./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash a5df7e7a530538a677becf014bfb990c6b0570c5e1058d85d7e78cec25f53253 --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-16 00:59:21,159 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-16 00:59:21,162 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-16 00:59:21,225 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-16 00:59:21,226 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-16 00:59:21,229 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-16 00:59:21,230 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-16 00:59:21,233 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-16 00:59:21,234 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-16 00:59:21,238 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-16 00:59:21,239 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-16 00:59:21,240 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-16 00:59:21,240 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-16 00:59:21,242 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-16 00:59:21,245 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-16 00:59:21,248 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-16 00:59:21,249 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-16 00:59:21,250 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-16 00:59:21,251 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-16 00:59:21,254 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-16 00:59:21,256 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-16 00:59:21,257 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-16 00:59:21,258 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-16 00:59:21,259 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-16 00:59:21,262 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-16 00:59:21,262 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-16 00:59:21,262 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-16 00:59:21,264 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-16 00:59:21,264 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-16 00:59:21,264 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-16 00:59:21,265 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-16 00:59:21,266 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-16 00:59:21,267 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-16 00:59:21,268 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-16 00:59:21,269 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-16 00:59:21,269 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-16 00:59:21,269 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-16 00:59:21,269 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-16 00:59:21,270 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-16 00:59:21,270 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-16 00:59:21,270 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-16 00:59:21,271 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-16 00:59:21,296 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-16 00:59:21,296 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-16 00:59:21,297 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-16 00:59:21,297 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-16 00:59:21,298 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-16 00:59:21,298 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-16 00:59:21,298 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-16 00:59:21,298 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-16 00:59:21,298 INFO L138 SettingsManager]: * Use SBE=true [2021-12-16 00:59:21,299 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-16 00:59:21,299 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-16 00:59:21,299 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-16 00:59:21,300 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-16 00:59:21,300 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-16 00:59:21,300 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-16 00:59:21,300 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-16 00:59:21,300 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-16 00:59:21,300 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-16 00:59:21,300 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-16 00:59:21,300 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-16 00:59:21,301 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-16 00:59:21,301 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-16 00:59:21,301 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-16 00:59:21,301 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-16 00:59:21,301 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 00:59:21,301 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-16 00:59:21,301 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-16 00:59:21,302 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-16 00:59:21,302 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-16 00:59:21,302 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-16 00:59:21,302 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-16 00:59:21,302 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-16 00:59:21,302 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-16 00:59:21,303 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-16 00:59:21,303 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> a5df7e7a530538a677becf014bfb990c6b0570c5e1058d85d7e78cec25f53253 [2021-12-16 00:59:21,536 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-16 00:59:21,560 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-16 00:59:21,562 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-16 00:59:21,563 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-16 00:59:21,563 INFO L275 PluginConnector]: CDTParser initialized [2021-12-16 00:59:21,564 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c [2021-12-16 00:59:21,636 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/438923cd3/1057a4d2f49e4546ab2fbe02b43cf6aa/FLAG83317faa3 [2021-12-16 00:59:22,029 INFO L306 CDTParser]: Found 1 translation units. [2021-12-16 00:59:22,029 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c [2021-12-16 00:59:22,037 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/438923cd3/1057a4d2f49e4546ab2fbe02b43cf6aa/FLAG83317faa3 [2021-12-16 00:59:22,047 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/438923cd3/1057a4d2f49e4546ab2fbe02b43cf6aa [2021-12-16 00:59:22,049 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-16 00:59:22,050 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-16 00:59:22,059 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-16 00:59:22,059 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-16 00:59:22,067 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-16 00:59:22,068 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 12:59:22" (1/1) ... [2021-12-16 00:59:22,069 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@27879251 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:22, skipping insertion in model container [2021-12-16 00:59:22,069 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 12:59:22" (1/1) ... [2021-12-16 00:59:22,074 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-16 00:59:22,113 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-16 00:59:22,401 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c[19170,19183] [2021-12-16 00:59:22,403 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 00:59:22,408 INFO L203 MainTranslator]: Completed pre-run [2021-12-16 00:59:22,461 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c[19170,19183] [2021-12-16 00:59:22,462 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 00:59:22,473 INFO L208 MainTranslator]: Completed translation [2021-12-16 00:59:22,474 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:22 WrapperNode [2021-12-16 00:59:22,474 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-16 00:59:22,475 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-16 00:59:22,476 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-16 00:59:22,476 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-16 00:59:22,480 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:22" (1/1) ... [2021-12-16 00:59:22,489 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:22" (1/1) ... [2021-12-16 00:59:22,509 INFO L137 Inliner]: procedures = 58, calls = 158, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 279 [2021-12-16 00:59:22,509 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-16 00:59:22,510 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-16 00:59:22,510 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-16 00:59:22,510 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-16 00:59:22,515 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:22" (1/1) ... [2021-12-16 00:59:22,515 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:22" (1/1) ... [2021-12-16 00:59:22,517 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:22" (1/1) ... [2021-12-16 00:59:22,518 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:22" (1/1) ... [2021-12-16 00:59:22,521 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:22" (1/1) ... [2021-12-16 00:59:22,524 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:22" (1/1) ... [2021-12-16 00:59:22,525 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:22" (1/1) ... [2021-12-16 00:59:22,526 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-16 00:59:22,527 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-16 00:59:22,527 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-16 00:59:22,527 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-16 00:59:22,528 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:22" (1/1) ... [2021-12-16 00:59:22,535 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 00:59:22,543 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 00:59:22,570 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-16 00:59:22,580 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-16 00:59:22,594 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-16 00:59:22,595 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-16 00:59:22,595 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-16 00:59:22,595 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-16 00:59:22,595 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-16 00:59:22,595 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-16 00:59:22,595 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-16 00:59:22,595 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-12-16 00:59:22,595 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-12-16 00:59:22,596 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 00:59:22,596 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 00:59:22,596 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-16 00:59:22,596 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-16 00:59:22,596 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-16 00:59:22,596 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-16 00:59:22,596 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-16 00:59:22,596 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-16 00:59:22,596 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-16 00:59:22,642 INFO L236 CfgBuilder]: Building ICFG [2021-12-16 00:59:22,643 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-16 00:59:22,821 INFO L277 CfgBuilder]: Performing block encoding [2021-12-16 00:59:22,825 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-16 00:59:22,826 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-16 00:59:22,827 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 12:59:22 BoogieIcfgContainer [2021-12-16 00:59:22,827 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-16 00:59:22,828 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-16 00:59:22,828 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-16 00:59:22,837 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-16 00:59:22,837 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.12 12:59:22" (1/3) ... [2021-12-16 00:59:22,838 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3a65097b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 12:59:22, skipping insertion in model container [2021-12-16 00:59:22,838 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:22" (2/3) ... [2021-12-16 00:59:22,838 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3a65097b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 12:59:22, skipping insertion in model container [2021-12-16 00:59:22,838 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 12:59:22" (3/3) ... [2021-12-16 00:59:22,840 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product58.cil.c [2021-12-16 00:59:22,844 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-16 00:59:22,844 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-16 00:59:22,884 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-16 00:59:22,889 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-16 00:59:22,889 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-16 00:59:22,903 INFO L276 IsEmpty]: Start isEmpty. Operand has 94 states, 73 states have (on average 1.3835616438356164) internal successors, (101), 81 states have internal predecessors, (101), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2021-12-16 00:59:22,909 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-12-16 00:59:22,909 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:22,910 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:22,910 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:22,914 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:22,914 INFO L85 PathProgramCache]: Analyzing trace with hash 1936540556, now seen corresponding path program 1 times [2021-12-16 00:59:22,919 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:22,920 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1029369484] [2021-12-16 00:59:22,920 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:22,920 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:23,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,084 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-16 00:59:23,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,099 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:23,100 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:23,101 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1029369484] [2021-12-16 00:59:23,101 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1029369484] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:23,102 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:23,102 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-16 00:59:23,103 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1456650603] [2021-12-16 00:59:23,104 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:23,107 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-16 00:59:23,107 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:23,146 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-16 00:59:23,147 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 00:59:23,149 INFO L87 Difference]: Start difference. First operand has 94 states, 73 states have (on average 1.3835616438356164) internal successors, (101), 81 states have internal predecessors, (101), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:23,181 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:23,182 INFO L93 Difference]: Finished difference Result 179 states and 244 transitions. [2021-12-16 00:59:23,184 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-16 00:59:23,184 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2021-12-16 00:59:23,185 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:23,192 INFO L225 Difference]: With dead ends: 179 [2021-12-16 00:59:23,193 INFO L226 Difference]: Without dead ends: 85 [2021-12-16 00:59:23,196 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 00:59:23,199 INFO L933 BasicCegarLoop]: 119 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 119 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:23,200 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 119 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:59:23,210 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2021-12-16 00:59:23,224 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2021-12-16 00:59:23,226 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 66 states have (on average 1.3181818181818181) internal successors, (87), 73 states have internal predecessors, (87), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2021-12-16 00:59:23,227 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 110 transitions. [2021-12-16 00:59:23,228 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 110 transitions. Word has length 25 [2021-12-16 00:59:23,228 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:23,229 INFO L470 AbstractCegarLoop]: Abstraction has 85 states and 110 transitions. [2021-12-16 00:59:23,229 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:23,229 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 110 transitions. [2021-12-16 00:59:23,231 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-12-16 00:59:23,231 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:23,231 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:23,231 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-16 00:59:23,232 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:23,232 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:23,232 INFO L85 PathProgramCache]: Analyzing trace with hash -433728910, now seen corresponding path program 1 times [2021-12-16 00:59:23,232 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:23,233 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1982390003] [2021-12-16 00:59:23,233 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:23,233 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:23,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,276 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-16 00:59:23,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,279 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:23,279 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:23,279 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1982390003] [2021-12-16 00:59:23,279 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1982390003] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:23,280 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:23,280 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 00:59:23,280 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [879593971] [2021-12-16 00:59:23,280 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:23,281 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-16 00:59:23,281 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:23,281 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-16 00:59:23,282 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 00:59:23,282 INFO L87 Difference]: Start difference. First operand 85 states and 110 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:23,292 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:23,292 INFO L93 Difference]: Finished difference Result 134 states and 174 transitions. [2021-12-16 00:59:23,292 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-16 00:59:23,293 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2021-12-16 00:59:23,293 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:23,294 INFO L225 Difference]: With dead ends: 134 [2021-12-16 00:59:23,294 INFO L226 Difference]: Without dead ends: 76 [2021-12-16 00:59:23,295 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 00:59:23,296 INFO L933 BasicCegarLoop]: 97 mSDtfsCounter, 13 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 177 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:23,296 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [16 Valid, 177 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:59:23,297 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2021-12-16 00:59:23,303 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2021-12-16 00:59:23,303 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 60 states have (on average 1.3333333333333333) internal successors, (80), 67 states have internal predecessors, (80), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2021-12-16 00:59:23,304 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 98 transitions. [2021-12-16 00:59:23,304 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 98 transitions. Word has length 26 [2021-12-16 00:59:23,304 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:23,305 INFO L470 AbstractCegarLoop]: Abstraction has 76 states and 98 transitions. [2021-12-16 00:59:23,305 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:23,305 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 98 transitions. [2021-12-16 00:59:23,306 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2021-12-16 00:59:23,306 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:23,306 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:23,306 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-16 00:59:23,306 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:23,307 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:23,307 INFO L85 PathProgramCache]: Analyzing trace with hash -960870689, now seen corresponding path program 1 times [2021-12-16 00:59:23,307 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:23,307 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1791684613] [2021-12-16 00:59:23,307 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:23,308 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:23,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,374 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-16 00:59:23,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,377 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:23,377 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:23,377 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1791684613] [2021-12-16 00:59:23,377 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1791684613] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:23,379 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:23,379 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-16 00:59:23,379 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [36167551] [2021-12-16 00:59:23,380 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:23,380 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-16 00:59:23,380 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:23,381 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-16 00:59:23,381 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-16 00:59:23,381 INFO L87 Difference]: Start difference. First operand 76 states and 98 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:23,443 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:23,443 INFO L93 Difference]: Finished difference Result 144 states and 189 transitions. [2021-12-16 00:59:23,443 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-16 00:59:23,443 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2021-12-16 00:59:23,444 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:23,444 INFO L225 Difference]: With dead ends: 144 [2021-12-16 00:59:23,444 INFO L226 Difference]: Without dead ends: 76 [2021-12-16 00:59:23,445 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-16 00:59:23,446 INFO L933 BasicCegarLoop]: 91 mSDtfsCounter, 125 mSDsluCounter, 148 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 125 SdHoareTripleChecker+Valid, 239 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:23,446 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [125 Valid, 239 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:59:23,447 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2021-12-16 00:59:23,452 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2021-12-16 00:59:23,452 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 60 states have (on average 1.3166666666666667) internal successors, (79), 67 states have internal predecessors, (79), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2021-12-16 00:59:23,453 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 97 transitions. [2021-12-16 00:59:23,453 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 97 transitions. Word has length 31 [2021-12-16 00:59:23,453 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:23,453 INFO L470 AbstractCegarLoop]: Abstraction has 76 states and 97 transitions. [2021-12-16 00:59:23,453 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:23,454 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 97 transitions. [2021-12-16 00:59:23,454 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2021-12-16 00:59:23,454 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:23,455 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:23,455 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-16 00:59:23,455 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:23,455 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:23,455 INFO L85 PathProgramCache]: Analyzing trace with hash 1051649323, now seen corresponding path program 1 times [2021-12-16 00:59:23,456 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:23,456 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [198589447] [2021-12-16 00:59:23,456 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:23,456 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:23,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,486 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-12-16 00:59:23,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,488 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:23,489 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:23,489 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [198589447] [2021-12-16 00:59:23,489 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [198589447] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:23,489 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:23,489 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 00:59:23,489 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1885595092] [2021-12-16 00:59:23,490 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:23,490 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-16 00:59:23,491 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:23,491 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-16 00:59:23,492 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 00:59:23,492 INFO L87 Difference]: Start difference. First operand 76 states and 97 transitions. Second operand has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:23,514 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:23,514 INFO L93 Difference]: Finished difference Result 189 states and 247 transitions. [2021-12-16 00:59:23,515 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-16 00:59:23,515 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 39 [2021-12-16 00:59:23,515 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:23,516 INFO L225 Difference]: With dead ends: 189 [2021-12-16 00:59:23,516 INFO L226 Difference]: Without dead ends: 121 [2021-12-16 00:59:23,517 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 00:59:23,518 INFO L933 BasicCegarLoop]: 110 mSDtfsCounter, 60 mSDsluCounter, 63 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 173 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:23,518 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [60 Valid, 173 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:59:23,519 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 121 states. [2021-12-16 00:59:23,536 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 121 to 119. [2021-12-16 00:59:23,536 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 119 states, 93 states have (on average 1.3010752688172043) internal successors, (121), 101 states have internal predecessors, (121), 13 states have call successors, (13), 12 states have call predecessors, (13), 12 states have return successors, (17), 13 states have call predecessors, (17), 13 states have call successors, (17) [2021-12-16 00:59:23,537 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 119 states to 119 states and 151 transitions. [2021-12-16 00:59:23,537 INFO L78 Accepts]: Start accepts. Automaton has 119 states and 151 transitions. Word has length 39 [2021-12-16 00:59:23,537 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:23,537 INFO L470 AbstractCegarLoop]: Abstraction has 119 states and 151 transitions. [2021-12-16 00:59:23,537 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:23,538 INFO L276 IsEmpty]: Start isEmpty. Operand 119 states and 151 transitions. [2021-12-16 00:59:23,538 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2021-12-16 00:59:23,538 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:23,539 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:23,539 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-16 00:59:23,539 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:23,539 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:23,539 INFO L85 PathProgramCache]: Analyzing trace with hash 1776043399, now seen corresponding path program 1 times [2021-12-16 00:59:23,540 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:23,540 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1850212273] [2021-12-16 00:59:23,540 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:23,540 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:23,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,563 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-16 00:59:23,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,609 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:23,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,612 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2021-12-16 00:59:23,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,616 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:23,616 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:23,617 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1850212273] [2021-12-16 00:59:23,617 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1850212273] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:23,617 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:23,617 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-16 00:59:23,617 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1074018598] [2021-12-16 00:59:23,619 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:23,619 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-16 00:59:23,619 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:23,620 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-16 00:59:23,620 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-16 00:59:23,620 INFO L87 Difference]: Start difference. First operand 119 states and 151 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-16 00:59:23,792 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:23,793 INFO L93 Difference]: Finished difference Result 273 states and 359 transitions. [2021-12-16 00:59:23,793 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-16 00:59:23,794 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 47 [2021-12-16 00:59:23,794 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:23,795 INFO L225 Difference]: With dead ends: 273 [2021-12-16 00:59:23,796 INFO L226 Difference]: Without dead ends: 162 [2021-12-16 00:59:23,797 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-16 00:59:23,798 INFO L933 BasicCegarLoop]: 96 mSDtfsCounter, 92 mSDsluCounter, 208 mSDsCounter, 0 mSdLazyCounter, 82 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 96 SdHoareTripleChecker+Valid, 304 SdHoareTripleChecker+Invalid, 101 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 82 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:23,810 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [96 Valid, 304 Invalid, 101 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 82 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:59:23,812 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162 states. [2021-12-16 00:59:23,822 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162 to 145. [2021-12-16 00:59:23,823 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 145 states, 114 states have (on average 1.2982456140350878) internal successors, (148), 122 states have internal predecessors, (148), 15 states have call successors, (15), 12 states have call predecessors, (15), 15 states have return successors, (22), 16 states have call predecessors, (22), 15 states have call successors, (22) [2021-12-16 00:59:23,833 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 145 states to 145 states and 185 transitions. [2021-12-16 00:59:23,833 INFO L78 Accepts]: Start accepts. Automaton has 145 states and 185 transitions. Word has length 47 [2021-12-16 00:59:23,833 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:23,833 INFO L470 AbstractCegarLoop]: Abstraction has 145 states and 185 transitions. [2021-12-16 00:59:23,834 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-16 00:59:23,834 INFO L276 IsEmpty]: Start isEmpty. Operand 145 states and 185 transitions. [2021-12-16 00:59:23,835 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2021-12-16 00:59:23,835 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:23,835 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:23,835 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-16 00:59:23,835 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:23,836 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:23,836 INFO L85 PathProgramCache]: Analyzing trace with hash 1353341573, now seen corresponding path program 1 times [2021-12-16 00:59:23,843 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:23,843 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1709059661] [2021-12-16 00:59:23,844 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:23,844 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:23,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,931 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-16 00:59:23,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:23,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,947 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2021-12-16 00:59:23,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,959 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:23,960 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:23,960 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1709059661] [2021-12-16 00:59:23,960 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1709059661] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:23,960 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:23,961 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-16 00:59:23,961 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1235843101] [2021-12-16 00:59:23,961 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:23,961 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-16 00:59:23,962 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:23,962 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 00:59:23,962 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-16 00:59:23,962 INFO L87 Difference]: Start difference. First operand 145 states and 185 transitions. Second operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-16 00:59:24,177 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:24,177 INFO L93 Difference]: Finished difference Result 419 states and 543 transitions. [2021-12-16 00:59:24,177 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-16 00:59:24,178 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) Word has length 47 [2021-12-16 00:59:24,179 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:24,185 INFO L225 Difference]: With dead ends: 419 [2021-12-16 00:59:24,185 INFO L226 Difference]: Without dead ends: 282 [2021-12-16 00:59:24,187 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2021-12-16 00:59:24,188 INFO L933 BasicCegarLoop]: 97 mSDtfsCounter, 155 mSDsluCounter, 363 mSDsCounter, 0 mSdLazyCounter, 179 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 162 SdHoareTripleChecker+Valid, 460 SdHoareTripleChecker+Invalid, 224 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 179 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:24,188 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [162 Valid, 460 Invalid, 224 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 179 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:59:24,189 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 282 states. [2021-12-16 00:59:24,206 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 282 to 268. [2021-12-16 00:59:24,207 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 268 states, 207 states have (on average 1.2608695652173914) internal successors, (261), 222 states have internal predecessors, (261), 30 states have call successors, (30), 24 states have call predecessors, (30), 30 states have return successors, (46), 32 states have call predecessors, (46), 30 states have call successors, (46) [2021-12-16 00:59:24,208 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 268 states to 268 states and 337 transitions. [2021-12-16 00:59:24,208 INFO L78 Accepts]: Start accepts. Automaton has 268 states and 337 transitions. Word has length 47 [2021-12-16 00:59:24,208 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:24,208 INFO L470 AbstractCegarLoop]: Abstraction has 268 states and 337 transitions. [2021-12-16 00:59:24,209 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-16 00:59:24,209 INFO L276 IsEmpty]: Start isEmpty. Operand 268 states and 337 transitions. [2021-12-16 00:59:24,210 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2021-12-16 00:59:24,210 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:24,210 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:24,210 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-16 00:59:24,211 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:24,211 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:24,211 INFO L85 PathProgramCache]: Analyzing trace with hash -767183671, now seen corresponding path program 1 times [2021-12-16 00:59:24,211 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:24,211 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [693638703] [2021-12-16 00:59:24,211 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:24,212 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:24,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:24,252 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-16 00:59:24,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:24,259 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-16 00:59:24,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:24,267 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:24,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:24,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-16 00:59:24,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:24,272 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:24,272 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:24,272 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [693638703] [2021-12-16 00:59:24,272 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [693638703] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:24,272 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:24,272 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-16 00:59:24,273 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1130220116] [2021-12-16 00:59:24,273 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:24,273 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-16 00:59:24,273 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:24,273 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 00:59:24,274 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-16 00:59:24,274 INFO L87 Difference]: Start difference. First operand 268 states and 337 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-16 00:59:24,562 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:24,562 INFO L93 Difference]: Finished difference Result 540 states and 680 transitions. [2021-12-16 00:59:24,562 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2021-12-16 00:59:24,563 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 51 [2021-12-16 00:59:24,563 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:24,564 INFO L225 Difference]: With dead ends: 540 [2021-12-16 00:59:24,564 INFO L226 Difference]: Without dead ends: 280 [2021-12-16 00:59:24,565 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=84, Invalid=188, Unknown=0, NotChecked=0, Total=272 [2021-12-16 00:59:24,566 INFO L933 BasicCegarLoop]: 105 mSDtfsCounter, 184 mSDsluCounter, 147 mSDsCounter, 0 mSdLazyCounter, 340 mSolverCounterSat, 59 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 186 SdHoareTripleChecker+Valid, 252 SdHoareTripleChecker+Invalid, 399 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 59 IncrementalHoareTripleChecker+Valid, 340 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:24,566 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [186 Valid, 252 Invalid, 399 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [59 Valid, 340 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-16 00:59:24,567 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 280 states. [2021-12-16 00:59:24,579 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 280 to 266. [2021-12-16 00:59:24,580 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 266 states, 205 states have (on average 1.2439024390243902) internal successors, (255), 220 states have internal predecessors, (255), 30 states have call successors, (30), 24 states have call predecessors, (30), 30 states have return successors, (46), 32 states have call predecessors, (46), 30 states have call successors, (46) [2021-12-16 00:59:24,581 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 266 states to 266 states and 331 transitions. [2021-12-16 00:59:24,581 INFO L78 Accepts]: Start accepts. Automaton has 266 states and 331 transitions. Word has length 51 [2021-12-16 00:59:24,581 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:24,582 INFO L470 AbstractCegarLoop]: Abstraction has 266 states and 331 transitions. [2021-12-16 00:59:24,582 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-16 00:59:24,582 INFO L276 IsEmpty]: Start isEmpty. Operand 266 states and 331 transitions. [2021-12-16 00:59:24,583 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-12-16 00:59:24,583 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:24,583 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:24,584 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-16 00:59:24,584 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:24,584 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:24,584 INFO L85 PathProgramCache]: Analyzing trace with hash 1398170692, now seen corresponding path program 1 times [2021-12-16 00:59:24,584 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:24,585 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [620261831] [2021-12-16 00:59:24,585 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:24,585 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:24,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:24,608 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-16 00:59:24,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:24,612 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-16 00:59:24,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:24,632 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:24,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:24,634 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2021-12-16 00:59:24,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:24,637 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 00:59:24,637 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:24,637 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [620261831] [2021-12-16 00:59:24,637 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [620261831] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:24,638 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:24,638 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-16 00:59:24,638 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1408293303] [2021-12-16 00:59:24,638 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:24,638 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-16 00:59:24,638 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:24,639 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 00:59:24,639 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-16 00:59:24,639 INFO L87 Difference]: Start difference. First operand 266 states and 331 transitions. Second operand has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 00:59:24,822 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:24,822 INFO L93 Difference]: Finished difference Result 542 states and 695 transitions. [2021-12-16 00:59:24,823 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-16 00:59:24,823 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2021-12-16 00:59:24,823 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:24,824 INFO L225 Difference]: With dead ends: 542 [2021-12-16 00:59:24,824 INFO L226 Difference]: Without dead ends: 284 [2021-12-16 00:59:24,825 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-12-16 00:59:24,826 INFO L933 BasicCegarLoop]: 90 mSDtfsCounter, 129 mSDsluCounter, 149 mSDsCounter, 0 mSdLazyCounter, 280 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 130 SdHoareTripleChecker+Valid, 239 SdHoareTripleChecker+Invalid, 327 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 280 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:24,826 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [130 Valid, 239 Invalid, 327 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 280 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:59:24,827 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 284 states. [2021-12-16 00:59:24,838 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 284 to 272. [2021-12-16 00:59:24,838 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 272 states, 211 states have (on average 1.2369668246445498) internal successors, (261), 226 states have internal predecessors, (261), 30 states have call successors, (30), 24 states have call predecessors, (30), 30 states have return successors, (46), 32 states have call predecessors, (46), 30 states have call successors, (46) [2021-12-16 00:59:24,840 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 272 states to 272 states and 337 transitions. [2021-12-16 00:59:24,840 INFO L78 Accepts]: Start accepts. Automaton has 272 states and 337 transitions. Word has length 57 [2021-12-16 00:59:24,840 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:24,840 INFO L470 AbstractCegarLoop]: Abstraction has 272 states and 337 transitions. [2021-12-16 00:59:24,840 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 00:59:24,840 INFO L276 IsEmpty]: Start isEmpty. Operand 272 states and 337 transitions. [2021-12-16 00:59:24,842 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-12-16 00:59:24,842 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:24,842 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:24,842 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-16 00:59:24,842 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:24,842 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:24,843 INFO L85 PathProgramCache]: Analyzing trace with hash 412634824, now seen corresponding path program 1 times [2021-12-16 00:59:24,843 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:24,843 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [33334471] [2021-12-16 00:59:24,843 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:24,843 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:24,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:24,868 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-16 00:59:24,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:24,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-16 00:59:24,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:24,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:24,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:24,887 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2021-12-16 00:59:24,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:24,889 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 00:59:24,890 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:24,890 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [33334471] [2021-12-16 00:59:24,890 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [33334471] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:24,890 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:24,890 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 00:59:24,890 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [349114392] [2021-12-16 00:59:24,890 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:24,891 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 00:59:24,891 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:24,891 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 00:59:24,891 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 00:59:24,892 INFO L87 Difference]: Start difference. First operand 272 states and 337 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 4 states have internal predecessors, (46), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-16 00:59:25,119 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:25,119 INFO L93 Difference]: Finished difference Result 770 states and 997 transitions. [2021-12-16 00:59:25,120 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-16 00:59:25,120 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 4 states have internal predecessors, (46), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 57 [2021-12-16 00:59:25,121 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:25,123 INFO L225 Difference]: With dead ends: 770 [2021-12-16 00:59:25,123 INFO L226 Difference]: Without dead ends: 506 [2021-12-16 00:59:25,124 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2021-12-16 00:59:25,127 INFO L933 BasicCegarLoop]: 136 mSDtfsCounter, 286 mSDsluCounter, 122 mSDsCounter, 0 mSdLazyCounter, 259 mSolverCounterSat, 118 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 288 SdHoareTripleChecker+Valid, 258 SdHoareTripleChecker+Invalid, 377 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 118 IncrementalHoareTripleChecker+Valid, 259 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:25,127 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [288 Valid, 258 Invalid, 377 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [118 Valid, 259 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-16 00:59:25,129 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 506 states. [2021-12-16 00:59:25,155 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 506 to 504. [2021-12-16 00:59:25,156 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 504 states, 385 states have (on average 1.2103896103896103) internal successors, (466), 408 states have internal predecessors, (466), 60 states have call successors, (60), 56 states have call predecessors, (60), 58 states have return successors, (103), 60 states have call predecessors, (103), 60 states have call successors, (103) [2021-12-16 00:59:25,160 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 504 states to 504 states and 629 transitions. [2021-12-16 00:59:25,160 INFO L78 Accepts]: Start accepts. Automaton has 504 states and 629 transitions. Word has length 57 [2021-12-16 00:59:25,161 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:25,162 INFO L470 AbstractCegarLoop]: Abstraction has 504 states and 629 transitions. [2021-12-16 00:59:25,162 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 4 states have internal predecessors, (46), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-16 00:59:25,162 INFO L276 IsEmpty]: Start isEmpty. Operand 504 states and 629 transitions. [2021-12-16 00:59:25,163 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-12-16 00:59:25,164 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:25,164 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:25,164 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-16 00:59:25,164 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:25,165 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:25,165 INFO L85 PathProgramCache]: Analyzing trace with hash -166866194, now seen corresponding path program 1 times [2021-12-16 00:59:25,165 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:25,165 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1718876295] [2021-12-16 00:59:25,165 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:25,165 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:25,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:25,227 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 00:59:25,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:25,233 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-16 00:59:25,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:25,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-12-16 00:59:25,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:25,277 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:25,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:25,287 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-12-16 00:59:25,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:25,293 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-16 00:59:25,293 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:25,293 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1718876295] [2021-12-16 00:59:25,294 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1718876295] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 00:59:25,294 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [436818190] [2021-12-16 00:59:25,294 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:25,295 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 00:59:25,295 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 00:59:25,299 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 00:59:25,313 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-16 00:59:25,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:25,390 INFO L263 TraceCheckSpWp]: Trace formula consists of 387 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-16 00:59:25,395 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 00:59:25,579 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:25,579 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-16 00:59:25,579 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [436818190] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:25,579 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-16 00:59:25,579 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [14] total 18 [2021-12-16 00:59:25,580 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1517049087] [2021-12-16 00:59:25,580 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:25,580 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-16 00:59:25,580 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:25,580 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 00:59:25,581 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=42, Invalid=264, Unknown=0, NotChecked=0, Total=306 [2021-12-16 00:59:25,581 INFO L87 Difference]: Start difference. First operand 504 states and 629 transitions. Second operand has 7 states, 7 states have (on average 7.142857142857143) internal successors, (50), 6 states have internal predecessors, (50), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2021-12-16 00:59:25,717 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:25,717 INFO L93 Difference]: Finished difference Result 978 states and 1227 transitions. [2021-12-16 00:59:25,717 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-16 00:59:25,718 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.142857142857143) internal successors, (50), 6 states have internal predecessors, (50), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 61 [2021-12-16 00:59:25,718 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:25,720 INFO L225 Difference]: With dead ends: 978 [2021-12-16 00:59:25,720 INFO L226 Difference]: Without dead ends: 482 [2021-12-16 00:59:25,721 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 81 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2021-12-16 00:59:25,721 INFO L933 BasicCegarLoop]: 172 mSDtfsCounter, 67 mSDsluCounter, 501 mSDsCounter, 0 mSdLazyCounter, 113 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 673 SdHoareTripleChecker+Invalid, 115 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 113 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:25,722 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [69 Valid, 673 Invalid, 115 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 113 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:59:25,722 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 482 states. [2021-12-16 00:59:25,740 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 482 to 480. [2021-12-16 00:59:25,741 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 480 states, 366 states have (on average 1.1939890710382515) internal successors, (437), 388 states have internal predecessors, (437), 58 states have call successors, (58), 54 states have call predecessors, (58), 55 states have return successors, (89), 57 states have call predecessors, (89), 58 states have call successors, (89) [2021-12-16 00:59:25,742 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 480 states to 480 states and 584 transitions. [2021-12-16 00:59:25,743 INFO L78 Accepts]: Start accepts. Automaton has 480 states and 584 transitions. Word has length 61 [2021-12-16 00:59:25,743 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:25,743 INFO L470 AbstractCegarLoop]: Abstraction has 480 states and 584 transitions. [2021-12-16 00:59:25,743 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.142857142857143) internal successors, (50), 6 states have internal predecessors, (50), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2021-12-16 00:59:25,743 INFO L276 IsEmpty]: Start isEmpty. Operand 480 states and 584 transitions. [2021-12-16 00:59:25,745 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 101 [2021-12-16 00:59:25,745 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:25,745 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:25,763 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2021-12-16 00:59:25,958 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-16 00:59:25,958 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:25,958 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:25,959 INFO L85 PathProgramCache]: Analyzing trace with hash 1972813179, now seen corresponding path program 1 times [2021-12-16 00:59:25,959 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:25,959 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1954635382] [2021-12-16 00:59:25,959 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:25,959 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:25,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 00:59:26,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,009 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-16 00:59:26,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,019 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-16 00:59:26,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:26,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,024 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-16 00:59:26,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,029 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-12-16 00:59:26,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,031 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2021-12-16 00:59:26,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,034 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:59:26,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-12-16 00:59:26,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,037 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 17 proven. 1 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-12-16 00:59:26,037 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:26,037 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1954635382] [2021-12-16 00:59:26,037 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1954635382] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 00:59:26,037 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1822211432] [2021-12-16 00:59:26,037 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:26,037 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 00:59:26,038 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 00:59:26,038 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 00:59:26,057 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-16 00:59:26,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,137 INFO L263 TraceCheckSpWp]: Trace formula consists of 487 conjuncts, 7 conjunts are in the unsatisfiable core [2021-12-16 00:59:26,154 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 00:59:26,313 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 00:59:26,313 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-16 00:59:26,313 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1822211432] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:26,313 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-16 00:59:26,314 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 7 [2021-12-16 00:59:26,314 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [404800584] [2021-12-16 00:59:26,314 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:26,315 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-16 00:59:26,315 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:26,316 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-16 00:59:26,316 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-16 00:59:26,316 INFO L87 Difference]: Start difference. First operand 480 states and 584 transitions. Second operand has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-16 00:59:26,341 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:26,342 INFO L93 Difference]: Finished difference Result 728 states and 903 transitions. [2021-12-16 00:59:26,342 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-16 00:59:26,342 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 100 [2021-12-16 00:59:26,342 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:26,345 INFO L225 Difference]: With dead ends: 728 [2021-12-16 00:59:26,345 INFO L226 Difference]: Without dead ends: 726 [2021-12-16 00:59:26,346 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 122 GetRequests, 117 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-16 00:59:26,346 INFO L933 BasicCegarLoop]: 105 mSDtfsCounter, 45 mSDsluCounter, 85 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 45 SdHoareTripleChecker+Valid, 190 SdHoareTripleChecker+Invalid, 7 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:26,347 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [45 Valid, 190 Invalid, 7 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:59:26,347 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 726 states. [2021-12-16 00:59:26,372 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 726 to 584. [2021-12-16 00:59:26,372 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 584 states, 447 states have (on average 1.203579418344519) internal successors, (538), 473 states have internal predecessors, (538), 70 states have call successors, (70), 65 states have call predecessors, (70), 66 states have return successors, (115), 67 states have call predecessors, (115), 70 states have call successors, (115) [2021-12-16 00:59:26,375 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 584 states to 584 states and 723 transitions. [2021-12-16 00:59:26,375 INFO L78 Accepts]: Start accepts. Automaton has 584 states and 723 transitions. Word has length 100 [2021-12-16 00:59:26,376 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:26,376 INFO L470 AbstractCegarLoop]: Abstraction has 584 states and 723 transitions. [2021-12-16 00:59:26,376 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-16 00:59:26,376 INFO L276 IsEmpty]: Start isEmpty. Operand 584 states and 723 transitions. [2021-12-16 00:59:26,379 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 143 [2021-12-16 00:59:26,379 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:26,379 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:26,409 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-16 00:59:26,595 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2021-12-16 00:59:26,596 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:26,596 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:26,596 INFO L85 PathProgramCache]: Analyzing trace with hash 1133837867, now seen corresponding path program 1 times [2021-12-16 00:59:26,596 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:26,597 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [169829191] [2021-12-16 00:59:26,597 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:26,597 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:26,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 00:59:26,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,687 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-16 00:59:26,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,712 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-16 00:59:26,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,719 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:26,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,732 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-16 00:59:26,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,737 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-12-16 00:59:26,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,739 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2021-12-16 00:59:26,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,817 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-16 00:59:26,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,819 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:59:26,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,820 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-16 00:59:26,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2021-12-16 00:59:26,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:59:26,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2021-12-16 00:59:26,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,837 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 59 proven. 12 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2021-12-16 00:59:26,837 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:26,837 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [169829191] [2021-12-16 00:59:26,837 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [169829191] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 00:59:26,837 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [898936116] [2021-12-16 00:59:26,838 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:26,838 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 00:59:26,838 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 00:59:26,848 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 00:59:26,859 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-12-16 00:59:26,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,953 INFO L263 TraceCheckSpWp]: Trace formula consists of 597 conjuncts, 11 conjunts are in the unsatisfiable core [2021-12-16 00:59:26,956 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 00:59:27,258 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 82 proven. 16 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 00:59:27,258 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-16 00:59:27,555 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 60 proven. 12 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2021-12-16 00:59:27,555 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [898936116] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-16 00:59:27,555 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-16 00:59:27,555 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 9, 8] total 20 [2021-12-16 00:59:27,556 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1001907761] [2021-12-16 00:59:27,556 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-16 00:59:27,556 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2021-12-16 00:59:27,556 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:27,557 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2021-12-16 00:59:27,557 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=75, Invalid=305, Unknown=0, NotChecked=0, Total=380 [2021-12-16 00:59:27,557 INFO L87 Difference]: Start difference. First operand 584 states and 723 transitions. Second operand has 20 states, 20 states have (on average 7.4) internal successors, (148), 17 states have internal predecessors, (148), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2021-12-16 00:59:29,269 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:29,269 INFO L93 Difference]: Finished difference Result 2158 states and 3302 transitions. [2021-12-16 00:59:29,270 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2021-12-16 00:59:29,270 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 7.4) internal successors, (148), 17 states have internal predecessors, (148), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) Word has length 142 [2021-12-16 00:59:29,270 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:29,278 INFO L225 Difference]: With dead ends: 2158 [2021-12-16 00:59:29,278 INFO L226 Difference]: Without dead ends: 1674 [2021-12-16 00:59:29,281 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 362 GetRequests, 306 SyntacticMatches, 5 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 656 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=651, Invalid=2105, Unknown=0, NotChecked=0, Total=2756 [2021-12-16 00:59:29,282 INFO L933 BasicCegarLoop]: 264 mSDtfsCounter, 998 mSDsluCounter, 804 mSDsCounter, 0 mSdLazyCounter, 2207 mSolverCounterSat, 584 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1010 SdHoareTripleChecker+Valid, 1068 SdHoareTripleChecker+Invalid, 2791 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 584 IncrementalHoareTripleChecker+Valid, 2207 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:29,282 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1010 Valid, 1068 Invalid, 2791 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [584 Valid, 2207 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2021-12-16 00:59:29,283 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1674 states. [2021-12-16 00:59:29,336 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1674 to 1075. [2021-12-16 00:59:29,338 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1075 states, 822 states have (on average 1.1922141119221412) internal successors, (980), 870 states have internal predecessors, (980), 132 states have call successors, (132), 110 states have call predecessors, (132), 120 states have return successors, (227), 128 states have call predecessors, (227), 132 states have call successors, (227) [2021-12-16 00:59:29,341 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1075 states to 1075 states and 1339 transitions. [2021-12-16 00:59:29,342 INFO L78 Accepts]: Start accepts. Automaton has 1075 states and 1339 transitions. Word has length 142 [2021-12-16 00:59:29,342 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:29,342 INFO L470 AbstractCegarLoop]: Abstraction has 1075 states and 1339 transitions. [2021-12-16 00:59:29,342 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 20 states have (on average 7.4) internal successors, (148), 17 states have internal predecessors, (148), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2021-12-16 00:59:29,342 INFO L276 IsEmpty]: Start isEmpty. Operand 1075 states and 1339 transitions. [2021-12-16 00:59:29,346 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 147 [2021-12-16 00:59:29,346 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:29,346 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:29,366 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-12-16 00:59:29,559 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 00:59:29,560 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:29,560 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:29,560 INFO L85 PathProgramCache]: Analyzing trace with hash 1357031557, now seen corresponding path program 1 times [2021-12-16 00:59:29,560 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:29,561 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [96308100] [2021-12-16 00:59:29,561 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:29,561 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:29,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,584 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 00:59:29,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-16 00:59:29,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-16 00:59:29,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:29,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-16 00:59:29,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,604 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-12-16 00:59:29,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,606 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2021-12-16 00:59:29,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,625 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-16 00:59:29,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:59:29,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,629 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-16 00:59:29,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,630 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2021-12-16 00:59:29,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,632 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 126 [2021-12-16 00:59:29,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,634 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:59:29,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 136 [2021-12-16 00:59:29,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,639 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 47 proven. 0 refuted. 0 times theorem prover too weak. 58 trivial. 0 not checked. [2021-12-16 00:59:29,639 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:29,639 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [96308100] [2021-12-16 00:59:29,639 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [96308100] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:29,639 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:29,639 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-12-16 00:59:29,641 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [39485769] [2021-12-16 00:59:29,641 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:29,642 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-12-16 00:59:29,642 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:29,642 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-12-16 00:59:29,642 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2021-12-16 00:59:29,642 INFO L87 Difference]: Start difference. First operand 1075 states and 1339 transitions. Second operand has 9 states, 9 states have (on average 10.0) internal successors, (90), 5 states have internal predecessors, (90), 2 states have call successors, (11), 6 states have call predecessors, (11), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2021-12-16 00:59:29,871 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:29,872 INFO L93 Difference]: Finished difference Result 1530 states and 1872 transitions. [2021-12-16 00:59:29,872 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-16 00:59:29,872 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 10.0) internal successors, (90), 5 states have internal predecessors, (90), 2 states have call successors, (11), 6 states have call predecessors, (11), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 146 [2021-12-16 00:59:29,873 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:29,873 INFO L225 Difference]: With dead ends: 1530 [2021-12-16 00:59:29,873 INFO L226 Difference]: Without dead ends: 0 [2021-12-16 00:59:29,876 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 31 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 34 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=72, Invalid=200, Unknown=0, NotChecked=0, Total=272 [2021-12-16 00:59:29,877 INFO L933 BasicCegarLoop]: 87 mSDtfsCounter, 205 mSDsluCounter, 178 mSDsCounter, 0 mSdLazyCounter, 338 mSolverCounterSat, 75 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 206 SdHoareTripleChecker+Valid, 265 SdHoareTripleChecker+Invalid, 413 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 75 IncrementalHoareTripleChecker+Valid, 338 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:29,877 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [206 Valid, 265 Invalid, 413 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [75 Valid, 338 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-16 00:59:29,878 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-16 00:59:29,878 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-16 00:59:29,878 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 00:59:29,878 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-16 00:59:29,878 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 146 [2021-12-16 00:59:29,878 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:29,878 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-16 00:59:29,879 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 10.0) internal successors, (90), 5 states have internal predecessors, (90), 2 states have call successors, (11), 6 states have call predecessors, (11), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2021-12-16 00:59:29,879 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-16 00:59:29,879 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-16 00:59:29,881 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-16 00:59:29,881 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2021-12-16 00:59:29,882 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-16 00:59:34,756 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 629 635) no Hoare annotation was computed. [2021-12-16 00:59:34,756 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 629 635) the Hoare annotation is: true [2021-12-16 00:59:34,757 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 84 95) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse4 (not (= ~pumpRunning~0 0))) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 ~waterLevel~0))) (or .cse0 .cse4 (= ~methaneLevelCritical~0 |old(~methaneLevelCritical~0)|) (not (<= 1 |old(~methaneLevelCritical~0)|)) .cse3) (or .cse0 .cse1 .cse4 .cse2 .cse3))) [2021-12-16 00:59:34,757 INFO L858 garLoopResultBuilder]: For program point L88-1(lines 84 95) no Hoare annotation was computed. [2021-12-16 00:59:34,757 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 84 95) no Hoare annotation was computed. [2021-12-16 00:59:34,757 INFO L861 garLoopResultBuilder]: At program point L929(lines 904 933) the Hoare annotation is: true [2021-12-16 00:59:34,757 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 904 933) no Hoare annotation was computed. [2021-12-16 00:59:34,758 INFO L858 garLoopResultBuilder]: For program point L925(line 925) no Hoare annotation was computed. [2021-12-16 00:59:34,758 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 904 933) the Hoare annotation is: true [2021-12-16 00:59:34,758 INFO L858 garLoopResultBuilder]: For program point L918(lines 918 922) no Hoare annotation was computed. [2021-12-16 00:59:34,759 INFO L861 garLoopResultBuilder]: At program point L918-1(lines 918 922) the Hoare annotation is: true [2021-12-16 00:59:34,759 INFO L858 garLoopResultBuilder]: For program point L915(line 915) no Hoare annotation was computed. [2021-12-16 00:59:34,759 INFO L861 garLoopResultBuilder]: At program point L914-2(lines 914 928) the Hoare annotation is: true [2021-12-16 00:59:34,760 INFO L861 garLoopResultBuilder]: At program point L910(line 910) the Hoare annotation is: true [2021-12-16 00:59:34,760 INFO L858 garLoopResultBuilder]: For program point L910-1(line 910) no Hoare annotation was computed. [2021-12-16 00:59:34,760 INFO L858 garLoopResultBuilder]: For program point L64(lines 64 68) no Hoare annotation was computed. [2021-12-16 00:59:34,760 INFO L858 garLoopResultBuilder]: For program point L609-1(lines 608 627) no Hoare annotation was computed. [2021-12-16 00:59:34,760 INFO L858 garLoopResultBuilder]: For program point L671(lines 671 679) no Hoare annotation was computed. [2021-12-16 00:59:34,760 INFO L854 garLoopResultBuilder]: At program point L64-2(lines 60 71) the Hoare annotation is: (let ((.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (= 0 ~systemActive~0)) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse7 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 .cse1 (and .cse2 .cse3) .cse4) (or .cse1 .cse5 .cse6 .cse7) (or .cse1 .cse6 .cse4 .cse7) (or .cse0 .cse1 .cse5 (and .cse2 (= ~methAndRunningLastTime~0 0) .cse3) .cse7))) [2021-12-16 00:59:34,760 INFO L858 garLoopResultBuilder]: For program point L667(lines 667 684) no Hoare annotation was computed. [2021-12-16 00:59:34,761 INFO L854 garLoopResultBuilder]: At program point L812(lines 797 815) the Hoare annotation is: (let ((.cse13 (= 0 ~waterLevel~0))) (let ((.cse12 (not .cse13))) (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (= 0 ~systemActive~0)) (.cse6 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse7 (or (and .cse12 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (and .cse13 (= |timeShift_isLowWaterSensorDry_#res#1| 1)))) (.cse8 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse11 (or (and (= |timeShift_isLowWaterLevel_~tmp~8#1| 0) .cse12) (and (= |timeShift_isLowWaterLevel_~tmp~8#1| 1) .cse13))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse2 .cse4 .cse3) (or .cse5 .cse0 .cse4 (and .cse6 .cse7 .cse8 .cse9 .cse10 .cse11)) (or .cse5 .cse0 (and .cse6 .cse7 .cse8 .cse9 (= ~methAndRunningLastTime~0 0) .cse10 .cse11) .cse1 .cse3))))) [2021-12-16 00:59:34,761 INFO L854 garLoopResultBuilder]: At program point L841(line 841) the Hoare annotation is: (let ((.cse21 (= 0 ~waterLevel~0))) (let ((.cse20 (not .cse21)) (.cse11 (= ~methaneLevelCritical~0 0)) (.cse19 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (= 0 ~systemActive~0))) (let ((.cse13 (<= 2 ~waterLevel~0)) (.cse14 (not .cse0)) (.cse1 (and (= ~methAndRunningLastTime~0 |old(~methAndRunningLastTime~0)|) .cse19 .cse10)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse15 (not .cse11)) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse17 (or (and .cse20 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (and .cse21 (= |timeShift_isLowWaterSensorDry_#res#1| 1)))) (.cse8 (<= 1 |timeShift_processEnvironment_~tmp~5#1|)) (.cse9 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse12 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse18 (or (and (= |timeShift_isLowWaterLevel_~tmp~8#1| 0) .cse20) (and (= |timeShift_isLowWaterLevel_~tmp~8#1| 1) .cse21))) (.cse16 (= ~pumpRunning~0 0)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (let ((.cse7 (or (and .cse10 .cse12 .cse16) (and .cse17 .cse12 .cse18 .cse16)))) (or .cse5 .cse0 (and .cse6 .cse7 .cse8 .cse9) (and .cse7 .cse10) (and .cse11 .cse12 .cse13 .cse14) .cse15)) (or (and .cse19 .cse11 .cse13 .cse14) .cse0 .cse1 .cse3 .cse15 .cse4) (or .cse5 .cse0 (and .cse6 .cse17 .cse8 .cse9 .cse12 .cse18 .cse16) (and .cse10 .cse16) .cse2 .cse4))))) [2021-12-16 00:59:34,761 INFO L858 garLoopResultBuilder]: For program point L841-1(line 841) no Hoare annotation was computed. [2021-12-16 00:59:34,761 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 605 628) no Hoare annotation was computed. [2021-12-16 00:59:34,761 INFO L854 garLoopResultBuilder]: At program point L738(lines 733 741) the Hoare annotation is: (let ((.cse1 (= 0 ~systemActive~0)) (.cse8 (<= 1 ~methaneLevelCritical~0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse5 (not .cse8)) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (not .cse1)) (.cse10 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 .cse2) (or .cse1 .cse3 .cse2 .cse4) (or .cse1 .cse5 .cse3 (and .cse6 (= ~methAndRunningLastTime~0 |old(~methAndRunningLastTime~0)|) (= ~waterLevel~0 |old(~waterLevel~0)|) .cse7 .cse8 .cse9 .cse10) .cse4) (let ((.cse11 (let ((.cse14 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (or (let ((.cse13 (= 0 ~waterLevel~0))) (let ((.cse12 (not .cse13))) (and (or (and .cse12 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (and .cse13 (= |timeShift_isLowWaterSensorDry_#res#1| 1))) .cse6 .cse14 (or (and (= |timeShift_isLowWaterLevel_~tmp~8#1| 0) .cse12) (and (= |timeShift_isLowWaterLevel_~tmp~8#1| 1) .cse13)) .cse8 .cse9 .cse10))) (and .cse6 .cse7 .cse14 .cse8 .cse9 .cse10))))) (or .cse0 .cse1 (and (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|) (<= 1 |timeShift_processEnvironment_~tmp~5#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) .cse11) .cse5 (and .cse7 .cse11) .cse4))))) [2021-12-16 00:59:34,762 INFO L854 garLoopResultBuilder]: At program point L156(lines 151 159) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (let ((.cse9 (= 0 ~waterLevel~0))) (or (and (not .cse9) (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (and .cse9 (= |timeShift_isLowWaterSensorDry_#res#1| 1))))) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 (and .cse5 .cse6 .cse7) .cse8) (or .cse0 .cse2 .cse8 .cse3) (or .cse4 .cse0 .cse1 (and .cse5 .cse6 (= ~methAndRunningLastTime~0 0) .cse7) .cse3))) [2021-12-16 00:59:34,762 INFO L854 garLoopResultBuilder]: At program point L677(line 677) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse5) (or .cse0 .cse2 .cse5 .cse3) (or .cse4 .cse0 .cse1 .cse3))) [2021-12-16 00:59:34,762 INFO L854 garLoopResultBuilder]: At program point L719(lines 714 721) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (= 0 ~systemActive~0)) (.cse5 (let ((.cse8 (= 0 ~waterLevel~0))) (let ((.cse7 (not .cse8))) (and (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|) (or (and .cse7 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (and .cse8 (= |timeShift_isLowWaterSensorDry_#res#1| 1))) (<= 1 |timeShift_processEnvironment_~tmp~5#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (or (and (= |timeShift_isLowWaterLevel_~tmp~8#1| 0) .cse7) (and (= |timeShift_isLowWaterLevel_~tmp~8#1| 1) .cse8)) (= ~pumpRunning~0 0))))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse5 .cse6) (or .cse0 .cse2 .cse6 .cse3) (or .cse4 .cse0 .cse5 .cse1 .cse3))) [2021-12-16 00:59:34,762 INFO L858 garLoopResultBuilder]: For program point L847(lines 847 857) no Hoare annotation was computed. [2021-12-16 00:59:34,762 INFO L858 garLoopResultBuilder]: For program point L1004(line 1004) no Hoare annotation was computed. [2021-12-16 00:59:34,762 INFO L858 garLoopResultBuilder]: For program point L843(lines 843 860) no Hoare annotation was computed. [2021-12-16 00:59:34,763 INFO L854 garLoopResultBuilder]: At program point L682(line 682) the Hoare annotation is: (let ((.cse3 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (= 0 ~systemActive~0)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 .cse1 .cse2 (and .cse3 (= ~methAndRunningLastTime~0 0) .cse4) .cse5) (or .cse0 (and (= ~methAndRunningLastTime~0 |old(~methAndRunningLastTime~0)|) .cse3 .cse6) .cse2 .cse7 .cse5) (or .cse8 .cse0 (and .cse6 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse4) .cse7) (or .cse8 .cse0 (and .cse6 .cse4) .cse1 .cse5))) [2021-12-16 00:59:34,763 INFO L854 garLoopResultBuilder]: At program point L843-1(lines 835 863) the Hoare annotation is: (let ((.cse23 (= 0 ~waterLevel~0))) (let ((.cse0 (= 0 ~systemActive~0)) (.cse22 (not .cse23)) (.cse21 (= ~methaneLevelCritical~0 0))) (let ((.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse13 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse15 (<= 1 |timeShift_processEnvironment_~tmp~5#1|)) (.cse16 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse12 (not (<= 2 |old(~waterLevel~0)|))) (.cse9 (<= 2 ~waterLevel~0)) (.cse10 (not .cse21)) (.cse17 (or (and .cse22 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (and .cse23 (= |timeShift_isLowWaterSensorDry_#res#1| 1)))) (.cse19 (or (and (= |timeShift_isLowWaterLevel_~tmp~8#1| 0) .cse22) (and (= |timeShift_isLowWaterLevel_~tmp~8#1| 1) .cse23))) (.cse11 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1| 0)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse18 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse4 (not .cse0)) (.cse5 (= ~pumpRunning~0 0))) (and (or .cse0 (and .cse1 .cse2 .cse3 .cse4 .cse5) .cse6 .cse7 .cse8) (or .cse0 (and .cse1 .cse9) .cse7 .cse10 (and .cse11 .cse1 .cse3 .cse5) .cse8) (let ((.cse14 (or (and .cse2 .cse4 .cse5) (and .cse17 .cse3 .cse18 .cse19 .cse4 .cse5)))) (or .cse12 .cse0 (and .cse13 .cse14 .cse15 .cse16) .cse6 (and .cse14 .cse2) .cse8)) (let ((.cse20 (or (and .cse17 .cse11 .cse21 .cse3 .cse18 .cse19 .cse4 .cse5) (and .cse11 .cse21 .cse2 .cse3 .cse18 .cse4 .cse5)))) (or (and .cse13 .cse15 .cse16 .cse20) .cse12 .cse0 (and .cse11 .cse9 .cse3 .cse18) .cse10 (and .cse2 .cse20))))))) [2021-12-16 00:59:34,763 INFO L854 garLoopResultBuilder]: At program point L682-1(lines 663 687) the Hoare annotation is: (let ((.cse21 (= 0 ~waterLevel~0))) (let ((.cse20 (not .cse21)) (.cse11 (= ~methaneLevelCritical~0 0)) (.cse19 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (= 0 ~systemActive~0))) (let ((.cse13 (<= 2 ~waterLevel~0)) (.cse14 (not .cse0)) (.cse1 (and (= ~methAndRunningLastTime~0 |old(~methAndRunningLastTime~0)|) .cse19 .cse10)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse15 (not .cse11)) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse17 (or (and .cse20 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (and .cse21 (= |timeShift_isLowWaterSensorDry_#res#1| 1)))) (.cse8 (<= 1 |timeShift_processEnvironment_~tmp~5#1|)) (.cse9 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse12 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse18 (or (and (= |timeShift_isLowWaterLevel_~tmp~8#1| 0) .cse20) (and (= |timeShift_isLowWaterLevel_~tmp~8#1| 1) .cse21))) (.cse16 (= ~pumpRunning~0 0)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (let ((.cse7 (or (and .cse10 .cse12 .cse16) (and .cse17 .cse12 .cse18 .cse16)))) (or .cse5 .cse0 (and .cse6 .cse7 .cse8 .cse9) (and .cse7 .cse10) (and .cse11 .cse12 .cse13 .cse14) .cse15)) (or (and .cse19 .cse11 .cse13 .cse14) .cse0 .cse1 .cse3 .cse15 .cse4) (or .cse5 .cse0 (and .cse6 .cse17 .cse8 .cse9 .cse12 .cse18 .cse16) (and .cse10 .cse16) .cse2 .cse4))))) [2021-12-16 00:59:34,764 INFO L858 garLoopResultBuilder]: For program point L616-1(lines 616 622) no Hoare annotation was computed. [2021-12-16 00:59:34,764 INFO L858 garLoopResultBuilder]: For program point L806(lines 806 810) no Hoare annotation was computed. [2021-12-16 00:59:34,764 INFO L858 garLoopResultBuilder]: For program point L806-2(lines 806 810) no Hoare annotation was computed. [2021-12-16 00:59:34,764 INFO L858 garLoopResultBuilder]: For program point L848(lines 848 854) no Hoare annotation was computed. [2021-12-16 00:59:34,764 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 605 628) the Hoare annotation is: (let ((.cse2 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse4 (= ~methAndRunningLastTime~0 0))) (let ((.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse9 (and .cse2 .cse4 (= ~pumpRunning~0 0))) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4) .cse5 .cse6) (or .cse0 .cse1 (and (= ~methAndRunningLastTime~0 |old(~methAndRunningLastTime~0)|) .cse2 .cse3) .cse7) (or .cse1 .cse5 .cse8 .cse9 .cse6) (or .cse1 .cse8 .cse7 .cse9 .cse6)))) [2021-12-16 00:59:34,764 INFO L854 garLoopResultBuilder]: At program point L1005(lines 1000 1007) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse5) (or .cse0 .cse2 .cse5 .cse3) (or .cse4 .cse0 .cse1 .cse3))) [2021-12-16 00:59:34,764 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 605 628) no Hoare annotation was computed. [2021-12-16 00:59:34,764 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1004) no Hoare annotation was computed. [2021-12-16 00:59:34,765 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 96 104) the Hoare annotation is: true [2021-12-16 00:59:34,765 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 96 104) no Hoare annotation was computed. [2021-12-16 00:59:34,765 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 96 104) no Hoare annotation was computed. [2021-12-16 00:59:34,765 INFO L854 garLoopResultBuilder]: At program point L832(lines 827 834) the Hoare annotation is: (and (= ~waterLevel~0 1) (= 1 |ULTIMATE.start_main_~tmp~10#1|) (= ~methaneLevelCritical~0 0) (= 1 |ULTIMATE.start_valid_product_#res#1|) (= ~methAndRunningLastTime~0 0) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 0)) [2021-12-16 00:59:34,765 INFO L854 garLoopResultBuilder]: At program point L890(lines 886 892) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~methAndRunningLastTime~0 0) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 0)) [2021-12-16 00:59:34,765 INFO L858 garLoopResultBuilder]: For program point L560(lines 560 566) no Hoare annotation was computed. [2021-12-16 00:59:34,766 INFO L858 garLoopResultBuilder]: For program point L560-1(lines 560 566) no Hoare annotation was computed. [2021-12-16 00:59:34,766 INFO L861 garLoopResultBuilder]: At program point L973(lines 965 975) the Hoare annotation is: true [2021-12-16 00:59:34,766 INFO L854 garLoopResultBuilder]: At program point L585(lines 540 587) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~10#1|)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~methaneLevelCritical~0) .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 (<= 2 ~waterLevel~0) .cse3 .cse4))) [2021-12-16 00:59:34,766 INFO L854 garLoopResultBuilder]: At program point L552(line 552) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~10#1|)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~methaneLevelCritical~0) .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 (<= 2 ~waterLevel~0) .cse3 .cse4))) [2021-12-16 00:59:34,766 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-16 00:59:34,767 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-16 00:59:34,767 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-16 00:59:34,767 INFO L858 garLoopResultBuilder]: For program point L986(lines 986 993) no Hoare annotation was computed. [2021-12-16 00:59:34,767 INFO L858 garLoopResultBuilder]: For program point L986-2(lines 986 993) no Hoare annotation was computed. [2021-12-16 00:59:34,767 INFO L854 garLoopResultBuilder]: At program point L821(lines 816 823) the Hoare annotation is: (let ((.cse5 (<= 1 ~methaneLevelCritical~0)) (.cse3 (<= 2 ~waterLevel~0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~10#1|)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse6 (not (= 0 ~systemActive~0))) (.cse7 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse1 .cse2 .cse8 .cse3 .cse6) (and .cse0 .cse1 .cse2 .cse8 .cse4 .cse6 .cse7))) [2021-12-16 00:59:34,767 INFO L854 garLoopResultBuilder]: At program point L883(lines 879 885) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~methAndRunningLastTime~0 0) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 0)) [2021-12-16 00:59:34,767 INFO L861 garLoopResultBuilder]: At program point L995(lines 976 998) the Hoare annotation is: true [2021-12-16 00:59:34,768 INFO L854 garLoopResultBuilder]: At program point L962(lines 958 964) the Hoare annotation is: (and (= ~waterLevel~0 1) (= 1 |ULTIMATE.start_main_~tmp~10#1|) (= ~methaneLevelCritical~0 0) (= 1 |ULTIMATE.start_valid_product_#res#1|) (= ~methAndRunningLastTime~0 0) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 0)) [2021-12-16 00:59:34,768 INFO L858 garLoopResultBuilder]: For program point L578(lines 578 582) no Hoare annotation was computed. [2021-12-16 00:59:34,768 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-16 00:59:34,769 INFO L854 garLoopResultBuilder]: At program point L578-2(lines 570 583) the Hoare annotation is: (let ((.cse5 (<= 1 ~methaneLevelCritical~0)) (.cse3 (<= 2 ~waterLevel~0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~10#1|)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse6 (not (= 0 ~systemActive~0))) (.cse7 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse1 .cse2 .cse8 .cse3 .cse6) (and .cse0 .cse1 .cse2 .cse8 .cse4 .cse6 .cse7))) [2021-12-16 00:59:34,769 INFO L858 garLoopResultBuilder]: For program point L541(lines 540 587) no Hoare annotation was computed. [2021-12-16 00:59:34,769 INFO L858 garLoopResultBuilder]: For program point L570(lines 570 583) no Hoare annotation was computed. [2021-12-16 00:59:34,769 INFO L854 garLoopResultBuilder]: At program point L562(line 562) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~10#1|)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~methaneLevelCritical~0) .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 (<= 2 ~waterLevel~0) .cse3 .cse4))) [2021-12-16 00:59:34,769 INFO L861 garLoopResultBuilder]: At program point L591(lines 530 595) the Hoare annotation is: true [2021-12-16 00:59:34,770 INFO L858 garLoopResultBuilder]: For program point L550(lines 550 556) no Hoare annotation was computed. [2021-12-16 00:59:34,770 INFO L858 garLoopResultBuilder]: For program point L550-1(lines 550 556) no Hoare annotation was computed. [2021-12-16 00:59:34,770 INFO L858 garLoopResultBuilder]: For program point L542(lines 542 546) no Hoare annotation was computed. [2021-12-16 00:59:34,770 INFO L854 garLoopResultBuilder]: At program point L588(lines 539 589) the Hoare annotation is: false [2021-12-16 00:59:34,771 INFO L854 garLoopResultBuilder]: At program point L898(lines 893 901) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= 1 |ULTIMATE.start_valid_product_#res#1|) (= ~methAndRunningLastTime~0 0) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 0)) [2021-12-16 00:59:34,771 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 637 661) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= ~methAndRunningLastTime~0 0))) (.cse0 (= 0 ~systemActive~0)) (.cse6 (not (= 0 ~waterLevel~0))) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse2 .cse5 (= ~pumpRunning~0 0)) (or .cse0 .cse6 .cse4 .cse1 .cse5) (or .cse0 .cse6 .cse1 .cse3))) [2021-12-16 00:59:34,772 INFO L858 garLoopResultBuilder]: For program point L704(lines 704 710) no Hoare annotation was computed. [2021-12-16 00:59:34,772 INFO L854 garLoopResultBuilder]: At program point L704-2(lines 697 713) the Hoare annotation is: (let ((.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (<= 2 ~waterLevel~0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (= 0 ~waterLevel~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse5 (and (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|) (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~6#1|) .cse6 (= ~pumpRunning~0 0))) (or .cse0 .cse4 .cse6 .cse2) (or .cse0 .cse1 .cse3 .cse5))) [2021-12-16 00:59:34,772 INFO L854 garLoopResultBuilder]: At program point L793(lines 778 796) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0))) (let ((.cse6 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (.cse7 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)) (.cse13 (= ~methaneLevelCritical~0 0)) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse11 (not .cse2)) (.cse1 (= ~pumpRunning~0 0))) (let ((.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (<= 2 ~waterLevel~0)) (.cse3 (and .cse6 .cse7 .cse13 .cse10 .cse11 .cse1)) (.cse5 (not .cse13)) (.cse12 (not (= 0 ~waterLevel~0))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (= ~methAndRunningLastTime~0 0)))) (and (or (and .cse0 .cse1) .cse2 .cse3 .cse4 .cse5) (or (and .cse6 .cse7 .cse1) .cse2 .cse8 .cse4 .cse9 (and .cse10 .cse0 .cse11)) (or .cse2 .cse3 .cse12 .cse5) (or .cse2 .cse12 .cse8 (and .cse10 .cse11 .cse1) .cse9))))) [2021-12-16 00:59:34,772 INFO L854 garLoopResultBuilder]: At program point L729(lines 722 732) the Hoare annotation is: (let ((.cse6 (<= 2 ~waterLevel~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (= 0 ~waterLevel~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse5 (and (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|) .cse6 .cse7)) (or (and .cse6 .cse7) .cse0 .cse4 .cse2) (or .cse0 .cse1 .cse3 .cse5))) [2021-12-16 00:59:34,772 INFO L854 garLoopResultBuilder]: At program point L727(line 727) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (<= 2 ~waterLevel~0)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (= 0 ~waterLevel~0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2) (or (and .cse3 (= ~pumpRunning~0 0)) .cse0 .cse4 .cse2) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3) .cse5 .cse4 .cse6) (or .cse0 .cse1 .cse5 .cse6))) [2021-12-16 00:59:34,773 INFO L858 garLoopResultBuilder]: For program point L727-1(line 727) no Hoare annotation was computed. [2021-12-16 00:59:34,773 INFO L858 garLoopResultBuilder]: For program point L787(lines 787 791) no Hoare annotation was computed. [2021-12-16 00:59:34,773 INFO L858 garLoopResultBuilder]: For program point L787-2(lines 787 791) no Hoare annotation was computed. [2021-12-16 00:59:34,774 INFO L858 garLoopResultBuilder]: For program point L141(lines 141 147) no Hoare annotation was computed. [2021-12-16 00:59:34,774 INFO L854 garLoopResultBuilder]: At program point L651(line 651) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (let ((.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (not .cse0)) (.cse10 (= ~pumpRunning~0 0)) (.cse11 (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| 0)) (.cse12 (= ~methaneLevelCritical~0 0))) (let ((.cse2 (not .cse12)) (.cse3 (and .cse12 .cse8 .cse9 .cse10 .cse11)) (.cse4 (not (= 0 ~waterLevel~0))) (.cse5 (and .cse8 .cse9 .cse10 .cse11)) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse2 .cse3) (or .cse0 .cse5 .cse4 .cse6 .cse7) (or .cse0 .cse5 .cse6 .cse1 .cse7))))) [2021-12-16 00:59:34,774 INFO L858 garLoopResultBuilder]: For program point L645(lines 645 653) no Hoare annotation was computed. [2021-12-16 00:59:34,774 INFO L858 garLoopResultBuilder]: For program point L641(lines 641 658) no Hoare annotation was computed. [2021-12-16 00:59:34,774 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 637 661) no Hoare annotation was computed. [2021-12-16 00:59:34,774 INFO L854 garLoopResultBuilder]: At program point L693(lines 688 695) the Hoare annotation is: (let ((.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (= 0 ~waterLevel~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse5) (or .cse0 .cse4 (<= 2 ~waterLevel~0) .cse2) (or .cse0 .cse1 .cse3 .cse5))) [2021-12-16 00:59:34,774 INFO L854 garLoopResultBuilder]: At program point L146(lines 137 150) the Hoare annotation is: (let ((.cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (= 0 ~systemActive~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse11 (= ~methaneLevelCritical~0 0))) (let ((.cse1 (<= 2 ~waterLevel~0)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (= ~methAndRunningLastTime~0 0))) (.cse10 (not (= 0 ~waterLevel~0))) (.cse8 (not .cse11)) (.cse9 (and .cse3 .cse11 .cse7 (not .cse0) .cse2))) (and (or .cse0 (and .cse1 .cse2) (and .cse3 .cse2) .cse4 .cse5 .cse6) (or .cse0 (and .cse7 .cse1) .cse5 .cse8 .cse9) (or .cse0 (and .cse7 .cse2) .cse10 .cse4 .cse6) (or .cse0 .cse10 .cse8 .cse9)))) [2021-12-16 00:59:34,774 INFO L854 garLoopResultBuilder]: At program point L656(line 656) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= ~methAndRunningLastTime~0 0))) (.cse0 (= 0 ~systemActive~0)) (.cse5 (not (= 0 ~waterLevel~0))) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse1 .cse4) (or .cse0 .cse5 .cse3 .cse6 .cse4) (or .cse0 .cse5 .cse6 .cse2))) [2021-12-16 00:59:34,775 INFO L858 garLoopResultBuilder]: For program point L656-1(lines 637 661) no Hoare annotation was computed. [2021-12-16 00:59:34,775 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 72 83) no Hoare annotation was computed. [2021-12-16 00:59:34,775 INFO L858 garLoopResultBuilder]: For program point L76-1(lines 72 83) no Hoare annotation was computed. [2021-12-16 00:59:34,775 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 72 83) the Hoare annotation is: (let ((.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (= ~pumpRunning~0 0))) (.cse2 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse2 .cse3 .cse4) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 .cse3))) [2021-12-16 00:59:34,778 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:34,779 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-16 00:59:34,826 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.12 12:59:34 BoogieIcfgContainer [2021-12-16 00:59:34,828 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-16 00:59:34,829 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-16 00:59:34,829 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-16 00:59:34,829 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-16 00:59:34,829 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 12:59:22" (3/4) ... [2021-12-16 00:59:34,831 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-16 00:59:34,836 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-16 00:59:34,836 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-16 00:59:34,836 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-16 00:59:34,836 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-16 00:59:34,836 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-12-16 00:59:34,837 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 00:59:34,837 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-16 00:59:34,846 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 52 nodes and edges [2021-12-16 00:59:34,846 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-16 00:59:34,847 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-16 00:59:34,847 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-16 00:59:34,847 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-16 00:59:34,848 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 00:59:34,848 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 00:59:34,863 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((waterLevel == 1 && methaneLevelCritical == 0) && 1 == \result) && methAndRunningLastTime == 0) && !(0 == systemActive)) && pumpRunning == 0 [2021-12-16 00:59:34,863 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((waterLevel == 1 && 1 == tmp) && methaneLevelCritical == 0) && 1 == \result) && methAndRunningLastTime == 0) && !(0 == systemActive)) && pumpRunning == 0 [2021-12-16 00:59:34,864 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((waterLevel == 1 && 1 == tmp) && methaneLevelCritical == 0) && 1 == \result) && methAndRunningLastTime == 0) && !(0 == systemActive)) && pumpRunning == 0 [2021-12-16 00:59:34,864 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && pumpRunning == 0) || ((((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && !(0 == systemActive)) && pumpRunning == 0)) || ((((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && methaneLevelCritical == 0) && 2 <= waterLevel) && methAndRunningLastTime == 0) && !(0 == systemActive)) [2021-12-16 00:59:34,865 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(2 <= \old(waterLevel)) || 0 == systemActive) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1)) || !(methaneLevelCritical == 0)) && (((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0))) && (((0 == systemActive || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || !(\old(methAndRunningLastTime) == 0)) [2021-12-16 00:59:34,866 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == systemActive || ((methAndRunningLastTime == \old(methAndRunningLastTime) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) && (((((!(2 <= \old(waterLevel)) || 0 == systemActive) || (((1 <= tmp___0 && (((pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1) && pumpRunning == 0) || (((((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1)) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 0 && !(0 == waterLevel)) || (tmp == 1 && 0 == waterLevel))) && pumpRunning == 0))) && 1 <= tmp) && 1 <= \result)) || ((((pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1) && pumpRunning == 0) || (((((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1)) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 0 && !(0 == waterLevel)) || (tmp == 1 && 0 == waterLevel))) && pumpRunning == 0)) && pumpRunning == \old(pumpRunning))) || (((methaneLevelCritical == 0 && \old(waterLevel) <= waterLevel + 1) && 2 <= waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 0))) && ((((((((waterLevel == \old(waterLevel) && methaneLevelCritical == 0) && 2 <= waterLevel) && !(0 == systemActive)) || 0 == systemActive) || ((methAndRunningLastTime == \old(methAndRunningLastTime) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && (((((!(2 <= \old(waterLevel)) || 0 == systemActive) || ((((((1 <= tmp___0 && ((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1))) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 0 && !(0 == waterLevel)) || (tmp == 1 && 0 == waterLevel))) && pumpRunning == 0)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(methAndRunningLastTime) == 0)) [2021-12-16 00:59:34,867 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && 2 <= waterLevel) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && !(0 == systemActive)) || ((((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && pumpRunning == 0)) || (((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && methaneLevelCritical == 0) && 2 <= waterLevel) && !(0 == systemActive))) || ((((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && !(0 == systemActive)) && pumpRunning == 0) [2021-12-16 00:59:34,867 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == systemActive || ((((waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning)) && methAndRunningLastTime == 0) && !(0 == systemActive)) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) && (((((0 == systemActive || (waterLevel == \old(waterLevel) && 2 <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || (((tmp == 0 && waterLevel == \old(waterLevel)) && methAndRunningLastTime == 0) && pumpRunning == 0)) || !(\old(methAndRunningLastTime) == 0))) && (((((!(2 <= \old(waterLevel)) || 0 == systemActive) || (((1 <= tmp___0 && (((pumpRunning == \old(pumpRunning) && !(0 == systemActive)) && pumpRunning == 0) || (((((((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1)) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 0 && !(0 == waterLevel)) || (tmp == 1 && 0 == waterLevel))) && !(0 == systemActive)) && pumpRunning == 0))) && 1 <= tmp) && 1 <= \result)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && !(0 == systemActive)) && pumpRunning == 0) || (((((((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1)) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 0 && !(0 == waterLevel)) || (tmp == 1 && 0 == waterLevel))) && !(0 == systemActive)) && pumpRunning == 0)) && pumpRunning == \old(pumpRunning))) || !(\old(methAndRunningLastTime) == 0))) && ((((((((1 <= tmp___0 && 1 <= tmp) && 1 <= \result) && ((((((((((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1)) && tmp == 0) && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 0 && !(0 == waterLevel)) || (tmp == 1 && 0 == waterLevel))) && !(0 == systemActive)) && pumpRunning == 0) || ((((((tmp == 0 && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) && pumpRunning == 0))) || !(2 <= \old(waterLevel))) || 0 == systemActive) || (((tmp == 0 && 2 <= waterLevel) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && ((((((((((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1)) && tmp == 0) && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 0 && !(0 == waterLevel)) || (tmp == 1 && 0 == waterLevel))) && !(0 == systemActive)) && pumpRunning == 0) || ((((((tmp == 0 && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) && pumpRunning == 0)))) [2021-12-16 00:59:34,867 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((0 == systemActive || !(0 == waterLevel)) || !(methaneLevelCritical == 0)) && ((((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(methAndRunningLastTime == 0)) || ((methaneLevelCritical <= \result && 2 <= waterLevel) && pumpRunning == 0))) && ((((2 <= waterLevel && pumpRunning == 0) || 0 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && (((0 == systemActive || !(0 == waterLevel)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) [2021-12-16 00:59:34,867 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(methaneLevelCritical == 0)) && (((0 == systemActive || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && ((((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || ((((((\result == 0 && methAndRunningLastTime == \old(methAndRunningLastTime)) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && pumpRunning == 0)) || !(\old(methAndRunningLastTime) == 0))) && (((((!(2 <= \old(waterLevel)) || 0 == systemActive) || (((1 <= tmp___0 && 1 <= tmp) && 1 <= \result) && (((((((((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1)) && \result == 0) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 0 && !(0 == waterLevel)) || (tmp == 1 && 0 == waterLevel))) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && pumpRunning == 0) || (((((\result == 0 && pumpRunning == \old(pumpRunning)) && \old(waterLevel) <= waterLevel + 1) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && pumpRunning == 0)))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && (((((((((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1)) && \result == 0) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 0 && !(0 == waterLevel)) || (tmp == 1 && 0 == waterLevel))) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && pumpRunning == 0) || (((((\result == 0 && pumpRunning == \old(pumpRunning)) && \old(waterLevel) <= waterLevel + 1) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && pumpRunning == 0)))) || !(\old(methAndRunningLastTime) == 0)) [2021-12-16 00:59:34,868 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) && (((!(2 <= \old(waterLevel)) || 0 == systemActive) || ((((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1)) && pumpRunning == \old(pumpRunning)) && \old(waterLevel) <= waterLevel + 1)) || !(methaneLevelCritical == 0))) && (((0 == systemActive || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(1 <= methaneLevelCritical)) || (((((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1)) && pumpRunning == \old(pumpRunning)) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || !(\old(methAndRunningLastTime) == 0)) [2021-12-16 00:59:34,868 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((0 == systemActive || !(0 == waterLevel)) || !(methaneLevelCritical == 0)) && ((((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(methAndRunningLastTime == 0)) || (((methaneLevelCritical <= \result && methaneLevelCritical <= tmp) && 2 <= waterLevel) && pumpRunning == 0))) && (((0 == systemActive || !(\old(pumpRunning) == 0)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && (((0 == systemActive || !(0 == waterLevel)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) [2021-12-16 00:59:34,868 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((0 == systemActive || (2 <= waterLevel && pumpRunning == 0)) || (\result == 1 && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(methAndRunningLastTime == 0)) && ((((0 == systemActive || (pumpRunning == \old(pumpRunning) && 2 <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || ((((\result == 1 && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive)) && pumpRunning == 0))) && ((((0 == systemActive || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(0 == waterLevel)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && (((0 == systemActive || !(0 == waterLevel)) || !(methaneLevelCritical == 0)) || ((((\result == 1 && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive)) && pumpRunning == 0)) [2021-12-16 00:59:34,868 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((0 == systemActive || !(0 == waterLevel)) || !(methaneLevelCritical == 0)) && (((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(methAndRunningLastTime == 0))) && (((0 == systemActive || !(\old(pumpRunning) == 0)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && (((0 == systemActive || !(0 == waterLevel)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) [2021-12-16 00:59:34,868 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) && (((0 == systemActive || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && (((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(methaneLevelCritical == 0)) || (((((1 <= tmp___0 && ((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1))) && 1 <= \result) && pumpRunning == \old(pumpRunning)) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 0 && !(0 == waterLevel)) || (tmp == 1 && 0 == waterLevel))))) && ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || ((((((1 <= tmp___0 && ((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1))) && 1 <= \result) && pumpRunning == \old(pumpRunning)) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 0 && !(0 == waterLevel)) || (tmp == 1 && 0 == waterLevel)))) || !(1 <= methaneLevelCritical)) || !(\old(methAndRunningLastTime) == 0)) [2021-12-16 00:59:34,869 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) && ((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(methaneLevelCritical == 0))) && (((0 == systemActive || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && (((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(methAndRunningLastTime) == 0)) [2021-12-16 00:59:34,869 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((2 <= waterLevel && pumpRunning == 0) || 0 == systemActive) || (((((\result == 0 && tmp___0 == 0) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive)) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) && (((((((\result == 0 && tmp___0 == 0) && pumpRunning == 0) || 0 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(methAndRunningLastTime == 0)) || ((pumpRunning == \old(pumpRunning) && 2 <= waterLevel) && !(0 == systemActive)))) && (((0 == systemActive || (((((\result == 0 && tmp___0 == 0) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive)) && pumpRunning == 0)) || !(0 == waterLevel)) || !(methaneLevelCritical == 0))) && ((((0 == systemActive || !(0 == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && !(0 == systemActive)) && pumpRunning == 0)) || !(methAndRunningLastTime == 0)) [2021-12-16 00:59:34,869 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) && (((!(2 <= \old(waterLevel)) || 0 == systemActive) || ((((((1 <= tmp___0 && ((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1))) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 0 && !(0 == waterLevel)) || (tmp == 1 && 0 == waterLevel))) && pumpRunning == 0)) || !(methaneLevelCritical == 0))) && (((0 == systemActive || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || ((((((1 <= tmp___0 && ((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1))) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 0 && !(0 == waterLevel)) || (tmp == 1 && 0 == waterLevel))) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(methAndRunningLastTime) == 0)) [2021-12-16 00:59:34,902 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-16 00:59:34,902 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-16 00:59:34,903 INFO L158 Benchmark]: Toolchain (without parser) took 12853.00ms. Allocated memory was 113.2MB in the beginning and 268.4MB in the end (delta: 155.2MB). Free memory was 78.0MB in the beginning and 117.7MB in the end (delta: -39.7MB). Peak memory consumption was 114.6MB. Max. memory is 16.1GB. [2021-12-16 00:59:34,903 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 113.2MB. Free memory was 86.6MB in the beginning and 86.6MB in the end (delta: 27.1kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-16 00:59:34,904 INFO L158 Benchmark]: CACSL2BoogieTranslator took 415.50ms. Allocated memory is still 113.2MB. Free memory was 77.8MB in the beginning and 80.7MB in the end (delta: -3.0MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-12-16 00:59:34,904 INFO L158 Benchmark]: Boogie Procedure Inliner took 34.02ms. Allocated memory is still 113.2MB. Free memory was 80.7MB in the beginning and 78.3MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-16 00:59:34,904 INFO L158 Benchmark]: Boogie Preprocessor took 16.75ms. Allocated memory is still 113.2MB. Free memory was 78.3MB in the beginning and 76.6MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-16 00:59:34,905 INFO L158 Benchmark]: RCFGBuilder took 300.40ms. Allocated memory is still 113.2MB. Free memory was 76.6MB in the beginning and 59.8MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-16 00:59:34,906 INFO L158 Benchmark]: TraceAbstraction took 11999.85ms. Allocated memory was 113.2MB in the beginning and 268.4MB in the end (delta: 155.2MB). Free memory was 59.4MB in the beginning and 125.0MB in the end (delta: -65.6MB). Peak memory consumption was 134.2MB. Max. memory is 16.1GB. [2021-12-16 00:59:34,906 INFO L158 Benchmark]: Witness Printer took 73.91ms. Allocated memory is still 268.4MB. Free memory was 125.0MB in the beginning and 117.7MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-16 00:59:34,910 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 113.2MB. Free memory was 86.6MB in the beginning and 86.6MB in the end (delta: 27.1kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 415.50ms. Allocated memory is still 113.2MB. Free memory was 77.8MB in the beginning and 80.7MB in the end (delta: -3.0MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 34.02ms. Allocated memory is still 113.2MB. Free memory was 80.7MB in the beginning and 78.3MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 16.75ms. Allocated memory is still 113.2MB. Free memory was 78.3MB in the beginning and 76.6MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 300.40ms. Allocated memory is still 113.2MB. Free memory was 76.6MB in the beginning and 59.8MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 11999.85ms. Allocated memory was 113.2MB in the beginning and 268.4MB in the end (delta: 155.2MB). Free memory was 59.4MB in the beginning and 125.0MB in the end (delta: -65.6MB). Peak memory consumption was 134.2MB. Max. memory is 16.1GB. * Witness Printer took 73.91ms. Allocated memory is still 268.4MB. Free memory was 125.0MB in the beginning and 117.7MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1004]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 94 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 11.9s, OverallIterations: 13, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.9s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2393 SdHoareTripleChecker+Valid, 2.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2359 mSDsluCounter, 4417 SdHoareTripleChecker+Invalid, 1.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2848 mSDsCounter, 968 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3820 IncrementalHoareTripleChecker+Invalid, 4788 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 968 mSolverCounterUnsat, 1569 mSDtfsCounter, 3820 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 740 GetRequests, 586 SyntacticMatches, 5 SemanticMatches, 149 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 777 ImplicationChecksByTransitivity, 1.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1075occurred in iteration=12, InterpolantAutomatonStates: 131, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 13 MinimizatonAttempts, 804 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 44 LocationsWithAnnotation, 1831 PreInvPairs, 2107 NumberOfFragments, 3486 HoareAnnotationTreeSize, 1831 FomulaSimplifications, 264 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 44 FomulaSimplificationsInter, 21294 FormulaSimplificationTreeSizeReductionInter, 4.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.9s InterpolantComputationTime, 1132 NumberOfCodeBlocks, 1132 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 1257 ConstructedInterpolants, 0 QuantifiedInterpolants, 2459 SizeOfPredicates, 8 NumberOfNonLiveVariables, 1471 ConjunctsInSsa, 26 ConjunctsInUnsatCore, 17 InterpolantComputations, 12 PerfectInterpolantSequences, 439/482 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 827]: Loop Invariant Derived loop invariant: (((((waterLevel == 1 && 1 == tmp) && methaneLevelCritical == 0) && 1 == \result) && methAndRunningLastTime == 0) && !(0 == systemActive)) && pumpRunning == 0 - InvariantResult [Line: 879]: Loop Invariant Derived loop invariant: (((waterLevel == 1 && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && !(0 == systemActive)) && pumpRunning == 0 - InvariantResult [Line: 976]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 688]: Loop Invariant Derived loop invariant: ((((0 == systemActive || !(0 == waterLevel)) || !(methaneLevelCritical == 0)) && (((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(methAndRunningLastTime == 0))) && (((0 == systemActive || !(\old(pumpRunning) == 0)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && (((0 == systemActive || !(0 == waterLevel)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 663]: Loop Invariant Derived loop invariant: ((((((0 == systemActive || ((methAndRunningLastTime == \old(methAndRunningLastTime) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) && (((((!(2 <= \old(waterLevel)) || 0 == systemActive) || (((1 <= tmp___0 && (((pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1) && pumpRunning == 0) || (((((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1)) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 0 && !(0 == waterLevel)) || (tmp == 1 && 0 == waterLevel))) && pumpRunning == 0))) && 1 <= tmp) && 1 <= \result)) || ((((pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1) && pumpRunning == 0) || (((((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1)) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 0 && !(0 == waterLevel)) || (tmp == 1 && 0 == waterLevel))) && pumpRunning == 0)) && pumpRunning == \old(pumpRunning))) || (((methaneLevelCritical == 0 && \old(waterLevel) <= waterLevel + 1) && 2 <= waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 0))) && ((((((((waterLevel == \old(waterLevel) && methaneLevelCritical == 0) && 2 <= waterLevel) && !(0 == systemActive)) || 0 == systemActive) || ((methAndRunningLastTime == \old(methAndRunningLastTime) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && (((((!(2 <= \old(waterLevel)) || 0 == systemActive) || ((((((1 <= tmp___0 && ((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1))) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 0 && !(0 == waterLevel)) || (tmp == 1 && 0 == waterLevel))) && pumpRunning == 0)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(methAndRunningLastTime) == 0)) - InvariantResult [Line: 697]: Loop Invariant Derived loop invariant: ((((0 == systemActive || !(0 == waterLevel)) || !(methaneLevelCritical == 0)) && ((((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(methAndRunningLastTime == 0)) || (((methaneLevelCritical <= \result && methaneLevelCritical <= tmp) && 2 <= waterLevel) && pumpRunning == 0))) && (((0 == systemActive || !(\old(pumpRunning) == 0)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && (((0 == systemActive || !(0 == waterLevel)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 540]: Loop Invariant Derived loop invariant: (((((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && pumpRunning == 0) || ((((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && !(0 == systemActive)) && pumpRunning == 0)) || ((((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && methaneLevelCritical == 0) && 2 <= waterLevel) && methAndRunningLastTime == 0) && !(0 == systemActive)) - InvariantResult [Line: 835]: Loop Invariant Derived loop invariant: ((((((0 == systemActive || ((((waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning)) && methAndRunningLastTime == 0) && !(0 == systemActive)) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) && (((((0 == systemActive || (waterLevel == \old(waterLevel) && 2 <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || (((tmp == 0 && waterLevel == \old(waterLevel)) && methAndRunningLastTime == 0) && pumpRunning == 0)) || !(\old(methAndRunningLastTime) == 0))) && (((((!(2 <= \old(waterLevel)) || 0 == systemActive) || (((1 <= tmp___0 && (((pumpRunning == \old(pumpRunning) && !(0 == systemActive)) && pumpRunning == 0) || (((((((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1)) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 0 && !(0 == waterLevel)) || (tmp == 1 && 0 == waterLevel))) && !(0 == systemActive)) && pumpRunning == 0))) && 1 <= tmp) && 1 <= \result)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && !(0 == systemActive)) && pumpRunning == 0) || (((((((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1)) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 0 && !(0 == waterLevel)) || (tmp == 1 && 0 == waterLevel))) && !(0 == systemActive)) && pumpRunning == 0)) && pumpRunning == \old(pumpRunning))) || !(\old(methAndRunningLastTime) == 0))) && ((((((((1 <= tmp___0 && 1 <= tmp) && 1 <= \result) && ((((((((((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1)) && tmp == 0) && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 0 && !(0 == waterLevel)) || (tmp == 1 && 0 == waterLevel))) && !(0 == systemActive)) && pumpRunning == 0) || ((((((tmp == 0 && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) && pumpRunning == 0))) || !(2 <= \old(waterLevel))) || 0 == systemActive) || (((tmp == 0 && 2 <= waterLevel) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && ((((((((((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1)) && tmp == 0) && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 0 && !(0 == waterLevel)) || (tmp == 1 && 0 == waterLevel))) && !(0 == systemActive)) && pumpRunning == 0) || ((((((tmp == 0 && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) && pumpRunning == 0)))) - InvariantResult [Line: 1000]: Loop Invariant Derived loop invariant: (((((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) && ((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(methaneLevelCritical == 0))) && (((0 == systemActive || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && (((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(methAndRunningLastTime) == 0)) - InvariantResult [Line: 530]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 733]: Loop Invariant Derived loop invariant: ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(methaneLevelCritical == 0)) && (((0 == systemActive || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && ((((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || ((((((\result == 0 && methAndRunningLastTime == \old(methAndRunningLastTime)) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && pumpRunning == 0)) || !(\old(methAndRunningLastTime) == 0))) && (((((!(2 <= \old(waterLevel)) || 0 == systemActive) || (((1 <= tmp___0 && 1 <= tmp) && 1 <= \result) && (((((((((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1)) && \result == 0) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 0 && !(0 == waterLevel)) || (tmp == 1 && 0 == waterLevel))) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && pumpRunning == 0) || (((((\result == 0 && pumpRunning == \old(pumpRunning)) && \old(waterLevel) <= waterLevel + 1) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && pumpRunning == 0)))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && (((((((((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1)) && \result == 0) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 0 && !(0 == waterLevel)) || (tmp == 1 && 0 == waterLevel))) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && pumpRunning == 0) || (((((\result == 0 && pumpRunning == \old(pumpRunning)) && \old(waterLevel) <= waterLevel + 1) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && pumpRunning == 0)))) || !(\old(methAndRunningLastTime) == 0)) - InvariantResult [Line: 914]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 904]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 714]: Loop Invariant Derived loop invariant: (((((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) && (((!(2 <= \old(waterLevel)) || 0 == systemActive) || ((((((1 <= tmp___0 && ((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1))) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 0 && !(0 == waterLevel)) || (tmp == 1 && 0 == waterLevel))) && pumpRunning == 0)) || !(methaneLevelCritical == 0))) && (((0 == systemActive || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || ((((((1 <= tmp___0 && ((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1))) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 0 && !(0 == waterLevel)) || (tmp == 1 && 0 == waterLevel))) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(methAndRunningLastTime) == 0)) - InvariantResult [Line: 886]: Loop Invariant Derived loop invariant: (((waterLevel == 1 && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && !(0 == systemActive)) && pumpRunning == 0 - InvariantResult [Line: 722]: Loop Invariant Derived loop invariant: ((((0 == systemActive || !(0 == waterLevel)) || !(methaneLevelCritical == 0)) && ((((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(methAndRunningLastTime == 0)) || ((methaneLevelCritical <= \result && 2 <= waterLevel) && pumpRunning == 0))) && ((((2 <= waterLevel && pumpRunning == 0) || 0 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && (((0 == systemActive || !(0 == waterLevel)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 893]: Loop Invariant Derived loop invariant: ((((waterLevel == 1 && methaneLevelCritical == 0) && 1 == \result) && methAndRunningLastTime == 0) && !(0 == systemActive)) && pumpRunning == 0 - InvariantResult [Line: 539]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 797]: Loop Invariant Derived loop invariant: (((((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) && (((0 == systemActive || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && (((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(methaneLevelCritical == 0)) || (((((1 <= tmp___0 && ((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1))) && 1 <= \result) && pumpRunning == \old(pumpRunning)) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 0 && !(0 == waterLevel)) || (tmp == 1 && 0 == waterLevel))))) && ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || ((((((1 <= tmp___0 && ((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1))) && 1 <= \result) && pumpRunning == \old(pumpRunning)) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 0 && !(0 == waterLevel)) || (tmp == 1 && 0 == waterLevel)))) || !(1 <= methaneLevelCritical)) || !(\old(methAndRunningLastTime) == 0)) - InvariantResult [Line: 816]: Loop Invariant Derived loop invariant: ((((((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && 2 <= waterLevel) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && !(0 == systemActive)) || ((((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && pumpRunning == 0)) || (((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && methaneLevelCritical == 0) && 2 <= waterLevel) && !(0 == systemActive))) || ((((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && !(0 == systemActive)) && pumpRunning == 0) - InvariantResult [Line: 958]: Loop Invariant Derived loop invariant: (((((waterLevel == 1 && 1 == tmp) && methaneLevelCritical == 0) && 1 == \result) && methAndRunningLastTime == 0) && !(0 == systemActive)) && pumpRunning == 0 - InvariantResult [Line: 60]: Loop Invariant Derived loop invariant: (((((!(2 <= \old(waterLevel)) || 0 == systemActive) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1)) || !(methaneLevelCritical == 0)) && (((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0))) && (((0 == systemActive || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || !(\old(methAndRunningLastTime) == 0)) - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: (((((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) && (((!(2 <= \old(waterLevel)) || 0 == systemActive) || ((((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1)) && pumpRunning == \old(pumpRunning)) && \old(waterLevel) <= waterLevel + 1)) || !(methaneLevelCritical == 0))) && (((0 == systemActive || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(1 <= methaneLevelCritical)) || (((((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1)) && pumpRunning == \old(pumpRunning)) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || !(\old(methAndRunningLastTime) == 0)) - InvariantResult [Line: 137]: Loop Invariant Derived loop invariant: (((((((0 == systemActive || (2 <= waterLevel && pumpRunning == 0)) || (\result == 1 && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(methAndRunningLastTime == 0)) && ((((0 == systemActive || (pumpRunning == \old(pumpRunning) && 2 <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || ((((\result == 1 && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive)) && pumpRunning == 0))) && ((((0 == systemActive || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(0 == waterLevel)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && (((0 == systemActive || !(0 == waterLevel)) || !(methaneLevelCritical == 0)) || ((((\result == 1 && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive)) && pumpRunning == 0)) - InvariantResult [Line: 965]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 778]: Loop Invariant Derived loop invariant: (((((((2 <= waterLevel && pumpRunning == 0) || 0 == systemActive) || (((((\result == 0 && tmp___0 == 0) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive)) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) && (((((((\result == 0 && tmp___0 == 0) && pumpRunning == 0) || 0 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(methAndRunningLastTime == 0)) || ((pumpRunning == \old(pumpRunning) && 2 <= waterLevel) && !(0 == systemActive)))) && (((0 == systemActive || (((((\result == 0 && tmp___0 == 0) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive)) && pumpRunning == 0)) || !(0 == waterLevel)) || !(methaneLevelCritical == 0))) && ((((0 == systemActive || !(0 == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && !(0 == systemActive)) && pumpRunning == 0)) || !(methAndRunningLastTime == 0)) RESULT: Ultimate proved your program to be correct! [2021-12-16 00:59:34,956 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE