./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version f4b24e32 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 68c6d60a43782147acd714b0904a144255717c2aa47fb6b6f8991672a1483369 --- Real Ultimate output --- This is Ultimate 0.2.2-?-f4b24e3 [2022-07-13 18:00:43,979 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-13 18:00:43,980 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-13 18:00:43,998 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-13 18:00:43,999 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-13 18:00:44,000 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-13 18:00:44,001 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-13 18:00:44,002 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-13 18:00:44,003 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-13 18:00:44,004 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-13 18:00:44,004 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-13 18:00:44,005 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-13 18:00:44,005 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-13 18:00:44,006 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-13 18:00:44,007 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-13 18:00:44,008 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-13 18:00:44,009 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-13 18:00:44,010 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-13 18:00:44,012 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-13 18:00:44,013 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-13 18:00:44,018 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-13 18:00:44,019 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-13 18:00:44,020 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-13 18:00:44,021 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-13 18:00:44,021 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-13 18:00:44,027 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-13 18:00:44,028 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-13 18:00:44,029 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-13 18:00:44,029 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-13 18:00:44,030 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-13 18:00:44,031 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-13 18:00:44,031 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-13 18:00:44,032 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-13 18:00:44,033 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-13 18:00:44,033 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-13 18:00:44,034 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-13 18:00:44,034 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-13 18:00:44,035 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-13 18:00:44,035 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-13 18:00:44,035 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-13 18:00:44,036 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-13 18:00:44,036 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-13 18:00:44,038 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-13 18:00:44,059 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-13 18:00:44,060 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-13 18:00:44,060 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-13 18:00:44,060 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-13 18:00:44,062 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-13 18:00:44,062 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-13 18:00:44,063 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-13 18:00:44,063 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-13 18:00:44,063 INFO L138 SettingsManager]: * Use SBE=true [2022-07-13 18:00:44,064 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-13 18:00:44,064 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-13 18:00:44,064 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-13 18:00:44,064 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-13 18:00:44,064 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-13 18:00:44,065 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-13 18:00:44,065 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-13 18:00:44,065 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-13 18:00:44,065 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-13 18:00:44,066 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-13 18:00:44,066 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-13 18:00:44,067 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-13 18:00:44,067 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-13 18:00:44,070 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-13 18:00:44,071 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-13 18:00:44,071 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-13 18:00:44,071 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-13 18:00:44,071 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-13 18:00:44,072 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-13 18:00:44,072 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-13 18:00:44,072 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-13 18:00:44,072 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-13 18:00:44,072 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-13 18:00:44,072 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-13 18:00:44,073 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 68c6d60a43782147acd714b0904a144255717c2aa47fb6b6f8991672a1483369 [2022-07-13 18:00:44,274 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-13 18:00:44,292 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-13 18:00:44,294 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-13 18:00:44,295 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-13 18:00:44,296 INFO L275 PluginConnector]: CDTParser initialized [2022-07-13 18:00:44,297 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c [2022-07-13 18:00:44,502 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/35f2a7553/be8561bacf2c47c69b02b7e9cf0b7aa4/FLAGcbf28b1d8 [2022-07-13 18:00:45,149 INFO L306 CDTParser]: Found 1 translation units. [2022-07-13 18:00:45,172 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c [2022-07-13 18:00:45,190 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/35f2a7553/be8561bacf2c47c69b02b7e9cf0b7aa4/FLAGcbf28b1d8 [2022-07-13 18:00:45,203 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/35f2a7553/be8561bacf2c47c69b02b7e9cf0b7aa4 [2022-07-13 18:00:45,206 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-13 18:00:45,208 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-13 18:00:45,210 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-13 18:00:45,211 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-13 18:00:45,213 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-13 18:00:45,214 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.07 06:00:45" (1/1) ... [2022-07-13 18:00:45,219 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@62d635f8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:45, skipping insertion in model container [2022-07-13 18:00:45,220 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.07 06:00:45" (1/1) ... [2022-07-13 18:00:45,226 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-13 18:00:45,296 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-13 18:00:45,494 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c[1605,1618] [2022-07-13 18:00:45,708 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-13 18:00:45,732 INFO L203 MainTranslator]: Completed pre-run [2022-07-13 18:00:45,749 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c[1605,1618] [2022-07-13 18:00:45,853 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-13 18:00:45,889 INFO L208 MainTranslator]: Completed translation [2022-07-13 18:00:45,890 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:45 WrapperNode [2022-07-13 18:00:45,890 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-13 18:00:45,891 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-13 18:00:45,892 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-13 18:00:45,892 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-13 18:00:45,899 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:45" (1/1) ... [2022-07-13 18:00:45,921 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:45" (1/1) ... [2022-07-13 18:00:45,964 INFO L137 Inliner]: procedures = 56, calls = 157, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 259 [2022-07-13 18:00:45,965 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-13 18:00:45,966 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-13 18:00:45,966 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-13 18:00:45,966 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-13 18:00:45,972 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:45" (1/1) ... [2022-07-13 18:00:45,973 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:45" (1/1) ... [2022-07-13 18:00:45,987 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:45" (1/1) ... [2022-07-13 18:00:45,998 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:45" (1/1) ... [2022-07-13 18:00:46,003 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:45" (1/1) ... [2022-07-13 18:00:46,008 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:45" (1/1) ... [2022-07-13 18:00:46,023 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:45" (1/1) ... [2022-07-13 18:00:46,025 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-13 18:00:46,026 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-13 18:00:46,026 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-13 18:00:46,026 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-13 18:00:46,027 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:45" (1/1) ... [2022-07-13 18:00:46,032 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-13 18:00:46,050 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 18:00:46,063 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-13 18:00:46,090 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-13 18:00:46,122 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-13 18:00:46,122 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-13 18:00:46,122 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-13 18:00:46,122 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-13 18:00:46,122 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-13 18:00:46,122 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-13 18:00:46,123 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-13 18:00:46,123 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-13 18:00:46,123 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-13 18:00:46,123 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-13 18:00:46,123 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-13 18:00:46,123 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-07-13 18:00:46,123 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-07-13 18:00:46,123 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-13 18:00:46,124 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-13 18:00:46,124 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-13 18:00:46,124 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-13 18:00:46,124 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-13 18:00:46,205 INFO L234 CfgBuilder]: Building ICFG [2022-07-13 18:00:46,206 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-13 18:00:46,678 INFO L275 CfgBuilder]: Performing block encoding [2022-07-13 18:00:46,683 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-13 18:00:46,683 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-13 18:00:46,685 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 06:00:46 BoogieIcfgContainer [2022-07-13 18:00:46,691 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-13 18:00:46,701 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-13 18:00:46,701 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-13 18:00:46,703 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-13 18:00:46,712 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 13.07 06:00:45" (1/3) ... [2022-07-13 18:00:46,713 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@75903441 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.07 06:00:46, skipping insertion in model container [2022-07-13 18:00:46,714 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:45" (2/3) ... [2022-07-13 18:00:46,714 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@75903441 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.07 06:00:46, skipping insertion in model container [2022-07-13 18:00:46,714 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 06:00:46" (3/3) ... [2022-07-13 18:00:46,715 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product38.cil.c [2022-07-13 18:00:46,725 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-13 18:00:46,727 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-13 18:00:46,854 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-13 18:00:46,861 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@15b0c73f, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@56aecfca [2022-07-13 18:00:46,861 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-13 18:00:46,868 INFO L276 IsEmpty]: Start isEmpty. Operand has 91 states, 70 states have (on average 1.3714285714285714) internal successors, (96), 78 states have internal predecessors, (96), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2022-07-13 18:00:46,891 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-07-13 18:00:46,892 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:46,893 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:46,894 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:46,899 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:46,899 INFO L85 PathProgramCache]: Analyzing trace with hash 849031785, now seen corresponding path program 1 times [2022-07-13 18:00:46,936 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:46,936 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2071033591] [2022-07-13 18:00:46,936 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:46,937 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:47,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:47,273 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-13 18:00:47,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:47,283 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-13 18:00:47,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:47,296 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 18:00:47,296 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:47,297 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2071033591] [2022-07-13 18:00:47,298 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2071033591] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:47,300 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 18:00:47,301 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-13 18:00:47,302 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [916389044] [2022-07-13 18:00:47,316 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:47,320 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-13 18:00:47,320 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:47,356 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-13 18:00:47,357 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-13 18:00:47,359 INFO L87 Difference]: Start difference. First operand has 91 states, 70 states have (on average 1.3714285714285714) internal successors, (96), 78 states have internal predecessors, (96), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-13 18:00:47,428 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:47,429 INFO L93 Difference]: Finished difference Result 173 states and 234 transitions. [2022-07-13 18:00:47,430 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-13 18:00:47,431 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-07-13 18:00:47,431 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:47,437 INFO L225 Difference]: With dead ends: 173 [2022-07-13 18:00:47,444 INFO L226 Difference]: Without dead ends: 82 [2022-07-13 18:00:47,448 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-13 18:00:47,463 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 114 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:47,464 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 114 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 18:00:47,493 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82 states. [2022-07-13 18:00:47,522 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82 to 82. [2022-07-13 18:00:47,539 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82 states, 63 states have (on average 1.3015873015873016) internal successors, (82), 70 states have internal predecessors, (82), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-07-13 18:00:47,543 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 105 transitions. [2022-07-13 18:00:47,545 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 105 transitions. Word has length 32 [2022-07-13 18:00:47,545 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:47,545 INFO L495 AbstractCegarLoop]: Abstraction has 82 states and 105 transitions. [2022-07-13 18:00:47,546 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-13 18:00:47,546 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 105 transitions. [2022-07-13 18:00:47,549 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-07-13 18:00:47,550 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:47,550 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:47,551 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-13 18:00:47,551 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:47,553 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:47,553 INFO L85 PathProgramCache]: Analyzing trace with hash 79054015, now seen corresponding path program 1 times [2022-07-13 18:00:47,553 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:47,553 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [101431301] [2022-07-13 18:00:47,553 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:47,554 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:47,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:47,684 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-13 18:00:47,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:47,695 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-13 18:00:47,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:47,701 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 18:00:47,701 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:47,702 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [101431301] [2022-07-13 18:00:47,702 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [101431301] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:47,702 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 18:00:47,715 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 18:00:47,715 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [701166180] [2022-07-13 18:00:47,715 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:47,716 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-13 18:00:47,717 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:47,717 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-13 18:00:47,717 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 18:00:47,717 INFO L87 Difference]: Start difference. First operand 82 states and 105 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-13 18:00:47,730 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:47,744 INFO L93 Difference]: Finished difference Result 128 states and 164 transitions. [2022-07-13 18:00:47,745 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-13 18:00:47,745 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2022-07-13 18:00:47,746 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:47,748 INFO L225 Difference]: With dead ends: 128 [2022-07-13 18:00:47,748 INFO L226 Difference]: Without dead ends: 73 [2022-07-13 18:00:47,753 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 18:00:47,754 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 13 mSDsluCounter, 75 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 167 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:47,759 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 167 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 18:00:47,760 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73 states. [2022-07-13 18:00:47,765 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73 to 73. [2022-07-13 18:00:47,767 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73 states, 57 states have (on average 1.3157894736842106) internal successors, (75), 64 states have internal predecessors, (75), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-07-13 18:00:47,770 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 93 transitions. [2022-07-13 18:00:47,771 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 93 transitions. Word has length 33 [2022-07-13 18:00:47,771 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:47,772 INFO L495 AbstractCegarLoop]: Abstraction has 73 states and 93 transitions. [2022-07-13 18:00:47,772 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-13 18:00:47,772 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 93 transitions. [2022-07-13 18:00:47,791 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-07-13 18:00:47,792 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:47,792 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:47,792 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-13 18:00:47,792 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:47,793 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:47,793 INFO L85 PathProgramCache]: Analyzing trace with hash 321911882, now seen corresponding path program 1 times [2022-07-13 18:00:47,793 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:47,793 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1953363233] [2022-07-13 18:00:47,793 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:47,794 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:47,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:47,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-13 18:00:47,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:47,918 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-07-13 18:00:47,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:47,923 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 18:00:47,935 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:47,935 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1953363233] [2022-07-13 18:00:47,936 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1953363233] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:47,936 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 18:00:47,936 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 18:00:47,937 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1964263029] [2022-07-13 18:00:47,937 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:47,938 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-13 18:00:47,938 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:47,938 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 18:00:47,939 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 18:00:47,939 INFO L87 Difference]: Start difference. First operand 73 states and 93 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-13 18:00:48,011 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:48,011 INFO L93 Difference]: Finished difference Result 138 states and 179 transitions. [2022-07-13 18:00:48,021 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-13 18:00:48,022 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2022-07-13 18:00:48,022 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:48,025 INFO L225 Difference]: With dead ends: 138 [2022-07-13 18:00:48,025 INFO L226 Difference]: Without dead ends: 73 [2022-07-13 18:00:48,027 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-13 18:00:48,030 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 116 mSDsluCounter, 138 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 116 SdHoareTripleChecker+Valid, 224 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:48,031 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [116 Valid, 224 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 18:00:48,033 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73 states. [2022-07-13 18:00:48,045 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73 to 73. [2022-07-13 18:00:48,052 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73 states, 57 states have (on average 1.2982456140350878) internal successors, (74), 64 states have internal predecessors, (74), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-07-13 18:00:48,053 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 92 transitions. [2022-07-13 18:00:48,053 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 92 transitions. Word has length 38 [2022-07-13 18:00:48,054 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:48,054 INFO L495 AbstractCegarLoop]: Abstraction has 73 states and 92 transitions. [2022-07-13 18:00:48,054 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-13 18:00:48,054 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 92 transitions. [2022-07-13 18:00:48,057 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-07-13 18:00:48,057 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:48,058 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:48,058 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-13 18:00:48,058 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:48,059 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:48,060 INFO L85 PathProgramCache]: Analyzing trace with hash 1433797075, now seen corresponding path program 1 times [2022-07-13 18:00:48,060 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:48,060 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [604945704] [2022-07-13 18:00:48,060 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:48,060 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:48,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:48,152 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-13 18:00:48,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:48,156 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-07-13 18:00:48,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:48,175 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 18:00:48,175 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:48,175 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [604945704] [2022-07-13 18:00:48,176 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [604945704] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:48,176 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 18:00:48,176 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 18:00:48,176 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [738500137] [2022-07-13 18:00:48,176 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:48,177 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-13 18:00:48,177 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:48,177 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-13 18:00:48,177 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 18:00:48,178 INFO L87 Difference]: Start difference. First operand 73 states and 92 transitions. Second operand has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-13 18:00:48,232 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:48,233 INFO L93 Difference]: Finished difference Result 186 states and 241 transitions. [2022-07-13 18:00:48,233 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-13 18:00:48,233 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2022-07-13 18:00:48,233 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:48,235 INFO L225 Difference]: With dead ends: 186 [2022-07-13 18:00:48,235 INFO L226 Difference]: Without dead ends: 121 [2022-07-13 18:00:48,235 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 18:00:48,240 INFO L413 NwaCegarLoop]: 111 mSDtfsCounter, 54 mSDsluCounter, 64 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 175 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:48,241 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [54 Valid, 175 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 18:00:48,242 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 121 states. [2022-07-13 18:00:48,269 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 121 to 119. [2022-07-13 18:00:48,269 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 119 states, 92 states have (on average 1.2826086956521738) internal successors, (118), 99 states have internal predecessors, (118), 14 states have call successors, (14), 12 states have call predecessors, (14), 12 states have return successors, (18), 14 states have call predecessors, (18), 14 states have call successors, (18) [2022-07-13 18:00:48,270 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 119 states to 119 states and 150 transitions. [2022-07-13 18:00:48,270 INFO L78 Accepts]: Start accepts. Automaton has 119 states and 150 transitions. Word has length 44 [2022-07-13 18:00:48,271 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:48,271 INFO L495 AbstractCegarLoop]: Abstraction has 119 states and 150 transitions. [2022-07-13 18:00:48,271 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-13 18:00:48,271 INFO L276 IsEmpty]: Start isEmpty. Operand 119 states and 150 transitions. [2022-07-13 18:00:48,281 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-07-13 18:00:48,281 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:48,281 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:48,282 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-13 18:00:48,282 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:48,291 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:48,292 INFO L85 PathProgramCache]: Analyzing trace with hash -464428248, now seen corresponding path program 1 times [2022-07-13 18:00:48,292 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:48,292 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [559932588] [2022-07-13 18:00:48,292 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:48,292 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:48,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:48,401 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-13 18:00:48,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:48,408 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-13 18:00:48,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:48,454 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-07-13 18:00:48,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:48,458 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 18:00:48,458 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:48,458 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [559932588] [2022-07-13 18:00:48,458 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [559932588] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:48,459 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 18:00:48,459 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 18:00:48,459 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [256328876] [2022-07-13 18:00:48,459 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:48,459 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 18:00:48,460 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:48,460 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 18:00:48,460 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 18:00:48,460 INFO L87 Difference]: Start difference. First operand 119 states and 150 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-13 18:00:48,622 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:48,635 INFO L93 Difference]: Finished difference Result 262 states and 338 transitions. [2022-07-13 18:00:48,636 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-13 18:00:48,636 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 52 [2022-07-13 18:00:48,637 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:48,639 INFO L225 Difference]: With dead ends: 262 [2022-07-13 18:00:48,639 INFO L226 Difference]: Without dead ends: 151 [2022-07-13 18:00:48,639 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-07-13 18:00:48,640 INFO L413 NwaCegarLoop]: 94 mSDtfsCounter, 63 mSDsluCounter, 286 mSDsCounter, 0 mSdLazyCounter, 109 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 380 SdHoareTripleChecker+Invalid, 128 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 109 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:48,640 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 380 Invalid, 128 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 109 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 18:00:48,641 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 151 states. [2022-07-13 18:00:48,661 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 151 to 146. [2022-07-13 18:00:48,661 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 146 states, 114 states have (on average 1.280701754385965) internal successors, (146), 121 states have internal predecessors, (146), 16 states have call successors, (16), 12 states have call predecessors, (16), 15 states have return successors, (23), 17 states have call predecessors, (23), 16 states have call successors, (23) [2022-07-13 18:00:48,663 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 146 states to 146 states and 185 transitions. [2022-07-13 18:00:48,664 INFO L78 Accepts]: Start accepts. Automaton has 146 states and 185 transitions. Word has length 52 [2022-07-13 18:00:48,664 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:48,665 INFO L495 AbstractCegarLoop]: Abstraction has 146 states and 185 transitions. [2022-07-13 18:00:48,665 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-13 18:00:48,679 INFO L276 IsEmpty]: Start isEmpty. Operand 146 states and 185 transitions. [2022-07-13 18:00:48,680 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-07-13 18:00:48,680 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:48,680 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:48,680 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-13 18:00:48,681 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:48,681 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:48,681 INFO L85 PathProgramCache]: Analyzing trace with hash 2141595306, now seen corresponding path program 1 times [2022-07-13 18:00:48,681 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:48,681 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1492799044] [2022-07-13 18:00:48,681 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:48,682 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:48,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:48,745 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-13 18:00:48,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:48,755 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-13 18:00:48,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:48,786 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-07-13 18:00:48,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:48,791 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 18:00:48,792 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:48,792 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1492799044] [2022-07-13 18:00:48,792 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1492799044] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:48,792 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 18:00:48,792 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 18:00:48,792 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1003223831] [2022-07-13 18:00:48,792 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:48,793 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-13 18:00:48,793 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:48,793 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 18:00:48,793 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 18:00:48,794 INFO L87 Difference]: Start difference. First operand 146 states and 185 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-13 18:00:48,909 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:48,909 INFO L93 Difference]: Finished difference Result 294 states and 382 transitions. [2022-07-13 18:00:48,909 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-13 18:00:48,910 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 52 [2022-07-13 18:00:48,910 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:48,912 INFO L225 Difference]: With dead ends: 294 [2022-07-13 18:00:48,912 INFO L226 Difference]: Without dead ends: 156 [2022-07-13 18:00:48,913 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-13 18:00:48,922 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 65 mSDsluCounter, 204 mSDsCounter, 0 mSdLazyCounter, 81 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 299 SdHoareTripleChecker+Invalid, 96 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 81 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:48,923 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [69 Valid, 299 Invalid, 96 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 81 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 18:00:48,924 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 156 states. [2022-07-13 18:00:48,936 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 156 to 148. [2022-07-13 18:00:48,948 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 148 states, 116 states have (on average 1.2758620689655173) internal successors, (148), 123 states have internal predecessors, (148), 16 states have call successors, (16), 12 states have call predecessors, (16), 15 states have return successors, (23), 17 states have call predecessors, (23), 16 states have call successors, (23) [2022-07-13 18:00:48,950 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148 states to 148 states and 187 transitions. [2022-07-13 18:00:48,950 INFO L78 Accepts]: Start accepts. Automaton has 148 states and 187 transitions. Word has length 52 [2022-07-13 18:00:48,951 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:48,951 INFO L495 AbstractCegarLoop]: Abstraction has 148 states and 187 transitions. [2022-07-13 18:00:48,951 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-13 18:00:48,951 INFO L276 IsEmpty]: Start isEmpty. Operand 148 states and 187 transitions. [2022-07-13 18:00:48,952 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-07-13 18:00:48,953 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:48,953 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:48,953 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-13 18:00:48,953 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:48,953 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:48,954 INFO L85 PathProgramCache]: Analyzing trace with hash -1730670164, now seen corresponding path program 1 times [2022-07-13 18:00:48,954 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:48,954 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [35052272] [2022-07-13 18:00:48,954 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:48,954 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:48,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:49,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-13 18:00:49,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:49,045 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-13 18:00:49,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:49,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-07-13 18:00:49,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:49,081 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 18:00:49,081 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:49,082 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [35052272] [2022-07-13 18:00:49,082 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [35052272] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:49,082 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 18:00:49,082 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 18:00:49,082 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1141258303] [2022-07-13 18:00:49,082 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:49,083 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-13 18:00:49,083 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:49,084 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 18:00:49,084 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 18:00:49,084 INFO L87 Difference]: Start difference. First operand 148 states and 187 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-13 18:00:49,306 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:49,306 INFO L93 Difference]: Finished difference Result 428 states and 559 transitions. [2022-07-13 18:00:49,307 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-13 18:00:49,307 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 52 [2022-07-13 18:00:49,307 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:49,310 INFO L225 Difference]: With dead ends: 428 [2022-07-13 18:00:49,310 INFO L226 Difference]: Without dead ends: 288 [2022-07-13 18:00:49,311 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-07-13 18:00:49,312 INFO L413 NwaCegarLoop]: 147 mSDtfsCounter, 209 mSDsluCounter, 168 mSDsCounter, 0 mSdLazyCounter, 150 mSolverCounterSat, 61 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 216 SdHoareTripleChecker+Valid, 315 SdHoareTripleChecker+Invalid, 211 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 61 IncrementalHoareTripleChecker+Valid, 150 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:49,314 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [216 Valid, 315 Invalid, 211 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [61 Valid, 150 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-13 18:00:49,323 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 288 states. [2022-07-13 18:00:49,355 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 288 to 280. [2022-07-13 18:00:49,355 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 280 states, 216 states have (on average 1.25) internal successors, (270), 227 states have internal predecessors, (270), 34 states have call successors, (34), 28 states have call predecessors, (34), 29 states have return successors, (53), 34 states have call predecessors, (53), 34 states have call successors, (53) [2022-07-13 18:00:49,357 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 280 states to 280 states and 357 transitions. [2022-07-13 18:00:49,357 INFO L78 Accepts]: Start accepts. Automaton has 280 states and 357 transitions. Word has length 52 [2022-07-13 18:00:49,358 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:49,359 INFO L495 AbstractCegarLoop]: Abstraction has 280 states and 357 transitions. [2022-07-13 18:00:49,359 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-13 18:00:49,359 INFO L276 IsEmpty]: Start isEmpty. Operand 280 states and 357 transitions. [2022-07-13 18:00:49,359 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-07-13 18:00:49,360 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:49,360 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:49,360 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-13 18:00:49,360 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:49,362 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:49,362 INFO L85 PathProgramCache]: Analyzing trace with hash 742025993, now seen corresponding path program 1 times [2022-07-13 18:00:49,362 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:49,362 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [882499541] [2022-07-13 18:00:49,363 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:49,363 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:49,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:49,432 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-13 18:00:49,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:49,439 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-13 18:00:49,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:49,449 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 18:00:49,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:49,451 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-07-13 18:00:49,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:49,475 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-07-13 18:00:49,475 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:49,476 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [882499541] [2022-07-13 18:00:49,476 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [882499541] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:49,476 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 18:00:49,476 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 18:00:49,476 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1057867752] [2022-07-13 18:00:49,476 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:49,477 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-13 18:00:49,477 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:49,477 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-13 18:00:49,478 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-13 18:00:49,478 INFO L87 Difference]: Start difference. First operand 280 states and 357 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-13 18:00:49,759 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:49,759 INFO L93 Difference]: Finished difference Result 568 states and 737 transitions. [2022-07-13 18:00:49,760 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-07-13 18:00:49,760 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) Word has length 54 [2022-07-13 18:00:49,760 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:49,762 INFO L225 Difference]: With dead ends: 568 [2022-07-13 18:00:49,762 INFO L226 Difference]: Without dead ends: 296 [2022-07-13 18:00:49,763 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-07-13 18:00:49,764 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 105 mSDsluCounter, 334 mSDsCounter, 0 mSdLazyCounter, 194 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 111 SdHoareTripleChecker+Valid, 429 SdHoareTripleChecker+Invalid, 226 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 194 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:49,764 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [111 Valid, 429 Invalid, 226 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 194 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-13 18:00:49,764 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 296 states. [2022-07-13 18:00:49,785 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 296 to 276. [2022-07-13 18:00:49,786 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 276 states, 212 states have (on average 1.2169811320754718) internal successors, (258), 223 states have internal predecessors, (258), 34 states have call successors, (34), 28 states have call predecessors, (34), 29 states have return successors, (53), 34 states have call predecessors, (53), 34 states have call successors, (53) [2022-07-13 18:00:49,787 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 276 states to 276 states and 345 transitions. [2022-07-13 18:00:49,787 INFO L78 Accepts]: Start accepts. Automaton has 276 states and 345 transitions. Word has length 54 [2022-07-13 18:00:49,800 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:49,800 INFO L495 AbstractCegarLoop]: Abstraction has 276 states and 345 transitions. [2022-07-13 18:00:49,800 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-13 18:00:49,801 INFO L276 IsEmpty]: Start isEmpty. Operand 276 states and 345 transitions. [2022-07-13 18:00:49,801 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-07-13 18:00:49,801 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:49,801 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:49,802 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-13 18:00:49,802 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:49,802 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:49,802 INFO L85 PathProgramCache]: Analyzing trace with hash -731489466, now seen corresponding path program 1 times [2022-07-13 18:00:49,802 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:49,802 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [351262943] [2022-07-13 18:00:49,803 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:49,803 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:49,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:49,908 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 18:00:49,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:49,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-13 18:00:49,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:49,948 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-07-13 18:00:49,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:49,970 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-07-13 18:00:49,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:49,972 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 18:00:49,972 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:49,973 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [351262943] [2022-07-13 18:00:49,973 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [351262943] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:49,973 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 18:00:49,973 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-07-13 18:00:49,973 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1634674060] [2022-07-13 18:00:49,973 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:49,974 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-07-13 18:00:49,974 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:49,974 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-07-13 18:00:49,975 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-07-13 18:00:49,975 INFO L87 Difference]: Start difference. First operand 276 states and 345 transitions. Second operand has 10 states, 10 states have (on average 4.5) internal successors, (45), 8 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-13 18:00:50,922 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:50,922 INFO L93 Difference]: Finished difference Result 873 states and 1145 transitions. [2022-07-13 18:00:50,923 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-07-13 18:00:50,923 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.5) internal successors, (45), 8 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2022-07-13 18:00:50,924 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:50,940 INFO L225 Difference]: With dead ends: 873 [2022-07-13 18:00:50,940 INFO L226 Difference]: Without dead ends: 656 [2022-07-13 18:00:50,942 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 43 GetRequests, 10 SyntacticMatches, 1 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 262 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=215, Invalid=907, Unknown=0, NotChecked=0, Total=1122 [2022-07-13 18:00:50,944 INFO L413 NwaCegarLoop]: 161 mSDtfsCounter, 471 mSDsluCounter, 684 mSDsCounter, 0 mSdLazyCounter, 730 mSolverCounterSat, 180 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 478 SdHoareTripleChecker+Valid, 845 SdHoareTripleChecker+Invalid, 910 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 180 IncrementalHoareTripleChecker+Valid, 730 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:50,945 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [478 Valid, 845 Invalid, 910 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [180 Valid, 730 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-07-13 18:00:50,945 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 656 states. [2022-07-13 18:00:50,994 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 656 to 533. [2022-07-13 18:00:50,995 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 533 states, 410 states have (on average 1.2146341463414634) internal successors, (498), 434 states have internal predecessors, (498), 65 states have call successors, (65), 49 states have call predecessors, (65), 57 states have return successors, (104), 67 states have call predecessors, (104), 65 states have call successors, (104) [2022-07-13 18:00:50,998 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 533 states to 533 states and 667 transitions. [2022-07-13 18:00:50,998 INFO L78 Accepts]: Start accepts. Automaton has 533 states and 667 transitions. Word has length 56 [2022-07-13 18:00:50,998 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:50,998 INFO L495 AbstractCegarLoop]: Abstraction has 533 states and 667 transitions. [2022-07-13 18:00:50,999 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.5) internal successors, (45), 8 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-13 18:00:50,999 INFO L276 IsEmpty]: Start isEmpty. Operand 533 states and 667 transitions. [2022-07-13 18:00:51,000 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2022-07-13 18:00:51,000 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:51,000 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:51,000 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-13 18:00:51,000 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:51,001 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:51,001 INFO L85 PathProgramCache]: Analyzing trace with hash -981985599, now seen corresponding path program 1 times [2022-07-13 18:00:51,001 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:51,001 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1149781472] [2022-07-13 18:00:51,001 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:51,002 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:51,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:51,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 18:00:51,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:51,146 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-13 18:00:51,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:51,160 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:00:51,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:51,168 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-13 18:00:51,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:51,195 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-07-13 18:00:51,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:51,206 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2022-07-13 18:00:51,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:51,208 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 18:00:51,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:51,209 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-07-13 18:00:51,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:51,211 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 18 proven. 9 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-07-13 18:00:51,211 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:51,211 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1149781472] [2022-07-13 18:00:51,211 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1149781472] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-13 18:00:51,211 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1369063241] [2022-07-13 18:00:51,212 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:51,212 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 18:00:51,219 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 18:00:51,235 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-13 18:00:51,301 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-13 18:00:51,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:51,421 INFO L263 TraceCheckSpWp]: Trace formula consists of 472 conjuncts, 8 conjunts are in the unsatisfiable core [2022-07-13 18:00:51,427 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 18:00:51,693 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 25 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 18:00:51,693 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-13 18:00:51,876 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 19 proven. 8 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-07-13 18:00:51,876 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1369063241] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-13 18:00:51,877 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-13 18:00:51,877 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 6, 6] total 16 [2022-07-13 18:00:51,877 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1800616137] [2022-07-13 18:00:51,877 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-13 18:00:51,877 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2022-07-13 18:00:51,878 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:51,878 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2022-07-13 18:00:51,878 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2022-07-13 18:00:51,878 INFO L87 Difference]: Start difference. First operand 533 states and 667 transitions. Second operand has 16 states, 16 states have (on average 7.4375) internal successors, (119), 11 states have internal predecessors, (119), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) [2022-07-13 18:00:53,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:53,221 INFO L93 Difference]: Finished difference Result 1171 states and 1508 transitions. [2022-07-13 18:00:53,221 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2022-07-13 18:00:53,221 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 7.4375) internal successors, (119), 11 states have internal predecessors, (119), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) Word has length 96 [2022-07-13 18:00:53,222 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:53,224 INFO L225 Difference]: With dead ends: 1171 [2022-07-13 18:00:53,225 INFO L226 Difference]: Without dead ends: 695 [2022-07-13 18:00:53,226 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 263 GetRequests, 218 SyntacticMatches, 1 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 493 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=361, Invalid=1709, Unknown=0, NotChecked=0, Total=2070 [2022-07-13 18:00:53,227 INFO L413 NwaCegarLoop]: 220 mSDtfsCounter, 431 mSDsluCounter, 1114 mSDsCounter, 0 mSdLazyCounter, 882 mSolverCounterSat, 198 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 432 SdHoareTripleChecker+Valid, 1334 SdHoareTripleChecker+Invalid, 1080 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 198 IncrementalHoareTripleChecker+Valid, 882 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:53,228 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [432 Valid, 1334 Invalid, 1080 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [198 Valid, 882 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-07-13 18:00:53,229 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 695 states. [2022-07-13 18:00:53,276 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 695 to 598. [2022-07-13 18:00:53,284 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 598 states, 454 states have (on average 1.2026431718061674) internal successors, (546), 486 states have internal predecessors, (546), 75 states have call successors, (75), 63 states have call predecessors, (75), 68 states have return successors, (100), 70 states have call predecessors, (100), 75 states have call successors, (100) [2022-07-13 18:00:53,287 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 598 states to 598 states and 721 transitions. [2022-07-13 18:00:53,304 INFO L78 Accepts]: Start accepts. Automaton has 598 states and 721 transitions. Word has length 96 [2022-07-13 18:00:53,305 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:53,305 INFO L495 AbstractCegarLoop]: Abstraction has 598 states and 721 transitions. [2022-07-13 18:00:53,305 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 7.4375) internal successors, (119), 11 states have internal predecessors, (119), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) [2022-07-13 18:00:53,305 INFO L276 IsEmpty]: Start isEmpty. Operand 598 states and 721 transitions. [2022-07-13 18:00:53,310 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 169 [2022-07-13 18:00:53,310 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:53,311 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:53,350 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-13 18:00:53,529 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-07-13 18:00:53,530 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:53,530 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:53,530 INFO L85 PathProgramCache]: Analyzing trace with hash -1684606529, now seen corresponding path program 1 times [2022-07-13 18:00:53,530 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:53,530 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [546999645] [2022-07-13 18:00:53,530 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:53,530 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:53,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,607 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 18:00:53,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,614 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-13 18:00:53,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:00:53,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,637 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-13 18:00:53,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,642 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-07-13 18:00:53,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,647 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:00:53,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-13 18:00:53,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,659 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 18:00:53,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,660 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2022-07-13 18:00:53,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,741 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:00:53,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,744 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 135 [2022-07-13 18:00:53,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 144 [2022-07-13 18:00:53,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 160 [2022-07-13 18:00:53,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,749 INFO L134 CoverageAnalysis]: Checked inductivity of 190 backedges. 81 proven. 0 refuted. 0 times theorem prover too weak. 109 trivial. 0 not checked. [2022-07-13 18:00:53,749 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:53,749 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [546999645] [2022-07-13 18:00:53,749 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [546999645] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:53,749 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 18:00:53,750 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-07-13 18:00:53,750 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [976160497] [2022-07-13 18:00:53,750 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:53,750 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-07-13 18:00:53,750 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:53,751 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-07-13 18:00:53,751 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2022-07-13 18:00:53,751 INFO L87 Difference]: Start difference. First operand 598 states and 721 transitions. Second operand has 10 states, 10 states have (on average 8.7) internal successors, (87), 7 states have internal predecessors, (87), 3 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2022-07-13 18:00:54,528 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:54,529 INFO L93 Difference]: Finished difference Result 1713 states and 2093 transitions. [2022-07-13 18:00:54,529 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-07-13 18:00:54,529 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 8.7) internal successors, (87), 7 states have internal predecessors, (87), 3 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) Word has length 168 [2022-07-13 18:00:54,529 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:54,548 INFO L225 Difference]: With dead ends: 1713 [2022-07-13 18:00:54,549 INFO L226 Difference]: Without dead ends: 1123 [2022-07-13 18:00:54,550 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 62 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 26 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 150 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=178, Invalid=578, Unknown=0, NotChecked=0, Total=756 [2022-07-13 18:00:54,551 INFO L413 NwaCegarLoop]: 209 mSDtfsCounter, 484 mSDsluCounter, 519 mSDsCounter, 0 mSdLazyCounter, 514 mSolverCounterSat, 162 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 488 SdHoareTripleChecker+Valid, 728 SdHoareTripleChecker+Invalid, 676 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 162 IncrementalHoareTripleChecker+Valid, 514 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:54,574 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [488 Valid, 728 Invalid, 676 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [162 Valid, 514 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-07-13 18:00:54,575 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1123 states. [2022-07-13 18:00:54,664 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1123 to 1121. [2022-07-13 18:00:54,665 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1121 states, 849 states have (on average 1.171967020023557) internal successors, (995), 904 states have internal predecessors, (995), 143 states have call successors, (143), 122 states have call predecessors, (143), 128 states have return successors, (186), 130 states have call predecessors, (186), 143 states have call successors, (186) [2022-07-13 18:00:54,668 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1121 states to 1121 states and 1324 transitions. [2022-07-13 18:00:54,669 INFO L78 Accepts]: Start accepts. Automaton has 1121 states and 1324 transitions. Word has length 168 [2022-07-13 18:00:54,669 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:54,669 INFO L495 AbstractCegarLoop]: Abstraction has 1121 states and 1324 transitions. [2022-07-13 18:00:54,669 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 8.7) internal successors, (87), 7 states have internal predecessors, (87), 3 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2022-07-13 18:00:54,670 INFO L276 IsEmpty]: Start isEmpty. Operand 1121 states and 1324 transitions. [2022-07-13 18:00:54,672 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 173 [2022-07-13 18:00:54,694 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:54,695 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:54,695 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-07-13 18:00:54,695 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:54,696 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:54,696 INFO L85 PathProgramCache]: Analyzing trace with hash 734259323, now seen corresponding path program 1 times [2022-07-13 18:00:54,696 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:54,696 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1371334199] [2022-07-13 18:00:54,696 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:54,697 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:54,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:54,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 18:00:54,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:54,781 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-13 18:00:54,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:54,790 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-13 18:00:54,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:54,797 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:00:54,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:54,801 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-13 18:00:54,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:54,804 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2022-07-13 18:00:54,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:54,858 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:00:54,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:54,860 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-13 18:00:54,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:54,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 18:00:54,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:54,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-07-13 18:00:54,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:54,882 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:00:54,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:54,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 139 [2022-07-13 18:00:54,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:54,885 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 148 [2022-07-13 18:00:54,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:54,887 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2022-07-13 18:00:54,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:54,889 INFO L134 CoverageAnalysis]: Checked inductivity of 190 backedges. 87 proven. 10 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2022-07-13 18:00:54,889 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:54,889 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1371334199] [2022-07-13 18:00:54,889 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1371334199] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-13 18:00:54,889 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [573818870] [2022-07-13 18:00:54,903 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:54,903 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 18:00:54,903 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 18:00:54,905 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-13 18:00:54,966 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-13 18:00:55,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:55,080 INFO L263 TraceCheckSpWp]: Trace formula consists of 677 conjuncts, 7 conjunts are in the unsatisfiable core [2022-07-13 18:00:55,093 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 18:00:55,232 INFO L134 CoverageAnalysis]: Checked inductivity of 190 backedges. 131 proven. 0 refuted. 0 times theorem prover too weak. 59 trivial. 0 not checked. [2022-07-13 18:00:55,232 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-13 18:00:55,232 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [573818870] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:55,232 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-13 18:00:55,233 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [11] total 15 [2022-07-13 18:00:55,233 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1437527983] [2022-07-13 18:00:55,233 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:55,233 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 18:00:55,235 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:55,235 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 18:00:55,236 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=37, Invalid=173, Unknown=0, NotChecked=0, Total=210 [2022-07-13 18:00:55,236 INFO L87 Difference]: Start difference. First operand 1121 states and 1324 transitions. Second operand has 6 states, 6 states have (on average 17.666666666666668) internal successors, (106), 6 states have internal predecessors, (106), 3 states have call successors, (11), 3 states have call predecessors, (11), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2022-07-13 18:00:55,431 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:55,431 INFO L93 Difference]: Finished difference Result 2058 states and 2439 transitions. [2022-07-13 18:00:55,431 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-13 18:00:55,432 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 17.666666666666668) internal successors, (106), 6 states have internal predecessors, (106), 3 states have call successors, (11), 3 states have call predecessors, (11), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) Word has length 172 [2022-07-13 18:00:55,432 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:55,436 INFO L225 Difference]: With dead ends: 2058 [2022-07-13 18:00:55,451 INFO L226 Difference]: Without dead ends: 1043 [2022-07-13 18:00:55,455 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 208 GetRequests, 192 SyntacticMatches, 1 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=52, Invalid=220, Unknown=0, NotChecked=0, Total=272 [2022-07-13 18:00:55,455 INFO L413 NwaCegarLoop]: 164 mSDtfsCounter, 65 mSDsluCounter, 415 mSDsCounter, 0 mSdLazyCounter, 75 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 65 SdHoareTripleChecker+Valid, 579 SdHoareTripleChecker+Invalid, 78 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 75 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:55,456 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [65 Valid, 579 Invalid, 78 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 75 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 18:00:55,457 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1043 states. [2022-07-13 18:00:55,527 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1043 to 1027. [2022-07-13 18:00:55,537 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1027 states, 784 states have (on average 1.1658163265306123) internal successors, (914), 830 states have internal predecessors, (914), 128 states have call successors, (128), 111 states have call predecessors, (128), 114 states have return successors, (164), 116 states have call predecessors, (164), 128 states have call successors, (164) [2022-07-13 18:00:55,540 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1027 states to 1027 states and 1206 transitions. [2022-07-13 18:00:55,555 INFO L78 Accepts]: Start accepts. Automaton has 1027 states and 1206 transitions. Word has length 172 [2022-07-13 18:00:55,556 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:55,556 INFO L495 AbstractCegarLoop]: Abstraction has 1027 states and 1206 transitions. [2022-07-13 18:00:55,556 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 17.666666666666668) internal successors, (106), 6 states have internal predecessors, (106), 3 states have call successors, (11), 3 states have call predecessors, (11), 3 states have return successors, (12), 3 states have call predecessors, (12), 3 states have call successors, (12) [2022-07-13 18:00:55,556 INFO L276 IsEmpty]: Start isEmpty. Operand 1027 states and 1206 transitions. [2022-07-13 18:00:55,559 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 177 [2022-07-13 18:00:55,560 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:55,560 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:55,597 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-13 18:00:55,778 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-07-13 18:00:55,778 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:55,778 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:55,778 INFO L85 PathProgramCache]: Analyzing trace with hash 1208270879, now seen corresponding path program 1 times [2022-07-13 18:00:55,778 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:55,778 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [448064289] [2022-07-13 18:00:55,778 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:55,779 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:55,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:55,853 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 18:00:55,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:55,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-13 18:00:55,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:55,916 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:00:55,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:55,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-13 18:00:55,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:55,924 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-07-13 18:00:55,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:55,969 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:00:55,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:55,973 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-13 18:00:55,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:55,975 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 18:00:55,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:55,982 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2022-07-13 18:00:55,983 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:55,984 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-07-13 18:00:55,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:00:56,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,003 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2022-07-13 18:00:56,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,004 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 143 [2022-07-13 18:00:56,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,005 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2022-07-13 18:00:56,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,008 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 168 [2022-07-13 18:00:56,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,010 INFO L134 CoverageAnalysis]: Checked inductivity of 194 backedges. 93 proven. 28 refuted. 0 times theorem prover too weak. 73 trivial. 0 not checked. [2022-07-13 18:00:56,010 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:56,011 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [448064289] [2022-07-13 18:00:56,011 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [448064289] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-13 18:00:56,011 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [764903918] [2022-07-13 18:00:56,011 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:56,011 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 18:00:56,011 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 18:00:56,034 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-13 18:00:56,099 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-07-13 18:00:56,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,199 INFO L263 TraceCheckSpWp]: Trace formula consists of 684 conjuncts, 13 conjunts are in the unsatisfiable core [2022-07-13 18:00:56,207 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 18:00:56,436 INFO L134 CoverageAnalysis]: Checked inductivity of 194 backedges. 142 proven. 4 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2022-07-13 18:00:56,436 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-13 18:00:56,940 INFO L134 CoverageAnalysis]: Checked inductivity of 194 backedges. 82 proven. 42 refuted. 0 times theorem prover too weak. 70 trivial. 0 not checked. [2022-07-13 18:00:56,940 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [764903918] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-13 18:00:56,941 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-13 18:00:56,941 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 10, 11] total 26 [2022-07-13 18:00:56,943 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [203537281] [2022-07-13 18:00:56,943 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-13 18:00:56,944 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-07-13 18:00:56,944 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:56,944 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-07-13 18:00:56,945 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=125, Invalid=525, Unknown=0, NotChecked=0, Total=650 [2022-07-13 18:00:56,945 INFO L87 Difference]: Start difference. First operand 1027 states and 1206 transitions. Second operand has 26 states, 26 states have (on average 8.115384615384615) internal successors, (211), 22 states have internal predecessors, (211), 10 states have call successors, (34), 9 states have call predecessors, (34), 9 states have return successors, (31), 9 states have call predecessors, (31), 10 states have call successors, (31) [2022-07-13 18:00:59,257 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:59,257 INFO L93 Difference]: Finished difference Result 2232 states and 2683 transitions. [2022-07-13 18:00:59,257 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-07-13 18:00:59,258 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 8.115384615384615) internal successors, (211), 22 states have internal predecessors, (211), 10 states have call successors, (34), 9 states have call predecessors, (34), 9 states have return successors, (31), 9 states have call predecessors, (31), 10 states have call successors, (31) Word has length 176 [2022-07-13 18:00:59,258 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:59,263 INFO L225 Difference]: With dead ends: 2232 [2022-07-13 18:00:59,279 INFO L226 Difference]: Without dead ends: 1213 [2022-07-13 18:00:59,282 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 426 GetRequests, 376 SyntacticMatches, 4 SemanticMatches, 46 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 448 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=492, Invalid=1764, Unknown=0, NotChecked=0, Total=2256 [2022-07-13 18:00:59,283 INFO L413 NwaCegarLoop]: 142 mSDtfsCounter, 728 mSDsluCounter, 394 mSDsCounter, 0 mSdLazyCounter, 1362 mSolverCounterSat, 278 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 731 SdHoareTripleChecker+Valid, 536 SdHoareTripleChecker+Invalid, 1640 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 278 IncrementalHoareTripleChecker+Valid, 1362 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:59,283 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [731 Valid, 536 Invalid, 1640 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [278 Valid, 1362 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2022-07-13 18:00:59,285 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1213 states. [2022-07-13 18:00:59,409 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1213 to 1055. [2022-07-13 18:00:59,412 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1055 states, 809 states have (on average 1.145859085290482) internal successors, (927), 851 states have internal predecessors, (927), 132 states have call successors, (132), 115 states have call predecessors, (132), 113 states have return successors, (155), 117 states have call predecessors, (155), 132 states have call successors, (155) [2022-07-13 18:00:59,432 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1055 states to 1055 states and 1214 transitions. [2022-07-13 18:00:59,432 INFO L78 Accepts]: Start accepts. Automaton has 1055 states and 1214 transitions. Word has length 176 [2022-07-13 18:00:59,433 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:59,433 INFO L495 AbstractCegarLoop]: Abstraction has 1055 states and 1214 transitions. [2022-07-13 18:00:59,433 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 8.115384615384615) internal successors, (211), 22 states have internal predecessors, (211), 10 states have call successors, (34), 9 states have call predecessors, (34), 9 states have return successors, (31), 9 states have call predecessors, (31), 10 states have call successors, (31) [2022-07-13 18:00:59,433 INFO L276 IsEmpty]: Start isEmpty. Operand 1055 states and 1214 transitions. [2022-07-13 18:00:59,436 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 189 [2022-07-13 18:00:59,436 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:59,436 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:59,456 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-07-13 18:00:59,651 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 18:00:59,655 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:59,655 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:59,656 INFO L85 PathProgramCache]: Analyzing trace with hash 870331069, now seen corresponding path program 1 times [2022-07-13 18:00:59,656 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:59,656 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [57396938] [2022-07-13 18:00:59,656 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:59,656 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:59,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:59,842 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 18:00:59,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:59,849 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-13 18:00:59,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:59,858 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:00:59,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:59,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-13 18:00:59,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:59,868 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-07-13 18:00:59,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:59,894 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:00:59,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:59,895 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-13 18:00:59,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:59,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 18:00:59,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:59,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-07-13 18:00:59,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:59,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2022-07-13 18:00:59,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:59,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2022-07-13 18:00:59,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:59,915 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:00:59,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:59,916 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-13 18:00:59,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:59,916 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 144 [2022-07-13 18:00:59,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:59,917 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 155 [2022-07-13 18:00:59,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:59,918 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2022-07-13 18:00:59,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:59,920 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 180 [2022-07-13 18:00:59,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:59,921 INFO L134 CoverageAnalysis]: Checked inductivity of 236 backedges. 100 proven. 43 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2022-07-13 18:00:59,921 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:59,921 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [57396938] [2022-07-13 18:00:59,921 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [57396938] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-13 18:00:59,921 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [439731987] [2022-07-13 18:00:59,922 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:59,922 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 18:00:59,922 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 18:00:59,935 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-13 18:00:59,961 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-07-13 18:01:00,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:00,114 INFO L263 TraceCheckSpWp]: Trace formula consists of 716 conjuncts, 10 conjunts are in the unsatisfiable core [2022-07-13 18:01:00,117 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 18:01:00,224 INFO L134 CoverageAnalysis]: Checked inductivity of 236 backedges. 180 proven. 9 refuted. 0 times theorem prover too weak. 47 trivial. 0 not checked. [2022-07-13 18:01:00,225 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-13 18:01:00,480 INFO L134 CoverageAnalysis]: Checked inductivity of 236 backedges. 104 proven. 53 refuted. 0 times theorem prover too weak. 79 trivial. 0 not checked. [2022-07-13 18:01:00,481 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [439731987] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-13 18:01:00,481 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-13 18:01:00,481 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 8, 8] total 23 [2022-07-13 18:01:00,481 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [635062579] [2022-07-13 18:01:00,481 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-13 18:01:00,481 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-07-13 18:01:00,481 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:01:00,482 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-07-13 18:01:00,482 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=70, Invalid=436, Unknown=0, NotChecked=0, Total=506 [2022-07-13 18:01:00,482 INFO L87 Difference]: Start difference. First operand 1055 states and 1214 transitions. Second operand has 23 states, 23 states have (on average 9.043478260869565) internal successors, (208), 16 states have internal predecessors, (208), 6 states have call successors, (38), 8 states have call predecessors, (38), 11 states have return successors, (32), 9 states have call predecessors, (32), 6 states have call successors, (32) [2022-07-13 18:01:01,489 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:01:01,490 INFO L93 Difference]: Finished difference Result 2062 states and 2406 transitions. [2022-07-13 18:01:01,490 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-07-13 18:01:01,490 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 9.043478260869565) internal successors, (208), 16 states have internal predecessors, (208), 6 states have call successors, (38), 8 states have call predecessors, (38), 11 states have return successors, (32), 9 states have call predecessors, (32), 6 states have call successors, (32) Word has length 188 [2022-07-13 18:01:01,490 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:01:01,494 INFO L225 Difference]: With dead ends: 2062 [2022-07-13 18:01:01,494 INFO L226 Difference]: Without dead ends: 1113 [2022-07-13 18:01:01,497 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 464 GetRequests, 413 SyntacticMatches, 2 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 501 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=426, Invalid=2124, Unknown=0, NotChecked=0, Total=2550 [2022-07-13 18:01:01,497 INFO L413 NwaCegarLoop]: 133 mSDtfsCounter, 607 mSDsluCounter, 331 mSDsCounter, 0 mSdLazyCounter, 1346 mSolverCounterSat, 277 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 607 SdHoareTripleChecker+Valid, 464 SdHoareTripleChecker+Invalid, 1623 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 277 IncrementalHoareTripleChecker+Valid, 1346 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-07-13 18:01:01,498 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [607 Valid, 464 Invalid, 1623 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [277 Valid, 1346 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-07-13 18:01:01,499 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1113 states. [2022-07-13 18:01:01,539 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1113 to 1051. [2022-07-13 18:01:01,541 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1051 states, 807 states have (on average 1.1350681536555143) internal successors, (916), 847 states have internal predecessors, (916), 126 states have call successors, (126), 117 states have call predecessors, (126), 117 states have return successors, (149), 115 states have call predecessors, (149), 126 states have call successors, (149) [2022-07-13 18:01:01,544 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1051 states to 1051 states and 1191 transitions. [2022-07-13 18:01:01,544 INFO L78 Accepts]: Start accepts. Automaton has 1051 states and 1191 transitions. Word has length 188 [2022-07-13 18:01:01,544 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:01:01,545 INFO L495 AbstractCegarLoop]: Abstraction has 1051 states and 1191 transitions. [2022-07-13 18:01:01,545 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 9.043478260869565) internal successors, (208), 16 states have internal predecessors, (208), 6 states have call successors, (38), 8 states have call predecessors, (38), 11 states have return successors, (32), 9 states have call predecessors, (32), 6 states have call successors, (32) [2022-07-13 18:01:01,545 INFO L276 IsEmpty]: Start isEmpty. Operand 1051 states and 1191 transitions. [2022-07-13 18:01:01,547 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 190 [2022-07-13 18:01:01,547 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:01:01,547 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:01:01,581 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-07-13 18:01:01,763 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13,5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 18:01:01,763 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:01:01,764 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:01:01,764 INFO L85 PathProgramCache]: Analyzing trace with hash -1613211939, now seen corresponding path program 1 times [2022-07-13 18:01:01,764 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:01:01,764 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [304446910] [2022-07-13 18:01:01,764 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:01:01,764 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:01:01,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:01,801 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 18:01:01,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:01,807 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-13 18:01:01,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:01,829 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:01:01,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:01,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-13 18:01:01,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:01,836 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-07-13 18:01:01,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:01,849 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:01:01,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:01,850 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-13 18:01:01,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:01,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 18:01:01,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:01,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-07-13 18:01:01,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:01,864 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-07-13 18:01:01,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:01,866 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2022-07-13 18:01:01,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:01,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:01:01,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:01,875 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-13 18:01:01,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:01,876 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 145 [2022-07-13 18:01:01,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:01,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 156 [2022-07-13 18:01:01,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:01,885 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 165 [2022-07-13 18:01:01,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:01,894 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2022-07-13 18:01:01,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:01,896 INFO L134 CoverageAnalysis]: Checked inductivity of 237 backedges. 89 proven. 45 refuted. 0 times theorem prover too weak. 103 trivial. 0 not checked. [2022-07-13 18:01:01,896 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:01:01,896 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [304446910] [2022-07-13 18:01:01,896 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [304446910] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-13 18:01:01,896 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [522235183] [2022-07-13 18:01:01,896 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:01:01,897 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 18:01:01,897 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 18:01:01,916 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-13 18:01:01,989 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-07-13 18:01:02,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,090 INFO L263 TraceCheckSpWp]: Trace formula consists of 716 conjuncts, 18 conjunts are in the unsatisfiable core [2022-07-13 18:01:02,092 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 18:01:02,249 INFO L134 CoverageAnalysis]: Checked inductivity of 237 backedges. 126 proven. 26 refuted. 0 times theorem prover too weak. 85 trivial. 0 not checked. [2022-07-13 18:01:02,249 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-13 18:01:02,564 INFO L134 CoverageAnalysis]: Checked inductivity of 237 backedges. 99 proven. 45 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2022-07-13 18:01:02,564 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [522235183] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-13 18:01:02,564 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-13 18:01:02,564 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 8, 13] total 23 [2022-07-13 18:01:02,565 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1706084413] [2022-07-13 18:01:02,565 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-13 18:01:02,566 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-07-13 18:01:02,566 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:01:02,567 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-07-13 18:01:02,567 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=111, Invalid=395, Unknown=0, NotChecked=0, Total=506 [2022-07-13 18:01:02,567 INFO L87 Difference]: Start difference. First operand 1051 states and 1191 transitions. Second operand has 23 states, 23 states have (on average 9.608695652173912) internal successors, (221), 19 states have internal predecessors, (221), 13 states have call successors, (39), 11 states have call predecessors, (39), 13 states have return successors, (35), 13 states have call predecessors, (35), 13 states have call successors, (35) [2022-07-13 18:01:03,676 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:01:03,676 INFO L93 Difference]: Finished difference Result 2020 states and 2334 transitions. [2022-07-13 18:01:03,677 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 40 states. [2022-07-13 18:01:03,677 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 9.608695652173912) internal successors, (221), 19 states have internal predecessors, (221), 13 states have call successors, (39), 11 states have call predecessors, (39), 13 states have return successors, (35), 13 states have call predecessors, (35), 13 states have call successors, (35) Word has length 189 [2022-07-13 18:01:03,677 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:01:03,683 INFO L225 Difference]: With dead ends: 2020 [2022-07-13 18:01:03,683 INFO L226 Difference]: Without dead ends: 1453 [2022-07-13 18:01:03,687 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 475 GetRequests, 418 SyntacticMatches, 2 SemanticMatches, 55 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 653 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=797, Invalid=2395, Unknown=0, NotChecked=0, Total=3192 [2022-07-13 18:01:03,688 INFO L413 NwaCegarLoop]: 203 mSDtfsCounter, 1181 mSDsluCounter, 361 mSDsCounter, 0 mSdLazyCounter, 1104 mSolverCounterSat, 589 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1184 SdHoareTripleChecker+Valid, 564 SdHoareTripleChecker+Invalid, 1693 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 589 IncrementalHoareTripleChecker+Valid, 1104 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-07-13 18:01:03,688 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1184 Valid, 564 Invalid, 1693 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [589 Valid, 1104 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-07-13 18:01:03,690 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1453 states. [2022-07-13 18:01:03,748 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1453 to 1319. [2022-07-13 18:01:03,749 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1319 states, 1013 states have (on average 1.134254689042448) internal successors, (1149), 1057 states have internal predecessors, (1149), 160 states have call successors, (160), 149 states have call predecessors, (160), 145 states have return successors, (185), 145 states have call predecessors, (185), 160 states have call successors, (185) [2022-07-13 18:01:03,753 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1319 states to 1319 states and 1494 transitions. [2022-07-13 18:01:03,754 INFO L78 Accepts]: Start accepts. Automaton has 1319 states and 1494 transitions. Word has length 189 [2022-07-13 18:01:03,754 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:01:03,754 INFO L495 AbstractCegarLoop]: Abstraction has 1319 states and 1494 transitions. [2022-07-13 18:01:03,755 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 9.608695652173912) internal successors, (221), 19 states have internal predecessors, (221), 13 states have call successors, (39), 11 states have call predecessors, (39), 13 states have return successors, (35), 13 states have call predecessors, (35), 13 states have call successors, (35) [2022-07-13 18:01:03,755 INFO L276 IsEmpty]: Start isEmpty. Operand 1319 states and 1494 transitions. [2022-07-13 18:01:03,758 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 241 [2022-07-13 18:01:03,758 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:01:03,759 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:01:03,779 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-07-13 18:01:03,973 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2022-07-13 18:01:03,973 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:01:03,974 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:01:03,974 INFO L85 PathProgramCache]: Analyzing trace with hash 2097382224, now seen corresponding path program 1 times [2022-07-13 18:01:03,974 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:01:03,974 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1425406894] [2022-07-13 18:01:03,974 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:01:03,974 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:01:04,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:04,062 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 18:01:04,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:04,070 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-13 18:01:04,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:04,073 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:01:04,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:04,081 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-13 18:01:04,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:04,084 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-07-13 18:01:04,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:04,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:01:04,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:04,088 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-13 18:01:04,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:04,089 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 18:01:04,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:04,090 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-07-13 18:01:04,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:04,094 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-07-13 18:01:04,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:04,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2022-07-13 18:01:04,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:04,101 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:01:04,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:04,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-13 18:01:04,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:04,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 145 [2022-07-13 18:01:04,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:04,110 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 154 [2022-07-13 18:01:04,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:04,124 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:01:04,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:04,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-13 18:01:04,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:04,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 18:01:04,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:04,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-13 18:01:04,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:04,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 196 [2022-07-13 18:01:04,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:04,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 207 [2022-07-13 18:01:04,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:04,150 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 216 [2022-07-13 18:01:04,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:04,159 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 232 [2022-07-13 18:01:04,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:04,160 INFO L134 CoverageAnalysis]: Checked inductivity of 420 backedges. 196 proven. 36 refuted. 0 times theorem prover too weak. 188 trivial. 0 not checked. [2022-07-13 18:01:04,161 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:01:04,161 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1425406894] [2022-07-13 18:01:04,161 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1425406894] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-13 18:01:04,161 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1056220566] [2022-07-13 18:01:04,161 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:01:04,161 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 18:01:04,161 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 18:01:04,162 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-13 18:01:04,220 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-07-13 18:01:04,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:04,330 INFO L263 TraceCheckSpWp]: Trace formula consists of 847 conjuncts, 30 conjunts are in the unsatisfiable core [2022-07-13 18:01:04,333 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 18:01:04,569 INFO L134 CoverageAnalysis]: Checked inductivity of 420 backedges. 143 proven. 91 refuted. 0 times theorem prover too weak. 186 trivial. 0 not checked. [2022-07-13 18:01:04,569 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-13 18:01:05,142 INFO L134 CoverageAnalysis]: Checked inductivity of 420 backedges. 96 proven. 138 refuted. 0 times theorem prover too weak. 186 trivial. 0 not checked. [2022-07-13 18:01:05,143 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1056220566] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-13 18:01:05,143 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-13 18:01:05,143 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 11, 16] total 29 [2022-07-13 18:01:05,143 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1566258105] [2022-07-13 18:01:05,143 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-13 18:01:05,144 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-07-13 18:01:05,144 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:01:05,144 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-07-13 18:01:05,144 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=150, Invalid=662, Unknown=0, NotChecked=0, Total=812 [2022-07-13 18:01:05,144 INFO L87 Difference]: Start difference. First operand 1319 states and 1494 transitions. Second operand has 29 states, 29 states have (on average 10.379310344827585) internal successors, (301), 25 states have internal predecessors, (301), 17 states have call successors, (50), 13 states have call predecessors, (50), 19 states have return successors, (53), 17 states have call predecessors, (53), 17 states have call successors, (53) [2022-07-13 18:01:06,382 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:01:06,382 INFO L93 Difference]: Finished difference Result 2056 states and 2348 transitions. [2022-07-13 18:01:06,383 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-07-13 18:01:06,383 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 29 states have (on average 10.379310344827585) internal successors, (301), 25 states have internal predecessors, (301), 17 states have call successors, (50), 13 states have call predecessors, (50), 19 states have return successors, (53), 17 states have call predecessors, (53), 17 states have call successors, (53) Word has length 240 [2022-07-13 18:01:06,383 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:01:06,384 INFO L225 Difference]: With dead ends: 2056 [2022-07-13 18:01:06,384 INFO L226 Difference]: Without dead ends: 0 [2022-07-13 18:01:06,387 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 571 GetRequests, 517 SyntacticMatches, 5 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 546 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=579, Invalid=1971, Unknown=0, NotChecked=0, Total=2550 [2022-07-13 18:01:06,387 INFO L413 NwaCegarLoop]: 200 mSDtfsCounter, 1192 mSDsluCounter, 538 mSDsCounter, 0 mSdLazyCounter, 1657 mSolverCounterSat, 486 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1194 SdHoareTripleChecker+Valid, 738 SdHoareTripleChecker+Invalid, 2143 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 486 IncrementalHoareTripleChecker+Valid, 1657 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-07-13 18:01:06,387 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1194 Valid, 738 Invalid, 2143 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [486 Valid, 1657 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-07-13 18:01:06,387 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-13 18:01:06,388 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-13 18:01:06,388 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 18:01:06,388 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-13 18:01:06,388 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 240 [2022-07-13 18:01:06,388 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:01:06,388 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-13 18:01:06,388 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 29 states have (on average 10.379310344827585) internal successors, (301), 25 states have internal predecessors, (301), 17 states have call successors, (50), 13 states have call predecessors, (50), 19 states have return successors, (53), 17 states have call predecessors, (53), 17 states have call successors, (53) [2022-07-13 18:01:06,388 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-13 18:01:06,388 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-13 18:01:06,390 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-13 18:01:06,407 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-07-13 18:01:06,607 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2022-07-13 18:01:06,609 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-13 18:01:26,673 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 713 719) no Hoare annotation was computed. [2022-07-13 18:01:26,673 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 713 719) the Hoare annotation is: true [2022-07-13 18:01:26,673 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 612 623) the Hoare annotation is: (let ((.cse6 (not (= 2 ~waterLevel~0))) (.cse9 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse4 (not (<= ~waterLevel~0 1))) (.cse2 (not (<= 0 ~waterLevel~0))) (.cse7 (not (<= 1 ~pumpRunning~0))) (.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (not (= ~pumpRunning~0 0))) (.cse3 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse8 (not (<= 2 ~waterLevel~0))) (.cse10 (not (<= ~waterLevel~0 2))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse6 .cse3 .cse7 .cse5) (or .cse3 .cse8 .cse7 .cse9 .cse10 .cse5) (or .cse1 .cse6 .cse3 .cse9 .cse5) (or .cse1 .cse2 .cse3 .cse9 .cse4 .cse5) (or .cse0 .cse2 .cse3 .cse7 .cse10 .cse5 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 .cse3 .cse8 .cse10 .cse5))) [2022-07-13 18:01:26,673 INFO L899 garLoopResultBuilder]: For program point L616-1(lines 612 623) no Hoare annotation was computed. [2022-07-13 18:01:26,673 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 612 623) no Hoare annotation was computed. [2022-07-13 18:01:26,674 INFO L895 garLoopResultBuilder]: At program point L766(line 766) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 0))) (let ((.cse6 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (<= |old(~waterLevel~0)| 0))) (.cse10 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse11 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse6 .cse7 .cse3 .cse8) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse6 .cse2 .cse3) (or .cse9 (not (<= 1 |old(~waterLevel~0)|)) .cse2 .cse3 .cse4 .cse10) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse7 (and .cse11 (= ~waterLevel~0 1)) .cse3) (or .cse9 .cse6 .cse7 .cse3 .cse4 .cse10) (or .cse9 .cse2 .cse3 .cse4 .cse5) (or .cse9 .cse6 .cse2 .cse3 .cse8 .cse10) (or .cse0 .cse1 .cse7 .cse3 .cse4 .cse5) (or .cse9 (not (< 1 |old(~waterLevel~0)|)) .cse7 .cse3 .cse4)))) [2022-07-13 18:01:26,674 INFO L895 garLoopResultBuilder]: At program point L766-1(lines 747 771) the Hoare annotation is: (let ((.cse20 (= ~pumpRunning~0 0)) (.cse27 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse8 (not (= |old(~waterLevel~0)| 1))) (.cse6 (not (<= |old(~waterLevel~0)| 1))) (.cse16 (<= ~waterLevel~0 0)) (.cse19 (<= 0 ~waterLevel~0)) (.cse25 (<= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse26 (<= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~6#1|)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse20 .cse27)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse23 (and (<= 1 ~pumpRunning~0) .cse27)) (.cse2 (not (<= 0 |old(~waterLevel~0)|))) (.cse5 (not (<= |old(~waterLevel~0)| 0))) (.cse10 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (< 0 (+ |timeShift_processEnvironment_~tmp~6#1| 1))) (.cse13 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse14 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse15 (<= |timeShift_processEnvironment_~tmp~6#1| 0)) (.cse21 (= ~waterLevel~0 1)) (.cse17 (<= 1 ~switchedOnBeforeTS~0)) (.cse18 (<= 0 |timeShift_isMethaneAlarm_#res#1|)) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse22 (not (< 1 |old(~waterLevel~0)|))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0)) (.cse24 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse0 .cse1 .cse2 .cse7 .cse4) (or .cse8 .cse9 .cse7 .cse4 .cse10 (and .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19)) (or .cse0 .cse8 .cse3 (and .cse20 .cse21) .cse4) (or .cse0 .cse1 .cse22 .cse7 .cse23 .cse4 .cse24) (or .cse6 .cse9 (not (<= 1 |old(~waterLevel~0)|)) .cse3 (and .cse20 .cse13 .cse16 .cse17 .cse25 .cse19 .cse26) .cse4 .cse24 .cse10) (or .cse9 .cse22 .cse3 (and .cse20 .cse13 .cse21 .cse17 .cse25 .cse26) .cse4 .cse24) (or (and .cse20 .cse13 .cse27 .cse17 .cse25 .cse26) .cse9 .cse2 .cse3 .cse4 .cse24 .cse5 .cse10) (or .cse0 .cse1 .cse3 .cse23 .cse4 .cse24 (not (<= 2 |old(~waterLevel~0)|))) (or .cse9 .cse2 .cse7 (and .cse11 .cse12 .cse13 .cse14 .cse15 .cse27 .cse17 .cse18) .cse4 .cse5 .cse10) (or (and .cse11 .cse12 .cse13 .cse14 .cse15 .cse21 .cse17 .cse18) .cse9 .cse22 .cse7 .cse4 .cse24)))) [2022-07-13 18:01:26,674 INFO L895 garLoopResultBuilder]: At program point L795(lines 788 798) the Hoare annotation is: (let ((.cse5 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse16 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (<= 0 |timeShift_isMethaneAlarm_#res#1|)) (.cse15 (not (<= |old(~waterLevel~0)| 0))) (.cse20 (not (<= 1 |old(~waterLevel~0)|))) (.cse21 (<= ~waterLevel~0 0)) (.cse22 (<= 0 ~waterLevel~0)) (.cse18 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse14 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse4 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse6 (<= 1 ~waterLevel~0)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse17 (<= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse11 (not (<= 2 |old(~waterLevel~0)|))) (.cse19 (not (<= |old(~waterLevel~0)| 1))) (.cse12 (not (= |old(~pumpRunning~0)| 0))) (.cse13 (not (<= 0 |old(~waterLevel~0)|))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse9 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) .cse9 .cse10 .cse11) (or .cse12 .cse13 .cse14 .cse9 .cse15) (or .cse12 .cse14 .cse9 .cse10 .cse11) (or (and .cse2 .cse3 .cse16 .cse7 .cse17) .cse0 .cse13 .cse14 .cse9 .cse15 .cse18) (or .cse19 .cse0 .cse20 .cse1 (and .cse2 .cse3 .cse5 .cse21 .cse7 .cse8 .cse22) .cse9 .cse18) (or .cse0 .cse13 .cse1 .cse9 (and .cse2 .cse3 .cse5 .cse16 .cse7 .cse8) .cse15 .cse18) (or .cse12 .cse1 .cse9 .cse10 .cse11) (or .cse19 .cse12 .cse20 .cse14 .cse9) (or .cse19 .cse0 .cse20 (and .cse2 .cse3 .cse21 .cse7 .cse17 .cse22) .cse14 .cse9 .cse18) (or .cse0 .cse14 .cse9 .cse10 (and .cse2 .cse3 .cse4 .cse6 .cse7 .cse17) .cse11) (or .cse19 .cse12 .cse13 .cse1 .cse9))) [2022-07-13 18:01:26,674 INFO L899 garLoopResultBuilder]: For program point L700-1(lines 700 706) no Hoare annotation was computed. [2022-07-13 18:01:26,674 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 686 712) no Hoare annotation was computed. [2022-07-13 18:01:26,674 INFO L895 garLoopResultBuilder]: At program point L181(line 181) the Hoare annotation is: (let ((.cse16 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (= ~pumpRunning~0 0)) (.cse15 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|))) (let ((.cse7 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (and .cse14 .cse15 (= ~waterLevel~0 1))) (.cse2 (not (= |old(~waterLevel~0)| 1))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse15 .cse16)) (.cse10 (not (<= 2 |old(~waterLevel~0)|))) (.cse13 (and .cse14 .cse15 .cse16)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (not (<= 0 |old(~waterLevel~0)|))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0)) (.cse12 (not (<= |old(~waterLevel~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (not (<= |old(~waterLevel~0)| 1)) .cse5 (not (<= 1 |old(~waterLevel~0)|)) .cse3 .cse4 .cse6 .cse7) (or .cse5 .cse8 .cse4 .cse9 .cse6 .cse10) (or .cse5 .cse11 .cse3 .cse4 .cse6 .cse12 .cse7) (or .cse5 .cse11 .cse8 .cse4 .cse9 .cse6 .cse7) (or .cse13 .cse1 .cse11 .cse8 .cse4 .cse12) (or .cse0 .cse1 .cse2 .cse8 .cse4) (or .cse13 .cse1 .cse8 .cse4 .cse9 .cse10) (or .cse13 .cse1 (not (< 1 |old(~waterLevel~0)|)) .cse3 .cse4 .cse9) (or .cse5 .cse3 .cse4 .cse9 .cse6 .cse10) (or .cse13 .cse1 .cse11 .cse3 .cse4 .cse12)))) [2022-07-13 18:01:26,674 INFO L899 garLoopResultBuilder]: For program point L693(lines 693 699) no Hoare annotation was computed. [2022-07-13 18:01:26,674 INFO L899 garLoopResultBuilder]: For program point L181-1(line 181) no Hoare annotation was computed. [2022-07-13 18:01:26,674 INFO L899 garLoopResultBuilder]: For program point L693-2(lines 689 711) no Hoare annotation was computed. [2022-07-13 18:01:26,674 INFO L899 garLoopResultBuilder]: For program point L755(lines 755 763) no Hoare annotation was computed. [2022-07-13 18:01:26,674 INFO L899 garLoopResultBuilder]: For program point L751(lines 751 768) no Hoare annotation was computed. [2022-07-13 18:01:26,674 INFO L899 garLoopResultBuilder]: For program point L198(lines 198 208) no Hoare annotation was computed. [2022-07-13 18:01:26,674 INFO L899 garLoopResultBuilder]: For program point L194(lines 194 211) no Hoare annotation was computed. [2022-07-13 18:01:26,675 INFO L895 garLoopResultBuilder]: At program point L194-1(lines 186 214) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse10 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse28 (<= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|)) (.cse14 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~1#1| ~waterLevel~0)) (.cse26 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~pumpRunning~0 0)) (.cse35 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse36 (<= 2 ~waterLevel~0)) (.cse37 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~1#1| 2)) (.cse24 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse17 (not .cse5))) (let ((.cse3 (not (<= 0 |old(~waterLevel~0)|))) (.cse7 (not (<= |old(~waterLevel~0)| 0))) (.cse21 (not (< 1 |old(~waterLevel~0)|))) (.cse22 (and .cse26 .cse9 .cse35 .cse36 .cse37 .cse24 .cse17)) (.cse23 (and (<= 1 ~pumpRunning~0) .cse35 .cse36 .cse37 .cse24 .cse17)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (and .cse26 .cse9 .cse10 .cse28 .cse14 .cse24 .cse17)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse27 (< 0 (+ |timeShift_processEnvironment_~tmp~6#1| 1))) (.cse12 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse29 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse13 (<= 1 ~waterLevel~0)) (.cse30 (<= |timeShift_processEnvironment_~tmp~6#1| 0)) (.cse31 (<= 0 |timeShift_isMethaneAlarm_#res#1|)) (.cse20 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse34 (not (<= 1 |old(~waterLevel~0)|))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse11 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse32 (<= ~waterLevel~0 0)) (.cse15 (<= 1 ~switchedOnBeforeTS~0)) (.cse16 (<= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse33 (<= 0 ~waterLevel~0)) (.cse18 (<= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~6#1|)) (.cse19 (not (<= |old(~waterLevel~0)| 2))) (.cse25 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse2 .cse3 .cse6 .cse5 .cse7) (or .cse8 (and .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18) .cse6 .cse5 .cse19 .cse20) (or .cse1 .cse21 .cse6 .cse22 .cse23 .cse5 .cse19) (or (and .cse9 .cse10 .cse11 .cse14 .cse24 .cse15 .cse16 .cse17 .cse18) .cse8 .cse3 .cse6 .cse5 .cse19 .cse7 .cse25) (or .cse8 .cse3 .cse4 .cse5 (and .cse26 .cse10 .cse27 .cse11 .cse28 .cse29 .cse30 .cse14 .cse24 .cse15 .cse31) .cse7 .cse25) (or (and .cse26 .cse10 .cse27 .cse11 .cse28 .cse29 .cse30 .cse14 .cse32 .cse15 .cse31 .cse33) .cse0 .cse8 .cse34 .cse4 .cse5 .cse25) (or .cse1 .cse21 .cse4 .cse22 .cse23 .cse5 .cse19) (or .cse0 .cse1 .cse2 .cse34 .cse6 .cse5) (or .cse8 .cse4 (and .cse26 .cse10 .cse27 .cse11 .cse28 .cse12 .cse29 .cse13 .cse30 .cse14 .cse15 .cse31) .cse5 .cse19 .cse20) (or .cse0 .cse8 .cse34 .cse6 .cse5 (and .cse9 .cse10 .cse11 .cse14 .cse32 .cse15 .cse16 .cse17 .cse33 .cse18) .cse19 .cse25))))) [2022-07-13 18:01:26,675 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2022-07-13 18:01:26,675 INFO L895 garLoopResultBuilder]: At program point L661(lines 656 664) the Hoare annotation is: (let ((.cse30 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse5 (= 0 ~systemActive~0)) (.cse9 (= ~pumpRunning~0 0)) (.cse10 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse6 (not (<= 1 |old(~waterLevel~0)|))) (.cse22 (<= ~waterLevel~0 0)) (.cse24 (<= 0 ~waterLevel~0)) (.cse3 (and .cse9 .cse10 .cse12)) (.cse2 (not (<= 0 |old(~waterLevel~0)|))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse25 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse26 (< 0 (+ |timeShift_processEnvironment_~tmp~6#1| 1))) (.cse27 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse28 (<= |timeShift_processEnvironment_~tmp~6#1| 0)) (.cse29 (<= 0 |timeShift_isMethaneAlarm_#res#1|)) (.cse16 (not (<= |old(~waterLevel~0)| 0))) (.cse17 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse13 (<= 1 ~switchedOnBeforeTS~0)) (.cse14 (<= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse23 (not .cse5)) (.cse15 (<= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~6#1|)) (.cse18 (and .cse9 .cse30 .cse12)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse19 (and (<= 1 ~pumpRunning~0) .cse30 .cse12)) (.cse20 (not (<= |old(~waterLevel~0)| 2))) (.cse21 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse6 .cse3 .cse7 .cse5) (or .cse8 .cse2 (and .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15) .cse7 .cse5 .cse16 .cse17) (or .cse18 .cse1 .cse4 .cse19 .cse5 .cse20 .cse21) (or (and .cse9 .cse10 .cse11 .cse22 .cse13 .cse14 .cse23 .cse24 .cse15) .cse0 .cse8 .cse6 .cse7 .cse5 .cse17) (or .cse0 .cse8 .cse6 .cse4 .cse5 (and .cse25 .cse10 .cse26 .cse11 .cse27 .cse28 .cse22 .cse13 .cse29 .cse24) .cse17) (or .cse1 .cse2 .cse3 .cse7 .cse5 .cse16) (or .cse8 (not (< 1 |old(~waterLevel~0)|)) .cse4 (and .cse25 .cse10 .cse26 .cse11 .cse27 .cse28 (= ~waterLevel~0 1) .cse13 .cse29) .cse5 .cse20) (or .cse8 .cse2 .cse4 .cse5 (and .cse25 .cse10 .cse26 .cse11 .cse27 .cse28 .cse12 .cse13 .cse29) .cse16 .cse17) (or .cse8 .cse7 (and .cse9 .cse10 .cse11 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0) .cse13 .cse14 .cse23 .cse15) .cse5 .cse20 .cse21) (or .cse18 .cse1 .cse7 .cse19 .cse5 .cse20 .cse21)))) [2022-07-13 18:01:26,675 INFO L895 garLoopResultBuilder]: At program point L785(lines 780 787) the Hoare annotation is: (let ((.cse10 (not (<= 2 |old(~waterLevel~0)|))) (.cse12 (= ~pumpRunning~0 0)) (.cse13 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse14 (<= 1 ~switchedOnBeforeTS~0)) (.cse15 (<= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse16 (<= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~6#1|)) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (not (<= |old(~waterLevel~0)| 0))) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse1 (not (<= 1 |old(~waterLevel~0)|))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse11 (not (<= |old(~waterLevel~0)| 1))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse8 .cse3 .cse9) (or .cse6 .cse8 .cse3 .cse4 .cse10) (or .cse0 .cse2 .cse3 .cse4 .cse10) (or .cse0 .cse7 .cse2 .cse3 .cse9 .cse5) (or .cse6 .cse2 .cse3 .cse4 .cse10) (or .cse11 .cse0 .cse1 .cse8 (and .cse12 .cse13 (<= ~waterLevel~0 0) .cse14 .cse15 (<= 0 ~waterLevel~0) .cse16) .cse3 .cse4 .cse5) (or .cse0 (not (< 1 |old(~waterLevel~0)|)) .cse8 (and .cse12 .cse13 (= ~waterLevel~0 1) .cse14 .cse15 .cse16) .cse3 .cse4) (or (and .cse12 .cse13 (= |old(~waterLevel~0)| ~waterLevel~0) .cse14 .cse15 .cse16) .cse0 .cse7 .cse8 .cse3 .cse4 .cse9 .cse5) (or .cse11 .cse6 .cse1 .cse8 .cse3) (or .cse11 .cse6 .cse7 .cse2 .cse3))) [2022-07-13 18:01:26,675 INFO L899 garLoopResultBuilder]: For program point L199(lines 199 205) no Hoare annotation was computed. [2022-07-13 18:01:26,675 INFO L895 garLoopResultBuilder]: At program point L761(line 761) the Hoare annotation is: (let ((.cse16 (not (<= 2 |old(~waterLevel~0)|))) (.cse12 (not (<= 1 ~methaneLevelCritical~0))) (.cse15 (not (<= |old(~waterLevel~0)| 0))) (.cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (< 0 (+ |timeShift_processEnvironment_~tmp~6#1| 1))) (.cse6 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse7 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse8 (<= |timeShift_processEnvironment_~tmp~6#1| 0)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse10 (<= 0 |timeShift_isMethaneAlarm_#res#1|)) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse18 (not (< 1 |old(~waterLevel~0)|))) (.cse13 (not (<= |old(~waterLevel~0)| 2))) (.cse17 (not (<= |old(~waterLevel~0)| 1))) (.cse14 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (not (<= 0 |old(~waterLevel~0)|))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5 .cse6 .cse7 .cse8 (<= ~waterLevel~0 0) .cse9 .cse10 (<= 0 ~waterLevel~0))) (or .cse0 .cse11 .cse12 .cse2 .cse13 .cse3) (or .cse14 .cse11 .cse12 .cse2 .cse15) (or .cse14 .cse12 .cse2 .cse13 .cse16) (or .cse14 .cse1 .cse2 .cse13 .cse16) (or .cse17 .cse14 (not (<= 1 |old(~waterLevel~0)|)) .cse12 .cse2) (or .cse0 .cse18 .cse12 .cse2 .cse13) (or .cse0 .cse11 .cse1 (and .cse4 .cse5 .cse6 .cse7 .cse8 (= |old(~waterLevel~0)| ~waterLevel~0) .cse9 .cse10) .cse2 .cse15 .cse3) (or (and .cse4 .cse5 .cse6 .cse7 .cse8 (= ~waterLevel~0 1) .cse9 .cse10) .cse0 .cse18 .cse1 .cse2 .cse13) (or .cse17 .cse14 .cse11 .cse1 .cse2))) [2022-07-13 18:01:26,675 INFO L895 garLoopResultBuilder]: At program point L183(lines 176 185) the Hoare annotation is: (let ((.cse11 (= ~waterLevel~0 1)) (.cse19 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse20 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= 0 ~systemActive~0))) (let ((.cse10 (= ~pumpRunning~0 0)) (.cse17 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse18 (let ((.cse21 (<= 1 ~pumpRunning~0)) (.cse22 (not .cse3))) (or (and .cse21 .cse19 .cse11 .cse20 .cse22) (and .cse21 .cse19 (<= 2 ~waterLevel~0) .cse20 .cse22))))) (let ((.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse12 (and (= 2 ~waterLevel~0) .cse17 .cse18)) (.cse14 (and (<= ~waterLevel~0 1) .cse17 .cse18)) (.cse15 (and .cse19 .cse17 .cse20)) (.cse13 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (<= |old(~waterLevel~0)| 0))) (.cse16 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse10 .cse17)) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse6 .cse7 .cse3 .cse8) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse6 .cse2 .cse3) (or .cse0 .cse9 .cse7 (and .cse10 .cse11) .cse3) (or .cse12 .cse13 .cse2 .cse14 .cse3 .cse4 .cse5) (or .cse15 .cse13 .cse6 .cse7 .cse3 .cse4 .cse16) (or .cse13 (and .cse17 .cse18) .cse7 .cse3 .cse4 .cse5) (or .cse9 .cse12 .cse13 .cse2 .cse14 .cse3 .cse16) (or .cse15 .cse13 .cse6 .cse2 .cse3 .cse8 .cse16) (or .cse0 .cse1 .cse7 .cse3 .cse4 .cse5))))) [2022-07-13 18:01:26,675 INFO L895 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: (let ((.cse9 (not (<= |old(~waterLevel~0)| 0))) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse10 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (<= 1 |old(~waterLevel~0)|))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse11 (not (<= |old(~waterLevel~0)| 1))) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse6 .cse7 .cse3 .cse4 .cse5) (or .cse8 .cse6 .cse7 .cse3 .cse9) (or .cse8 .cse7 .cse3 .cse4 .cse10) (or .cse0 .cse2 .cse3 .cse4 .cse10) (or .cse0 .cse6 .cse2 .cse3 .cse9 .cse5) (or .cse8 .cse2 .cse3 .cse4 .cse10) (or .cse11 .cse8 .cse1 .cse7 .cse3) (or .cse0 (not (< 1 |old(~waterLevel~0)|)) .cse7 .cse3 .cse4) (or .cse11 .cse8 .cse6 .cse2 .cse3))) [2022-07-13 18:01:26,676 INFO L895 garLoopResultBuilder]: At program point L629(lines 624 632) the Hoare annotation is: (let ((.cse15 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse16 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse17 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse14 (and .cse15 .cse16 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0) .cse17)) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse13 (and .cse15 .cse16 (= |old(~waterLevel~0)| ~waterLevel~0) .cse17)) (.cse4 (not (<= |old(~waterLevel~0)| 0))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (not (<= 1 |old(~waterLevel~0)|))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse11 (and .cse15 .cse16 (<= ~waterLevel~0 0) .cse17 (<= 0 ~waterLevel~0))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse12 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse7 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 0 |old(~waterLevel~0)|))) (.cse10 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse2 .cse3 .cse5 .cse6) (or .cse7 .cse8 .cse9 .cse10 .cse11 .cse3 .cse12) (or .cse13 .cse8 .cse1 .cse2 .cse3 .cse5 .cse4 .cse12) (or .cse14 .cse8 .cse10 .cse3 .cse5 .cse6) (or .cse14 .cse8 .cse2 .cse3 .cse5 .cse6) (or .cse0 .cse10 .cse3 .cse5 .cse6) (or .cse7 .cse0 .cse9 .cse2 .cse3) (or .cse13 .cse8 .cse1 .cse10 .cse3 .cse4 .cse12) (or .cse7 .cse8 .cse9 .cse2 .cse11 .cse3 .cse5 .cse12) (or .cse7 .cse0 .cse1 .cse10 .cse3)))) [2022-07-13 18:01:26,676 INFO L899 garLoopResultBuilder]: For program point L592(lines 592 596) no Hoare annotation was computed. [2022-07-13 18:01:26,676 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 686 712) the Hoare annotation is: (let ((.cse16 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (= ~pumpRunning~0 0)) (.cse15 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|))) (let ((.cse7 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (and .cse14 .cse15 (= ~waterLevel~0 1))) (.cse2 (not (= |old(~waterLevel~0)| 1))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse15 .cse16)) (.cse10 (not (<= 2 |old(~waterLevel~0)|))) (.cse13 (and .cse14 .cse15 .cse16)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (not (<= 0 |old(~waterLevel~0)|))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0)) (.cse12 (not (<= |old(~waterLevel~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (not (<= |old(~waterLevel~0)| 1)) .cse5 (not (<= 1 |old(~waterLevel~0)|)) .cse3 .cse4 .cse6 .cse7) (or .cse5 .cse8 .cse4 .cse9 .cse6 .cse10) (or .cse5 .cse11 .cse3 .cse4 .cse6 .cse12 .cse7) (or .cse5 .cse11 .cse8 .cse4 .cse9 .cse6 .cse7) (or .cse13 .cse1 .cse11 .cse8 .cse4 .cse12) (or .cse0 .cse1 .cse2 .cse8 .cse4) (or .cse13 .cse1 .cse8 .cse4 .cse9 .cse10) (or .cse13 .cse1 (not (< 1 |old(~waterLevel~0)|)) .cse3 .cse4 .cse9) (or .cse5 .cse3 .cse4 .cse9 .cse6 .cse10) (or .cse13 .cse1 .cse11 .cse3 .cse4 .cse12)))) [2022-07-13 18:01:26,676 INFO L895 garLoopResultBuilder]: At program point L592-2(lines 588 599) the Hoare annotation is: (let ((.cse15 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse16 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse12 (and .cse15 (<= ~waterLevel~0 0) .cse16 (<= 0 ~waterLevel~0))) (.cse14 (and .cse15 (= |old(~waterLevel~0)| ~waterLevel~0) .cse16)) (.cse4 (not (<= |old(~waterLevel~0)| 0))) (.cse13 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse11 (not (<= 1 |old(~waterLevel~0)|))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (and .cse15 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0) .cse16)) (.cse8 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (not (<= 2 |old(~waterLevel~0)|))) (.cse10 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 0 |old(~waterLevel~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse3 .cse8 .cse9) (or .cse0 .cse2 .cse3 .cse8 .cse9) (or .cse10 .cse5 .cse11 .cse2 .cse3 .cse8 .cse12 .cse13) (or (not (= |old(~waterLevel~0)| 1)) .cse5 .cse6 .cse3 .cse12 .cse13) (or .cse14 .cse5 .cse1 .cse6 .cse3 .cse4 .cse13) (or .cse0 .cse6 .cse3 .cse8 .cse9) (or .cse14 .cse5 .cse1 .cse2 .cse3 .cse8 .cse4 .cse13) (or .cse10 .cse0 .cse11 .cse2 .cse3) (or .cse5 .cse2 .cse7 .cse3 .cse8 .cse9) (or .cse10 .cse0 .cse1 .cse6 .cse3)))) [2022-07-13 18:01:26,676 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 686 712) no Hoare annotation was computed. [2022-07-13 18:01:26,676 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-07-13 18:01:26,676 INFO L895 garLoopResultBuilder]: At program point L196(line 196) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0)) (.cse22 (= ~pumpRunning~0 0)) (.cse9 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse14 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~1#1| ~waterLevel~0)) (.cse30 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse5 (and .cse22 .cse9 .cse14 .cse30)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse28 (not (<= 0 |old(~waterLevel~0)|))) (.cse29 (not (<= |old(~waterLevel~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (< 0 (+ |timeShift_processEnvironment_~tmp~6#1| 1))) (.cse23 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse12 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse24 (<= 1 ~waterLevel~0)) (.cse13 (<= |timeShift_processEnvironment_~tmp~6#1| 0)) (.cse17 (<= 0 |timeShift_isMethaneAlarm_#res#1|)) (.cse21 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse11 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse15 (<= ~waterLevel~0 0)) (.cse16 (<= 1 ~switchedOnBeforeTS~0)) (.cse25 (<= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse26 (not .cse4)) (.cse18 (<= 0 ~waterLevel~0)) (.cse27 (<= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~6#1|)) (.cse20 (not (<= |old(~waterLevel~0)| 2))) (.cse19 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or (not (= |old(~waterLevel~0)| 1)) .cse6 .cse7 (and .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18) .cse4 .cse19) (or .cse1 .cse3 .cse4 .cse20 .cse21) (or .cse6 (and .cse22 .cse9 .cse11 .cse23 .cse24 .cse14 .cse16 .cse25 .cse26 .cse27) .cse3 .cse4 .cse20 .cse21) (or .cse1 .cse28 .cse3 .cse4 .cse5 .cse29) (or .cse0 .cse1 .cse28 .cse7 .cse4 .cse5) (or (and .cse22 .cse9 .cse11 .cse14 .cse30 .cse16 .cse25 .cse27) .cse6 .cse28 .cse3 .cse4 .cse20 .cse29 .cse19) (or .cse1 .cse7 .cse4 .cse20 .cse21) (or (and .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse30 .cse16 .cse17) .cse6 .cse28 .cse7 .cse4 .cse29 .cse19) (or .cse6 .cse7 (and .cse8 .cse9 .cse10 .cse11 .cse23 .cse12 .cse24 .cse13 .cse14 .cse16 .cse17) .cse4 .cse20 .cse21) (or .cse0 .cse6 .cse2 .cse3 .cse4 (and .cse22 .cse9 .cse11 .cse14 .cse15 .cse16 .cse25 .cse26 .cse18 .cse27) .cse20 .cse19)))) [2022-07-13 18:01:26,676 INFO L899 garLoopResultBuilder]: For program point L196-1(line 196) no Hoare annotation was computed. [2022-07-13 18:01:26,676 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 61 90) no Hoare annotation was computed. [2022-07-13 18:01:26,676 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 61 90) the Hoare annotation is: true [2022-07-13 18:01:26,676 INFO L902 garLoopResultBuilder]: At program point L86(lines 61 90) the Hoare annotation is: true [2022-07-13 18:01:26,676 INFO L899 garLoopResultBuilder]: For program point L82(line 82) no Hoare annotation was computed. [2022-07-13 18:01:26,676 INFO L899 garLoopResultBuilder]: For program point L75(lines 75 79) no Hoare annotation was computed. [2022-07-13 18:01:26,676 INFO L902 garLoopResultBuilder]: At program point L75-1(lines 75 79) the Hoare annotation is: true [2022-07-13 18:01:26,677 INFO L899 garLoopResultBuilder]: For program point L72(line 72) no Hoare annotation was computed. [2022-07-13 18:01:26,677 INFO L902 garLoopResultBuilder]: At program point L71-2(lines 71 85) the Hoare annotation is: true [2022-07-13 18:01:26,677 INFO L902 garLoopResultBuilder]: At program point L67(line 67) the Hoare annotation is: true [2022-07-13 18:01:26,677 INFO L899 garLoopResultBuilder]: For program point L67-1(line 67) no Hoare annotation was computed. [2022-07-13 18:01:26,677 INFO L899 garLoopResultBuilder]: For program point L927(lines 927 933) no Hoare annotation was computed. [2022-07-13 18:01:26,677 INFO L895 garLoopResultBuilder]: At program point L894(lines 890 896) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-13 18:01:26,677 INFO L899 garLoopResultBuilder]: For program point L927-1(lines 927 933) no Hoare annotation was computed. [2022-07-13 18:01:26,677 INFO L895 garLoopResultBuilder]: At program point L122(lines 118 124) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-13 18:01:26,677 INFO L899 garLoopResultBuilder]: For program point L151(lines 151 158) no Hoare annotation was computed. [2022-07-13 18:01:26,677 INFO L899 garLoopResultBuilder]: For program point L919(lines 919 923) no Hoare annotation was computed. [2022-07-13 18:01:26,677 INFO L899 garLoopResultBuilder]: For program point L151-2(lines 151 158) no Hoare annotation was computed. [2022-07-13 18:01:26,677 INFO L902 garLoopResultBuilder]: At program point L135(lines 127 137) the Hoare annotation is: true [2022-07-13 18:01:26,677 INFO L895 garLoopResultBuilder]: At program point L965(lines 916 966) the Hoare annotation is: false [2022-07-13 18:01:26,677 INFO L902 garLoopResultBuilder]: At program point L160(lines 141 163) the Hoare annotation is: true [2022-07-13 18:01:26,677 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-13 18:01:26,677 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-13 18:01:26,677 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-13 18:01:26,677 INFO L895 garLoopResultBuilder]: At program point L887(lines 883 889) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-13 18:01:26,677 INFO L895 garLoopResultBuilder]: At program point L173(lines 168 175) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-13 18:01:26,677 INFO L899 garLoopResultBuilder]: For program point L937(lines 937 943) no Hoare annotation was computed. [2022-07-13 18:01:26,677 INFO L899 garLoopResultBuilder]: For program point L937-1(lines 937 943) no Hoare annotation was computed. [2022-07-13 18:01:26,677 INFO L895 garLoopResultBuilder]: At program point L962(lines 917 964) the Hoare annotation is: (let ((.cse5 (<= ~waterLevel~0 0)) (.cse8 (<= 0 ~waterLevel~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse11 (= ~waterLevel~0 1)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse10 (<= 1 ~methaneLevelCritical~0)) (.cse9 (= ~pumpRunning~0 0)) (.cse12 (= 2 ~waterLevel~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse7 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse9 .cse10 .cse2 .cse3 .cse4 .cse11 .cse7) (and .cse9 .cse1 .cse2 .cse3 .cse4 .cse5 .cse7 .cse8) (and .cse0 .cse12 .cse1 .cse2 .cse3 .cse4 .cse7) (and .cse9 .cse10 .cse2 .cse3 .cse4 .cse5 .cse7 .cse8) (and .cse0 .cse10 .cse12 .cse2 .cse3 .cse4 .cse7) (and .cse9 .cse1 .cse2 .cse3 (<= ~waterLevel~0 1) .cse4 (<= 1 ~waterLevel~0) .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse11 .cse6 .cse7) (and .cse9 .cse10 .cse12 .cse2 .cse3 .cse4 .cse7) (and .cse9 .cse12 .cse1 .cse2 .cse3 .cse4 .cse7))) [2022-07-13 18:01:26,678 INFO L895 garLoopResultBuilder]: At program point L929(line 929) the Hoare annotation is: (let ((.cse9 (<= ~waterLevel~0 0)) (.cse6 (<= 0 ~waterLevel~0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse12 (= ~waterLevel~0 1)) (.cse10 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse11 (= 2 ~waterLevel~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (<= ~waterLevel~0 1) .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse3 .cse4 .cse9 .cse10 .cse5 .cse6) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse9 .cse5 .cse6) (and .cse7 .cse11 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse7 .cse1 .cse11 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse12 .cse5) (and .cse7 .cse8 .cse2 .cse3 .cse4 .cse12 .cse10 .cse5) (and .cse0 .cse1 .cse11 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse11 .cse8 .cse2 .cse3 .cse4 .cse5))) [2022-07-13 18:01:26,678 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-13 18:01:26,678 INFO L895 garLoopResultBuilder]: At program point L868(lines 863 870) the Hoare annotation is: (let ((.cse8 (<= ~waterLevel~0 0)) (.cse6 (<= 0 ~waterLevel~0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse11 (= ~waterLevel~0 1)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse10 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse12 (= 2 ~waterLevel~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (<= ~waterLevel~0 1) .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse8 .cse9 .cse5 .cse6) (and .cse0 .cse10 .cse2 .cse3 .cse4 .cse11 .cse5) (and .cse7 .cse10 .cse2 .cse3 .cse4 (<= ~waterLevel~0 2) .cse9 .cse5 .cse6) (and .cse7 .cse12 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse10 .cse2 .cse3 .cse4 .cse8 .cse5 .cse6) (and .cse7 .cse10 .cse12 .cse2 .cse3 .cse4 .cse5) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse11 .cse9 .cse5) (and .cse0 .cse10 .cse12 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse12 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-07-13 18:01:26,678 INFO L899 garLoopResultBuilder]: For program point L955(lines 955 959) no Hoare annotation was computed. [2022-07-13 18:01:26,678 INFO L895 garLoopResultBuilder]: At program point L955-2(lines 947 960) the Hoare annotation is: (let ((.cse8 (<= ~waterLevel~0 0)) (.cse6 (<= 0 ~waterLevel~0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse11 (= ~waterLevel~0 1)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse10 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse12 (= 2 ~waterLevel~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (<= ~waterLevel~0 1) .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse8 .cse9 .cse5 .cse6) (and .cse0 .cse10 .cse2 .cse3 .cse4 .cse11 .cse5) (and .cse7 .cse10 .cse2 .cse3 .cse4 (<= ~waterLevel~0 2) .cse9 .cse5 .cse6) (and .cse7 .cse12 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse10 .cse2 .cse3 .cse4 .cse8 .cse5 .cse6) (and .cse7 .cse10 .cse12 .cse2 .cse3 .cse4 .cse5) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse11 .cse9 .cse5) (and .cse0 .cse10 .cse12 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse12 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-07-13 18:01:26,678 INFO L899 garLoopResultBuilder]: For program point L918(lines 917 964) no Hoare annotation was computed. [2022-07-13 18:01:26,678 INFO L899 garLoopResultBuilder]: For program point L947(lines 947 960) no Hoare annotation was computed. [2022-07-13 18:01:26,678 INFO L895 garLoopResultBuilder]: At program point L939(line 939) the Hoare annotation is: (let ((.cse7 (<= 0 ~waterLevel~0)) (.cse8 (<= 1 ~pumpRunning~0)) (.cse4 (<= ~waterLevel~0 1)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse10 (= 2 ~waterLevel~0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse8 .cse9 .cse2 .cse3 .cse5 (<= ~waterLevel~0 2) (<= 1 ~switchedOnBeforeTS~0) .cse6 .cse7) (and .cse0 .cse9 .cse2 .cse3 .cse5 (<= ~waterLevel~0 0) .cse6 .cse7) (and .cse8 .cse10 .cse9 .cse2 .cse3 .cse5 .cse6) (and .cse8 .cse1 .cse10 .cse2 .cse3 .cse5 .cse6) (and .cse0 .cse9 .cse2 .cse3 .cse4 .cse5 (<= 1 ~waterLevel~0) .cse6) (and .cse0 .cse1 .cse10 .cse2 .cse3 .cse5 .cse6) (and .cse0 .cse10 .cse9 .cse2 .cse3 .cse5 .cse6))) [2022-07-13 18:01:26,678 INFO L902 garLoopResultBuilder]: At program point L968(lines 907 972) the Hoare annotation is: true [2022-07-13 18:01:26,678 INFO L895 garLoopResultBuilder]: At program point L902(lines 897 905) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-13 18:01:26,678 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 721 745) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse10 (not (<= ~waterLevel~0 0))) (.cse11 (not (<= 0 ~waterLevel~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse7 (not (<= 1 ~waterLevel~0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (<= ~waterLevel~0 1))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2 .cse3) (or (not (< 1 ~waterLevel~0)) .cse0 .cse1 .cse4 (not (<= ~waterLevel~0 2)) .cse3) (or .cse5 .cse6 .cse7 .cse2 .cse8 .cse3 .cse9) (or .cse0 .cse1 .cse10 .cse11 .cse4 .cse3) (or .cse5 .cse10 .cse11 .cse6 .cse2 .cse3 .cse9) (or .cse0 .cse1 .cse10 .cse11 .cse2 .cse3) (or .cse0 .cse1 .cse7 .cse2 .cse8 .cse3) (or .cse0 .cse1 .cse7 .cse4 .cse8 .cse3))) [2022-07-13 18:01:26,678 INFO L895 garLoopResultBuilder]: At program point L735(line 735) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse1 (not (<= ~waterLevel~0 0))) (.cse2 (not (<= 0 ~waterLevel~0))) (.cse6 (not (<= 1 ~waterLevel~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (<= ~waterLevel~0 1))) (.cse9 (not (< 1 ~waterLevel~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse10 (not (<= ~waterLevel~0 2))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0) (not .cse5)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse6 .cse7 .cse8 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse7 .cse4 .cse5) (or .cse9 .cse0 .cse3 .cse10 .cse4 .cse5) (or .cse2 (not (<= 1 |old(~pumpRunning~0)|)) .cse7 .cse8 .cse5 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse6 .cse3 .cse8 .cse4 .cse5) (or .cse9 .cse0 .cse7 .cse10 .cse4 .cse5)))) [2022-07-13 18:01:26,678 INFO L899 garLoopResultBuilder]: For program point L669(lines 669 675) no Hoare annotation was computed. [2022-07-13 18:01:26,678 INFO L895 garLoopResultBuilder]: At program point L859(lines 844 862) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse5 (= 0 ~systemActive~0))) (let ((.cse2 (not (<= 1 ~waterLevel~0))) (.cse4 (not (<= ~waterLevel~0 1))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (<= ~waterLevel~0 0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (not .cse5))) (.cse9 (not (<= 0 ~waterLevel~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse6 (not (= 2 ~waterLevel~0)) .cse3 .cse5) (or .cse0 .cse1 .cse2 .cse7 .cse4 .cse5) (or .cse0 .cse8 .cse1 .cse9 .cse7 .cse5) (or .cse9 (not (<= 1 |old(~pumpRunning~0)|)) .cse7 .cse4 .cse5 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (< 1 ~waterLevel~0)) .cse0 .cse6 .cse7 (not (<= ~waterLevel~0 2)) .cse5) (or .cse0 .cse8 .cse1 .cse9 .cse3 .cse5)))) [2022-07-13 18:01:26,678 INFO L899 garLoopResultBuilder]: For program point L729(lines 729 737) no Hoare annotation was computed. [2022-07-13 18:01:26,679 INFO L899 garLoopResultBuilder]: For program point L725(lines 725 742) no Hoare annotation was computed. [2022-07-13 18:01:26,679 INFO L899 garLoopResultBuilder]: For program point L853(lines 853 857) no Hoare annotation was computed. [2022-07-13 18:01:26,679 INFO L899 garLoopResultBuilder]: For program point L853-2(lines 853 857) no Hoare annotation was computed. [2022-07-13 18:01:26,679 INFO L895 garLoopResultBuilder]: At program point L777(lines 772 779) the Hoare annotation is: (let ((.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (<= 1 ~pumpRunning~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 0 ~waterLevel~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (<= ~waterLevel~0 1))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (not (< 1 ~waterLevel~0)) .cse5 .cse0 .cse6 (not (<= ~waterLevel~0 2)) .cse4) (or .cse0 .cse1 .cse6 .cse3 .cse4) (or .cse5 .cse0 (not (= 2 ~waterLevel~0)) .cse2 .cse4) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-07-13 18:01:26,679 INFO L895 garLoopResultBuilder]: At program point L740(line 740) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (<= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 0 ~waterLevel~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0)) (.cse8 (not (<= 1 ~switchedOnBeforeTS~0)))) (and (or .cse0 (not (= 2 ~waterLevel~0)) .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse5 .cse2) (or .cse0 .cse3 .cse1 .cse5 .cse2) (or .cse6 .cse7 (not (<= 1 ~waterLevel~0)) .cse4 .cse5 .cse2 .cse8) (or (not (< 1 ~waterLevel~0)) .cse0 .cse4 (not (<= ~waterLevel~0 2)) .cse2) (or .cse6 (not (<= ~waterLevel~0 0)) .cse3 .cse7 .cse4 .cse2 .cse8))) [2022-07-13 18:01:26,691 INFO L899 garLoopResultBuilder]: For program point L740-1(lines 721 745) no Hoare annotation was computed. [2022-07-13 18:01:26,692 INFO L895 garLoopResultBuilder]: At program point L674(lines 665 678) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0))) (let ((.cse7 (and .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (<= 0 ~waterLevel~0))) (.cse9 (not (<= ~waterLevel~0 1))) (.cse0 (not (< 1 ~waterLevel~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= ~waterLevel~0 2))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 (not (<= ~waterLevel~0 0)) .cse6 .cse7 .cse8 .cse5) (or .cse1 .cse7 (not (<= 1 ~waterLevel~0)) .cse8 .cse9 .cse5) (or .cse1 .cse6 .cse7 .cse3 .cse9 .cse5) (or .cse6 (not (<= 1 |old(~pumpRunning~0)|)) .cse8 .cse9 .cse5 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 .cse2 .cse8 .cse4 .cse5)))) [2022-07-13 18:01:26,692 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 721 745) no Hoare annotation was computed. [2022-07-13 18:01:26,692 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 600 611) no Hoare annotation was computed. [2022-07-13 18:01:26,692 INFO L899 garLoopResultBuilder]: For program point L604-1(lines 600 611) no Hoare annotation was computed. [2022-07-13 18:01:26,693 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 600 611) the Hoare annotation is: (let ((.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse10 (not (<= 0 |old(~waterLevel~0)|))) (.cse7 (not (<= 1 ~pumpRunning~0))) (.cse12 (not (<= |old(~waterLevel~0)| 0))) (.cse11 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (= ~pumpRunning~0 0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (= 0 ~systemActive~0)) (.cse8 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse4 .cse5 .cse8 .cse9) (or .cse1 .cse6 .cse4 .cse5 .cse8 .cse9) (or .cse3 .cse7 .cse4 .cse5 .cse8 .cse9) (or .cse0 .cse1 .cse10 .cse6 .cse4 .cse5) (or .cse0 .cse2 .cse3 .cse7 .cse4 .cse5 .cse11) (or .cse1 .cse10 .cse3 .cse4 .cse5 .cse12) (or .cse10 .cse3 .cse7 .cse4 .cse5 .cse12 .cse11) (or .cse1 .cse3 .cse4 .cse5 .cse8 .cse9))) [2022-07-13 18:01:26,693 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 799 807) no Hoare annotation was computed. [2022-07-13 18:01:26,693 INFO L902 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 799 807) the Hoare annotation is: true [2022-07-13 18:01:26,693 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 799 807) no Hoare annotation was computed. [2022-07-13 18:01:26,695 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:01:26,699 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-13 18:01:26,828 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 13.07 06:01:26 BoogieIcfgContainer [2022-07-13 18:01:26,829 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-13 18:01:26,830 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-13 18:01:26,831 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-13 18:01:26,831 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-13 18:01:26,832 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 06:00:46" (3/4) ... [2022-07-13 18:01:26,835 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-13 18:01:26,847 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-13 18:01:26,848 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-13 18:01:26,848 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-13 18:01:26,848 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-13 18:01:26,848 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-13 18:01:26,848 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-13 18:01:26,848 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-07-13 18:01:26,861 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 52 nodes and edges [2022-07-13 18:01:26,863 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-13 18:01:26,864 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-13 18:01:26,864 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-13 18:01:26,864 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-13 18:01:26,867 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-13 18:01:26,867 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-13 18:01:26,901 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-13 18:01:26,902 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-13 18:01:26,902 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-13 18:01:26,902 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 0) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((1 <= pumpRunning && 2 == waterLevel) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 0) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && 1 <= waterLevel) && !(0 == systemActive))) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 2 == waterLevel) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) [2022-07-13 18:01:26,917 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && ((((((((2 == waterLevel && \old(waterLevel) == waterLevel) && (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)))) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((waterLevel <= 1 && \old(waterLevel) == waterLevel) && (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || (\old(waterLevel) == waterLevel && (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(waterLevel) == 1) || ((2 == waterLevel && \old(waterLevel) == waterLevel) && (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))))) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((waterLevel <= 1 && \old(waterLevel) == waterLevel) && (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-07-13 18:01:26,918 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-13 18:01:26,918 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && !(0 == systemActive)) && 0 <= waterLevel) || ((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive))) || ((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((1 <= pumpRunning && 2 == waterLevel) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 0) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 2 == waterLevel) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) [2022-07-13 18:01:26,922 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && pumpRunning <= tmp___0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && pumpRunning <= tmp___0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(1 <= \old(pumpRunning)) || (((((((((pumpRunning == 0 && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && tmp == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && !(0 == systemActive)) && methaneLevelCritical <= tmp)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && 2 <= waterLevel) && tmp == 2) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || (((((1 <= pumpRunning && 2 == \result) && 2 <= waterLevel) && tmp == 2) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((((((((((((pumpRunning == 0 && waterLevel == \result) && \result == methaneLevelCritical) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && !(0 == systemActive)) && methaneLevelCritical <= tmp) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || ((((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && 0 < tmp + 1) && \result == methaneLevelCritical) && pumpRunning <= tmp___0) && \result <= 0) && tmp <= 0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && 0 < tmp + 1) && \result == methaneLevelCritical) && pumpRunning <= tmp___0) && \result <= 0) && tmp <= 0) && tmp == waterLevel) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result) && 0 <= waterLevel) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && 2 <= waterLevel) && tmp == 2) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || (((((1 <= pumpRunning && 2 == \result) && 2 <= waterLevel) && tmp == 2) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && pumpRunning <= tmp___0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || (((((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && 0 < tmp + 1) && \result == methaneLevelCritical) && pumpRunning <= tmp___0) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= waterLevel) && tmp <= 0) && tmp == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (((((((((pumpRunning == 0 && waterLevel == \result) && \result == methaneLevelCritical) && tmp == waterLevel) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && !(0 == systemActive)) && 0 <= waterLevel) && methaneLevelCritical <= tmp)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2022-07-13 18:01:26,922 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) || ((((((((pumpRunning == \old(pumpRunning) && 0 < tmp + 1) && \result == methaneLevelCritical) && \result <= 0) && tmp <= 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result) && 0 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == 0 && \result == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && 0 <= waterLevel) && methaneLevelCritical <= tmp)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((((((pumpRunning == 0 && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || (((((((pumpRunning == \old(pumpRunning) && 0 < tmp + 1) && \result == methaneLevelCritical) && \result <= 0) && tmp <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((((pumpRunning == \old(pumpRunning) && 0 < tmp + 1) && \result == methaneLevelCritical) && \result <= 0) && tmp <= 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2022-07-13 18:01:26,923 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(1 <= \old(pumpRunning)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-13 18:01:26,923 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || ((((((pumpRunning == 0 && waterLevel == \result) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((((((((pumpRunning == 0 && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && !(0 == systemActive)) && 0 <= waterLevel) && methaneLevelCritical <= tmp) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && 0 < tmp + 1) && \result == methaneLevelCritical) && \result <= 0) && tmp <= 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && 0 < tmp + 1) && \result == methaneLevelCritical) && \result <= 0) && tmp <= 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || ((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && 0 < tmp + 1) && \result == methaneLevelCritical) && \result <= 0) && tmp <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || ((((((((pumpRunning == 0 && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && !(0 == systemActive)) && methaneLevelCritical <= tmp)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-07-13 18:01:26,923 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-13 18:01:26,923 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \result <= 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result) && 0 <= waterLevel)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \result <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || (((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && 0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-13 18:01:26,923 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(0 <= waterLevel)) || (pumpRunning == 0 && \result == 1)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS))) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive) [2022-07-13 18:01:26,924 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(1 <= \old(pumpRunning)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == 0 && \result == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && 0 <= waterLevel) && methaneLevelCritical <= tmp)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((((((pumpRunning == 0 && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-13 18:01:26,924 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS))) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) [2022-07-13 18:01:26,924 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) && (((((!(1 < waterLevel) || 1 <= pumpRunning) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((1 <= pumpRunning || !(\old(pumpRunning) == 0)) || !(2 == waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2022-07-13 18:01:26,960 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-13 18:01:26,961 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-13 18:01:26,961 INFO L158 Benchmark]: Toolchain (without parser) took 41753.41ms. Allocated memory was 94.4MB in the beginning and 402.7MB in the end (delta: 308.3MB). Free memory was 60.8MB in the beginning and 370.7MB in the end (delta: -309.9MB). Peak memory consumption was 233.0MB. Max. memory is 16.1GB. [2022-07-13 18:01:26,962 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 94.4MB. Free memory is still 49.6MB. There was no memory consumed. Max. memory is 16.1GB. [2022-07-13 18:01:26,962 INFO L158 Benchmark]: CACSL2BoogieTranslator took 680.34ms. Allocated memory is still 94.4MB. Free memory was 60.6MB in the beginning and 61.6MB in the end (delta: -995.4kB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-07-13 18:01:26,962 INFO L158 Benchmark]: Boogie Procedure Inliner took 73.28ms. Allocated memory is still 94.4MB. Free memory was 61.6MB in the beginning and 59.1MB in the end (delta: 2.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-07-13 18:01:26,962 INFO L158 Benchmark]: Boogie Preprocessor took 59.30ms. Allocated memory is still 94.4MB. Free memory was 59.1MB in the beginning and 57.6MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-13 18:01:26,962 INFO L158 Benchmark]: RCFGBuilder took 665.12ms. Allocated memory is still 94.4MB. Free memory was 57.6MB in the beginning and 41.2MB in the end (delta: 16.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-07-13 18:01:26,963 INFO L158 Benchmark]: TraceAbstraction took 40128.49ms. Allocated memory was 94.4MB in the beginning and 402.7MB in the end (delta: 308.3MB). Free memory was 40.6MB in the beginning and 138.3MB in the end (delta: -97.7MB). Peak memory consumption was 223.2MB. Max. memory is 16.1GB. [2022-07-13 18:01:26,963 INFO L158 Benchmark]: Witness Printer took 131.01ms. Allocated memory is still 402.7MB. Free memory was 138.3MB in the beginning and 370.7MB in the end (delta: -232.4MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-07-13 18:01:26,966 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 94.4MB. Free memory is still 49.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 680.34ms. Allocated memory is still 94.4MB. Free memory was 60.6MB in the beginning and 61.6MB in the end (delta: -995.4kB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 73.28ms. Allocated memory is still 94.4MB. Free memory was 61.6MB in the beginning and 59.1MB in the end (delta: 2.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 59.30ms. Allocated memory is still 94.4MB. Free memory was 59.1MB in the beginning and 57.6MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 665.12ms. Allocated memory is still 94.4MB. Free memory was 57.6MB in the beginning and 41.2MB in the end (delta: 16.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 40128.49ms. Allocated memory was 94.4MB in the beginning and 402.7MB in the end (delta: 308.3MB). Free memory was 40.6MB in the beginning and 138.3MB in the end (delta: -97.7MB). Peak memory consumption was 223.2MB. Max. memory is 16.1GB. * Witness Printer took 131.01ms. Allocated memory is still 402.7MB. Free memory was 138.3MB in the beginning and 370.7MB in the end (delta: -232.4MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 91 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 39.9s, OverallIterations: 16, TraceHistogramMax: 9, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 10.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 20.1s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 5827 SdHoareTripleChecker+Valid, 6.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 5784 mSDsluCounter, 7891 SdHoareTripleChecker+Invalid, 4.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5625 mSDsCounter, 2315 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 8223 IncrementalHoareTripleChecker+Invalid, 10538 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 2315 mSolverCounterUnsat, 2266 mSDtfsCounter, 8223 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 2613 GetRequests, 2242 SyntacticMatches, 17 SemanticMatches, 354 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3111 ImplicationChecksByTransitivity, 3.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1319occurred in iteration=15, InterpolantAutomatonStates: 267, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.8s AutomataMinimizationTime, 16 MinimizatonAttempts, 635 StatesRemovedByMinimization, 12 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 43 LocationsWithAnnotation, 3930 PreInvPairs, 4310 NumberOfFragments, 7876 HoareAnnotationTreeSize, 3930 FomulaSimplifications, 9385 FormulaSimplificationTreeSizeReduction, 1.2s HoareSimplificationTime, 43 FomulaSimplificationsInter, 86271 FormulaSimplificationTreeSizeReductionInter, 18.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 1.0s SatisfiabilityAnalysisTime, 5.1s InterpolantComputationTime, 2703 NumberOfCodeBlocks, 2703 NumberOfCodeBlocksAsserted, 22 NumberOfCheckSat, 3565 ConstructedInterpolants, 0 QuantifiedInterpolants, 8654 SizeOfPredicates, 18 NumberOfNonLiveVariables, 4112 ConjunctsInSsa, 86 ConjunctsInUnsatCore, 27 InterpolantComputations, 11 PerfectInterpolantSequences, 3364/3960 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 588]: Loop Invariant Derived loop invariant: (((((((((((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 780]: Loop Invariant Derived loop invariant: ((((((((((((((!(1 <= \old(pumpRunning)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == 0 && \result == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && 0 <= waterLevel) && methaneLevelCritical <= tmp)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((((((pumpRunning == 0 && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 788]: Loop Invariant Derived loop invariant: ((((((((((((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \result <= 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result) && 0 <= waterLevel)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \result <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || (((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && 0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 176]: Loop Invariant Derived loop invariant: (((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && ((((((((2 == waterLevel && \old(waterLevel) == waterLevel) && (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)))) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((waterLevel <= 1 && \old(waterLevel) == waterLevel) && (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || (\old(waterLevel) == waterLevel && (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(waterLevel) == 1) || ((2 == waterLevel && \old(waterLevel) == waterLevel) && (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))))) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((waterLevel <= 1 && \old(waterLevel) == waterLevel) && (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 186]: Loop Invariant Derived loop invariant: ((((((((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && pumpRunning <= tmp___0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && pumpRunning <= tmp___0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(1 <= \old(pumpRunning)) || (((((((((pumpRunning == 0 && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && tmp == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && !(0 == systemActive)) && methaneLevelCritical <= tmp)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && 2 <= waterLevel) && tmp == 2) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || (((((1 <= pumpRunning && 2 == \result) && 2 <= waterLevel) && tmp == 2) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((((((((((((pumpRunning == 0 && waterLevel == \result) && \result == methaneLevelCritical) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && !(0 == systemActive)) && methaneLevelCritical <= tmp) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || ((((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && 0 < tmp + 1) && \result == methaneLevelCritical) && pumpRunning <= tmp___0) && \result <= 0) && tmp <= 0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && 0 < tmp + 1) && \result == methaneLevelCritical) && pumpRunning <= tmp___0) && \result <= 0) && tmp <= 0) && tmp == waterLevel) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result) && 0 <= waterLevel) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && 2 <= waterLevel) && tmp == 2) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || (((((1 <= pumpRunning && 2 == \result) && 2 <= waterLevel) && tmp == 2) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && pumpRunning <= tmp___0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || (((((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && 0 < tmp + 1) && \result == methaneLevelCritical) && pumpRunning <= tmp___0) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= waterLevel) && tmp <= 0) && tmp == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (((((((((pumpRunning == 0 && waterLevel == \result) && \result == methaneLevelCritical) && tmp == waterLevel) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && !(0 == systemActive)) && 0 <= waterLevel) && methaneLevelCritical <= tmp)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 916]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 907]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 118]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 61]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: ((((((((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || ((((((pumpRunning == 0 && waterLevel == \result) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((((((((pumpRunning == 0 && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && !(0 == systemActive)) && 0 <= waterLevel) && methaneLevelCritical <= tmp) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && 0 < tmp + 1) && \result == methaneLevelCritical) && \result <= 0) && tmp <= 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && 0 < tmp + 1) && \result == methaneLevelCritical) && \result <= 0) && tmp <= 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || ((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && 0 < tmp + 1) && \result == methaneLevelCritical) && \result <= 0) && tmp <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || ((((((((pumpRunning == 0 && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && !(0 == systemActive)) && methaneLevelCritical <= tmp)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 883]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 168]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 141]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 747]: Loop Invariant Derived loop invariant: ((((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) || ((((((((pumpRunning == \old(pumpRunning) && 0 < tmp + 1) && \result == methaneLevelCritical) && \result <= 0) && tmp <= 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result) && 0 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == 0 && \result == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && 0 <= waterLevel) && methaneLevelCritical <= tmp)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((((((pumpRunning == 0 && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || (((((((pumpRunning == \old(pumpRunning) && 0 < tmp + 1) && \result == methaneLevelCritical) && \result <= 0) && tmp <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((((pumpRunning == \old(pumpRunning) && 0 < tmp + 1) && \result == methaneLevelCritical) && \result <= 0) && tmp <= 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 917]: Loop Invariant Derived loop invariant: ((((((((((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 0) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((1 <= pumpRunning && 2 == waterLevel) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 0) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && 1 <= waterLevel) && !(0 == systemActive))) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 2 == waterLevel) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 772]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) && (((((!(1 < waterLevel) || 1 <= pumpRunning) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((1 <= pumpRunning || !(\old(pumpRunning) == 0)) || !(2 == waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 863]: Loop Invariant Derived loop invariant: (((((((((((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && !(0 == systemActive)) && 0 <= waterLevel) || ((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive))) || ((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((1 <= pumpRunning && 2 == waterLevel) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 0) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 2 == waterLevel) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 665]: Loop Invariant Derived loop invariant: (((((((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(0 <= waterLevel)) || (pumpRunning == 0 && \result == 1)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS))) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive) - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: (((((((((((((!(1 <= \old(pumpRunning)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 890]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 624]: Loop Invariant Derived loop invariant: (((((((((((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 844]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS))) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) RESULT: Ultimate proved your program to be correct! [2022-07-13 18:01:27,071 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE