumpRunning) && 0 < tmp + 1) && \result == methaneLevelCritical) && \result <= 0) && tmp <= 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 917]: Loop Invariant Derived loop invariant: ((((((((((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 0) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((1 <= pumpRunning && 2 == waterLevel) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 0) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && 1 <= waterLevel) && !(0 == systemActive))) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 2 == waterLevel) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 772]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) && (((((!(1 < waterLevel) || 1 <= pumpRunning) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((1 <= pumpRunning || !(\old(pumpRunning) == 0)) || !(2 == waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 863]: Loop Invariant Derived loop invariant: (((((((((((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && !(0 == systemActive)) && 0 <= waterLevel) || ((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive))) || ((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((1 <= pumpRunning && 2 == waterLevel) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 0) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 2 == waterLevel) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 665]: Loop Invariant Derived loop invariant: (((((((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(0 <= waterLevel)) || (pumpRunning == 0 && \result == 1)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS))) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive) - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: (((((((((((((!(1 <= \old(pumpRunning)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 890]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 624]: Loop Invariant Derived loop invariant: (((((((((((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 844]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS))) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) RESULT: Ultimate proved your program to be correct! [2022-07-19 17:26:24,533 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE