./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version f4b24e32 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 73b8e020dd9d30fdd676c81009d4f1b850aa716d63ef29ce3d475a261546f853 --- Real Ultimate output --- This is Ultimate 0.2.2-?-f4b24e3 [2022-07-13 18:00:47,582 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-13 18:00:47,585 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-13 18:00:47,619 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-13 18:00:47,620 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-13 18:00:47,621 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-13 18:00:47,622 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-13 18:00:47,624 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-13 18:00:47,625 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-13 18:00:47,632 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-13 18:00:47,632 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-13 18:00:47,634 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-13 18:00:47,634 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-13 18:00:47,636 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-13 18:00:47,637 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-13 18:00:47,640 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-13 18:00:47,640 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-13 18:00:47,641 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-13 18:00:47,642 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-13 18:00:47,647 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-13 18:00:47,648 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-13 18:00:47,649 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-13 18:00:47,650 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-13 18:00:47,651 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-13 18:00:47,652 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-13 18:00:47,657 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-13 18:00:47,658 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-13 18:00:47,658 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-13 18:00:47,659 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-13 18:00:47,659 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-13 18:00:47,660 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-13 18:00:47,661 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-13 18:00:47,663 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-13 18:00:47,663 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-13 18:00:47,664 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-13 18:00:47,664 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-13 18:00:47,665 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-13 18:00:47,665 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-13 18:00:47,665 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-13 18:00:47,665 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-13 18:00:47,666 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-13 18:00:47,667 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-13 18:00:47,669 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-13 18:00:47,691 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-13 18:00:47,691 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-13 18:00:47,692 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-13 18:00:47,692 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-13 18:00:47,692 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-13 18:00:47,693 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-13 18:00:47,693 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-13 18:00:47,693 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-13 18:00:47,693 INFO L138 SettingsManager]: * Use SBE=true [2022-07-13 18:00:47,694 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-13 18:00:47,694 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-13 18:00:47,694 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-13 18:00:47,695 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-13 18:00:47,695 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-13 18:00:47,695 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-13 18:00:47,695 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-13 18:00:47,695 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-13 18:00:47,696 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-13 18:00:47,696 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-13 18:00:47,696 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-13 18:00:47,696 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-13 18:00:47,696 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-13 18:00:47,696 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-13 18:00:47,697 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-13 18:00:47,697 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-13 18:00:47,697 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-13 18:00:47,697 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-13 18:00:47,697 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-13 18:00:47,698 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-13 18:00:47,698 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-13 18:00:47,698 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-13 18:00:47,698 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-13 18:00:47,698 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-13 18:00:47,699 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 73b8e020dd9d30fdd676c81009d4f1b850aa716d63ef29ce3d475a261546f853 [2022-07-13 18:00:47,910 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-13 18:00:47,942 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-13 18:00:47,944 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-13 18:00:47,944 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-13 18:00:47,945 INFO L275 PluginConnector]: CDTParser initialized [2022-07-13 18:00:47,946 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c [2022-07-13 18:00:48,010 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4299b8bb9/dd618c71d90f4c99ab0d7a2d6f0c5bf8/FLAG60bd841b4 [2022-07-13 18:00:48,358 INFO L306 CDTParser]: Found 1 translation units. [2022-07-13 18:00:48,359 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c [2022-07-13 18:00:48,366 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4299b8bb9/dd618c71d90f4c99ab0d7a2d6f0c5bf8/FLAG60bd841b4 [2022-07-13 18:00:48,376 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4299b8bb9/dd618c71d90f4c99ab0d7a2d6f0c5bf8 [2022-07-13 18:00:48,378 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-13 18:00:48,379 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-13 18:00:48,380 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-13 18:00:48,380 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-13 18:00:48,382 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-13 18:00:48,383 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.07 06:00:48" (1/1) ... [2022-07-13 18:00:48,383 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3b0f6145 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:48, skipping insertion in model container [2022-07-13 18:00:48,384 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.07 06:00:48" (1/1) ... [2022-07-13 18:00:48,388 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-13 18:00:48,419 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-13 18:00:48,627 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c[15211,15224] [2022-07-13 18:00:48,649 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-13 18:00:48,667 INFO L203 MainTranslator]: Completed pre-run [2022-07-13 18:00:48,734 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c[15211,15224] [2022-07-13 18:00:48,753 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-13 18:00:48,772 INFO L208 MainTranslator]: Completed translation [2022-07-13 18:00:48,773 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:48 WrapperNode [2022-07-13 18:00:48,774 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-13 18:00:48,775 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-13 18:00:48,775 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-13 18:00:48,775 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-13 18:00:48,781 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:48" (1/1) ... [2022-07-13 18:00:48,790 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:48" (1/1) ... [2022-07-13 18:00:48,810 INFO L137 Inliner]: procedures = 57, calls = 159, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 267 [2022-07-13 18:00:48,810 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-13 18:00:48,811 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-13 18:00:48,811 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-13 18:00:48,811 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-13 18:00:48,816 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:48" (1/1) ... [2022-07-13 18:00:48,817 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:48" (1/1) ... [2022-07-13 18:00:48,818 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:48" (1/1) ... [2022-07-13 18:00:48,819 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:48" (1/1) ... [2022-07-13 18:00:48,823 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:48" (1/1) ... [2022-07-13 18:00:48,826 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:48" (1/1) ... [2022-07-13 18:00:48,827 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:48" (1/1) ... [2022-07-13 18:00:48,829 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-13 18:00:48,830 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-13 18:00:48,830 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-13 18:00:48,830 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-13 18:00:48,831 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:48" (1/1) ... [2022-07-13 18:00:48,845 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-13 18:00:48,854 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 18:00:48,865 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-13 18:00:48,867 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-13 18:00:48,902 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-13 18:00:48,902 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-13 18:00:48,902 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-13 18:00:48,902 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-13 18:00:48,902 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-13 18:00:48,902 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-13 18:00:48,903 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-13 18:00:48,903 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-13 18:00:48,903 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-13 18:00:48,903 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-07-13 18:00:48,903 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-07-13 18:00:48,903 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-07-13 18:00:48,903 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-07-13 18:00:48,903 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-07-13 18:00:48,903 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-07-13 18:00:48,903 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-13 18:00:48,903 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-13 18:00:48,903 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-13 18:00:48,903 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-13 18:00:48,904 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-13 18:00:48,971 INFO L234 CfgBuilder]: Building ICFG [2022-07-13 18:00:48,972 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-13 18:00:49,245 INFO L275 CfgBuilder]: Performing block encoding [2022-07-13 18:00:49,250 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-13 18:00:49,251 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-13 18:00:49,252 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 06:00:49 BoogieIcfgContainer [2022-07-13 18:00:49,253 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-13 18:00:49,254 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-13 18:00:49,254 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-13 18:00:49,256 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-13 18:00:49,257 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 13.07 06:00:48" (1/3) ... [2022-07-13 18:00:49,257 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4069d837 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.07 06:00:49, skipping insertion in model container [2022-07-13 18:00:49,257 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:48" (2/3) ... [2022-07-13 18:00:49,257 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4069d837 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.07 06:00:49, skipping insertion in model container [2022-07-13 18:00:49,257 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 06:00:49" (3/3) ... [2022-07-13 18:00:49,258 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product46.cil.c [2022-07-13 18:00:49,268 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-13 18:00:49,269 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-13 18:00:49,314 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-13 18:00:49,319 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@67eb7334, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@dc4723c [2022-07-13 18:00:49,319 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-13 18:00:49,322 INFO L276 IsEmpty]: Start isEmpty. Operand has 99 states, 75 states have (on average 1.36) internal successors, (102), 83 states have internal predecessors, (102), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2022-07-13 18:00:49,329 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-07-13 18:00:49,329 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:49,330 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:49,330 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:49,334 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:49,334 INFO L85 PathProgramCache]: Analyzing trace with hash -1607314381, now seen corresponding path program 1 times [2022-07-13 18:00:49,340 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:49,340 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1948056237] [2022-07-13 18:00:49,341 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:49,341 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:49,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:49,490 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-13 18:00:49,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:49,495 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-13 18:00:49,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:49,517 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 18:00:49,518 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:49,518 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1948056237] [2022-07-13 18:00:49,519 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1948056237] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:49,519 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 18:00:49,519 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-13 18:00:49,520 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2108403837] [2022-07-13 18:00:49,521 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:49,524 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-13 18:00:49,525 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:49,567 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-13 18:00:49,568 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-13 18:00:49,569 INFO L87 Difference]: Start difference. First operand has 99 states, 75 states have (on average 1.36) internal successors, (102), 83 states have internal predecessors, (102), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-13 18:00:49,594 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:49,594 INFO L93 Difference]: Finished difference Result 189 states and 254 transitions. [2022-07-13 18:00:49,595 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-13 18:00:49,596 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-07-13 18:00:49,596 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:49,602 INFO L225 Difference]: With dead ends: 189 [2022-07-13 18:00:49,602 INFO L226 Difference]: Without dead ends: 90 [2022-07-13 18:00:49,605 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-13 18:00:49,607 INFO L413 NwaCegarLoop]: 124 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 124 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:49,608 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 124 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 18:00:49,619 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90 states. [2022-07-13 18:00:49,637 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90 to 90. [2022-07-13 18:00:49,638 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 68 states have (on average 1.2941176470588236) internal successors, (88), 75 states have internal predecessors, (88), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2022-07-13 18:00:49,640 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 115 transitions. [2022-07-13 18:00:49,641 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 115 transitions. Word has length 32 [2022-07-13 18:00:49,642 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:49,642 INFO L495 AbstractCegarLoop]: Abstraction has 90 states and 115 transitions. [2022-07-13 18:00:49,642 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-13 18:00:49,642 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 115 transitions. [2022-07-13 18:00:49,644 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-07-13 18:00:49,644 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:49,645 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:49,645 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-13 18:00:49,645 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:49,646 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:49,646 INFO L85 PathProgramCache]: Analyzing trace with hash -824221923, now seen corresponding path program 1 times [2022-07-13 18:00:49,646 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:49,646 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [706762691] [2022-07-13 18:00:49,646 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:49,646 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:49,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:49,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-13 18:00:49,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:49,734 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-13 18:00:49,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:49,746 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 18:00:49,747 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:49,747 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [706762691] [2022-07-13 18:00:49,748 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [706762691] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:49,748 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 18:00:49,748 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 18:00:49,748 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1139695998] [2022-07-13 18:00:49,748 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:49,749 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-13 18:00:49,750 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:49,750 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-13 18:00:49,751 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 18:00:49,751 INFO L87 Difference]: Start difference. First operand 90 states and 115 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-13 18:00:49,765 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:49,765 INFO L93 Difference]: Finished difference Result 144 states and 184 transitions. [2022-07-13 18:00:49,766 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-13 18:00:49,766 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2022-07-13 18:00:49,766 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:49,767 INFO L225 Difference]: With dead ends: 144 [2022-07-13 18:00:49,767 INFO L226 Difference]: Without dead ends: 81 [2022-07-13 18:00:49,768 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 18:00:49,769 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 13 mSDsluCounter, 85 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 187 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:49,769 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 187 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 18:00:49,770 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2022-07-13 18:00:49,775 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 81. [2022-07-13 18:00:49,776 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 69 states have internal predecessors, (81), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-07-13 18:00:49,777 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 103 transitions. [2022-07-13 18:00:49,777 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 103 transitions. Word has length 33 [2022-07-13 18:00:49,777 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:49,778 INFO L495 AbstractCegarLoop]: Abstraction has 81 states and 103 transitions. [2022-07-13 18:00:49,778 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-13 18:00:49,778 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 103 transitions. [2022-07-13 18:00:49,779 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-07-13 18:00:49,779 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:49,779 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:49,779 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-13 18:00:49,780 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:49,780 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:49,780 INFO L85 PathProgramCache]: Analyzing trace with hash 534456794, now seen corresponding path program 1 times [2022-07-13 18:00:49,780 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:49,780 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1677562825] [2022-07-13 18:00:49,780 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:49,781 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:49,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:49,845 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-13 18:00:49,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:49,848 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-07-13 18:00:49,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:49,850 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 18:00:49,851 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:49,851 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1677562825] [2022-07-13 18:00:49,851 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1677562825] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:49,851 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 18:00:49,851 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 18:00:49,851 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1264136791] [2022-07-13 18:00:49,851 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:49,851 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-13 18:00:49,852 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:49,852 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 18:00:49,852 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 18:00:49,852 INFO L87 Difference]: Start difference. First operand 81 states and 103 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-13 18:00:49,899 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:49,900 INFO L93 Difference]: Finished difference Result 154 states and 199 transitions. [2022-07-13 18:00:49,900 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-13 18:00:49,900 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2022-07-13 18:00:49,901 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:49,901 INFO L225 Difference]: With dead ends: 154 [2022-07-13 18:00:49,902 INFO L226 Difference]: Without dead ends: 81 [2022-07-13 18:00:49,902 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-13 18:00:49,903 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 126 mSDsluCounter, 158 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 126 SdHoareTripleChecker+Valid, 254 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:49,904 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [126 Valid, 254 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 18:00:49,916 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2022-07-13 18:00:49,921 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 81. [2022-07-13 18:00:49,922 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 62 states have (on average 1.2903225806451613) internal successors, (80), 69 states have internal predecessors, (80), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-07-13 18:00:49,923 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 102 transitions. [2022-07-13 18:00:49,923 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 102 transitions. Word has length 38 [2022-07-13 18:00:49,924 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:49,924 INFO L495 AbstractCegarLoop]: Abstraction has 81 states and 102 transitions. [2022-07-13 18:00:49,924 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-13 18:00:49,924 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 102 transitions. [2022-07-13 18:00:49,925 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-07-13 18:00:49,925 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:49,925 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:49,925 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-13 18:00:49,926 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:49,929 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:49,930 INFO L85 PathProgramCache]: Analyzing trace with hash -216434858, now seen corresponding path program 1 times [2022-07-13 18:00:49,930 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:49,930 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1023150222] [2022-07-13 18:00:49,930 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:49,930 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:49,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:49,984 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-13 18:00:49,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:49,993 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-13 18:00:49,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:50,006 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 18:00:50,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:50,024 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-07-13 18:00:50,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:50,029 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 18:00:50,035 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:50,035 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1023150222] [2022-07-13 18:00:50,035 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1023150222] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:50,035 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 18:00:50,035 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 18:00:50,036 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [929935077] [2022-07-13 18:00:50,036 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:50,036 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-13 18:00:50,036 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:50,037 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 18:00:50,037 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 18:00:50,037 INFO L87 Difference]: Start difference. First operand 81 states and 102 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-13 18:00:50,251 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:50,252 INFO L93 Difference]: Finished difference Result 238 states and 300 transitions. [2022-07-13 18:00:50,252 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-13 18:00:50,253 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 48 [2022-07-13 18:00:50,253 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:50,258 INFO L225 Difference]: With dead ends: 238 [2022-07-13 18:00:50,258 INFO L226 Difference]: Without dead ends: 165 [2022-07-13 18:00:50,261 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-07-13 18:00:50,273 INFO L413 NwaCegarLoop]: 132 mSDtfsCounter, 187 mSDsluCounter, 175 mSDsCounter, 0 mSdLazyCounter, 104 mSolverCounterSat, 54 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 190 SdHoareTripleChecker+Valid, 307 SdHoareTripleChecker+Invalid, 158 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 54 IncrementalHoareTripleChecker+Valid, 104 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:50,274 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [190 Valid, 307 Invalid, 158 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [54 Valid, 104 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 18:00:50,275 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 165 states. [2022-07-13 18:00:50,290 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 165 to 159. [2022-07-13 18:00:50,296 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 159 states, 122 states have (on average 1.2540983606557377) internal successors, (153), 130 states have internal predecessors, (153), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-07-13 18:00:50,300 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 159 states to 159 states and 194 transitions. [2022-07-13 18:00:50,303 INFO L78 Accepts]: Start accepts. Automaton has 159 states and 194 transitions. Word has length 48 [2022-07-13 18:00:50,304 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:50,304 INFO L495 AbstractCegarLoop]: Abstraction has 159 states and 194 transitions. [2022-07-13 18:00:50,304 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-13 18:00:50,304 INFO L276 IsEmpty]: Start isEmpty. Operand 159 states and 194 transitions. [2022-07-13 18:00:50,305 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-07-13 18:00:50,308 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:50,308 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:50,308 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-13 18:00:50,309 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:50,310 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:50,310 INFO L85 PathProgramCache]: Analyzing trace with hash 1219044606, now seen corresponding path program 1 times [2022-07-13 18:00:50,311 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:50,312 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [967268855] [2022-07-13 18:00:50,312 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:50,312 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:50,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:50,380 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-13 18:00:50,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:50,388 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-13 18:00:50,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:50,402 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 18:00:50,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:50,408 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-07-13 18:00:50,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:50,421 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-07-13 18:00:50,421 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:50,421 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [967268855] [2022-07-13 18:00:50,422 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [967268855] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:50,422 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 18:00:50,422 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 18:00:50,423 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2071258920] [2022-07-13 18:00:50,423 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:50,424 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-13 18:00:50,424 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:50,424 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-13 18:00:50,425 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-13 18:00:50,425 INFO L87 Difference]: Start difference. First operand 159 states and 194 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-13 18:00:50,622 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:50,622 INFO L93 Difference]: Finished difference Result 322 states and 394 transitions. [2022-07-13 18:00:50,622 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-07-13 18:00:50,622 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) Word has length 54 [2022-07-13 18:00:50,623 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:50,624 INFO L225 Difference]: With dead ends: 322 [2022-07-13 18:00:50,624 INFO L226 Difference]: Without dead ends: 171 [2022-07-13 18:00:50,625 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-07-13 18:00:50,625 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 120 mSDsluCounter, 348 mSDsCounter, 0 mSdLazyCounter, 210 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 127 SdHoareTripleChecker+Valid, 450 SdHoareTripleChecker+Invalid, 245 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 210 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:50,626 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [127 Valid, 450 Invalid, 245 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 210 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 18:00:50,626 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 171 states. [2022-07-13 18:00:50,635 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 171 to 157. [2022-07-13 18:00:50,635 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 120 states have (on average 1.225) internal successors, (147), 128 states have internal predecessors, (147), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-07-13 18:00:50,636 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 188 transitions. [2022-07-13 18:00:50,636 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 188 transitions. Word has length 54 [2022-07-13 18:00:50,637 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:50,637 INFO L495 AbstractCegarLoop]: Abstraction has 157 states and 188 transitions. [2022-07-13 18:00:50,637 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-13 18:00:50,637 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 188 transitions. [2022-07-13 18:00:50,638 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-07-13 18:00:50,638 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:50,638 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:50,638 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-13 18:00:50,639 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:50,639 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:50,639 INFO L85 PathProgramCache]: Analyzing trace with hash 175038302, now seen corresponding path program 1 times [2022-07-13 18:00:50,639 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:50,639 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [388608524] [2022-07-13 18:00:50,640 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:50,640 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:50,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:50,663 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-13 18:00:50,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:50,667 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-13 18:00:50,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:50,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 18:00:50,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:50,704 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-07-13 18:00:50,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:50,705 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 18:00:50,705 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:50,706 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [388608524] [2022-07-13 18:00:50,706 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [388608524] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:50,706 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 18:00:50,706 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 18:00:50,706 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [820389567] [2022-07-13 18:00:50,706 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:50,706 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 18:00:50,706 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:50,706 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 18:00:50,707 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 18:00:50,707 INFO L87 Difference]: Start difference. First operand 157 states and 188 transitions. Second operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-13 18:00:50,835 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:50,835 INFO L93 Difference]: Finished difference Result 316 states and 385 transitions. [2022-07-13 18:00:50,836 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-13 18:00:50,836 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 60 [2022-07-13 18:00:50,836 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:50,837 INFO L225 Difference]: With dead ends: 316 [2022-07-13 18:00:50,837 INFO L226 Difference]: Without dead ends: 167 [2022-07-13 18:00:50,838 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-07-13 18:00:50,838 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 69 mSDsluCounter, 268 mSDsCounter, 0 mSdLazyCounter, 121 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 359 SdHoareTripleChecker+Invalid, 144 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 121 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:50,839 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [74 Valid, 359 Invalid, 144 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 18:00:50,839 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167 states. [2022-07-13 18:00:50,846 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167 to 160. [2022-07-13 18:00:50,859 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 160 states, 123 states have (on average 1.2195121951219512) internal successors, (150), 131 states have internal predecessors, (150), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-07-13 18:00:50,860 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 160 states to 160 states and 191 transitions. [2022-07-13 18:00:50,860 INFO L78 Accepts]: Start accepts. Automaton has 160 states and 191 transitions. Word has length 60 [2022-07-13 18:00:50,860 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:50,861 INFO L495 AbstractCegarLoop]: Abstraction has 160 states and 191 transitions. [2022-07-13 18:00:50,861 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-13 18:00:50,861 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 191 transitions. [2022-07-13 18:00:50,862 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-07-13 18:00:50,862 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:50,862 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:50,862 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-13 18:00:50,862 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:50,862 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:50,862 INFO L85 PathProgramCache]: Analyzing trace with hash 2098266336, now seen corresponding path program 1 times [2022-07-13 18:00:50,862 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:50,862 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1540684715] [2022-07-13 18:00:50,862 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:50,863 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:50,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:50,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-13 18:00:50,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:50,916 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-13 18:00:50,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:50,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 18:00:50,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:50,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-07-13 18:00:50,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:50,947 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 18:00:50,947 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:50,947 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1540684715] [2022-07-13 18:00:50,947 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1540684715] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:50,948 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 18:00:50,948 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 18:00:50,948 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1427827322] [2022-07-13 18:00:50,948 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:50,948 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-13 18:00:50,948 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:50,949 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-13 18:00:50,949 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-13 18:00:50,949 INFO L87 Difference]: Start difference. First operand 160 states and 191 transitions. Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-13 18:00:51,077 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:51,077 INFO L93 Difference]: Finished difference Result 325 states and 395 transitions. [2022-07-13 18:00:51,077 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-13 18:00:51,078 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 60 [2022-07-13 18:00:51,079 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:51,082 INFO L225 Difference]: With dead ends: 325 [2022-07-13 18:00:51,083 INFO L226 Difference]: Without dead ends: 173 [2022-07-13 18:00:51,084 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=30, Invalid=80, Unknown=0, NotChecked=0, Total=110 [2022-07-13 18:00:51,086 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 112 mSDsluCounter, 304 mSDsCounter, 0 mSdLazyCounter, 166 mSolverCounterSat, 30 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 118 SdHoareTripleChecker+Valid, 395 SdHoareTripleChecker+Invalid, 196 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 166 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:51,087 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [118 Valid, 395 Invalid, 196 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 166 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 18:00:51,088 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 173 states. [2022-07-13 18:00:51,100 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 173 to 162. [2022-07-13 18:00:51,101 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 162 states, 125 states have (on average 1.216) internal successors, (152), 133 states have internal predecessors, (152), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-07-13 18:00:51,102 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 162 states to 162 states and 193 transitions. [2022-07-13 18:00:51,102 INFO L78 Accepts]: Start accepts. Automaton has 162 states and 193 transitions. Word has length 60 [2022-07-13 18:00:51,102 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:51,102 INFO L495 AbstractCegarLoop]: Abstraction has 162 states and 193 transitions. [2022-07-13 18:00:51,102 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-13 18:00:51,103 INFO L276 IsEmpty]: Start isEmpty. Operand 162 states and 193 transitions. [2022-07-13 18:00:51,105 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-07-13 18:00:51,105 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:51,105 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:51,106 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-13 18:00:51,106 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:51,106 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:51,106 INFO L85 PathProgramCache]: Analyzing trace with hash -810497566, now seen corresponding path program 1 times [2022-07-13 18:00:51,107 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:51,107 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1712277186] [2022-07-13 18:00:51,107 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:51,107 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:51,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:51,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-13 18:00:51,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:51,163 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-13 18:00:51,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:51,184 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 18:00:51,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:51,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-07-13 18:00:51,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:51,189 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 18:00:51,189 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:51,189 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1712277186] [2022-07-13 18:00:51,189 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1712277186] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:51,189 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 18:00:51,189 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 18:00:51,189 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [410154987] [2022-07-13 18:00:51,189 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:51,190 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-13 18:00:51,190 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:51,190 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 18:00:51,190 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 18:00:51,190 INFO L87 Difference]: Start difference. First operand 162 states and 193 transitions. Second operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-13 18:00:51,356 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:51,357 INFO L93 Difference]: Finished difference Result 448 states and 559 transitions. [2022-07-13 18:00:51,357 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-13 18:00:51,357 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 60 [2022-07-13 18:00:51,357 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:51,359 INFO L225 Difference]: With dead ends: 448 [2022-07-13 18:00:51,359 INFO L226 Difference]: Without dead ends: 294 [2022-07-13 18:00:51,359 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 11 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-07-13 18:00:51,360 INFO L413 NwaCegarLoop]: 142 mSDtfsCounter, 216 mSDsluCounter, 165 mSDsCounter, 0 mSdLazyCounter, 153 mSolverCounterSat, 68 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 224 SdHoareTripleChecker+Valid, 307 SdHoareTripleChecker+Invalid, 221 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 68 IncrementalHoareTripleChecker+Valid, 153 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:51,360 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [224 Valid, 307 Invalid, 221 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [68 Valid, 153 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 18:00:51,361 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2022-07-13 18:00:51,381 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 292. [2022-07-13 18:00:51,381 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 292 states, 223 states have (on average 1.201793721973094) internal successors, (268), 235 states have internal predecessors, (268), 36 states have call successors, (36), 31 states have call predecessors, (36), 32 states have return successors, (51), 36 states have call predecessors, (51), 36 states have call successors, (51) [2022-07-13 18:00:51,384 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 292 states to 292 states and 355 transitions. [2022-07-13 18:00:51,384 INFO L78 Accepts]: Start accepts. Automaton has 292 states and 355 transitions. Word has length 60 [2022-07-13 18:00:51,385 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:51,385 INFO L495 AbstractCegarLoop]: Abstraction has 292 states and 355 transitions. [2022-07-13 18:00:51,385 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-13 18:00:51,385 INFO L276 IsEmpty]: Start isEmpty. Operand 292 states and 355 transitions. [2022-07-13 18:00:51,386 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2022-07-13 18:00:51,387 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:51,387 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:51,387 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-13 18:00:51,387 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:51,388 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:51,388 INFO L85 PathProgramCache]: Analyzing trace with hash -1779897540, now seen corresponding path program 1 times [2022-07-13 18:00:51,388 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:51,388 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1108611562] [2022-07-13 18:00:51,388 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:51,388 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:51,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:51,471 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 18:00:51,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:51,485 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-13 18:00:51,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:51,493 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-07-13 18:00:51,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:51,506 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 18:00:51,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:51,509 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-07-13 18:00:51,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:51,511 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 18:00:51,511 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:51,511 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1108611562] [2022-07-13 18:00:51,511 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1108611562] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:51,511 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 18:00:51,511 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-07-13 18:00:51,511 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [265359962] [2022-07-13 18:00:51,512 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:51,512 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-07-13 18:00:51,512 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:51,513 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-07-13 18:00:51,513 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-07-13 18:00:51,513 INFO L87 Difference]: Start difference. First operand 292 states and 355 transitions. Second operand has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-07-13 18:00:52,119 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:52,120 INFO L93 Difference]: Finished difference Result 864 states and 1087 transitions. [2022-07-13 18:00:52,120 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-07-13 18:00:52,120 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 64 [2022-07-13 18:00:52,121 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:52,124 INFO L225 Difference]: With dead ends: 864 [2022-07-13 18:00:52,124 INFO L226 Difference]: Without dead ends: 631 [2022-07-13 18:00:52,126 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 206 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=187, Invalid=743, Unknown=0, NotChecked=0, Total=930 [2022-07-13 18:00:52,127 INFO L413 NwaCegarLoop]: 151 mSDtfsCounter, 605 mSDsluCounter, 555 mSDsCounter, 0 mSdLazyCounter, 694 mSolverCounterSat, 194 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 612 SdHoareTripleChecker+Valid, 706 SdHoareTripleChecker+Invalid, 888 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 194 IncrementalHoareTripleChecker+Valid, 694 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:52,127 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [612 Valid, 706 Invalid, 888 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [194 Valid, 694 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-07-13 18:00:52,128 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 631 states. [2022-07-13 18:00:52,158 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 631 to 542. [2022-07-13 18:00:52,159 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 542 states, 414 states have (on average 1.1956521739130435) internal successors, (495), 438 states have internal predecessors, (495), 66 states have call successors, (66), 55 states have call predecessors, (66), 61 states have return successors, (90), 66 states have call predecessors, (90), 66 states have call successors, (90) [2022-07-13 18:00:52,162 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 542 states to 542 states and 651 transitions. [2022-07-13 18:00:52,162 INFO L78 Accepts]: Start accepts. Automaton has 542 states and 651 transitions. Word has length 64 [2022-07-13 18:00:52,162 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:52,162 INFO L495 AbstractCegarLoop]: Abstraction has 542 states and 651 transitions. [2022-07-13 18:00:52,163 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-07-13 18:00:52,163 INFO L276 IsEmpty]: Start isEmpty. Operand 542 states and 651 transitions. [2022-07-13 18:00:52,164 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2022-07-13 18:00:52,164 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:52,164 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:52,164 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-13 18:00:52,164 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:52,164 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:52,164 INFO L85 PathProgramCache]: Analyzing trace with hash 2079059227, now seen corresponding path program 1 times [2022-07-13 18:00:52,165 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:52,165 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1970532522] [2022-07-13 18:00:52,165 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:52,165 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:52,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:52,229 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 18:00:52,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:52,240 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-13 18:00:52,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:52,256 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:00:52,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:52,267 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-13 18:00:52,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:52,275 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 18:00:52,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:52,278 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-07-13 18:00:52,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:52,289 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2022-07-13 18:00:52,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:52,294 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-07-13 18:00:52,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:52,298 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 18:00:52,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:52,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2022-07-13 18:00:52,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:52,302 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 18 proven. 9 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-07-13 18:00:52,303 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:52,303 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1970532522] [2022-07-13 18:00:52,303 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1970532522] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-13 18:00:52,303 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [389048468] [2022-07-13 18:00:52,303 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:52,304 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 18:00:52,304 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 18:00:52,305 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-13 18:00:52,312 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-13 18:00:52,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:52,403 INFO L263 TraceCheckSpWp]: Trace formula consists of 501 conjuncts, 8 conjunts are in the unsatisfiable core [2022-07-13 18:00:52,413 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 18:00:52,622 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 29 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 18:00:52,624 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-13 18:00:52,759 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 19 proven. 8 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-07-13 18:00:52,760 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [389048468] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-13 18:00:52,760 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-13 18:00:52,760 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 6, 6] total 16 [2022-07-13 18:00:52,760 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [230060978] [2022-07-13 18:00:52,760 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-13 18:00:52,761 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2022-07-13 18:00:52,761 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:52,761 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2022-07-13 18:00:52,762 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2022-07-13 18:00:52,762 INFO L87 Difference]: Start difference. First operand 542 states and 651 transitions. Second operand has 16 states, 16 states have (on average 7.875) internal successors, (126), 11 states have internal predecessors, (126), 5 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 5 states have call successors, (20) [2022-07-13 18:00:53,627 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:53,627 INFO L93 Difference]: Finished difference Result 1212 states and 1496 transitions. [2022-07-13 18:00:53,627 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2022-07-13 18:00:53,628 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 7.875) internal successors, (126), 11 states have internal predecessors, (126), 5 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 5 states have call successors, (20) Word has length 108 [2022-07-13 18:00:53,628 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:53,631 INFO L225 Difference]: With dead ends: 1212 [2022-07-13 18:00:53,631 INFO L226 Difference]: Without dead ends: 727 [2022-07-13 18:00:53,632 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 291 GetRequests, 246 SyntacticMatches, 1 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 493 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=361, Invalid=1709, Unknown=0, NotChecked=0, Total=2070 [2022-07-13 18:00:53,633 INFO L413 NwaCegarLoop]: 233 mSDtfsCounter, 495 mSDsluCounter, 1311 mSDsCounter, 0 mSdLazyCounter, 1241 mSolverCounterSat, 249 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 496 SdHoareTripleChecker+Valid, 1544 SdHoareTripleChecker+Invalid, 1490 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 249 IncrementalHoareTripleChecker+Valid, 1241 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:53,633 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [496 Valid, 1544 Invalid, 1490 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [249 Valid, 1241 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-07-13 18:00:53,634 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 727 states. [2022-07-13 18:00:53,662 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 727 to 614. [2022-07-13 18:00:53,663 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 614 states, 464 states have (on average 1.1939655172413792) internal successors, (554), 496 states have internal predecessors, (554), 77 states have call successors, (77), 66 states have call predecessors, (77), 72 states have return successors, (101), 74 states have call predecessors, (101), 77 states have call successors, (101) [2022-07-13 18:00:53,665 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 614 states to 614 states and 732 transitions. [2022-07-13 18:00:53,666 INFO L78 Accepts]: Start accepts. Automaton has 614 states and 732 transitions. Word has length 108 [2022-07-13 18:00:53,666 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:53,666 INFO L495 AbstractCegarLoop]: Abstraction has 614 states and 732 transitions. [2022-07-13 18:00:53,666 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 7.875) internal successors, (126), 11 states have internal predecessors, (126), 5 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 5 states have call successors, (20) [2022-07-13 18:00:53,666 INFO L276 IsEmpty]: Start isEmpty. Operand 614 states and 732 transitions. [2022-07-13 18:00:53,668 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 193 [2022-07-13 18:00:53,668 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:53,668 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:53,691 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-13 18:00:53,886 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-07-13 18:00:53,886 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:53,887 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:53,887 INFO L85 PathProgramCache]: Analyzing trace with hash -2082434884, now seen corresponding path program 1 times [2022-07-13 18:00:53,887 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:53,887 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [73874829] [2022-07-13 18:00:53,887 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:53,887 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:53,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 18:00:53,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,928 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-13 18:00:53,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,933 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:00:53,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,936 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-13 18:00:53,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,939 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 18:00:53,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-07-13 18:00:53,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:00:53,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 18:00:53,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,947 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-13 18:00:53,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,947 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 18:00:53,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,948 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2022-07-13 18:00:53,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,964 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:00:53,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,966 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 18:00:53,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,978 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 151 [2022-07-13 18:00:53,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,979 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 160 [2022-07-13 18:00:53,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,982 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 18:00:53,983 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,984 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 184 [2022-07-13 18:00:53,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:53,986 INFO L134 CoverageAnalysis]: Checked inductivity of 218 backedges. 86 proven. 3 refuted. 0 times theorem prover too weak. 129 trivial. 0 not checked. [2022-07-13 18:00:53,986 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:53,986 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [73874829] [2022-07-13 18:00:53,986 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [73874829] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-13 18:00:53,986 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1602890124] [2022-07-13 18:00:53,986 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:53,986 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 18:00:53,986 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 18:00:53,988 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-13 18:00:53,990 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-13 18:00:54,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:54,099 INFO L263 TraceCheckSpWp]: Trace formula consists of 725 conjuncts, 13 conjunts are in the unsatisfiable core [2022-07-13 18:00:54,114 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 18:00:54,308 INFO L134 CoverageAnalysis]: Checked inductivity of 218 backedges. 158 proven. 4 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2022-07-13 18:00:54,308 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-13 18:00:54,615 INFO L134 CoverageAnalysis]: Checked inductivity of 218 backedges. 81 proven. 39 refuted. 0 times theorem prover too weak. 98 trivial. 0 not checked. [2022-07-13 18:00:54,616 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1602890124] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-13 18:00:54,616 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-13 18:00:54,616 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 10, 11] total 26 [2022-07-13 18:00:54,616 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [51421335] [2022-07-13 18:00:54,616 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-13 18:00:54,617 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-07-13 18:00:54,617 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:54,618 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-07-13 18:00:54,618 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=116, Invalid=534, Unknown=0, NotChecked=0, Total=650 [2022-07-13 18:00:54,618 INFO L87 Difference]: Start difference. First operand 614 states and 732 transitions. Second operand has 26 states, 26 states have (on average 7.6923076923076925) internal successors, (200), 21 states have internal predecessors, (200), 9 states have call successors, (31), 8 states have call predecessors, (31), 10 states have return successors, (34), 9 states have call predecessors, (34), 9 states have call successors, (34) [2022-07-13 18:00:56,252 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:56,252 INFO L93 Difference]: Finished difference Result 1795 states and 2235 transitions. [2022-07-13 18:00:56,252 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2022-07-13 18:00:56,253 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 7.6923076923076925) internal successors, (200), 21 states have internal predecessors, (200), 9 states have call successors, (31), 8 states have call predecessors, (31), 10 states have return successors, (34), 9 states have call predecessors, (34), 9 states have call successors, (34) Word has length 192 [2022-07-13 18:00:56,253 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:56,258 INFO L225 Difference]: With dead ends: 1795 [2022-07-13 18:00:56,258 INFO L226 Difference]: Without dead ends: 1189 [2022-07-13 18:00:56,261 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 486 GetRequests, 412 SyntacticMatches, 2 SemanticMatches, 72 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1310 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=976, Invalid=4426, Unknown=0, NotChecked=0, Total=5402 [2022-07-13 18:00:56,262 INFO L413 NwaCegarLoop]: 179 mSDtfsCounter, 1464 mSDsluCounter, 1251 mSDsCounter, 0 mSdLazyCounter, 2287 mSolverCounterSat, 609 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1464 SdHoareTripleChecker+Valid, 1430 SdHoareTripleChecker+Invalid, 2896 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 609 IncrementalHoareTripleChecker+Valid, 2287 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:56,262 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1464 Valid, 1430 Invalid, 2896 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [609 Valid, 2287 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-07-13 18:00:56,263 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1189 states. [2022-07-13 18:00:56,325 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1189 to 1089. [2022-07-13 18:00:56,327 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1089 states, 829 states have (on average 1.1399276236429432) internal successors, (945), 874 states have internal predecessors, (945), 138 states have call successors, (138), 121 states have call predecessors, (138), 121 states have return successors, (160), 127 states have call predecessors, (160), 138 states have call successors, (160) [2022-07-13 18:00:56,330 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1089 states to 1089 states and 1243 transitions. [2022-07-13 18:00:56,331 INFO L78 Accepts]: Start accepts. Automaton has 1089 states and 1243 transitions. Word has length 192 [2022-07-13 18:00:56,332 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:56,332 INFO L495 AbstractCegarLoop]: Abstraction has 1089 states and 1243 transitions. [2022-07-13 18:00:56,333 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 7.6923076923076925) internal successors, (200), 21 states have internal predecessors, (200), 9 states have call successors, (31), 8 states have call predecessors, (31), 10 states have return successors, (34), 9 states have call predecessors, (34), 9 states have call successors, (34) [2022-07-13 18:00:56,333 INFO L276 IsEmpty]: Start isEmpty. Operand 1089 states and 1243 transitions. [2022-07-13 18:00:56,339 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 213 [2022-07-13 18:00:56,339 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:56,339 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:56,387 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-13 18:00:56,557 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-07-13 18:00:56,557 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:56,558 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:56,558 INFO L85 PathProgramCache]: Analyzing trace with hash 940649722, now seen corresponding path program 1 times [2022-07-13 18:00:56,558 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:56,558 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1751293389] [2022-07-13 18:00:56,558 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:56,558 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:56,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,607 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 18:00:56,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,614 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-13 18:00:56,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:00:56,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,630 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-13 18:00:56,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,637 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 18:00:56,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-07-13 18:00:56,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:00:56,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,659 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 18:00:56,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,662 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-13 18:00:56,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 18:00:56,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,666 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-07-13 18:00:56,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,678 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2022-07-13 18:00:56,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,680 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-07-13 18:00:56,682 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,684 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:00:56,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,685 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 18:00:56,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,686 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-13 18:00:56,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,687 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 160 [2022-07-13 18:00:56,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,688 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 171 [2022-07-13 18:00:56,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,690 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 180 [2022-07-13 18:00:56,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,695 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 18:00:56,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,697 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 204 [2022-07-13 18:00:56,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,698 INFO L134 CoverageAnalysis]: Checked inductivity of 264 backedges. 100 proven. 44 refuted. 0 times theorem prover too weak. 120 trivial. 0 not checked. [2022-07-13 18:00:56,698 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:56,698 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1751293389] [2022-07-13 18:00:56,698 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1751293389] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-13 18:00:56,698 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [238212006] [2022-07-13 18:00:56,698 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:56,698 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 18:00:56,698 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 18:00:56,699 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-13 18:00:56,701 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-07-13 18:00:56,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:56,812 INFO L263 TraceCheckSpWp]: Trace formula consists of 774 conjuncts, 10 conjunts are in the unsatisfiable core [2022-07-13 18:00:56,821 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 18:00:56,921 INFO L134 CoverageAnalysis]: Checked inductivity of 264 backedges. 200 proven. 9 refuted. 0 times theorem prover too weak. 55 trivial. 0 not checked. [2022-07-13 18:00:56,922 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-13 18:00:57,202 INFO L134 CoverageAnalysis]: Checked inductivity of 264 backedges. 104 proven. 54 refuted. 0 times theorem prover too weak. 106 trivial. 0 not checked. [2022-07-13 18:00:57,202 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [238212006] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-13 18:00:57,202 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-13 18:00:57,203 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 8, 8] total 23 [2022-07-13 18:00:57,203 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [922179008] [2022-07-13 18:00:57,203 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-13 18:00:57,203 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-07-13 18:00:57,204 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:57,204 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-07-13 18:00:57,204 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=70, Invalid=436, Unknown=0, NotChecked=0, Total=506 [2022-07-13 18:00:57,204 INFO L87 Difference]: Start difference. First operand 1089 states and 1243 transitions. Second operand has 23 states, 23 states have (on average 9.391304347826088) internal successors, (216), 16 states have internal predecessors, (216), 6 states have call successors, (45), 8 states have call predecessors, (45), 11 states have return successors, (39), 9 states have call predecessors, (39), 6 states have call successors, (39) [2022-07-13 18:00:58,355 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:58,355 INFO L93 Difference]: Finished difference Result 2130 states and 2461 transitions. [2022-07-13 18:00:58,356 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-07-13 18:00:58,356 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 9.391304347826088) internal successors, (216), 16 states have internal predecessors, (216), 6 states have call successors, (45), 8 states have call predecessors, (45), 11 states have return successors, (39), 9 states have call predecessors, (39), 6 states have call successors, (39) Word has length 212 [2022-07-13 18:00:58,356 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:58,360 INFO L225 Difference]: With dead ends: 2130 [2022-07-13 18:00:58,360 INFO L226 Difference]: Without dead ends: 1147 [2022-07-13 18:00:58,364 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 520 GetRequests, 469 SyntacticMatches, 2 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 501 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=426, Invalid=2124, Unknown=0, NotChecked=0, Total=2550 [2022-07-13 18:00:58,364 INFO L413 NwaCegarLoop]: 144 mSDtfsCounter, 538 mSDsluCounter, 422 mSDsCounter, 0 mSdLazyCounter, 1974 mSolverCounterSat, 237 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 538 SdHoareTripleChecker+Valid, 566 SdHoareTripleChecker+Invalid, 2211 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 237 IncrementalHoareTripleChecker+Valid, 1974 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:58,365 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [538 Valid, 566 Invalid, 2211 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [237 Valid, 1974 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-07-13 18:00:58,366 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1147 states. [2022-07-13 18:00:58,409 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1147 to 1085. [2022-07-13 18:00:58,410 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1085 states, 827 states have (on average 1.1293833131801694) internal successors, (934), 870 states have internal predecessors, (934), 132 states have call successors, (132), 123 states have call predecessors, (132), 125 states have return successors, (154), 125 states have call predecessors, (154), 132 states have call successors, (154) [2022-07-13 18:00:58,413 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1085 states to 1085 states and 1220 transitions. [2022-07-13 18:00:58,414 INFO L78 Accepts]: Start accepts. Automaton has 1085 states and 1220 transitions. Word has length 212 [2022-07-13 18:00:58,414 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:58,415 INFO L495 AbstractCegarLoop]: Abstraction has 1085 states and 1220 transitions. [2022-07-13 18:00:58,415 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 9.391304347826088) internal successors, (216), 16 states have internal predecessors, (216), 6 states have call successors, (45), 8 states have call predecessors, (45), 11 states have return successors, (39), 9 states have call predecessors, (39), 6 states have call successors, (39) [2022-07-13 18:00:58,415 INFO L276 IsEmpty]: Start isEmpty. Operand 1085 states and 1220 transitions. [2022-07-13 18:00:58,418 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 214 [2022-07-13 18:00:58,418 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:58,418 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:58,439 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-07-13 18:00:58,623 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 18:00:58,623 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:58,624 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:58,624 INFO L85 PathProgramCache]: Analyzing trace with hash 1948196260, now seen corresponding path program 1 times [2022-07-13 18:00:58,624 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:58,624 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1184766632] [2022-07-13 18:00:58,624 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:58,624 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:58,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:58,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 18:00:58,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:58,682 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-13 18:00:58,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:58,686 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:00:58,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:58,690 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-13 18:00:58,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:58,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 18:00:58,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:58,694 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-07-13 18:00:58,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:58,697 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:00:58,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:58,698 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 18:00:58,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:58,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-13 18:00:58,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:58,700 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 18:00:58,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:58,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-07-13 18:00:58,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:58,705 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-07-13 18:00:58,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:58,712 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 123 [2022-07-13 18:00:58,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:58,717 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:00:58,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:58,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 18:00:58,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:58,719 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-13 18:00:58,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:58,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2022-07-13 18:00:58,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:58,721 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 172 [2022-07-13 18:00:58,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:58,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2022-07-13 18:00:58,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:58,743 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 18:00:58,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:58,761 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 205 [2022-07-13 18:00:58,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:58,762 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 90 proven. 3 refuted. 0 times theorem prover too weak. 172 trivial. 0 not checked. [2022-07-13 18:00:58,762 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:58,762 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1184766632] [2022-07-13 18:00:58,763 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1184766632] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-13 18:00:58,763 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [601677066] [2022-07-13 18:00:58,763 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:58,763 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 18:00:58,763 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 18:00:58,772 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-13 18:00:58,773 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-07-13 18:00:58,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:58,875 INFO L263 TraceCheckSpWp]: Trace formula consists of 774 conjuncts, 18 conjunts are in the unsatisfiable core [2022-07-13 18:00:58,879 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 18:00:59,101 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 142 proven. 26 refuted. 0 times theorem prover too weak. 97 trivial. 0 not checked. [2022-07-13 18:00:59,101 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-13 18:00:59,584 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 103 proven. 45 refuted. 0 times theorem prover too weak. 117 trivial. 0 not checked. [2022-07-13 18:00:59,585 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [601677066] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-13 18:00:59,585 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-13 18:00:59,585 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 8, 13] total 29 [2022-07-13 18:00:59,585 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1765121045] [2022-07-13 18:00:59,585 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-13 18:00:59,585 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-07-13 18:00:59,586 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:59,586 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-07-13 18:00:59,586 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=118, Invalid=694, Unknown=0, NotChecked=0, Total=812 [2022-07-13 18:00:59,586 INFO L87 Difference]: Start difference. First operand 1085 states and 1220 transitions. Second operand has 29 states, 29 states have (on average 8.862068965517242) internal successors, (257), 23 states have internal predecessors, (257), 13 states have call successors, (47), 12 states have call predecessors, (47), 15 states have return successors, (48), 14 states have call predecessors, (48), 13 states have call successors, (48) [2022-07-13 18:01:02,364 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:01:02,364 INFO L93 Difference]: Finished difference Result 2414 states and 2767 transitions. [2022-07-13 18:01:02,364 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 65 states. [2022-07-13 18:01:02,365 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 29 states have (on average 8.862068965517242) internal successors, (257), 23 states have internal predecessors, (257), 13 states have call successors, (47), 12 states have call predecessors, (47), 15 states have return successors, (48), 14 states have call predecessors, (48), 13 states have call successors, (48) Word has length 213 [2022-07-13 18:01:02,365 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:01:02,370 INFO L225 Difference]: With dead ends: 2414 [2022-07-13 18:01:02,370 INFO L226 Difference]: Without dead ends: 1441 [2022-07-13 18:01:02,375 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 563 GetRequests, 472 SyntacticMatches, 1 SemanticMatches, 90 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2153 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=1427, Invalid=6945, Unknown=0, NotChecked=0, Total=8372 [2022-07-13 18:01:02,376 INFO L413 NwaCegarLoop]: 358 mSDtfsCounter, 2087 mSDsluCounter, 1013 mSDsCounter, 0 mSdLazyCounter, 4646 mSolverCounterSat, 1047 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2087 SdHoareTripleChecker+Valid, 1371 SdHoareTripleChecker+Invalid, 5693 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1047 IncrementalHoareTripleChecker+Valid, 4646 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-07-13 18:01:02,376 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2087 Valid, 1371 Invalid, 5693 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1047 Valid, 4646 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2022-07-13 18:01:02,377 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1441 states. [2022-07-13 18:01:02,432 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1441 to 1289. [2022-07-13 18:01:02,434 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1289 states, 984 states have (on average 1.125) internal successors, (1107), 1020 states have internal predecessors, (1107), 160 states have call successors, (160), 151 states have call predecessors, (160), 144 states have return successors, (176), 144 states have call predecessors, (176), 160 states have call successors, (176) [2022-07-13 18:01:02,437 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1289 states to 1289 states and 1443 transitions. [2022-07-13 18:01:02,438 INFO L78 Accepts]: Start accepts. Automaton has 1289 states and 1443 transitions. Word has length 213 [2022-07-13 18:01:02,438 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:01:02,438 INFO L495 AbstractCegarLoop]: Abstraction has 1289 states and 1443 transitions. [2022-07-13 18:01:02,439 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 29 states have (on average 8.862068965517242) internal successors, (257), 23 states have internal predecessors, (257), 13 states have call successors, (47), 12 states have call predecessors, (47), 15 states have return successors, (48), 14 states have call predecessors, (48), 13 states have call successors, (48) [2022-07-13 18:01:02,439 INFO L276 IsEmpty]: Start isEmpty. Operand 1289 states and 1443 transitions. [2022-07-13 18:01:02,442 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 269 [2022-07-13 18:01:02,443 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:01:02,443 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:01:02,471 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-07-13 18:01:02,671 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 18:01:02,672 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:01:02,672 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:01:02,672 INFO L85 PathProgramCache]: Analyzing trace with hash 648735380, now seen corresponding path program 1 times [2022-07-13 18:01:02,672 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:01:02,673 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [586311663] [2022-07-13 18:01:02,673 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:01:02,673 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:01:02,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,747 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 18:01:02,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,755 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-13 18:01:02,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:01:02,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,764 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-13 18:01:02,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 18:01:02,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,768 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-07-13 18:01:02,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,770 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:01:02,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,771 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 18:01:02,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,772 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-13 18:01:02,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,773 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 18:01:02,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,774 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-07-13 18:01:02,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,779 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-07-13 18:01:02,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,781 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 123 [2022-07-13 18:01:02,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,787 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:01:02,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,788 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 18:01:02,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,789 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-13 18:01:02,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,790 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2022-07-13 18:01:02,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,802 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 167 [2022-07-13 18:01:02,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,804 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 174 [2022-07-13 18:01:02,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,819 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 18:01:02,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,820 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-13 18:01:02,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,829 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 18:01:02,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-13 18:01:02,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 216 [2022-07-13 18:01:02,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,844 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 227 [2022-07-13 18:01:02,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,846 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2022-07-13 18:01:02,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,859 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 18:01:02,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 260 [2022-07-13 18:01:02,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,863 INFO L134 CoverageAnalysis]: Checked inductivity of 452 backedges. 201 proven. 36 refuted. 0 times theorem prover too weak. 215 trivial. 0 not checked. [2022-07-13 18:01:02,863 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:01:02,863 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [586311663] [2022-07-13 18:01:02,863 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [586311663] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-13 18:01:02,863 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [135650762] [2022-07-13 18:01:02,863 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:01:02,864 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 18:01:02,864 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 18:01:02,865 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-13 18:01:02,866 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-07-13 18:01:02,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:01:02,989 INFO L263 TraceCheckSpWp]: Trace formula consists of 914 conjuncts, 30 conjunts are in the unsatisfiable core [2022-07-13 18:01:02,993 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 18:01:03,301 INFO L134 CoverageAnalysis]: Checked inductivity of 452 backedges. 159 proven. 91 refuted. 0 times theorem prover too weak. 202 trivial. 0 not checked. [2022-07-13 18:01:03,301 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-13 18:01:03,852 INFO L134 CoverageAnalysis]: Checked inductivity of 452 backedges. 100 proven. 138 refuted. 0 times theorem prover too weak. 214 trivial. 0 not checked. [2022-07-13 18:01:03,852 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [135650762] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-13 18:01:03,852 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-13 18:01:03,853 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 11, 16] total 29 [2022-07-13 18:01:03,853 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1974466603] [2022-07-13 18:01:03,853 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-13 18:01:03,853 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-07-13 18:01:03,854 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:01:03,854 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-07-13 18:01:03,854 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=150, Invalid=662, Unknown=0, NotChecked=0, Total=812 [2022-07-13 18:01:03,854 INFO L87 Difference]: Start difference. First operand 1289 states and 1443 transitions. Second operand has 29 states, 29 states have (on average 10.793103448275861) internal successors, (313), 25 states have internal predecessors, (313), 18 states have call successors, (59), 13 states have call predecessors, (59), 19 states have return successors, (62), 18 states have call predecessors, (62), 18 states have call successors, (62) [2022-07-13 18:01:04,986 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:01:04,987 INFO L93 Difference]: Finished difference Result 2028 states and 2287 transitions. [2022-07-13 18:01:04,987 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-07-13 18:01:04,987 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 29 states have (on average 10.793103448275861) internal successors, (313), 25 states have internal predecessors, (313), 18 states have call successors, (59), 13 states have call predecessors, (59), 19 states have return successors, (62), 18 states have call predecessors, (62), 18 states have call successors, (62) Word has length 268 [2022-07-13 18:01:04,988 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:01:04,988 INFO L225 Difference]: With dead ends: 2028 [2022-07-13 18:01:04,989 INFO L226 Difference]: Without dead ends: 0 [2022-07-13 18:01:04,992 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 634 GetRequests, 580 SyntacticMatches, 5 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 551 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=579, Invalid=1971, Unknown=0, NotChecked=0, Total=2550 [2022-07-13 18:01:04,993 INFO L413 NwaCegarLoop]: 208 mSDtfsCounter, 1523 mSDsluCounter, 475 mSDsCounter, 0 mSdLazyCounter, 1674 mSolverCounterSat, 650 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1525 SdHoareTripleChecker+Valid, 683 SdHoareTripleChecker+Invalid, 2324 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 650 IncrementalHoareTripleChecker+Valid, 1674 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-07-13 18:01:04,993 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1525 Valid, 683 Invalid, 2324 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [650 Valid, 1674 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-07-13 18:01:04,993 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-13 18:01:04,994 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-13 18:01:04,994 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 18:01:04,994 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-13 18:01:04,994 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 268 [2022-07-13 18:01:04,994 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:01:04,994 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-13 18:01:04,995 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 29 states have (on average 10.793103448275861) internal successors, (313), 25 states have internal predecessors, (313), 18 states have call successors, (59), 13 states have call predecessors, (59), 19 states have return successors, (62), 18 states have call predecessors, (62), 18 states have call successors, (62) [2022-07-13 18:01:04,995 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-13 18:01:04,995 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-13 18:01:04,997 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-13 18:01:05,015 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-07-13 18:01:05,215 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-07-13 18:01:05,217 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-13 18:01:17,747 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 748 754) no Hoare annotation was computed. [2022-07-13 18:01:17,749 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 748 754) the Hoare annotation is: true [2022-07-13 18:01:17,749 INFO L899 garLoopResultBuilder]: For program point L607-1(lines 603 614) no Hoare annotation was computed. [2022-07-13 18:01:17,751 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 603 614) the Hoare annotation is: (let ((.cse6 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse4 (not (<= ~waterLevel~0 1))) (.cse2 (not (<= 0 ~waterLevel~0))) (.cse9 (not (<= 1 ~pumpRunning~0))) (.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (not (= ~pumpRunning~0 0))) (.cse3 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse8 (not (<= 2 ~waterLevel~0))) (.cse7 (not (<= ~waterLevel~0 2))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or (not (< 1 ~waterLevel~0)) .cse1 .cse3 .cse6 .cse7 .cse5) (or .cse0 .cse3 .cse8 .cse9 .cse7 .cse5) (or .cse1 .cse2 .cse3 .cse6 .cse4 .cse5) (or .cse0 .cse2 .cse3 .cse9 .cse7 .cse5 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 .cse3 .cse8 .cse7 .cse5))) [2022-07-13 18:01:17,751 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 603 614) no Hoare annotation was computed. [2022-07-13 18:01:17,751 INFO L899 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2022-07-13 18:01:17,751 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 721 747) no Hoare annotation was computed. [2022-07-13 18:01:17,752 INFO L895 garLoopResultBuilder]: At program point L69(lines 62 71) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse15 (<= 1 ~switchedOnBeforeTS~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse14 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse7 .cse14)) (.cse8 (and .cse13 .cse14 .cse15)) (.cse5 (not (<= 0 |old(~waterLevel~0)|))) (.cse10 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse12 (and .cse13 .cse14 .cse15 (not .cse3))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (not (< 1 |old(~waterLevel~0)|))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse5 .cse6 .cse3 (not (<= |old(~waterLevel~0)| 0))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse5 .cse2 .cse3) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse6 (and .cse7 (= ~waterLevel~0 1)) .cse3) (or .cse8 .cse9 .cse5 .cse6 .cse3 .cse4 .cse10) (or .cse0 .cse1 .cse11 .cse6 .cse3 .cse4) (or .cse8 .cse9 .cse5 .cse2 .cse3 .cse4 .cse10) (or .cse12 .cse9 .cse11 .cse2 .cse3 .cse4) (or .cse12 .cse9 .cse11 .cse6 .cse3 .cse4)))) [2022-07-13 18:01:17,752 INFO L895 garLoopResultBuilder]: At program point L837(lines 832 839) the Hoare annotation is: (let ((.cse1 (not (< 1 |old(~waterLevel~0)|))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (= ~pumpRunning~0 0)) (.cse10 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse11 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (not (<= |old(~waterLevel~0)| 0))) (.cse12 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse13 (not (<= |old(~waterLevel~0)| 1))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse3 .cse8) (or .cse0 .cse1 .cse7 .cse3 .cse4 (and .cse9 .cse10 (= ~waterLevel~0 1) .cse11)) (or .cse0 .cse6 .cse2 .cse3 .cse4 .cse12) (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse7 .cse3 (and .cse9 .cse10 (<= ~waterLevel~0 0) .cse11 (<= 0 ~waterLevel~0)) .cse12) (or .cse5 .cse1 .cse7 .cse3 .cse4) (or .cse13 .cse5 (not (<= 1 |old(~waterLevel~0)|)) .cse7 .cse3) (or .cse0 .cse6 .cse7 (and .cse9 .cse10 (= |old(~waterLevel~0)| ~waterLevel~0) .cse11) .cse3 .cse8 .cse12) (or .cse13 .cse5 .cse6 .cse2 .cse3))) [2022-07-13 18:01:17,752 INFO L895 garLoopResultBuilder]: At program point L796(line 796) the Hoare annotation is: (let ((.cse7 (not (<= |old(~waterLevel~0)| 0))) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse11 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (< 1 |old(~waterLevel~0)|))) (.cse12 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse13 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse2 .cse3 .cse7 .cse8 (and .cse9 .cse10 (= |old(~waterLevel~0)| ~waterLevel~0) .cse11)) (or .cse5 .cse2 .cse3 .cse4 (and .cse9 .cse10 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0) .cse11) (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse6 .cse12 .cse3 .cse4 .cse8) (or .cse0 .cse6 .cse12 .cse3 .cse7) (or .cse0 .cse1 .cse12 .cse3 .cse4) (or (not (= |old(~waterLevel~0)| 1)) .cse5 .cse2 (and .cse9 .cse10 (<= ~waterLevel~0 0) .cse11 (<= 0 ~waterLevel~0)) .cse3 .cse8) (or .cse13 .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse12 .cse3) (or .cse5 .cse1 .cse12 .cse3 .cse4) (or .cse13 .cse0 .cse6 .cse2 .cse3))) [2022-07-13 18:01:17,753 INFO L895 garLoopResultBuilder]: At program point L788(line 788) the Hoare annotation is: (let ((.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= 0 ~systemActive~0)) (.cse14 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse15 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse16 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse10 (and .cse15 (= ~waterLevel~0 1) .cse16)) (.cse1 (not (< 1 |old(~waterLevel~0)|))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse13 (and .cse15 (= |old(~waterLevel~0)| ~waterLevel~0) .cse16)) (.cse12 (not (<= |old(~waterLevel~0)| 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (not (<= 0 |old(~waterLevel~0)|))) (.cse5 (not (<= |old(~waterLevel~0)| 1))) (.cse6 (and (or .cse9 .cse3 (not (<= 2 |old(~waterLevel~0)|)) (= |old(~switchedOnBeforeTS~0)| 0)) (or (not (= |old(~waterLevel~0)| 1)) .cse9 .cse3 .cse14))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse8 (and .cse15 (<= ~waterLevel~0 0) .cse16 (<= 0 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse8) (or .cse9 .cse1 .cse7 .cse10 .cse3 .cse4) (or .cse0 .cse11 .cse7 .cse3 .cse12) (or .cse9 .cse1 .cse2 .cse10 .cse3 .cse4) (or .cse0 .cse1 .cse7 .cse3 .cse4) (or .cse13 .cse9 .cse11 .cse7 .cse3 .cse12 .cse14) (or .cse13 .cse9 .cse11 .cse2 .cse3 .cse12 .cse14) (or .cse5 .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse7 .cse3) (or .cse5 .cse0 .cse11 .cse2 .cse3) (or .cse5 .cse6 .cse2 .cse8)))) [2022-07-13 18:01:17,753 INFO L899 garLoopResultBuilder]: For program point L788-1(line 788) no Hoare annotation was computed. [2022-07-13 18:01:17,753 INFO L895 garLoopResultBuilder]: At program point L82(line 82) the Hoare annotation is: (let ((.cse21 (not (= |old(~waterLevel~0)| 1))) (.cse11 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= 0 ~systemActive~0)) (.cse14 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse23 (= ~pumpRunning~0 0)) (.cse6 (< |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)) (.cse7 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse25 (and .cse23 .cse6 .cse7 .cse9)) (.cse12 (not (<= 0 |old(~waterLevel~0)|))) (.cse13 (not (<= |old(~waterLevel~0)| 0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse24 (= ~waterLevel~0 1)) (.cse1 (not (< 1 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse15 (not (<= |old(~waterLevel~0)| 1))) (.cse16 (and (or .cse11 .cse3 (not (<= 2 |old(~waterLevel~0)|)) (= |old(~switchedOnBeforeTS~0)| 0)) (or .cse21 .cse11 .cse3 .cse14))) (.cse22 (not (<= 1 ~methaneLevelCritical~0))) (.cse17 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse8 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse18 (<= ~waterLevel~0 0)) (.cse19 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse10 (<= 1 ~switchedOnBeforeTS~0)) (.cse20 (<= 0 ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (and .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) .cse11 .cse12 .cse2 .cse3 .cse13 .cse14) (or .cse15 .cse16 (and .cse5 .cse17 .cse8 .cse18 .cse19 .cse10 .cse20) .cse2) (or .cse0 .cse21 .cse22 (and .cse23 .cse6 .cse7 .cse24) .cse3) (or .cse0 .cse1 .cse22 .cse3 .cse4) (or .cse11 .cse1 .cse22 .cse3 .cse4 (and .cse17 .cse23 .cse8 .cse19 .cse24 .cse10)) (or .cse0 .cse25 .cse12 .cse22 .cse3 .cse13) (or .cse15 .cse0 .cse25 .cse12 .cse2 .cse3) (or .cse11 .cse12 .cse22 .cse3 .cse13 (and .cse23 .cse6 .cse7 .cse8 .cse9 .cse10) .cse14) (or (and .cse5 .cse17 .cse8 .cse19 .cse24 .cse10) .cse11 .cse1 .cse2 .cse3 .cse4) (or .cse15 .cse16 .cse22 (and .cse17 .cse23 .cse8 .cse18 .cse19 .cse10 .cse20))))) [2022-07-13 18:01:17,753 INFO L899 garLoopResultBuilder]: For program point L82-1(line 82) no Hoare annotation was computed. [2022-07-13 18:01:17,753 INFO L895 garLoopResultBuilder]: At program point L652(lines 647 655) the Hoare annotation is: (let ((.cse25 (not (= |old(~waterLevel~0)| 1))) (.cse15 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (= 0 ~systemActive~0)) (.cse23 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse24 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse10 (= ~pumpRunning~0 0)) (.cse21 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse22 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse4 (and .cse10 .cse21 .cse22)) (.cse2 (not (<= 0 |old(~waterLevel~0)|))) (.cse7 (not (<= |old(~waterLevel~0)| 0))) (.cse20 (and .cse10 .cse24 .cse22)) (.cse16 (not (< 1 |old(~waterLevel~0)|))) (.cse17 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse8 (and (or .cse15 .cse5 (not (<= 2 |old(~waterLevel~0)|)) (= |old(~switchedOnBeforeTS~0)| 0)) (or .cse25 .cse15 .cse5 .cse23))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse18 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse11 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse12 (<= ~waterLevel~0 0)) (.cse13 (<= 1 ~switchedOnBeforeTS~0)) (.cse14 (<= 0 ~waterLevel~0)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse19 (= ~waterLevel~0 1)) (.cse6 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse2 .cse6 .cse4 .cse5 .cse7) (or .cse0 .cse8 .cse6 (and .cse9 .cse10 .cse11 .cse12 .cse13 .cse14)) (or .cse15 .cse16 .cse6 (and .cse9 .cse10 .cse11 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0) .cse13) .cse5 .cse17) (or .cse15 .cse16 .cse3 .cse5 .cse17 (and .cse18 .cse9 .cse11 .cse19 .cse13)) (or .cse20 .cse1 .cse16 .cse6 .cse5 .cse17) (or .cse15 .cse2 .cse6 .cse5 (and .cse10 .cse21 .cse11 .cse22 .cse13) .cse7 .cse23) (or .cse15 .cse2 .cse3 (and .cse18 .cse21 .cse11 .cse22 .cse13) .cse5 .cse7 .cse23) (or .cse20 .cse1 .cse16 .cse3 (and (<= 1 ~pumpRunning~0) .cse24 .cse22) .cse5 .cse17) (or .cse0 .cse8 .cse3 (and .cse18 .cse9 .cse11 .cse12 .cse13 .cse14)) (or .cse1 .cse25 (and .cse10 .cse21 .cse19) .cse6 .cse5)))) [2022-07-13 18:01:17,753 INFO L899 garLoopResultBuilder]: For program point L710(line 710) no Hoare annotation was computed. [2022-07-13 18:01:17,754 INFO L895 garLoopResultBuilder]: At program point L801(line 801) the Hoare annotation is: (let ((.cse10 (= ~pumpRunning~0 0))) (let ((.cse1 (and .cse10 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse11 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (not (< 1 |old(~waterLevel~0)|))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse6 .cse7 .cse3 (not (<= |old(~waterLevel~0)| 0))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse6 .cse2 .cse3) (or .cse8 .cse9 .cse2 .cse3 .cse4) (or .cse0 .cse7 .cse3 .cse4 (and .cse10 (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse5) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse7 (and .cse10 (= ~waterLevel~0 1)) .cse3) (or .cse8 .cse6 .cse7 .cse3 .cse4 .cse11) (or .cse8 .cse6 .cse2 .cse3 .cse4 .cse11) (or .cse8 .cse9 .cse7 .cse3 .cse4)))) [2022-07-13 18:01:17,754 INFO L895 garLoopResultBuilder]: At program point L801-1(lines 782 806) the Hoare annotation is: (let ((.cse20 (= ~pumpRunning~0 0)) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse18 (not (<= 2 |old(~waterLevel~0)|))) (.cse19 (not (= |old(~waterLevel~0)| 1))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse21 (= ~waterLevel~0 1)) (.cse22 (not (< 1 |old(~waterLevel~0)|))) (.cse6 (not (<= |old(~waterLevel~0)| 1))) (.cse14 (and (or .cse8 .cse4 .cse18 (= |old(~switchedOnBeforeTS~0)| 0)) (or .cse19 .cse8 .cse4 .cse9))) (.cse15 (<= ~waterLevel~0 0)) (.cse16 (<= 0 ~waterLevel~0)) (.cse2 (not (<= 0 |old(~waterLevel~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse11 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse13 (<= 1 ~switchedOnBeforeTS~0)) (.cse5 (not (<= |old(~waterLevel~0)| 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse20 .cse12)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse17 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse0 .cse1 .cse2 .cse7 .cse4) (or .cse8 .cse2 .cse7 .cse4 .cse5 .cse9 (and .cse10 .cse11 .cse12 .cse13)) (or .cse6 .cse14 .cse7 (and .cse10 .cse11 .cse15 .cse13 .cse16)) (or .cse8 .cse7 .cse4 .cse17 (and .cse10 .cse11 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0) .cse13) .cse18) (or .cse0 .cse19 .cse3 (and .cse20 .cse21) .cse4) (or .cse8 .cse22 .cse3 .cse4 .cse17 (and .cse20 .cse11 .cse21 .cse13)) (or .cse0 .cse1 .cse22 .cse3 .cse4 .cse17) (or .cse6 .cse14 .cse3 (and .cse20 .cse11 .cse15 .cse13 .cse16)) (or .cse8 .cse2 .cse3 (and .cse20 .cse11 .cse12 .cse13) .cse4 .cse5 .cse9) (or .cse0 .cse1 .cse7 (and (<= 1 ~pumpRunning~0) .cse12) .cse4 .cse17 .cse18)))) [2022-07-13 18:01:17,754 INFO L899 garLoopResultBuilder]: For program point L735-1(lines 735 741) no Hoare annotation was computed. [2022-07-13 18:01:17,754 INFO L899 garLoopResultBuilder]: For program point L583(lines 583 587) no Hoare annotation was computed. [2022-07-13 18:01:17,754 INFO L895 garLoopResultBuilder]: At program point L711(lines 706 713) the Hoare annotation is: (let ((.cse8 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (< 1 |old(~waterLevel~0)|))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (not (<= |old(~waterLevel~0)| 1))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse6 .cse7 .cse3 .cse4 .cse8) (or .cse5 .cse6 .cse7 .cse3 (not (<= |old(~waterLevel~0)| 0))) (or .cse0 .cse6 .cse2 .cse3 .cse4 .cse8) (or .cse5 .cse1 .cse7 .cse3 .cse4) (or .cse9 .cse5 (not (<= 1 |old(~waterLevel~0)|)) .cse7 .cse3) (or .cse0 .cse1 .cse7 .cse3 .cse4) (or .cse9 .cse5 .cse6 .cse2 .cse3))) [2022-07-13 18:01:17,754 INFO L895 garLoopResultBuilder]: At program point L583-2(lines 579 590) the Hoare annotation is: (let ((.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= 0 ~systemActive~0)) (.cse14 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse15 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse16 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse10 (and .cse15 (= ~waterLevel~0 1) .cse16)) (.cse1 (not (< 1 |old(~waterLevel~0)|))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse13 (and .cse15 (= |old(~waterLevel~0)| ~waterLevel~0) .cse16)) (.cse12 (not (<= |old(~waterLevel~0)| 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (not (<= 0 |old(~waterLevel~0)|))) (.cse5 (not (<= |old(~waterLevel~0)| 1))) (.cse6 (and (or .cse9 .cse3 (not (<= 2 |old(~waterLevel~0)|)) (= |old(~switchedOnBeforeTS~0)| 0)) (or (not (= |old(~waterLevel~0)| 1)) .cse9 .cse3 .cse14))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse8 (and .cse15 (<= ~waterLevel~0 0) .cse16 (<= 0 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse8) (or .cse9 .cse1 .cse7 .cse10 .cse3 .cse4) (or .cse0 .cse11 .cse7 .cse3 .cse12) (or .cse9 .cse1 .cse2 .cse10 .cse3 .cse4) (or .cse0 .cse1 .cse7 .cse3 .cse4) (or .cse13 .cse9 .cse11 .cse7 .cse3 .cse12 .cse14) (or .cse13 .cse9 .cse11 .cse2 .cse3 .cse12 .cse14) (or .cse5 .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse7 .cse3) (or .cse5 .cse0 .cse11 .cse2 .cse3) (or .cse5 .cse6 .cse2 .cse8)))) [2022-07-13 18:01:17,754 INFO L895 garLoopResultBuilder]: At program point L67(line 67) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0)) (.cse9 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (<= 0 |old(~waterLevel~0)|))) (.cse11 (and .cse8 .cse9 .cse13)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse12 (not (< 1 |old(~waterLevel~0)|))) (.cse10 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse9 .cse13))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse7 .cse2 (and .cse8 .cse9 (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse10 .cse3 .cse4 .cse5 .cse6) (or .cse11 .cse7 .cse1 .cse2 .cse3 (not (<= |old(~waterLevel~0)| 0))) (or .cse0 .cse12 .cse2 .cse3 .cse4 .cse5) (or (and .cse8 .cse9 (= ~waterLevel~0 1)) .cse7 (not (= |old(~waterLevel~0)| 1)) .cse2 .cse3) (or .cse11 (not (<= |old(~waterLevel~0)| 1)) .cse7 .cse1 .cse10 .cse3) (or .cse11 .cse7 .cse12 .cse10 .cse3 .cse4) (or .cse0 .cse12 .cse10 .cse3 .cse4 .cse5)))) [2022-07-13 18:01:17,755 INFO L899 garLoopResultBuilder]: For program point L67-1(line 67) no Hoare annotation was computed. [2022-07-13 18:01:17,755 INFO L899 garLoopResultBuilder]: For program point L728(lines 728 734) no Hoare annotation was computed. [2022-07-13 18:01:17,755 INFO L899 garLoopResultBuilder]: For program point L728-2(lines 724 746) no Hoare annotation was computed. [2022-07-13 18:01:17,755 INFO L899 garLoopResultBuilder]: For program point L790(lines 790 798) no Hoare annotation was computed. [2022-07-13 18:01:17,755 INFO L899 garLoopResultBuilder]: For program point L84(lines 84 94) no Hoare annotation was computed. [2022-07-13 18:01:17,755 INFO L899 garLoopResultBuilder]: For program point L786(lines 786 803) no Hoare annotation was computed. [2022-07-13 18:01:17,755 INFO L899 garLoopResultBuilder]: For program point L80(lines 80 97) no Hoare annotation was computed. [2022-07-13 18:01:17,755 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 721 747) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0)) (.cse9 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (<= 0 |old(~waterLevel~0)|))) (.cse11 (and .cse8 .cse9 .cse13)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse12 (not (< 1 |old(~waterLevel~0)|))) (.cse10 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse9 .cse13))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse7 .cse2 (and .cse8 .cse9 (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse10 .cse3 .cse4 .cse5 .cse6) (or .cse11 .cse7 .cse1 .cse2 .cse3 (not (<= |old(~waterLevel~0)| 0))) (or .cse0 .cse12 .cse2 .cse3 .cse4 .cse5) (or (and .cse8 .cse9 (= ~waterLevel~0 1)) .cse7 (not (= |old(~waterLevel~0)| 1)) .cse2 .cse3) (or .cse11 (not (<= |old(~waterLevel~0)| 1)) .cse7 .cse1 .cse10 .cse3) (or .cse11 .cse7 .cse12 .cse10 .cse3 .cse4) (or .cse0 .cse12 .cse10 .cse3 .cse4 .cse5)))) [2022-07-13 18:01:17,756 INFO L895 garLoopResultBuilder]: At program point L80-1(lines 72 100) the Hoare annotation is: (let ((.cse11 (= 0 ~systemActive~0))) (let ((.cse19 (< |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)) (.cse20 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse14 (<= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|)) (.cse28 (= ~methaneLevelCritical~0 0)) (.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= ~pumpRunning~0 0)) (.cse25 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse21 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse10 (not .cse11)) (.cse26 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2))) (let ((.cse15 (<= ~waterLevel~0 0)) (.cse16 (<= 0 ~waterLevel~0)) (.cse1 (not (< 1 |old(~waterLevel~0)|))) (.cse3 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse7 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse8 (= ~waterLevel~0 1)) (.cse24 (and .cse13 .cse5 .cse25 (<= 2 ~waterLevel~0) .cse21 .cse10 .cse26)) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse12 (not (<= |old(~waterLevel~0)| 2))) (.cse23 (not (<= |old(~waterLevel~0)| 0))) (.cse18 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse22 (not (<= 0 |old(~waterLevel~0)|))) (.cse17 (not .cse28)) (.cse27 (not (<= |old(~waterLevel~0)| 1))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse30 (and .cse13 .cse5 .cse19 .cse20 .cse14 .cse21 .cse10)) (.cse29 (not (<= 1 |old(~waterLevel~0)|))) (.cse2 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) .cse11 .cse12) (or (and .cse13 .cse3 .cse4 .cse6 .cse14 .cse15 .cse7 .cse9 .cse10 .cse16) (not (= |old(~waterLevel~0)| 1)) .cse0 .cse17 .cse11 .cse18) (or (and .cse13 .cse4 .cse19 .cse20 .cse6 .cse14 .cse21 .cse9 .cse10) .cse0 .cse22 .cse17 .cse11 .cse23 .cse18) (or .cse4 .cse1 .cse24 .cse17 (and (<= 1 ~pumpRunning~0) .cse25 .cse21 .cse26) .cse11 .cse12) (or .cse27 .cse28 .cse0 .cse29 (and .cse3 .cse4 .cse5 .cse6 .cse15 .cse7 .cse9 .cse10 .cse16) .cse2 .cse11 .cse12 .cse18) (or .cse0 .cse1 (and .cse13 .cse3 .cse4 .cse6 .cse14 .cse7 .cse8 .cse9 .cse10) .cse17 .cse11 .cse12) (or .cse4 .cse22 .cse30 .cse2 .cse11 .cse23) (or .cse4 .cse24 .cse2 .cse11 .cse12 (not (<= 2 |old(~waterLevel~0)|))) (or .cse28 .cse0 .cse22 (and .cse4 .cse5 .cse19 .cse20 .cse6 .cse21 .cse9 .cse10) .cse2 .cse11 .cse12 .cse23 .cse18) (or .cse27 .cse4 .cse22 .cse30 .cse17 .cse11) (or .cse27 .cse4 .cse30 .cse29 .cse2 .cse11))))) [2022-07-13 18:01:17,756 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 721 747) no Hoare annotation was computed. [2022-07-13 18:01:17,756 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 710) no Hoare annotation was computed. [2022-07-13 18:01:17,756 INFO L902 garLoopResultBuilder]: At program point L129(lines 104 133) the Hoare annotation is: true [2022-07-13 18:01:17,756 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 104 133) no Hoare annotation was computed. [2022-07-13 18:01:17,756 INFO L899 garLoopResultBuilder]: For program point L125(line 125) no Hoare annotation was computed. [2022-07-13 18:01:17,756 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 104 133) the Hoare annotation is: true [2022-07-13 18:01:17,756 INFO L899 garLoopResultBuilder]: For program point L118(lines 118 122) no Hoare annotation was computed. [2022-07-13 18:01:17,757 INFO L902 garLoopResultBuilder]: At program point L118-1(lines 118 122) the Hoare annotation is: true [2022-07-13 18:01:17,757 INFO L899 garLoopResultBuilder]: For program point L115(line 115) no Hoare annotation was computed. [2022-07-13 18:01:17,757 INFO L902 garLoopResultBuilder]: At program point L114-2(lines 114 128) the Hoare annotation is: true [2022-07-13 18:01:17,757 INFO L902 garLoopResultBuilder]: At program point L110(line 110) the Hoare annotation is: true [2022-07-13 18:01:17,757 INFO L899 garLoopResultBuilder]: For program point L110-1(line 110) no Hoare annotation was computed. [2022-07-13 18:01:17,757 INFO L895 garLoopResultBuilder]: At program point L956(line 956) the Hoare annotation is: (let ((.cse6 (<= 0 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse10 (< 1 ~waterLevel~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse9 (<= ~waterLevel~0 2)) (.cse4 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 1) .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse3 .cse9 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5 .cse6) (and .cse0 .cse8 .cse2 .cse3 (<= ~waterLevel~0 0) .cse4 .cse5 .cse6) (and .cse0 .cse8 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse5) (and .cse0 .cse8 .cse2 .cse10 .cse3 .cse9 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse10 .cse3 .cse9 .cse4 .cse5) (and .cse7 .cse8 .cse2 .cse10 .cse3 .cse9 .cse4 .cse5))) [2022-07-13 18:01:17,757 INFO L902 garLoopResultBuilder]: At program point L985(lines 924 989) the Hoare annotation is: true [2022-07-13 18:01:17,757 INFO L899 garLoopResultBuilder]: For program point L944(lines 944 950) no Hoare annotation was computed. [2022-07-13 18:01:17,757 INFO L899 garLoopResultBuilder]: For program point L944-1(lines 944 950) no Hoare annotation was computed. [2022-07-13 18:01:17,758 INFO L899 garLoopResultBuilder]: For program point L936(lines 936 940) no Hoare annotation was computed. [2022-07-13 18:01:17,758 INFO L899 garLoopResultBuilder]: For program point L193(lines 193 200) no Hoare annotation was computed. [2022-07-13 18:01:17,758 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-13 18:01:17,758 INFO L899 garLoopResultBuilder]: For program point L193-2(lines 193 200) no Hoare annotation was computed. [2022-07-13 18:01:17,758 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-13 18:01:17,758 INFO L895 garLoopResultBuilder]: At program point L701(lines 696 704) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-13 18:01:17,758 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-13 18:01:17,758 INFO L895 garLoopResultBuilder]: At program point L920(lines 915 922) the Hoare annotation is: (let ((.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse11 (<= 2 ~waterLevel~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse12 (< 1 ~waterLevel~0)) (.cse4 (<= ~waterLevel~0 2)) (.cse10 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse7 (not (= 0 ~systemActive~0))) (.cse8 (<= 0 ~waterLevel~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse9 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse10 .cse1 .cse2 .cse3 .cse5 (= ~waterLevel~0 1) .cse7) (and .cse10 .cse9 .cse2 (<= ~waterLevel~0 1) .cse3 .cse5 .cse7 .cse8) (and .cse0 .cse1 .cse2 .cse11 .cse3 .cse4 .cse5 .cse7) (and .cse10 .cse1 .cse2 .cse12 .cse3 .cse4 .cse5 .cse7) (and .cse10 .cse9 .cse2 .cse11 .cse3 .cse4 .cse5 .cse7) (and .cse0 .cse9 .cse2 .cse12 .cse3 .cse4 .cse5 .cse7) (and .cse10 .cse1 .cse2 .cse3 (<= ~waterLevel~0 0) .cse5 .cse7 .cse8))) [2022-07-13 18:01:17,758 INFO L895 garLoopResultBuilder]: At program point L982(lines 933 983) the Hoare annotation is: false [2022-07-13 18:01:17,759 INFO L895 garLoopResultBuilder]: At program point L693(lines 689 695) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-13 18:01:17,759 INFO L902 garLoopResultBuilder]: At program point L177(lines 169 179) the Hoare annotation is: true [2022-07-13 18:01:17,759 INFO L902 garLoopResultBuilder]: At program point L202(lines 183 205) the Hoare annotation is: true [2022-07-13 18:01:17,759 INFO L895 garLoopResultBuilder]: At program point L165(lines 161 167) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~1#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-13 18:01:17,759 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-13 18:01:17,759 INFO L899 garLoopResultBuilder]: For program point L954(lines 954 960) no Hoare annotation was computed. [2022-07-13 18:01:17,759 INFO L899 garLoopResultBuilder]: For program point L954-1(lines 954 960) no Hoare annotation was computed. [2022-07-13 18:01:17,759 INFO L895 garLoopResultBuilder]: At program point L979(lines 934 981) the Hoare annotation is: (let ((.cse3 (<= 2 ~waterLevel~0)) (.cse5 (<= ~waterLevel~0 2)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse10 (<= ~waterLevel~0 0)) (.cse12 (<= 0 ~waterLevel~0)) (.cse8 (<= 1 ~pumpRunning~0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse13 (<= ~waterLevel~0 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse14 (<= 1 ~waterLevel~0)) (.cse6 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse11 (<= 1 ~switchedOnBeforeTS~0)) (.cse7 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse8 .cse9 .cse2 .cse4 .cse10 .cse6 .cse11 .cse7 .cse12) (and .cse0 .cse9 .cse2 .cse4 .cse10 .cse6 .cse7 .cse12) (and .cse8 .cse9 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse9 .cse2 .cse4 .cse6 (= ~waterLevel~0 1) .cse7) (and .cse0 .cse1 .cse2 .cse13 .cse4 .cse14 .cse6 .cse7) (and .cse0 .cse9 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse1 .cse2 .cse4 .cse10 .cse6 .cse7 .cse12) (and .cse8 .cse9 .cse2 .cse13 .cse4 .cse14 .cse6 .cse11 .cse7))) [2022-07-13 18:01:17,760 INFO L895 garLoopResultBuilder]: At program point L946(line 946) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse12 (<= ~waterLevel~0 0)) (.cse7 (<= 0 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse8 (<= 2 ~waterLevel~0)) (.cse9 (<= ~waterLevel~0 2)) (.cse10 (<= 1 ~pumpRunning~0)) (.cse11 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (<= ~waterLevel~0 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse13 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse1 .cse2 .cse8 .cse4 .cse9 .cse5 .cse6) (and .cse10 .cse11 .cse2 .cse4 .cse12 .cse5 .cse13 .cse6 .cse7) (and .cse0 .cse11 .cse2 .cse4 .cse12 .cse5 .cse6 .cse7) (and .cse10 .cse11 .cse2 .cse8 .cse4 .cse9 .cse5 .cse6) (and .cse0 .cse11 .cse2 .cse4 .cse5 (= ~waterLevel~0 1) .cse6) (and .cse0 .cse11 .cse2 .cse8 .cse4 .cse9 .cse5 .cse6) (and .cse10 .cse11 .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0) .cse5 .cse13 .cse6))) [2022-07-13 18:01:17,760 INFO L895 garLoopResultBuilder]: At program point L686(lines 682 688) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-13 18:01:17,760 INFO L895 garLoopResultBuilder]: At program point L59(lines 54 61) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~1#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-13 18:01:17,760 INFO L899 garLoopResultBuilder]: For program point L972(lines 972 976) no Hoare annotation was computed. [2022-07-13 18:01:17,760 INFO L895 garLoopResultBuilder]: At program point L972-2(lines 964 977) the Hoare annotation is: (let ((.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse11 (<= 2 ~waterLevel~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse12 (< 1 ~waterLevel~0)) (.cse4 (<= ~waterLevel~0 2)) (.cse10 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse7 (not (= 0 ~systemActive~0))) (.cse8 (<= 0 ~waterLevel~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse9 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse10 .cse1 .cse2 .cse3 .cse5 (= ~waterLevel~0 1) .cse7) (and .cse10 .cse9 .cse2 (<= ~waterLevel~0 1) .cse3 .cse5 .cse7 .cse8) (and .cse0 .cse1 .cse2 .cse11 .cse3 .cse4 .cse5 .cse7) (and .cse10 .cse1 .cse2 .cse12 .cse3 .cse4 .cse5 .cse7) (and .cse10 .cse9 .cse2 .cse11 .cse3 .cse4 .cse5 .cse7) (and .cse0 .cse9 .cse2 .cse12 .cse3 .cse4 .cse5 .cse7) (and .cse10 .cse1 .cse2 .cse3 (<= ~waterLevel~0 0) .cse5 .cse7 .cse8))) [2022-07-13 18:01:17,760 INFO L899 garLoopResultBuilder]: For program point L935(lines 934 981) no Hoare annotation was computed. [2022-07-13 18:01:17,760 INFO L899 garLoopResultBuilder]: For program point L964(lines 964 977) no Hoare annotation was computed. [2022-07-13 18:01:17,760 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 591 602) no Hoare annotation was computed. [2022-07-13 18:01:17,761 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 591 602) the Hoare annotation is: (let ((.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse10 (not (<= 0 |old(~waterLevel~0)|))) (.cse9 (not (<= 1 ~pumpRunning~0))) (.cse12 (not (<= |old(~waterLevel~0)| 0))) (.cse11 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (= ~pumpRunning~0 0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (= 0 ~systemActive~0)) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse6 .cse4 .cse5 .cse7 .cse8) (or .cse3 .cse9 .cse4 .cse5 .cse7 .cse8) (or .cse0 .cse1 .cse10 .cse6 .cse4 .cse5) (or .cse0 .cse2 .cse3 .cse9 .cse4 .cse5 .cse11) (or .cse1 .cse10 .cse3 .cse4 .cse5 .cse12) (or .cse10 .cse3 .cse9 .cse4 .cse5 .cse12 .cse11) (or .cse1 .cse3 .cse4 .cse5 .cse7 .cse8))) [2022-07-13 18:01:17,761 INFO L899 garLoopResultBuilder]: For program point L595-1(lines 591 602) no Hoare annotation was computed. [2022-07-13 18:01:17,761 INFO L899 garLoopResultBuilder]: For program point L764(lines 764 772) no Hoare annotation was computed. [2022-07-13 18:01:17,761 INFO L895 garLoopResultBuilder]: At program point L665(lines 656 669) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0))) (let ((.cse3 (not (<= ~waterLevel~0 2))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (<= 1 ~waterLevel~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (<= ~waterLevel~0 0))) (.cse8 (and .cse1 (not (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0)))) (.cse10 (not (<= 0 ~waterLevel~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= ~waterLevel~0 1))) (.cse4 (= 0 ~systemActive~0))) (and (or (not (< 1 ~waterLevel~0)) .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse5 .cse3 .cse4) (or .cse0 .cse6 .cse2 .cse7 .cse4 .cse8) (or .cse0 .cse9 .cse10 .cse2 .cse4 .cse8) (or .cse0 .cse6 .cse5 .cse7 .cse4 .cse8) (or .cse0 .cse9 .cse10 .cse5 .cse4 .cse8) (or .cse10 (not (<= 1 |old(~pumpRunning~0)|)) .cse5 .cse7 .cse4 (not (<= 1 ~switchedOnBeforeTS~0)))))) [2022-07-13 18:01:17,761 INFO L899 garLoopResultBuilder]: For program point L760(lines 760 777) no Hoare annotation was computed. [2022-07-13 18:01:17,761 INFO L899 garLoopResultBuilder]: For program point L822(lines 822 828) no Hoare annotation was computed. [2022-07-13 18:01:17,761 INFO L895 garLoopResultBuilder]: At program point L820(line 820) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse3 (not (<= ~waterLevel~0 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (<= 0 ~waterLevel~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= ~waterLevel~0 1))) (.cse4 (= 0 ~systemActive~0))) (and (or (not (< 1 ~waterLevel~0)) .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse5 .cse3 .cse4) (or .cse0 .cse6 .cse5 .cse7 .cse4) (or .cse0 .cse6 .cse2 .cse7 .cse4) (or .cse6 (not (<= 1 |old(~pumpRunning~0)|)) .cse5 .cse7 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-07-13 18:01:17,761 INFO L895 garLoopResultBuilder]: At program point L822-2(lines 815 831) the Hoare annotation is: (let ((.cse0 (not (< 1 ~waterLevel~0))) (.cse3 (not (<= ~waterLevel~0 2))) (.cse4 (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~7#1| ~methaneLevelCritical~0)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (<= 0 ~waterLevel~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (<= ~waterLevel~0 1))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 (and (= ~pumpRunning~0 0) .cse4) .cse5) (or .cse0 .cse1 .cse6 .cse3 (and (<= 1 ~pumpRunning~0) .cse4) .cse5) (or .cse1 .cse7 .cse6 .cse8 .cse5) (or .cse1 .cse7 .cse2 .cse8 .cse5) (or .cse7 (not (<= 1 |old(~pumpRunning~0)|)) .cse6 .cse8 .cse5 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-07-13 18:01:17,762 INFO L899 garLoopResultBuilder]: For program point L820-1(line 820) no Hoare annotation was computed. [2022-07-13 18:01:17,762 INFO L895 garLoopResultBuilder]: At program point L911(lines 896 914) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse4 (= 0 ~systemActive~0))) (let ((.cse5 (and (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (not (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~8#1| 0)) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0) (not .cse4))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (<= 0 ~waterLevel~0))) (.cse8 (not (<= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2 .cse3 .cse4) (or .cse0 .cse5 (not (<= ~waterLevel~0 0)) .cse6 .cse2 .cse4) (or .cse0 .cse5 .cse6 .cse7 .cse8 .cse4) (or .cse0 .cse5 (not (<= 1 ~waterLevel~0)) .cse2 .cse8 .cse4) (or .cse6 (not (<= 1 |old(~pumpRunning~0)|)) .cse7 .cse8 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (< 1 ~waterLevel~0)) .cse0 .cse1 .cse7 .cse3 .cse4)))) [2022-07-13 18:01:17,762 INFO L895 garLoopResultBuilder]: At program point L812(lines 807 814) the Hoare annotation is: (let ((.cse0 (not (< 1 ~waterLevel~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (<= ~waterLevel~0 2))) (.cse5 (not (<= 0 ~waterLevel~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (<= ~waterLevel~0 1))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 (and (<= 1 ~pumpRunning~0) (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~7#1| ~methaneLevelCritical~0)) .cse4) (or .cse1 .cse5 .cse2 .cse6 .cse4) (or .cse1 .cse5 .cse7 .cse6 .cse4) (or .cse0 .cse1 .cse7 .cse3 .cse4) (or .cse5 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse6 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-07-13 18:01:17,762 INFO L899 garLoopResultBuilder]: For program point L905(lines 905 909) no Hoare annotation was computed. [2022-07-13 18:01:17,762 INFO L899 garLoopResultBuilder]: For program point L905-2(lines 905 909) no Hoare annotation was computed. [2022-07-13 18:01:17,762 INFO L895 garLoopResultBuilder]: At program point L775(line 775) the Hoare annotation is: (let ((.cse3 (not (<= ~waterLevel~0 1))) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 0 ~waterLevel~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse9 (not (< 1 ~waterLevel~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (not (<= ~waterLevel~0 2))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse3 .cse4) (or .cse6 .cse7 (not (<= 1 ~waterLevel~0)) .cse2 .cse3 .cse4 .cse8) (or .cse9 .cse0 .cse2 .cse10 .cse4) (or .cse6 (not (<= ~waterLevel~0 0)) .cse1 .cse7 .cse2 .cse4 .cse8) (or .cse9 .cse0 .cse5 .cse10 .cse4))) [2022-07-13 18:01:17,762 INFO L899 garLoopResultBuilder]: For program point L775-1(lines 756 780) no Hoare annotation was computed. [2022-07-13 18:01:17,762 INFO L899 garLoopResultBuilder]: For program point L660(lines 660 666) no Hoare annotation was computed. [2022-07-13 18:01:17,763 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 756 780) the Hoare annotation is: (let ((.cse2 (not (<= 2 ~waterLevel~0))) (.cse4 (not (<= ~waterLevel~0 2))) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse12 (not (<= ~waterLevel~0 0))) (.cse13 (not (<= 0 ~waterLevel~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse9 (not (<= 1 ~waterLevel~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (not (<= ~waterLevel~0 1))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (or .cse7 .cse8 .cse9 .cse6 .cse10 .cse5 .cse11) (or .cse0 .cse1 .cse12 .cse13 .cse3 .cse5) (or .cse7 .cse12 .cse13 .cse8 .cse6 .cse5 .cse11) (or .cse0 .cse1 .cse12 .cse13 .cse6 .cse5) (or .cse0 .cse1 .cse9 .cse6 .cse10 .cse5) (or .cse0 .cse1 .cse9 .cse3 .cse10 .cse5))) [2022-07-13 18:01:17,763 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 756 780) no Hoare annotation was computed. [2022-07-13 18:01:17,763 INFO L895 garLoopResultBuilder]: At program point L770(line 770) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0))) (let ((.cse1 (not (<= ~waterLevel~0 0))) (.cse6 (not (<= 1 ~waterLevel~0))) (.cse2 (not (<= 0 ~waterLevel~0))) (.cse7 (not (<= ~waterLevel~0 1))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (< 1 ~waterLevel~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse10 (not (<= ~waterLevel~0 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__methaneQuery_~tmp~5#1| 0) (not .cse4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse6 .cse3 .cse7 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse8 .cse4 .cse5) (or .cse0 .cse6 .cse8 .cse7 .cse4 .cse5) (or .cse2 (not (<= 1 |old(~pumpRunning~0)|)) .cse3 .cse7 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse9 .cse0 .cse8 .cse10 .cse4 .cse5) (or .cse9 .cse0 .cse3 .cse10 .cse4 .cse5)))) [2022-07-13 18:01:17,763 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 851 859) no Hoare annotation was computed. [2022-07-13 18:01:17,763 INFO L902 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 851 859) the Hoare annotation is: true [2022-07-13 18:01:17,763 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 851 859) no Hoare annotation was computed. [2022-07-13 18:01:17,763 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 840 850) the Hoare annotation is: true [2022-07-13 18:01:17,764 INFO L895 garLoopResultBuilder]: At program point L620(lines 615 623) the Hoare annotation is: (let ((.cse7 (not (<= 1 ~waterLevel~0))) (.cse9 (not (<= ~waterLevel~0 1))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (<= ~waterLevel~0 0))) (.cse1 (not (<= 0 ~waterLevel~0))) (.cse3 (not (<= 1 ~pumpRunning~0))) (.cse6 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse10 (not (= ~pumpRunning~0 0))) (.cse11 (not (<= 2 ~waterLevel~0))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse12 (not (<= ~waterLevel~0 2))) (.cse4 (= 0 ~systemActive~0)) (.cse5 (= |isMethaneAlarm_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse7 .cse8 .cse3 .cse9 .cse4 .cse5 .cse6) (or .cse7 .cse2 .cse3 .cse9 .cse4 .cse5 .cse6) (or .cse10 .cse11 .cse2 .cse12 .cse4 .cse5) (or .cse0 .cse1 .cse8 .cse3 .cse4 .cse5 .cse6) (or .cse10 .cse11 .cse8 .cse12 .cse4 .cse5))) [2022-07-13 18:01:17,764 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 840 850) no Hoare annotation was computed. [2022-07-13 18:01:17,764 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 840 850) no Hoare annotation was computed. [2022-07-13 18:01:17,766 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:01:17,767 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-13 18:01:17,821 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 13.07 06:01:17 BoogieIcfgContainer [2022-07-13 18:01:17,822 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-13 18:01:17,823 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-13 18:01:17,823 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-13 18:01:17,823 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-13 18:01:17,835 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 06:00:49" (3/4) ... [2022-07-13 18:01:17,837 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-13 18:01:17,844 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-13 18:01:17,844 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-13 18:01:17,844 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-13 18:01:17,844 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-13 18:01:17,844 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-13 18:01:17,844 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-07-13 18:01:17,844 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-07-13 18:01:17,845 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-07-13 18:01:17,849 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 51 nodes and edges [2022-07-13 18:01:17,849 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-13 18:01:17,850 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-13 18:01:17,850 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-13 18:01:17,850 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-13 18:01:17,851 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-13 18:01:17,851 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-13 18:01:17,866 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-13 18:01:17,866 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-13 18:01:17,866 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-13 18:01:17,867 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive)) || ((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel)) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && waterLevel == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && waterLevel <= 1) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && waterLevel <= 1) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) [2022-07-13 18:01:17,867 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2022-07-13 18:01:17,867 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) [2022-07-13 18:01:17,868 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel) || ((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && waterLevel == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel <= 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel)) || (((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && 1 < waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && 1 < waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel) [2022-07-13 18:01:17,868 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && tmp == methaneLevelCritical) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((((((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && tmp == methaneLevelCritical) && pumpRunning <= tmp___0) && waterLevel <= 0) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel) || !(\old(waterLevel) == 1)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && tmp < 2) && \result < 2) && tmp == methaneLevelCritical) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) && tmp == 2)) || !(methaneLevelCritical == 0)) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || ((((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel <= 0) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || ((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && tmp == methaneLevelCritical) && pumpRunning <= tmp___0) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp < 2) && \result < 2) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(\old(pumpRunning) == 0) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) && tmp == 2)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((methaneLevelCritical == 0 || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && tmp < 2) && \result < 2) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp < 2) && \result < 2) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp < 2) && \result < 2) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) [2022-07-13 18:01:17,868 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS))) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-07-13 18:01:17,868 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-13 18:01:17,869 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \result < 2) && \old(waterLevel) == waterLevel)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result < 2) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(1 <= methaneLevelCritical)) || (((((\result <= waterLevel && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((\result <= waterLevel && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((((pumpRunning == 0 && \result < 2) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && \result < 2) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((pumpRunning == 0 && \result < 2) && waterLevel == 1)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) [2022-07-13 18:01:17,869 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-13 18:01:17,869 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(waterLevel <= 0) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS)) && ((((((!(1 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && ((((((!(1 <= waterLevel) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(pumpRunning == 0) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive) || \result == methaneLevelCritical)) && ((((((!(waterLevel <= 0) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(pumpRunning == 0) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) || \result == methaneLevelCritical) [2022-07-13 18:01:17,869 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2022-07-13 18:01:17,869 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || (pumpRunning == 0 && tmp == methaneLevelCritical)) || 0 == systemActive) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && tmp == methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2022-07-13 18:01:17,869 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && tmp == methaneLevelCritical)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2022-07-13 18:01:17,870 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && !(tmp == 0)) && \result == 0) && !(0 == systemActive))) || !(waterLevel <= 0)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && !(tmp == 0)) && \result == 0) && !(0 == systemActive))) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && !(tmp == 0)) && \result == 0) && !(0 == systemActive))) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS))) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive) [2022-07-13 18:01:17,882 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-13 18:01:17,883 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-13 18:01:17,883 INFO L158 Benchmark]: Toolchain (without parser) took 29504.59ms. Allocated memory was 86.0MB in the beginning and 302.0MB in the end (delta: 216.0MB). Free memory was 48.8MB in the beginning and 169.6MB in the end (delta: -120.7MB). Peak memory consumption was 93.3MB. Max. memory is 16.1GB. [2022-07-13 18:01:17,883 INFO L158 Benchmark]: CDTParser took 0.09ms. Allocated memory is still 86.0MB. Free memory is still 66.1MB. There was no memory consumed. Max. memory is 16.1GB. [2022-07-13 18:01:17,884 INFO L158 Benchmark]: CACSL2BoogieTranslator took 394.44ms. Allocated memory was 86.0MB in the beginning and 113.2MB in the end (delta: 27.3MB). Free memory was 48.6MB in the beginning and 80.9MB in the end (delta: -32.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-07-13 18:01:17,884 INFO L158 Benchmark]: Boogie Procedure Inliner took 35.32ms. Allocated memory is still 113.2MB. Free memory was 80.9MB in the beginning and 78.6MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-13 18:01:17,884 INFO L158 Benchmark]: Boogie Preprocessor took 18.69ms. Allocated memory is still 113.2MB. Free memory was 78.6MB in the beginning and 77.1MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-13 18:01:17,884 INFO L158 Benchmark]: RCFGBuilder took 422.80ms. Allocated memory is still 113.2MB. Free memory was 76.7MB in the beginning and 59.7MB in the end (delta: 17.0MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-07-13 18:01:17,885 INFO L158 Benchmark]: TraceAbstraction took 28568.37ms. Allocated memory was 113.2MB in the beginning and 302.0MB in the end (delta: 188.7MB). Free memory was 59.3MB in the beginning and 175.9MB in the end (delta: -116.5MB). Peak memory consumption was 158.6MB. Max. memory is 16.1GB. [2022-07-13 18:01:17,885 INFO L158 Benchmark]: Witness Printer took 60.23ms. Allocated memory is still 302.0MB. Free memory was 175.9MB in the beginning and 169.6MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-13 18:01:17,886 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.09ms. Allocated memory is still 86.0MB. Free memory is still 66.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 394.44ms. Allocated memory was 86.0MB in the beginning and 113.2MB in the end (delta: 27.3MB). Free memory was 48.6MB in the beginning and 80.9MB in the end (delta: -32.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 35.32ms. Allocated memory is still 113.2MB. Free memory was 80.9MB in the beginning and 78.6MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 18.69ms. Allocated memory is still 113.2MB. Free memory was 78.6MB in the beginning and 77.1MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 422.80ms. Allocated memory is still 113.2MB. Free memory was 76.7MB in the beginning and 59.7MB in the end (delta: 17.0MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 28568.37ms. Allocated memory was 113.2MB in the beginning and 302.0MB in the end (delta: 188.7MB). Free memory was 59.3MB in the beginning and 175.9MB in the end (delta: -116.5MB). Peak memory consumption was 158.6MB. Max. memory is 16.1GB. * Witness Printer took 60.23ms. Allocated memory is still 302.0MB. Free memory was 175.9MB in the beginning and 169.6MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 710]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 99 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 28.5s, OverallIterations: 14, TraceHistogramMax: 9, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 9.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 12.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 7597 SdHoareTripleChecker+Valid, 5.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 7555 mSDsluCounter, 8683 SdHoareTripleChecker+Invalid, 4.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 6530 mSDsCounter, 3205 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 13280 IncrementalHoareTripleChecker+Invalid, 16485 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 3205 mSolverCounterUnsat, 2153 mSDtfsCounter, 13280 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 2659 GetRequests, 2266 SyntacticMatches, 13 SemanticMatches, 380 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5251 ImplicationChecksByTransitivity, 3.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1289occurred in iteration=13, InterpolantAutomatonStates: 291, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 14 MinimizatonAttempts, 556 StatesRemovedByMinimization, 10 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 46 LocationsWithAnnotation, 3046 PreInvPairs, 3396 NumberOfFragments, 7200 HoareAnnotationTreeSize, 3046 FomulaSimplifications, 7088 FormulaSimplificationTreeSizeReduction, 1.0s HoareSimplificationTime, 46 FomulaSimplificationsInter, 69238 FormulaSimplificationTreeSizeReductionInter, 11.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 4.1s InterpolantComputationTime, 2435 NumberOfCodeBlocks, 2435 NumberOfCodeBlocksAsserted, 19 NumberOfCheckSat, 3404 ConstructedInterpolants, 0 QuantifiedInterpolants, 8009 SizeOfPredicates, 13 NumberOfNonLiveVariables, 3688 ConjunctsInSsa, 79 ConjunctsInUnsatCore, 24 InterpolantComputations, 9 PerfectInterpolantSequences, 3220/3738 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 933]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 832]: Loop Invariant Derived loop invariant: ((((((((((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 114]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 815]: Loop Invariant Derived loop invariant: ((((((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || (pumpRunning == 0 && tmp == methaneLevelCritical)) || 0 == systemActive) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && tmp == methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 579]: Loop Invariant Derived loop invariant: (((((((((((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) - InvariantResult [Line: 706]: Loop Invariant Derived loop invariant: (((((((((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 104]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 934]: Loop Invariant Derived loop invariant: ((((((((((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive)) || ((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel)) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && waterLevel == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && waterLevel <= 1) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && waterLevel <= 1) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) - InvariantResult [Line: 183]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: ((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 647]: Loop Invariant Derived loop invariant: ((((((((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \result < 2) && \old(waterLevel) == waterLevel)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result < 2) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(1 <= methaneLevelCritical)) || (((((\result <= waterLevel && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((\result <= waterLevel && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((((pumpRunning == 0 && \result < 2) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && \result < 2) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((pumpRunning == 0 && \result < 2) && waterLevel == 1)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 169]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 689]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 915]: Loop Invariant Derived loop invariant: (((((((((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel) || ((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && waterLevel == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel <= 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel)) || (((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && 1 < waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && 1 < waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel) - InvariantResult [Line: 696]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 72]: Loop Invariant Derived loop invariant: ((((((((((((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && tmp == methaneLevelCritical) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((((((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && tmp == methaneLevelCritical) && pumpRunning <= tmp___0) && waterLevel <= 0) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel) || !(\old(waterLevel) == 1)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && tmp < 2) && \result < 2) && tmp == methaneLevelCritical) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) && tmp == 2)) || !(methaneLevelCritical == 0)) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || ((((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel <= 0) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || ((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && tmp == methaneLevelCritical) && pumpRunning <= tmp___0) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp < 2) && \result < 2) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(\old(pumpRunning) == 0) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) && tmp == 2)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((methaneLevelCritical == 0 || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && tmp < 2) && \result < 2) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp < 2) && \result < 2) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp < 2) && \result < 2) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 807]: Loop Invariant Derived loop invariant: ((((((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && tmp == methaneLevelCritical)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: ((((((((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: ((((((((((!(waterLevel <= 0) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS)) && ((((((!(1 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && ((((((!(1 <= waterLevel) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(pumpRunning == 0) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive) || \result == methaneLevelCritical)) && ((((((!(waterLevel <= 0) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(pumpRunning == 0) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) || \result == methaneLevelCritical) - InvariantResult [Line: 896]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && !(tmp == 0)) && \result == 0) && !(0 == systemActive))) || !(waterLevel <= 0)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && !(tmp == 0)) && \result == 0) && !(0 == systemActive))) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && !(tmp == 0)) && \result == 0) && !(0 == systemActive))) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS))) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive) - InvariantResult [Line: 924]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 682]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 782]: Loop Invariant Derived loop invariant: ((((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS))) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) RESULT: Ultimate proved your program to be correct! [2022-07-13 18:01:17,940 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE