./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 96a9f4a5eb48d3a052332271e6f513d6efe176b9f027fc1b42847acbd4831cf9 --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-16 01:01:22,968 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-16 01:01:22,969 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-16 01:01:22,990 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-16 01:01:22,991 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-16 01:01:22,992 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-16 01:01:22,996 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-16 01:01:22,997 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-16 01:01:22,999 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-16 01:01:22,999 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-16 01:01:23,000 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-16 01:01:23,001 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-16 01:01:23,001 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-16 01:01:23,002 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-16 01:01:23,003 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-16 01:01:23,004 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-16 01:01:23,004 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-16 01:01:23,005 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-16 01:01:23,006 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-16 01:01:23,007 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-16 01:01:23,008 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-16 01:01:23,009 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-16 01:01:23,010 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-16 01:01:23,011 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-16 01:01:23,012 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-16 01:01:23,013 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-16 01:01:23,013 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-16 01:01:23,014 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-16 01:01:23,014 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-16 01:01:23,015 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-16 01:01:23,015 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-16 01:01:23,015 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-16 01:01:23,016 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-16 01:01:23,016 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-16 01:01:23,017 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-16 01:01:23,017 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-16 01:01:23,018 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-16 01:01:23,018 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-16 01:01:23,018 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-16 01:01:23,019 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-16 01:01:23,020 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-16 01:01:23,020 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-16 01:01:23,037 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-16 01:01:23,037 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-16 01:01:23,037 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-16 01:01:23,038 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-16 01:01:23,038 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-16 01:01:23,038 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-16 01:01:23,039 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-16 01:01:23,039 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-16 01:01:23,039 INFO L138 SettingsManager]: * Use SBE=true [2021-12-16 01:01:23,040 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-16 01:01:23,040 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-16 01:01:23,040 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-16 01:01:23,040 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-16 01:01:23,040 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-16 01:01:23,040 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-16 01:01:23,041 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-16 01:01:23,041 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-16 01:01:23,041 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-16 01:01:23,041 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-16 01:01:23,041 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-16 01:01:23,041 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-16 01:01:23,042 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-16 01:01:23,042 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-16 01:01:23,042 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-16 01:01:23,042 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 01:01:23,042 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-16 01:01:23,043 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-16 01:01:23,043 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-16 01:01:23,043 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-16 01:01:23,043 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-16 01:01:23,043 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-16 01:01:23,043 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-16 01:01:23,044 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-16 01:01:23,044 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-16 01:01:23,044 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 96a9f4a5eb48d3a052332271e6f513d6efe176b9f027fc1b42847acbd4831cf9 [2021-12-16 01:01:23,232 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-16 01:01:23,258 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-16 01:01:23,259 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-16 01:01:23,260 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-16 01:01:23,263 INFO L275 PluginConnector]: CDTParser initialized [2021-12-16 01:01:23,264 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c [2021-12-16 01:01:23,319 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/5586dc2f8/6de045e566fd4ce4b320f6b092d3479c/FLAG6562cebd4 [2021-12-16 01:01:23,669 INFO L306 CDTParser]: Found 1 translation units. [2021-12-16 01:01:23,670 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c [2021-12-16 01:01:23,677 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/5586dc2f8/6de045e566fd4ce4b320f6b092d3479c/FLAG6562cebd4 [2021-12-16 01:01:24,063 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/5586dc2f8/6de045e566fd4ce4b320f6b092d3479c [2021-12-16 01:01:24,075 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-16 01:01:24,076 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-16 01:01:24,079 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-16 01:01:24,080 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-16 01:01:24,096 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-16 01:01:24,097 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 01:01:24" (1/1) ... [2021-12-16 01:01:24,098 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2d187ffa and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:24, skipping insertion in model container [2021-12-16 01:01:24,098 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 01:01:24" (1/1) ... [2021-12-16 01:01:24,102 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-16 01:01:24,160 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-16 01:01:24,311 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c[11292,11305] [2021-12-16 01:01:24,418 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 01:01:24,437 INFO L203 MainTranslator]: Completed pre-run [2021-12-16 01:01:24,528 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c[11292,11305] [2021-12-16 01:01:24,556 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 01:01:24,590 INFO L208 MainTranslator]: Completed translation [2021-12-16 01:01:24,591 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:24 WrapperNode [2021-12-16 01:01:24,591 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-16 01:01:24,607 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-16 01:01:24,607 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-16 01:01:24,607 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-16 01:01:24,612 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:24" (1/1) ... [2021-12-16 01:01:24,629 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:24" (1/1) ... [2021-12-16 01:01:24,677 INFO L137 Inliner]: procedures = 58, calls = 161, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 270 [2021-12-16 01:01:24,678 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-16 01:01:24,682 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-16 01:01:24,682 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-16 01:01:24,682 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-16 01:01:24,695 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:24" (1/1) ... [2021-12-16 01:01:24,695 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:24" (1/1) ... [2021-12-16 01:01:24,703 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:24" (1/1) ... [2021-12-16 01:01:24,704 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:24" (1/1) ... [2021-12-16 01:01:24,707 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:24" (1/1) ... [2021-12-16 01:01:24,710 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:24" (1/1) ... [2021-12-16 01:01:24,736 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:24" (1/1) ... [2021-12-16 01:01:24,738 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-16 01:01:24,738 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-16 01:01:24,738 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-16 01:01:24,739 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-16 01:01:24,755 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:24" (1/1) ... [2021-12-16 01:01:24,765 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 01:01:24,792 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 01:01:24,806 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-16 01:01:24,808 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-16 01:01:24,849 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-16 01:01:24,852 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-16 01:01:24,857 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-16 01:01:24,858 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-16 01:01:24,858 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-16 01:01:24,858 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-16 01:01:24,858 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-16 01:01:24,858 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-16 01:01:24,859 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-16 01:01:24,859 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-12-16 01:01:24,859 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-12-16 01:01:24,859 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-12-16 01:01:24,859 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-12-16 01:01:24,871 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-12-16 01:01:24,871 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-12-16 01:01:24,871 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-16 01:01:24,872 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-16 01:01:24,872 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-16 01:01:24,872 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-16 01:01:24,872 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-16 01:01:24,872 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-16 01:01:24,872 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-16 01:01:24,939 INFO L236 CfgBuilder]: Building ICFG [2021-12-16 01:01:24,940 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-16 01:01:25,129 INFO L277 CfgBuilder]: Performing block encoding [2021-12-16 01:01:25,134 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-16 01:01:25,135 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-16 01:01:25,136 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 01:01:25 BoogieIcfgContainer [2021-12-16 01:01:25,136 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-16 01:01:25,137 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-16 01:01:25,137 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-16 01:01:25,140 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-16 01:01:25,140 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.12 01:01:24" (1/3) ... [2021-12-16 01:01:25,141 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@33e240e6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 01:01:25, skipping insertion in model container [2021-12-16 01:01:25,141 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:24" (2/3) ... [2021-12-16 01:01:25,141 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@33e240e6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 01:01:25, skipping insertion in model container [2021-12-16 01:01:25,141 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 01:01:25" (3/3) ... [2021-12-16 01:01:25,142 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product48.cil.c [2021-12-16 01:01:25,146 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-16 01:01:25,146 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-16 01:01:25,177 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-16 01:01:25,182 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-16 01:01:25,182 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-16 01:01:25,204 INFO L276 IsEmpty]: Start isEmpty. Operand has 106 states, 79 states have (on average 1.3544303797468353) internal successors, (107), 88 states have internal predecessors, (107), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) [2021-12-16 01:01:25,210 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-12-16 01:01:25,210 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:25,210 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:25,211 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:25,214 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:25,215 INFO L85 PathProgramCache]: Analyzing trace with hash -484637396, now seen corresponding path program 1 times [2021-12-16 01:01:25,220 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:25,221 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [862221918] [2021-12-16 01:01:25,221 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:25,222 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:25,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:25,505 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-16 01:01:25,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:25,535 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-16 01:01:25,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:25,545 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:25,546 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:25,546 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [862221918] [2021-12-16 01:01:25,546 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [862221918] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:25,547 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:25,547 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-16 01:01:25,548 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1809293051] [2021-12-16 01:01:25,548 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:25,554 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-16 01:01:25,555 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:25,609 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-16 01:01:25,611 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 01:01:25,613 INFO L87 Difference]: Start difference. First operand has 106 states, 79 states have (on average 1.3544303797468353) internal successors, (107), 88 states have internal predecessors, (107), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 01:01:25,685 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:25,685 INFO L93 Difference]: Finished difference Result 203 states and 272 transitions. [2021-12-16 01:01:25,686 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-16 01:01:25,687 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-12-16 01:01:25,687 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:25,694 INFO L225 Difference]: With dead ends: 203 [2021-12-16 01:01:25,694 INFO L226 Difference]: Without dead ends: 97 [2021-12-16 01:01:25,704 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 01:01:25,707 INFO L933 BasicCegarLoop]: 133 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 133 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:25,710 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 133 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 01:01:25,721 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2021-12-16 01:01:25,755 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 97. [2021-12-16 01:01:25,776 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 97 states, 72 states have (on average 1.2916666666666667) internal successors, (93), 80 states have internal predecessors, (93), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 12 states have call predecessors, (15), 15 states have call successors, (15) [2021-12-16 01:01:25,777 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97 states to 97 states and 124 transitions. [2021-12-16 01:01:25,779 INFO L78 Accepts]: Start accepts. Automaton has 97 states and 124 transitions. Word has length 32 [2021-12-16 01:01:25,779 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:25,779 INFO L470 AbstractCegarLoop]: Abstraction has 97 states and 124 transitions. [2021-12-16 01:01:25,780 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 01:01:25,780 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 124 transitions. [2021-12-16 01:01:25,782 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-12-16 01:01:25,789 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:25,789 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:25,790 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-16 01:01:25,790 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:25,790 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:25,790 INFO L85 PathProgramCache]: Analyzing trace with hash -1885221865, now seen corresponding path program 1 times [2021-12-16 01:01:25,791 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:25,791 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1555764700] [2021-12-16 01:01:25,791 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:25,791 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:25,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:25,924 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-16 01:01:25,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:25,933 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-16 01:01:25,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:25,943 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:25,943 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:25,943 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1555764700] [2021-12-16 01:01:25,944 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1555764700] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:25,944 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:25,944 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 01:01:25,944 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [755248769] [2021-12-16 01:01:25,944 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:25,945 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-16 01:01:25,945 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:25,946 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-16 01:01:25,946 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 01:01:25,946 INFO L87 Difference]: Start difference. First operand 97 states and 124 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 01:01:25,960 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:25,975 INFO L93 Difference]: Finished difference Result 154 states and 196 transitions. [2021-12-16 01:01:25,976 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-16 01:01:25,976 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2021-12-16 01:01:25,976 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:25,981 INFO L225 Difference]: With dead ends: 154 [2021-12-16 01:01:25,983 INFO L226 Difference]: Without dead ends: 88 [2021-12-16 01:01:25,984 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 01:01:25,986 INFO L933 BasicCegarLoop]: 111 mSDtfsCounter, 17 mSDsluCounter, 89 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 200 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:25,987 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [21 Valid, 200 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 01:01:25,988 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88 states. [2021-12-16 01:01:26,008 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88 to 88. [2021-12-16 01:01:26,014 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 88 states, 66 states have (on average 1.303030303030303) internal successors, (86), 74 states have internal predecessors, (86), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-16 01:01:26,015 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88 states to 88 states and 112 transitions. [2021-12-16 01:01:26,015 INFO L78 Accepts]: Start accepts. Automaton has 88 states and 112 transitions. Word has length 33 [2021-12-16 01:01:26,015 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:26,015 INFO L470 AbstractCegarLoop]: Abstraction has 88 states and 112 transitions. [2021-12-16 01:01:26,016 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 01:01:26,016 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 112 transitions. [2021-12-16 01:01:26,017 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-16 01:01:26,017 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:26,017 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:26,017 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-16 01:01:26,017 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:26,018 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:26,018 INFO L85 PathProgramCache]: Analyzing trace with hash 2024045384, now seen corresponding path program 1 times [2021-12-16 01:01:26,018 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:26,018 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1428059062] [2021-12-16 01:01:26,018 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:26,019 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:26,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:26,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-16 01:01:26,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:26,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-12-16 01:01:26,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:26,131 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:26,131 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:26,131 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1428059062] [2021-12-16 01:01:26,131 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1428059062] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:26,133 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:26,133 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 01:01:26,133 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [656813059] [2021-12-16 01:01:26,133 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:26,134 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-16 01:01:26,134 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:26,135 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-16 01:01:26,135 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 01:01:26,135 INFO L87 Difference]: Start difference. First operand 88 states and 112 transitions. Second operand has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-16 01:01:26,181 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:26,185 INFO L93 Difference]: Finished difference Result 246 states and 319 transitions. [2021-12-16 01:01:26,186 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-16 01:01:26,186 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2021-12-16 01:01:26,187 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:26,190 INFO L225 Difference]: With dead ends: 246 [2021-12-16 01:01:26,192 INFO L226 Difference]: Without dead ends: 166 [2021-12-16 01:01:26,193 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 01:01:26,196 INFO L933 BasicCegarLoop]: 137 mSDtfsCounter, 100 mSDsluCounter, 99 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 100 SdHoareTripleChecker+Valid, 236 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:26,198 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [100 Valid, 236 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 01:01:26,199 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166 states. [2021-12-16 01:01:26,230 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 166 to 163. [2021-12-16 01:01:26,233 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 163 states, 120 states have (on average 1.325) internal successors, (159), 135 states have internal predecessors, (159), 26 states have call successors, (26), 16 states have call predecessors, (26), 16 states have return successors, (26), 19 states have call predecessors, (26), 26 states have call successors, (26) [2021-12-16 01:01:26,235 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 163 states to 163 states and 211 transitions. [2021-12-16 01:01:26,236 INFO L78 Accepts]: Start accepts. Automaton has 163 states and 211 transitions. Word has length 38 [2021-12-16 01:01:26,237 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:26,238 INFO L470 AbstractCegarLoop]: Abstraction has 163 states and 211 transitions. [2021-12-16 01:01:26,238 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-16 01:01:26,239 INFO L276 IsEmpty]: Start isEmpty. Operand 163 states and 211 transitions. [2021-12-16 01:01:26,240 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2021-12-16 01:01:26,243 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:26,243 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:26,243 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-16 01:01:26,244 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:26,244 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:26,245 INFO L85 PathProgramCache]: Analyzing trace with hash 1147378310, now seen corresponding path program 1 times [2021-12-16 01:01:26,245 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:26,246 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1492484706] [2021-12-16 01:01:26,246 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:26,247 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:26,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:26,340 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-16 01:01:26,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:26,349 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2021-12-16 01:01:26,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:26,365 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-16 01:01:26,365 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:26,365 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1492484706] [2021-12-16 01:01:26,366 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1492484706] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:26,366 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:26,366 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 01:01:26,366 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [77576807] [2021-12-16 01:01:26,366 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:26,367 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 01:01:26,367 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:26,367 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 01:01:26,367 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 01:01:26,367 INFO L87 Difference]: Start difference. First operand 163 states and 211 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 01:01:26,471 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:26,472 INFO L93 Difference]: Finished difference Result 431 states and 566 transitions. [2021-12-16 01:01:26,472 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-16 01:01:26,472 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2021-12-16 01:01:26,472 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:26,478 INFO L225 Difference]: With dead ends: 431 [2021-12-16 01:01:26,478 INFO L226 Difference]: Without dead ends: 276 [2021-12-16 01:01:26,480 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-12-16 01:01:26,487 INFO L933 BasicCegarLoop]: 122 mSDtfsCounter, 59 mSDsluCounter, 397 mSDsCounter, 0 mSdLazyCounter, 70 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 519 SdHoareTripleChecker+Invalid, 81 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 70 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:26,488 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [60 Valid, 519 Invalid, 81 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 70 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 01:01:26,491 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 276 states. [2021-12-16 01:01:26,521 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 276 to 263. [2021-12-16 01:01:26,524 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 263 states, 196 states have (on average 1.2755102040816326) internal successors, (250), 213 states have internal predecessors, (250), 36 states have call successors, (36), 30 states have call predecessors, (36), 30 states have return successors, (44), 33 states have call predecessors, (44), 36 states have call successors, (44) [2021-12-16 01:01:26,526 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 330 transitions. [2021-12-16 01:01:26,526 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 330 transitions. Word has length 41 [2021-12-16 01:01:26,527 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:26,527 INFO L470 AbstractCegarLoop]: Abstraction has 263 states and 330 transitions. [2021-12-16 01:01:26,527 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 01:01:26,527 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 330 transitions. [2021-12-16 01:01:26,533 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-12-16 01:01:26,533 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:26,533 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:26,533 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-16 01:01:26,534 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:26,534 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:26,535 INFO L85 PathProgramCache]: Analyzing trace with hash 1864989139, now seen corresponding path program 1 times [2021-12-16 01:01:26,535 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:26,536 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [537893821] [2021-12-16 01:01:26,538 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:26,538 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:26,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:26,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-16 01:01:26,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:26,587 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-16 01:01:26,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:26,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 01:01:26,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:26,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-16 01:01:26,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:26,630 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:26,631 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:26,631 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [537893821] [2021-12-16 01:01:26,631 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [537893821] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:26,631 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:26,631 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 01:01:26,631 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1592659316] [2021-12-16 01:01:26,632 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:26,632 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 01:01:26,632 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:26,632 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 01:01:26,632 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 01:01:26,633 INFO L87 Difference]: Start difference. First operand 263 states and 330 transitions. Second operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 01:01:26,760 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:26,760 INFO L93 Difference]: Finished difference Result 582 states and 751 transitions. [2021-12-16 01:01:26,760 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-16 01:01:26,761 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 60 [2021-12-16 01:01:26,761 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:26,762 INFO L225 Difference]: With dead ends: 582 [2021-12-16 01:01:26,763 INFO L226 Difference]: Without dead ends: 327 [2021-12-16 01:01:26,763 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-16 01:01:26,764 INFO L933 BasicCegarLoop]: 101 mSDtfsCounter, 71 mSDsluCounter, 310 mSDsCounter, 0 mSdLazyCounter, 120 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 411 SdHoareTripleChecker+Invalid, 145 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 120 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:26,764 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [76 Valid, 411 Invalid, 145 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 120 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 01:01:26,765 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 327 states. [2021-12-16 01:01:26,778 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 327 to 315. [2021-12-16 01:01:26,779 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 315 states, 238 states have (on average 1.2605042016806722) internal successors, (300), 255 states have internal predecessors, (300), 40 states have call successors, (40), 30 states have call predecessors, (40), 36 states have return successors, (54), 41 states have call predecessors, (54), 40 states have call successors, (54) [2021-12-16 01:01:26,780 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 315 states to 315 states and 394 transitions. [2021-12-16 01:01:26,780 INFO L78 Accepts]: Start accepts. Automaton has 315 states and 394 transitions. Word has length 60 [2021-12-16 01:01:26,781 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:26,781 INFO L470 AbstractCegarLoop]: Abstraction has 315 states and 394 transitions. [2021-12-16 01:01:26,781 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 01:01:26,781 INFO L276 IsEmpty]: Start isEmpty. Operand 315 states and 394 transitions. [2021-12-16 01:01:26,782 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-12-16 01:01:26,782 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:26,782 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:26,782 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-16 01:01:26,782 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:26,783 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:26,783 INFO L85 PathProgramCache]: Analyzing trace with hash -506750123, now seen corresponding path program 1 times [2021-12-16 01:01:26,783 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:26,783 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [256809489] [2021-12-16 01:01:26,783 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:26,783 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:26,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:26,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-16 01:01:26,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:26,814 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-16 01:01:26,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:26,831 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 01:01:26,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:26,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-16 01:01:26,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:26,837 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:26,837 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:26,837 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [256809489] [2021-12-16 01:01:26,838 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [256809489] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:26,838 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:26,838 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 01:01:26,838 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [235253603] [2021-12-16 01:01:26,838 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:26,838 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 01:01:26,839 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:26,839 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 01:01:26,839 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 01:01:26,839 INFO L87 Difference]: Start difference. First operand 315 states and 394 transitions. Second operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-16 01:01:27,036 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:27,037 INFO L93 Difference]: Finished difference Result 646 states and 823 transitions. [2021-12-16 01:01:27,037 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-16 01:01:27,037 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 60 [2021-12-16 01:01:27,038 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:27,039 INFO L225 Difference]: With dead ends: 646 [2021-12-16 01:01:27,039 INFO L226 Difference]: Without dead ends: 339 [2021-12-16 01:01:27,040 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2021-12-16 01:01:27,041 INFO L933 BasicCegarLoop]: 116 mSDtfsCounter, 235 mSDsluCounter, 326 mSDsCounter, 0 mSdLazyCounter, 167 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 245 SdHoareTripleChecker+Valid, 442 SdHoareTripleChecker+Invalid, 230 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 167 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:27,041 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [245 Valid, 442 Invalid, 230 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 167 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 01:01:27,041 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 339 states. [2021-12-16 01:01:27,052 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 339 to 319. [2021-12-16 01:01:27,053 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 319 states, 242 states have (on average 1.256198347107438) internal successors, (304), 259 states have internal predecessors, (304), 40 states have call successors, (40), 30 states have call predecessors, (40), 36 states have return successors, (54), 41 states have call predecessors, (54), 40 states have call successors, (54) [2021-12-16 01:01:27,054 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 319 states to 319 states and 398 transitions. [2021-12-16 01:01:27,054 INFO L78 Accepts]: Start accepts. Automaton has 319 states and 398 transitions. Word has length 60 [2021-12-16 01:01:27,054 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:27,054 INFO L470 AbstractCegarLoop]: Abstraction has 319 states and 398 transitions. [2021-12-16 01:01:27,055 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-16 01:01:27,055 INFO L276 IsEmpty]: Start isEmpty. Operand 319 states and 398 transitions. [2021-12-16 01:01:27,055 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-12-16 01:01:27,055 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:27,056 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:27,056 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-16 01:01:27,056 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:27,056 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:27,056 INFO L85 PathProgramCache]: Analyzing trace with hash 879453271, now seen corresponding path program 1 times [2021-12-16 01:01:27,056 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:27,057 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [226729619] [2021-12-16 01:01:27,057 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:27,057 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:27,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:27,086 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-16 01:01:27,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:27,092 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-16 01:01:27,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:27,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 01:01:27,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:27,107 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-16 01:01:27,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:27,109 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:27,110 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:27,110 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [226729619] [2021-12-16 01:01:27,110 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [226729619] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:27,110 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:27,110 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-16 01:01:27,110 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1310737491] [2021-12-16 01:01:27,111 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:27,111 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-16 01:01:27,111 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:27,111 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-16 01:01:27,111 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-16 01:01:27,112 INFO L87 Difference]: Start difference. First operand 319 states and 398 transitions. Second operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-16 01:01:27,283 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:27,283 INFO L93 Difference]: Finished difference Result 905 states and 1172 transitions. [2021-12-16 01:01:27,284 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-16 01:01:27,284 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 60 [2021-12-16 01:01:27,284 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:27,286 INFO L225 Difference]: With dead ends: 905 [2021-12-16 01:01:27,287 INFO L226 Difference]: Without dead ends: 594 [2021-12-16 01:01:27,288 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-16 01:01:27,288 INFO L933 BasicCegarLoop]: 157 mSDtfsCounter, 234 mSDsluCounter, 196 mSDsCounter, 0 mSdLazyCounter, 156 mSolverCounterSat, 72 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 242 SdHoareTripleChecker+Valid, 353 SdHoareTripleChecker+Invalid, 228 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 72 IncrementalHoareTripleChecker+Valid, 156 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:27,288 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [242 Valid, 353 Invalid, 228 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [72 Valid, 156 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 01:01:27,289 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 594 states. [2021-12-16 01:01:27,305 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 594 to 587. [2021-12-16 01:01:27,306 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 587 states, 444 states have (on average 1.2274774774774775) internal successors, (545), 470 states have internal predecessors, (545), 77 states have call successors, (77), 63 states have call predecessors, (77), 65 states have return successors, (115), 76 states have call predecessors, (115), 77 states have call successors, (115) [2021-12-16 01:01:27,309 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 587 states to 587 states and 737 transitions. [2021-12-16 01:01:27,309 INFO L78 Accepts]: Start accepts. Automaton has 587 states and 737 transitions. Word has length 60 [2021-12-16 01:01:27,309 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:27,309 INFO L470 AbstractCegarLoop]: Abstraction has 587 states and 737 transitions. [2021-12-16 01:01:27,309 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-16 01:01:27,310 INFO L276 IsEmpty]: Start isEmpty. Operand 587 states and 737 transitions. [2021-12-16 01:01:27,310 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2021-12-16 01:01:27,310 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:27,310 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:27,311 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-16 01:01:27,311 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:27,311 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:27,311 INFO L85 PathProgramCache]: Analyzing trace with hash -269338319, now seen corresponding path program 1 times [2021-12-16 01:01:27,311 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:27,311 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1193233285] [2021-12-16 01:01:27,312 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:27,312 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:27,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:27,365 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 01:01:27,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:27,379 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-16 01:01:27,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:27,388 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2021-12-16 01:01:27,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:27,401 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 01:01:27,402 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:27,404 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2021-12-16 01:01:27,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:27,407 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:27,407 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:27,407 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1193233285] [2021-12-16 01:01:27,407 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1193233285] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:27,407 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:27,407 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-16 01:01:27,408 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1469046070] [2021-12-16 01:01:27,408 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:27,408 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-16 01:01:27,408 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:27,408 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-16 01:01:27,408 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2021-12-16 01:01:27,409 INFO L87 Difference]: Start difference. First operand 587 states and 737 transitions. Second operand has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-16 01:01:28,234 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:28,234 INFO L93 Difference]: Finished difference Result 1880 states and 2475 transitions. [2021-12-16 01:01:28,235 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2021-12-16 01:01:28,235 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 64 [2021-12-16 01:01:28,235 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:28,241 INFO L225 Difference]: With dead ends: 1880 [2021-12-16 01:01:28,241 INFO L226 Difference]: Without dead ends: 1405 [2021-12-16 01:01:28,243 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 297 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=221, Invalid=969, Unknown=0, NotChecked=0, Total=1190 [2021-12-16 01:01:28,244 INFO L933 BasicCegarLoop]: 178 mSDtfsCounter, 599 mSDsluCounter, 746 mSDsCounter, 0 mSdLazyCounter, 907 mSolverCounterSat, 215 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 610 SdHoareTripleChecker+Valid, 924 SdHoareTripleChecker+Invalid, 1122 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 215 IncrementalHoareTripleChecker+Valid, 907 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:28,244 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [610 Valid, 924 Invalid, 1122 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [215 Valid, 907 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2021-12-16 01:01:28,245 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1405 states. [2021-12-16 01:01:28,301 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1405 to 1144. [2021-12-16 01:01:28,303 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1144 states, 863 states have (on average 1.2247972190034762) internal successors, (1057), 920 states have internal predecessors, (1057), 152 states have call successors, (152), 112 states have call predecessors, (152), 128 states have return successors, (230), 150 states have call predecessors, (230), 152 states have call successors, (230) [2021-12-16 01:01:28,307 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1144 states to 1144 states and 1439 transitions. [2021-12-16 01:01:28,307 INFO L78 Accepts]: Start accepts. Automaton has 1144 states and 1439 transitions. Word has length 64 [2021-12-16 01:01:28,307 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:28,308 INFO L470 AbstractCegarLoop]: Abstraction has 1144 states and 1439 transitions. [2021-12-16 01:01:28,308 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-16 01:01:28,308 INFO L276 IsEmpty]: Start isEmpty. Operand 1144 states and 1439 transitions. [2021-12-16 01:01:28,309 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2021-12-16 01:01:28,309 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:28,309 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:28,309 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-16 01:01:28,310 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:28,310 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:28,310 INFO L85 PathProgramCache]: Analyzing trace with hash -1122798217, now seen corresponding path program 1 times [2021-12-16 01:01:28,310 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:28,310 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1617798981] [2021-12-16 01:01:28,310 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:28,311 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:28,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,334 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 01:01:28,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,341 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-16 01:01:28,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,352 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:28,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,357 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-16 01:01:28,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,362 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 01:01:28,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2021-12-16 01:01:28,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,366 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2021-12-16 01:01:28,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,367 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-16 01:01:28,368 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:28,368 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1617798981] [2021-12-16 01:01:28,368 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1617798981] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:28,368 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:28,368 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-16 01:01:28,368 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1218642223] [2021-12-16 01:01:28,368 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:28,368 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-16 01:01:28,369 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:28,369 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 01:01:28,369 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-16 01:01:28,369 INFO L87 Difference]: Start difference. First operand 1144 states and 1439 transitions. Second operand has 7 states, 7 states have (on average 10.714285714285714) internal successors, (75), 4 states have internal predecessors, (75), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2021-12-16 01:01:28,607 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:28,608 INFO L93 Difference]: Finished difference Result 1939 states and 2430 transitions. [2021-12-16 01:01:28,608 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-12-16 01:01:28,608 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 10.714285714285714) internal successors, (75), 4 states have internal predecessors, (75), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 94 [2021-12-16 01:01:28,609 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:28,611 INFO L225 Difference]: With dead ends: 1939 [2021-12-16 01:01:28,612 INFO L226 Difference]: Without dead ends: 803 [2021-12-16 01:01:28,614 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2021-12-16 01:01:28,615 INFO L933 BasicCegarLoop]: 145 mSDtfsCounter, 296 mSDsluCounter, 223 mSDsCounter, 0 mSdLazyCounter, 224 mSolverCounterSat, 105 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 305 SdHoareTripleChecker+Valid, 368 SdHoareTripleChecker+Invalid, 329 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 105 IncrementalHoareTripleChecker+Valid, 224 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:28,615 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [305 Valid, 368 Invalid, 329 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [105 Valid, 224 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-16 01:01:28,616 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 803 states. [2021-12-16 01:01:28,637 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 803 to 767. [2021-12-16 01:01:28,639 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 767 states, 582 states have (on average 1.2130584192439862) internal successors, (706), 621 states have internal predecessors, (706), 100 states have call successors, (100), 76 states have call predecessors, (100), 84 states have return successors, (140), 99 states have call predecessors, (140), 100 states have call successors, (140) [2021-12-16 01:01:28,641 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 767 states to 767 states and 946 transitions. [2021-12-16 01:01:28,642 INFO L78 Accepts]: Start accepts. Automaton has 767 states and 946 transitions. Word has length 94 [2021-12-16 01:01:28,642 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:28,642 INFO L470 AbstractCegarLoop]: Abstraction has 767 states and 946 transitions. [2021-12-16 01:01:28,642 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 10.714285714285714) internal successors, (75), 4 states have internal predecessors, (75), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2021-12-16 01:01:28,643 INFO L276 IsEmpty]: Start isEmpty. Operand 767 states and 946 transitions. [2021-12-16 01:01:28,644 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2021-12-16 01:01:28,644 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:28,644 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:28,644 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-16 01:01:28,644 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:28,644 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:28,645 INFO L85 PathProgramCache]: Analyzing trace with hash 1748536662, now seen corresponding path program 1 times [2021-12-16 01:01:28,645 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:28,645 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [448416947] [2021-12-16 01:01:28,645 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:28,645 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:28,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,724 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 01:01:28,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,733 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-16 01:01:28,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:28,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,752 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-16 01:01:28,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,758 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 01:01:28,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2021-12-16 01:01:28,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,768 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2021-12-16 01:01:28,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,771 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-16 01:01:28,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,773 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:28,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,775 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2021-12-16 01:01:28,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,778 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 16 proven. 11 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-12-16 01:01:28,778 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:28,778 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [448416947] [2021-12-16 01:01:28,778 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [448416947] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 01:01:28,778 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1013140898] [2021-12-16 01:01:28,778 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:28,779 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 01:01:28,779 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 01:01:28,784 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 01:01:28,801 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-16 01:01:28,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:28,890 INFO L263 TraceCheckSpWp]: Trace formula consists of 501 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-16 01:01:28,895 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 01:01:29,134 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 29 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 01:01:29,135 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-16 01:01:29,328 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 19 proven. 8 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-12-16 01:01:29,328 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1013140898] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-16 01:01:29,329 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-16 01:01:29,329 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2021-12-16 01:01:29,329 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2091713703] [2021-12-16 01:01:29,329 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-16 01:01:29,329 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-12-16 01:01:29,330 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:29,330 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-12-16 01:01:29,330 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2021-12-16 01:01:29,330 INFO L87 Difference]: Start difference. First operand 767 states and 946 transitions. Second operand has 15 states, 15 states have (on average 8.333333333333334) internal successors, (125), 10 states have internal predecessors, (125), 6 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 6 states have call successors, (20) [2021-12-16 01:01:30,440 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:30,440 INFO L93 Difference]: Finished difference Result 1767 states and 2244 transitions. [2021-12-16 01:01:30,441 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2021-12-16 01:01:30,441 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 8.333333333333334) internal successors, (125), 10 states have internal predecessors, (125), 6 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 6 states have call successors, (20) Word has length 108 [2021-12-16 01:01:30,441 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:30,445 INFO L225 Difference]: With dead ends: 1767 [2021-12-16 01:01:30,445 INFO L226 Difference]: Without dead ends: 1092 [2021-12-16 01:01:30,448 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 300 GetRequests, 245 SyntacticMatches, 1 SemanticMatches, 54 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 907 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=621, Invalid=2459, Unknown=0, NotChecked=0, Total=3080 [2021-12-16 01:01:30,448 INFO L933 BasicCegarLoop]: 253 mSDtfsCounter, 540 mSDsluCounter, 1147 mSDsCounter, 0 mSdLazyCounter, 1191 mSolverCounterSat, 293 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 548 SdHoareTripleChecker+Valid, 1400 SdHoareTripleChecker+Invalid, 1484 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 293 IncrementalHoareTripleChecker+Valid, 1191 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:30,449 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [548 Valid, 1400 Invalid, 1484 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [293 Valid, 1191 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2021-12-16 01:01:30,450 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1092 states. [2021-12-16 01:01:30,476 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1092 to 864. [2021-12-16 01:01:30,478 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 864 states, 647 states have (on average 1.1916537867078825) internal successors, (771), 698 states have internal predecessors, (771), 117 states have call successors, (117), 97 states have call predecessors, (117), 99 states have return successors, (143), 105 states have call predecessors, (143), 117 states have call successors, (143) [2021-12-16 01:01:30,480 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 864 states to 864 states and 1031 transitions. [2021-12-16 01:01:30,480 INFO L78 Accepts]: Start accepts. Automaton has 864 states and 1031 transitions. Word has length 108 [2021-12-16 01:01:30,481 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:30,481 INFO L470 AbstractCegarLoop]: Abstraction has 864 states and 1031 transitions. [2021-12-16 01:01:30,481 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 8.333333333333334) internal successors, (125), 10 states have internal predecessors, (125), 6 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 6 states have call successors, (20) [2021-12-16 01:01:30,482 INFO L276 IsEmpty]: Start isEmpty. Operand 864 states and 1031 transitions. [2021-12-16 01:01:30,486 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 200 [2021-12-16 01:01:30,486 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:30,486 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:30,506 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-16 01:01:30,699 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-16 01:01:30,700 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:30,700 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:30,700 INFO L85 PathProgramCache]: Analyzing trace with hash 277708338, now seen corresponding path program 1 times [2021-12-16 01:01:30,700 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:30,700 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [770628513] [2021-12-16 01:01:30,700 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:30,700 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:30,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,731 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 01:01:30,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-16 01:01:30,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,742 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:30,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-16 01:01:30,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,749 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 01:01:30,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,751 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2021-12-16 01:01:30,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,756 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:30,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,758 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 01:01:30,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-16 01:01:30,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,778 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:30,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,780 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2021-12-16 01:01:30,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,797 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:30,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,799 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 01:01:30,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,811 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-16 01:01:30,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 147 [2021-12-16 01:01:30,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,815 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2021-12-16 01:01:30,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,816 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 167 [2021-12-16 01:01:30,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,820 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 01:01:30,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,822 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 191 [2021-12-16 01:01:30,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,824 INFO L134 CoverageAnalysis]: Checked inductivity of 222 backedges. 87 proven. 3 refuted. 0 times theorem prover too weak. 132 trivial. 0 not checked. [2021-12-16 01:01:30,824 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:30,824 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [770628513] [2021-12-16 01:01:30,824 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [770628513] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 01:01:30,824 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1852768213] [2021-12-16 01:01:30,824 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:30,824 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 01:01:30,824 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 01:01:30,825 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 01:01:30,826 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-16 01:01:30,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,925 INFO L263 TraceCheckSpWp]: Trace formula consists of 738 conjuncts, 13 conjunts are in the unsatisfiable core [2021-12-16 01:01:30,929 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 01:01:31,396 INFO L134 CoverageAnalysis]: Checked inductivity of 222 backedges. 162 proven. 4 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2021-12-16 01:01:31,397 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-16 01:01:32,041 INFO L134 CoverageAnalysis]: Checked inductivity of 222 backedges. 82 proven. 42 refuted. 0 times theorem prover too weak. 98 trivial. 0 not checked. [2021-12-16 01:01:32,042 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1852768213] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-16 01:01:32,042 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-16 01:01:32,042 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 10, 11] total 26 [2021-12-16 01:01:32,042 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [532362306] [2021-12-16 01:01:32,042 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-16 01:01:32,043 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2021-12-16 01:01:32,043 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:32,043 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2021-12-16 01:01:32,043 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=116, Invalid=534, Unknown=0, NotChecked=0, Total=650 [2021-12-16 01:01:32,044 INFO L87 Difference]: Start difference. First operand 864 states and 1031 transitions. Second operand has 26 states, 26 states have (on average 7.961538461538462) internal successors, (207), 21 states have internal predecessors, (207), 10 states have call successors, (37), 8 states have call predecessors, (37), 10 states have return successors, (39), 10 states have call predecessors, (39), 10 states have call successors, (39) [2021-12-16 01:01:33,979 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:33,979 INFO L93 Difference]: Finished difference Result 2619 states and 3233 transitions. [2021-12-16 01:01:33,980 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 52 states. [2021-12-16 01:01:33,980 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 7.961538461538462) internal successors, (207), 21 states have internal predecessors, (207), 10 states have call successors, (37), 8 states have call predecessors, (37), 10 states have return successors, (39), 10 states have call predecessors, (39), 10 states have call successors, (39) Word has length 199 [2021-12-16 01:01:33,980 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:33,986 INFO L225 Difference]: With dead ends: 2619 [2021-12-16 01:01:33,986 INFO L226 Difference]: Without dead ends: 1763 [2021-12-16 01:01:33,989 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 506 GetRequests, 430 SyntacticMatches, 2 SemanticMatches, 74 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1414 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=1027, Invalid=4673, Unknown=0, NotChecked=0, Total=5700 [2021-12-16 01:01:33,990 INFO L933 BasicCegarLoop]: 203 mSDtfsCounter, 1295 mSDsluCounter, 1473 mSDsCounter, 0 mSdLazyCounter, 2797 mSolverCounterSat, 515 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1295 SdHoareTripleChecker+Valid, 1676 SdHoareTripleChecker+Invalid, 3312 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 515 IncrementalHoareTripleChecker+Valid, 2797 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:33,990 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1295 Valid, 1676 Invalid, 3312 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [515 Valid, 2797 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2021-12-16 01:01:33,992 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1763 states. [2021-12-16 01:01:34,038 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1763 to 1717. [2021-12-16 01:01:34,041 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1717 states, 1294 states have (on average 1.142967542503864) internal successors, (1479), 1378 states have internal predecessors, (1479), 233 states have call successors, (233), 201 states have call predecessors, (233), 189 states have return successors, (258), 198 states have call predecessors, (258), 233 states have call successors, (258) [2021-12-16 01:01:34,047 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1717 states to 1717 states and 1970 transitions. [2021-12-16 01:01:34,047 INFO L78 Accepts]: Start accepts. Automaton has 1717 states and 1970 transitions. Word has length 199 [2021-12-16 01:01:34,048 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:34,048 INFO L470 AbstractCegarLoop]: Abstraction has 1717 states and 1970 transitions. [2021-12-16 01:01:34,048 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 7.961538461538462) internal successors, (207), 21 states have internal predecessors, (207), 10 states have call successors, (37), 8 states have call predecessors, (37), 10 states have return successors, (39), 10 states have call predecessors, (39), 10 states have call successors, (39) [2021-12-16 01:01:34,048 INFO L276 IsEmpty]: Start isEmpty. Operand 1717 states and 1970 transitions. [2021-12-16 01:01:34,052 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 216 [2021-12-16 01:01:34,053 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:34,053 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:34,072 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2021-12-16 01:01:34,270 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2021-12-16 01:01:34,270 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:34,270 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:34,270 INFO L85 PathProgramCache]: Analyzing trace with hash 2042493462, now seen corresponding path program 1 times [2021-12-16 01:01:34,271 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:34,271 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1103329964] [2021-12-16 01:01:34,271 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:34,271 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:34,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,310 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 01:01:34,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,318 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-16 01:01:34,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,330 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:34,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,338 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-16 01:01:34,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,346 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 01:01:34,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,348 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2021-12-16 01:01:34,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:34,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,377 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 01:01:34,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-16 01:01:34,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,388 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:34,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,393 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-12-16 01:01:34,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2021-12-16 01:01:34,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,410 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2021-12-16 01:01:34,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,433 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:34,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 01:01:34,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,441 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-16 01:01:34,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,442 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-16 01:01:34,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,444 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 163 [2021-12-16 01:01:34,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,447 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 174 [2021-12-16 01:01:34,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,449 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 183 [2021-12-16 01:01:34,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,452 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 01:01:34,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,454 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 207 [2021-12-16 01:01:34,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,457 INFO L134 CoverageAnalysis]: Checked inductivity of 264 backedges. 98 proven. 46 refuted. 0 times theorem prover too weak. 120 trivial. 0 not checked. [2021-12-16 01:01:34,457 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:34,457 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1103329964] [2021-12-16 01:01:34,457 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1103329964] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 01:01:34,457 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1060758489] [2021-12-16 01:01:34,458 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:34,458 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 01:01:34,458 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 01:01:34,459 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 01:01:34,460 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-12-16 01:01:34,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,572 INFO L263 TraceCheckSpWp]: Trace formula consists of 780 conjuncts, 10 conjunts are in the unsatisfiable core [2021-12-16 01:01:34,584 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 01:01:34,980 INFO L134 CoverageAnalysis]: Checked inductivity of 264 backedges. 200 proven. 9 refuted. 0 times theorem prover too weak. 55 trivial. 0 not checked. [2021-12-16 01:01:34,980 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-16 01:01:35,531 INFO L134 CoverageAnalysis]: Checked inductivity of 264 backedges. 104 proven. 54 refuted. 0 times theorem prover too weak. 106 trivial. 0 not checked. [2021-12-16 01:01:35,532 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1060758489] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-16 01:01:35,532 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-16 01:01:35,532 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 8, 8] total 22 [2021-12-16 01:01:35,532 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1516216654] [2021-12-16 01:01:35,532 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-16 01:01:35,533 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2021-12-16 01:01:35,533 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:35,533 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2021-12-16 01:01:35,533 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=394, Unknown=0, NotChecked=0, Total=462 [2021-12-16 01:01:35,533 INFO L87 Difference]: Start difference. First operand 1717 states and 1970 transitions. Second operand has 22 states, 22 states have (on average 9.909090909090908) internal successors, (218), 15 states have internal predecessors, (218), 7 states have call successors, (48), 8 states have call predecessors, (48), 11 states have return successors, (41), 9 states have call predecessors, (41), 7 states have call successors, (41) [2021-12-16 01:01:36,948 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:36,948 INFO L93 Difference]: Finished difference Result 3404 states and 3927 transitions. [2021-12-16 01:01:36,948 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2021-12-16 01:01:36,948 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 9.909090909090908) internal successors, (218), 15 states have internal predecessors, (218), 7 states have call successors, (48), 8 states have call predecessors, (48), 11 states have return successors, (41), 9 states have call predecessors, (41), 7 states have call successors, (41) Word has length 215 [2021-12-16 01:01:36,949 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:36,955 INFO L225 Difference]: With dead ends: 3404 [2021-12-16 01:01:36,955 INFO L226 Difference]: Without dead ends: 1863 [2021-12-16 01:01:36,959 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 536 GetRequests, 478 SyntacticMatches, 2 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 743 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=654, Invalid=2652, Unknown=0, NotChecked=0, Total=3306 [2021-12-16 01:01:36,959 INFO L933 BasicCegarLoop]: 159 mSDtfsCounter, 559 mSDsluCounter, 603 mSDsCounter, 0 mSdLazyCounter, 1940 mSolverCounterSat, 244 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 567 SdHoareTripleChecker+Valid, 762 SdHoareTripleChecker+Invalid, 2184 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 244 IncrementalHoareTripleChecker+Valid, 1940 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:36,960 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [567 Valid, 762 Invalid, 2184 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [244 Valid, 1940 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2021-12-16 01:01:36,961 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1863 states. [2021-12-16 01:01:37,032 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1863 to 1647. [2021-12-16 01:01:37,034 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1647 states, 1248 states have (on average 1.1370192307692308) internal successors, (1419), 1322 states have internal predecessors, (1419), 207 states have call successors, (207), 193 states have call predecessors, (207), 191 states have return successors, (232), 192 states have call predecessors, (232), 207 states have call successors, (232) [2021-12-16 01:01:37,038 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1647 states to 1647 states and 1858 transitions. [2021-12-16 01:01:37,038 INFO L78 Accepts]: Start accepts. Automaton has 1647 states and 1858 transitions. Word has length 215 [2021-12-16 01:01:37,038 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:37,038 INFO L470 AbstractCegarLoop]: Abstraction has 1647 states and 1858 transitions. [2021-12-16 01:01:37,039 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 9.909090909090908) internal successors, (218), 15 states have internal predecessors, (218), 7 states have call successors, (48), 8 states have call predecessors, (48), 11 states have return successors, (41), 9 states have call predecessors, (41), 7 states have call successors, (41) [2021-12-16 01:01:37,039 INFO L276 IsEmpty]: Start isEmpty. Operand 1647 states and 1858 transitions. [2021-12-16 01:01:37,042 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 217 [2021-12-16 01:01:37,042 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:37,042 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:37,083 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-12-16 01:01:37,260 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 01:01:37,260 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:37,261 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:37,261 INFO L85 PathProgramCache]: Analyzing trace with hash -950542073, now seen corresponding path program 1 times [2021-12-16 01:01:37,261 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:37,261 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [574133108] [2021-12-16 01:01:37,261 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:37,261 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:37,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,308 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 01:01:37,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-16 01:01:37,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,319 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:37,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-16 01:01:37,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 01:01:37,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2021-12-16 01:01:37,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:37,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,337 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 01:01:37,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,339 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-16 01:01:37,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,340 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:37,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,342 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-12-16 01:01:37,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,348 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-12-16 01:01:37,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,355 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 123 [2021-12-16 01:01:37,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:37,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,366 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 01:01:37,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-16 01:01:37,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,369 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-16 01:01:37,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,372 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2021-12-16 01:01:37,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 175 [2021-12-16 01:01:37,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,380 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 184 [2021-12-16 01:01:37,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,414 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 01:01:37,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,431 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 208 [2021-12-16 01:01:37,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,434 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 86 proven. 9 refuted. 0 times theorem prover too weak. 170 trivial. 0 not checked. [2021-12-16 01:01:37,434 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:37,434 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [574133108] [2021-12-16 01:01:37,434 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [574133108] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 01:01:37,434 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [585497865] [2021-12-16 01:01:37,434 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:37,434 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 01:01:37,435 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 01:01:37,452 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 01:01:37,453 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2021-12-16 01:01:37,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:37,548 INFO L263 TraceCheckSpWp]: Trace formula consists of 780 conjuncts, 18 conjunts are in the unsatisfiable core [2021-12-16 01:01:37,553 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 01:01:37,973 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 142 proven. 26 refuted. 0 times theorem prover too weak. 97 trivial. 0 not checked. [2021-12-16 01:01:37,973 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-16 01:01:38,630 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 103 proven. 45 refuted. 0 times theorem prover too weak. 117 trivial. 0 not checked. [2021-12-16 01:01:38,631 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [585497865] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-16 01:01:38,631 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-16 01:01:38,631 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 8, 13] total 28 [2021-12-16 01:01:38,631 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [786545502] [2021-12-16 01:01:38,631 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-16 01:01:38,632 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2021-12-16 01:01:38,632 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:38,632 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2021-12-16 01:01:38,632 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=116, Invalid=640, Unknown=0, NotChecked=0, Total=756 [2021-12-16 01:01:38,632 INFO L87 Difference]: Start difference. First operand 1647 states and 1858 transitions. Second operand has 28 states, 28 states have (on average 9.25) internal successors, (259), 22 states have internal predecessors, (259), 14 states have call successors, (51), 12 states have call predecessors, (51), 15 states have return successors, (52), 14 states have call predecessors, (52), 14 states have call successors, (52) [2021-12-16 01:01:42,659 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:42,660 INFO L93 Difference]: Finished difference Result 3738 states and 4265 transitions. [2021-12-16 01:01:42,660 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 105 states. [2021-12-16 01:01:42,660 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 28 states have (on average 9.25) internal successors, (259), 22 states have internal predecessors, (259), 14 states have call successors, (51), 12 states have call predecessors, (51), 15 states have return successors, (52), 14 states have call predecessors, (52), 14 states have call successors, (52) Word has length 216 [2021-12-16 01:01:42,661 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:42,667 INFO L225 Difference]: With dead ends: 3738 [2021-12-16 01:01:42,667 INFO L226 Difference]: Without dead ends: 2279 [2021-12-16 01:01:42,672 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 638 GetRequests, 508 SyntacticMatches, 1 SemanticMatches, 129 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5547 ImplicationChecksByTransitivity, 1.6s TimeCoverageRelationStatistics Valid=2779, Invalid=14251, Unknown=0, NotChecked=0, Total=17030 [2021-12-16 01:01:42,673 INFO L933 BasicCegarLoop]: 496 mSDtfsCounter, 3355 mSDsluCounter, 1697 mSDsCounter, 0 mSdLazyCounter, 5406 mSolverCounterSat, 1946 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3355 SdHoareTripleChecker+Valid, 2193 SdHoareTripleChecker+Invalid, 7352 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1946 IncrementalHoareTripleChecker+Valid, 5406 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:42,673 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3355 Valid, 2193 Invalid, 7352 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1946 Valid, 5406 Invalid, 0 Unknown, 0 Unchecked, 2.4s Time] [2021-12-16 01:01:42,675 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2279 states. [2021-12-16 01:01:42,727 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2279 to 2027. [2021-12-16 01:01:42,729 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2027 states, 1538 states have (on average 1.1339401820546164) internal successors, (1744), 1614 states have internal predecessors, (1744), 257 states have call successors, (257), 241 states have call predecessors, (257), 231 states have return successors, (276), 235 states have call predecessors, (276), 257 states have call successors, (276) [2021-12-16 01:01:42,732 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2027 states to 2027 states and 2277 transitions. [2021-12-16 01:01:42,732 INFO L78 Accepts]: Start accepts. Automaton has 2027 states and 2277 transitions. Word has length 216 [2021-12-16 01:01:42,733 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:42,733 INFO L470 AbstractCegarLoop]: Abstraction has 2027 states and 2277 transitions. [2021-12-16 01:01:42,733 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 28 states have (on average 9.25) internal successors, (259), 22 states have internal predecessors, (259), 14 states have call successors, (51), 12 states have call predecessors, (51), 15 states have return successors, (52), 14 states have call predecessors, (52), 14 states have call successors, (52) [2021-12-16 01:01:42,733 INFO L276 IsEmpty]: Start isEmpty. Operand 2027 states and 2277 transitions. [2021-12-16 01:01:42,738 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 253 [2021-12-16 01:01:42,738 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:42,738 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:42,758 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2021-12-16 01:01:42,952 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 01:01:42,952 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:42,952 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:42,952 INFO L85 PathProgramCache]: Analyzing trace with hash -461993167, now seen corresponding path program 1 times [2021-12-16 01:01:42,952 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:42,952 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1053348511] [2021-12-16 01:01:42,952 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:42,953 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:42,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:42,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 01:01:42,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:42,998 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-16 01:01:43,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:43,021 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:43,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:43,027 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-16 01:01:43,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:43,029 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 01:01:43,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:43,043 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2021-12-16 01:01:43,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:43,050 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:43,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:43,075 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 01:01:43,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:43,077 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-16 01:01:43,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:43,080 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:43,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:43,081 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-12-16 01:01:43,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:43,086 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-12-16 01:01:43,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:43,088 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 123 [2021-12-16 01:01:43,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:43,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:43,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:43,093 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 01:01:43,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:43,094 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-16 01:01:43,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:43,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-16 01:01:43,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:43,097 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2021-12-16 01:01:43,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:43,099 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2021-12-16 01:01:43,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:43,100 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 180 [2021-12-16 01:01:43,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:43,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:43,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:43,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 200 [2021-12-16 01:01:43,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:43,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 211 [2021-12-16 01:01:43,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:43,136 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 220 [2021-12-16 01:01:43,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:43,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 01:01:43,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:43,140 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 244 [2021-12-16 01:01:43,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:43,141 INFO L134 CoverageAnalysis]: Checked inductivity of 379 backedges. 111 proven. 38 refuted. 0 times theorem prover too weak. 230 trivial. 0 not checked. [2021-12-16 01:01:43,141 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:43,141 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1053348511] [2021-12-16 01:01:43,142 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1053348511] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 01:01:43,142 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1837467563] [2021-12-16 01:01:43,142 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:43,142 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 01:01:43,142 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 01:01:43,143 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 01:01:43,171 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2021-12-16 01:01:43,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:43,274 INFO L263 TraceCheckSpWp]: Trace formula consists of 874 conjuncts, 21 conjunts are in the unsatisfiable core [2021-12-16 01:01:43,277 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 01:01:43,926 INFO L134 CoverageAnalysis]: Checked inductivity of 379 backedges. 226 proven. 18 refuted. 0 times theorem prover too weak. 135 trivial. 0 not checked. [2021-12-16 01:01:43,927 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-16 01:01:44,738 INFO L134 CoverageAnalysis]: Checked inductivity of 379 backedges. 142 proven. 77 refuted. 0 times theorem prover too weak. 160 trivial. 0 not checked. [2021-12-16 01:01:44,739 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1837467563] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-16 01:01:44,739 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-16 01:01:44,739 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 11, 15] total 32 [2021-12-16 01:01:44,739 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2051935315] [2021-12-16 01:01:44,739 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-16 01:01:44,741 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2021-12-16 01:01:44,741 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:44,742 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2021-12-16 01:01:44,742 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=169, Invalid=823, Unknown=0, NotChecked=0, Total=992 [2021-12-16 01:01:44,742 INFO L87 Difference]: Start difference. First operand 2027 states and 2277 transitions. Second operand has 32 states, 32 states have (on average 8.8125) internal successors, (282), 27 states have internal predecessors, (282), 13 states have call successors, (49), 11 states have call predecessors, (49), 16 states have return successors, (53), 13 states have call predecessors, (53), 13 states have call successors, (53) [2021-12-16 01:01:46,696 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:46,696 INFO L93 Difference]: Finished difference Result 3639 states and 4163 transitions. [2021-12-16 01:01:46,696 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 54 states. [2021-12-16 01:01:46,697 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 32 states have (on average 8.8125) internal successors, (282), 27 states have internal predecessors, (282), 13 states have call successors, (49), 11 states have call predecessors, (49), 16 states have return successors, (53), 13 states have call predecessors, (53), 13 states have call successors, (53) Word has length 252 [2021-12-16 01:01:46,697 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:46,698 INFO L225 Difference]: With dead ends: 3639 [2021-12-16 01:01:46,698 INFO L226 Difference]: Without dead ends: 0 [2021-12-16 01:01:46,705 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 620 GetRequests, 538 SyntacticMatches, 4 SemanticMatches, 78 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1512 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=1326, Invalid=4994, Unknown=0, NotChecked=0, Total=6320 [2021-12-16 01:01:46,705 INFO L933 BasicCegarLoop]: 220 mSDtfsCounter, 1625 mSDsluCounter, 699 mSDsCounter, 0 mSdLazyCounter, 2244 mSolverCounterSat, 686 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1632 SdHoareTripleChecker+Valid, 919 SdHoareTripleChecker+Invalid, 2930 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 686 IncrementalHoareTripleChecker+Valid, 2244 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:46,705 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1632 Valid, 919 Invalid, 2930 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [686 Valid, 2244 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2021-12-16 01:01:46,706 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-16 01:01:46,706 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-16 01:01:46,706 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 01:01:46,706 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-16 01:01:46,706 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 252 [2021-12-16 01:01:46,707 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:46,707 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-16 01:01:46,707 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 32 states have (on average 8.8125) internal successors, (282), 27 states have internal predecessors, (282), 13 states have call successors, (49), 11 states have call predecessors, (49), 16 states have return successors, (53), 13 states have call predecessors, (53), 13 states have call successors, (53) [2021-12-16 01:01:46,707 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-16 01:01:46,707 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-16 01:01:46,711 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-16 01:01:46,742 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2021-12-16 01:01:46,929 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2021-12-16 01:01:46,931 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-16 01:02:04,012 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 624 631) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse7 (not (< 1 ~waterLevel~0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (<= ~waterLevel~0 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (<= ~waterLevel~0 1)) .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse6 .cse2 .cse4) (or .cse1 .cse7 .cse6 .cse2 .cse3 .cse4) (or .cse1 .cse7 .cse5 .cse6 .cse2 .cse4))) [2021-12-16 01:02:04,012 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 624 631) no Hoare annotation was computed. [2021-12-16 01:02:04,012 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 624 631) no Hoare annotation was computed. [2021-12-16 01:02:04,012 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 540 546) no Hoare annotation was computed. [2021-12-16 01:02:04,012 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 540 546) the Hoare annotation is: true [2021-12-16 01:02:04,012 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 758 769) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 |old(~methaneLevelCritical~0)|)) (.cse4 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse1 (not (< 1 ~waterLevel~0))) (.cse9 (not (<= ~waterLevel~0 1))) (.cse7 (not (= 1 ~systemActive~0))) (.cse10 (not (<= 1 ~pumpRunning~0))) (.cse6 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse3 (not (<= ~waterLevel~0 2))) (.cse5 (not (= ~systemActive~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse0 .cse7 .cse8 .cse3) (or .cse0 .cse7 .cse2 .cse1 .cse3 .cse4) (or .cse9 .cse0 .cse7 .cse2 .cse4) (or .cse9 .cse0 .cse2 .cse4 .cse5) (or .cse6 .cse7 .cse1 .cse10 .cse8 .cse3) (or .cse6 (not (<= 1 ~switchedOnBeforeTS~0)) .cse9 .cse7 .cse10 .cse8) (or .cse6 .cse0 .cse8 .cse3 .cse5))) [2021-12-16 01:02:04,012 INFO L858 garLoopResultBuilder]: For program point L762-1(lines 758 769) no Hoare annotation was computed. [2021-12-16 01:02:04,012 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 758 769) no Hoare annotation was computed. [2021-12-16 01:02:04,012 INFO L861 garLoopResultBuilder]: At program point L833(line 833) the Hoare annotation is: true [2021-12-16 01:02:04,013 INFO L858 garLoopResultBuilder]: For program point L833-1(line 833) no Hoare annotation was computed. [2021-12-16 01:02:04,013 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 827 856) no Hoare annotation was computed. [2021-12-16 01:02:04,013 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 827 856) the Hoare annotation is: true [2021-12-16 01:02:04,013 INFO L861 garLoopResultBuilder]: At program point L852(lines 827 856) the Hoare annotation is: true [2021-12-16 01:02:04,013 INFO L858 garLoopResultBuilder]: For program point L848(line 848) no Hoare annotation was computed. [2021-12-16 01:02:04,013 INFO L858 garLoopResultBuilder]: For program point L841(lines 841 845) no Hoare annotation was computed. [2021-12-16 01:02:04,013 INFO L861 garLoopResultBuilder]: At program point L841-1(lines 841 845) the Hoare annotation is: true [2021-12-16 01:02:04,013 INFO L858 garLoopResultBuilder]: For program point L838(line 838) no Hoare annotation was computed. [2021-12-16 01:02:04,013 INFO L861 garLoopResultBuilder]: At program point L837-2(lines 837 851) the Hoare annotation is: true [2021-12-16 01:02:04,013 INFO L854 garLoopResultBuilder]: At program point L956(line 956) the Hoare annotation is: (let ((.cse23 (<= 1 ~methaneLevelCritical~0)) (.cse8 (= ~pumpRunning~0 0)) (.cse5 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| ~waterLevel~0)) (.cse13 (<= 1 ~switchedOnBeforeTS~0)) (.cse25 (<= ~waterLevel~0 0)) (.cse24 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse14 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~5#1|)) (.cse15 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= |timeShift_getWaterLevel_#res#1| ~waterLevel~0))) (let ((.cse10 (not (= ~systemActive~0 0))) (.cse18 (not (<= |old(~waterLevel~0)| 0))) (.cse16 (and .cse5 .cse13 .cse25 .cse24 .cse6 .cse14 .cse15 (<= 1 ~pumpRunning~0) .cse7 (= ~systemActive~0 1))) (.cse11 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse19 (and .cse5 .cse13 .cse25 .cse6 .cse14 .cse23 .cse7 .cse8)) (.cse12 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse20 (= 0 ~methaneLevelCritical~0)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and .cse5 .cse6 .cse7 (< |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2) .cse8)) (.cse9 (not .cse24)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not .cse23)) (.cse22 (= ~waterLevel~0 1)) (.cse21 (not (< 1 |old(~waterLevel~0)|))) (.cse17 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 (and .cse5 (<= ~waterLevel~0 1) .cse6 .cse7 .cse8) .cse3 .cse9 .cse10) (or .cse0 .cse11 .cse1 (and .cse5 .cse12 .cse13 .cse14 .cse15 .cse7) .cse9 .cse16 .cse17) (or .cse0 .cse11 .cse1 .cse2 .cse18 .cse19 .cse20 .cse17) (or .cse0 .cse2 .cse3 .cse21 .cse10) (or (and .cse5 .cse13 .cse14 .cse15 .cse7) .cse1 (not (= 2 |old(~waterLevel~0)|)) .cse9 .cse17) (or .cse2 .cse3 (and .cse5 .cse6 .cse7 .cse8) (not (<= |old(~waterLevel~0)| 1)) .cse10) (or .cse0 .cse1 .cse22 .cse21 .cse9 .cse17) (or .cse0 .cse1 .cse2 (and .cse5 .cse13 .cse14 .cse7) .cse21 .cse17) (or .cse11 .cse1 .cse18 .cse9 .cse16 .cse17) (or .cse0 .cse11 .cse1 .cse2 .cse19 (and .cse5 .cse12 .cse13 .cse14 .cse7 .cse8) .cse20 .cse17) (or .cse0 .cse1 .cse3 .cse4 .cse9) (or .cse0 .cse1 .cse2 (and .cse22 .cse8) .cse21 .cse17)))) [2021-12-16 01:02:04,013 INFO L858 garLoopResultBuilder]: For program point L956-1(line 956) no Hoare annotation was computed. [2021-12-16 01:02:04,013 INFO L854 garLoopResultBuilder]: At program point L593(line 593) the Hoare annotation is: (let ((.cse5 (not (= ~systemActive~0 0))) (.cse1 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (< 1 |old(~waterLevel~0)|))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (and .cse1 (= ~pumpRunning~0 0)) .cse2 .cse3 .cse4) (or .cse0 .cse3 .cse4 .cse5) (or .cse6 .cse2 .cse7 (not (<= |old(~waterLevel~0)| 1)) .cse8) (or .cse0 .cse4 .cse7 .cse5) (or .cse0 .cse2 .cse3 .cse9 .cse8) (or .cse0 (and .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) .cse2 .cse4 .cse7) (or .cse0 .cse2 .cse9 .cse7 .cse8) (or .cse0 .cse6 .cse2 .cse3 .cse8))) [2021-12-16 01:02:04,013 INFO L854 garLoopResultBuilder]: At program point L593-1(lines 574 598) the Hoare annotation is: (let ((.cse22 (= ~methaneLevelCritical~0 0)) (.cse20 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse23 (<= ~waterLevel~0 0)) (.cse6 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~5#1|)) (.cse18 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse7 (= ~pumpRunning~0 0))) (let ((.cse17 (not (= ~systemActive~0 0))) (.cse9 (and .cse18 .cse7)) (.cse10 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse14 (and .cse4 .cse23 .cse18 .cse6 .cse7)) (.cse16 (= 0 ~methaneLevelCritical~0)) (.cse5 (= ~waterLevel~0 1)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (< 1 |old(~waterLevel~0)|))) (.cse19 (not (<= |old(~waterLevel~0)| 0))) (.cse21 (and .cse4 .cse23 .cse18 .cse22 .cse6 .cse20)) (.cse13 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse1 (not (= 1 ~systemActive~0))) (.cse11 (not .cse22)) (.cse15 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse12 (not (<= |old(~waterLevel~0)| 1))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5 .cse6 .cse7) .cse8) (or .cse9 .cse1 .cse10 .cse11 .cse12) (or .cse0 .cse9 .cse1 .cse2 .cse10) (or .cse0 .cse13 .cse1 .cse2 .cse14 (and .cse15 .cse4 .cse6 .cse7) .cse16 .cse8) (or .cse0 .cse2 .cse10 .cse17) (or .cse0 .cse10 .cse11 .cse17) (or .cse0 (and .cse18 (<= 1 ~pumpRunning~0)) .cse9 .cse1 .cse10 .cse11) (or .cse0 .cse13 .cse1 .cse2 .cse19 .cse14 .cse16 .cse8) (or (and .cse4 .cse5 .cse6 .cse20) .cse0 .cse1 .cse3 .cse11 .cse8) (or .cse21 .cse13 .cse1 .cse19 .cse11 .cse8) (or .cse21 .cse13 .cse1 .cse11 (and .cse15 .cse4 .cse6 .cse20) .cse12 .cse8)))) [2021-12-16 01:02:04,013 INFO L858 garLoopResultBuilder]: For program point L527-1(lines 527 533) no Hoare annotation was computed. [2021-12-16 01:02:04,013 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 513 539) no Hoare annotation was computed. [2021-12-16 01:02:04,013 INFO L858 garLoopResultBuilder]: For program point L420(line 420) no Hoare annotation was computed. [2021-12-16 01:02:04,013 INFO L858 garLoopResultBuilder]: For program point L738(lines 738 742) no Hoare annotation was computed. [2021-12-16 01:02:04,014 INFO L854 garLoopResultBuilder]: At program point L738-2(lines 734 745) the Hoare annotation is: (let ((.cse13 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse17 (<= 1 ~methaneLevelCritical~0)) (.cse12 (<= 1 ~switchedOnBeforeTS~0)) (.cse14 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (let ((.cse4 (and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse12 .cse14)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (not (= ~systemActive~0 0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse5 (and .cse12 (<= ~waterLevel~0 0) .cse13 (<= 1 ~pumpRunning~0) .cse14 .cse17 (= ~systemActive~0 1))) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse11 (not (<= |old(~waterLevel~0)| 0))) (.cse8 (= 0 ~methaneLevelCritical~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse7 (not .cse17)) (.cse15 (and .cse12 (= ~waterLevel~0 1) .cse14)) (.cse16 (not (< 1 |old(~waterLevel~0)|))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse5 .cse6 .cse1 .cse7 .cse8 .cse9) (or .cse4 (not (= |old(~waterLevel~0)| 1)) .cse6 .cse1 .cse3 .cse9) (or .cse0 .cse1 .cse7 .cse2) (or .cse0 .cse7 .cse2 .cse10) (or .cse0 .cse2 .cse3 .cse10) (or .cse6 .cse1 .cse11 .cse3 (and .cse12 .cse13 .cse14) .cse9) (or .cse0 .cse1 .cse15 .cse16 .cse3 .cse9) (or .cse0 .cse5 .cse6 .cse1 .cse7 .cse11 .cse8 .cse9) (or .cse0 .cse1 .cse7 .cse15 .cse16 .cse9)))) [2021-12-16 01:02:04,014 INFO L854 garLoopResultBuilder]: At program point L941(line 941) the Hoare annotation is: (let ((.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse14 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|))) (let ((.cse1 (and .cse12 .cse14 (= ~pumpRunning~0 0))) (.cse10 (and .cse12 .cse14 .cse13)) (.cse11 (not (< 1 |old(~waterLevel~0)|))) (.cse8 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse5 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (and .cse12 .cse13 .cse14)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= ~systemActive~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse3 .cse6) (or .cse0 .cse5 .cse7 .cse2 .cse3) (or .cse8 .cse5 .cse7 .cse6 (not (<= |old(~waterLevel~0)| 1)) .cse9) (or .cse10 .cse0 .cse5 .cse2 .cse11 .cse9) (or .cse10 .cse0 .cse5 .cse11 .cse6 .cse9) (or .cse0 .cse8 .cse5 .cse7 .cse2 .cse9) (or .cse0 .cse7 .cse3 .cse6 .cse4)))) [2021-12-16 01:02:04,014 INFO L858 garLoopResultBuilder]: For program point L941-1(line 941) no Hoare annotation was computed. [2021-12-16 01:02:04,014 INFO L858 garLoopResultBuilder]: For program point L520(lines 520 526) no Hoare annotation was computed. [2021-12-16 01:02:04,014 INFO L858 garLoopResultBuilder]: For program point L520-2(lines 516 538) no Hoare annotation was computed. [2021-12-16 01:02:04,014 INFO L858 garLoopResultBuilder]: For program point L582(lines 582 590) no Hoare annotation was computed. [2021-12-16 01:02:04,014 INFO L854 garLoopResultBuilder]: At program point L421(lines 416 423) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~systemActive~0 0))) (.cse8 (not (< 1 |old(~waterLevel~0)|))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse2) (or .cse0 .cse4 .cse2 .cse5) (or .cse6 .cse1 .cse3 (not (<= |old(~waterLevel~0)| 1)) .cse7) (or .cse0 .cse2 .cse3 .cse5) (or .cse0 .cse1 .cse4 .cse8 .cse7) (or .cse0 .cse1 .cse8 .cse3 .cse7) (or .cse0 .cse6 .cse1 .cse4 .cse7))) [2021-12-16 01:02:04,014 INFO L858 garLoopResultBuilder]: For program point L578(lines 578 595) no Hoare annotation was computed. [2021-12-16 01:02:04,014 INFO L858 garLoopResultBuilder]: For program point L958(lines 958 968) no Hoare annotation was computed. [2021-12-16 01:02:04,014 INFO L858 garLoopResultBuilder]: For program point L954(lines 954 971) no Hoare annotation was computed. [2021-12-16 01:02:04,014 INFO L854 garLoopResultBuilder]: At program point L954-1(lines 946 974) the Hoare annotation is: (let ((.cse20 (<= 1 ~switchedOnBeforeTS~0)) (.cse28 (<= ~waterLevel~0 0)) (.cse21 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~5#1|)) (.cse29 (<= 1 ~methaneLevelCritical~0)) (.cse25 (= ~pumpRunning~0 0)) (.cse18 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| ~waterLevel~0)) (.cse6 (<= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1|)) (.cse27 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse22 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse23 (= |timeShift_getWaterLevel_#res#1| ~waterLevel~0))) (let ((.cse10 (and .cse18 .cse6 .cse27 .cse22 .cse23)) (.cse16 (and .cse18 .cse27 .cse22 .cse23)) (.cse8 (not (<= |old(~waterLevel~0)| 1))) (.cse9 (not (= ~systemActive~0 0))) (.cse19 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse13 (and .cse18 .cse20 .cse28 .cse27 .cse21 .cse29 .cse23 .cse25)) (.cse14 (= 0 ~methaneLevelCritical~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not .cse29)) (.cse26 (= ~waterLevel~0 1)) (.cse24 (not (< 1 |old(~waterLevel~0)|))) (.cse11 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse17 (and .cse18 .cse20 .cse6 .cse28 .cse21 .cse27 .cse22 .cse23)) (.cse12 (not (<= |old(~waterLevel~0)| 0))) (.cse15 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= 2 |old(~waterLevel~0)|))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse5 (and .cse18 .cse27 (<= 2 ~waterLevel~0) .cse23 .cse25))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse4 .cse7 .cse8 .cse9) (or .cse10 .cse1 .cse4 .cse7 .cse8) (or .cse0 .cse11 .cse1 .cse3 .cse12 .cse13 .cse14 .cse15) (or .cse0 .cse10 .cse1 .cse3 .cse4 .cse8) (or .cse16 .cse0 .cse4 .cse7 .cse9) (or .cse0 .cse11 .cse1 .cse17 (and .cse18 .cse19 .cse20 .cse6 .cse21 .cse22 .cse23) .cse7 .cse15) (or .cse0 .cse1 .cse3 (and .cse18 .cse20 .cse21 .cse23) .cse24 .cse15) (or .cse0 .cse16 .cse3 .cse4 .cse9) (or .cse6 .cse3 .cse4 .cse8 .cse9) (or .cse0 .cse11 .cse1 .cse3 (and .cse18 .cse19 .cse20 .cse21 .cse23 .cse25) .cse13 .cse14 .cse15) (or .cse0 (and .cse18 .cse20 .cse26 .cse6 .cse21 .cse22 .cse23) .cse1 .cse24 .cse7 .cse15) (or .cse0 .cse1 .cse3 (and .cse26 .cse25) .cse24 .cse15) (or .cse11 .cse1 .cse17 .cse12 .cse7 .cse15) (or .cse1 .cse2 (and .cse18 .cse27 (<= 1 ~pumpRunning~0) .cse23) .cse4 .cse7 .cse5)))) [2021-12-16 01:02:04,014 INFO L858 garLoopResultBuilder]: For program point L959(lines 959 965) no Hoare annotation was computed. [2021-12-16 01:02:04,014 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 513 539) the Hoare annotation is: (let ((.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse14 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|))) (let ((.cse1 (and .cse12 .cse14 (= ~pumpRunning~0 0))) (.cse10 (and .cse12 .cse14 .cse13)) (.cse11 (not (< 1 |old(~waterLevel~0)|))) (.cse8 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse5 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (and .cse12 .cse13 .cse14)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= ~systemActive~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse3 .cse6) (or .cse0 .cse5 .cse7 .cse2 .cse3) (or .cse8 .cse5 .cse7 .cse6 (not (<= |old(~waterLevel~0)| 1)) .cse9) (or .cse10 .cse0 .cse5 .cse2 .cse11 .cse9) (or .cse10 .cse0 .cse5 .cse11 .cse6 .cse9) (or .cse0 .cse8 .cse5 .cse7 .cse2 .cse9) (or .cse0 .cse7 .cse3 .cse6 .cse4)))) [2021-12-16 01:02:04,015 INFO L854 garLoopResultBuilder]: At program point L943(lines 936 945) the Hoare annotation is: (let ((.cse11 (<= 1 ~switchedOnBeforeTS~0)) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse14 (= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse4 (not (= ~systemActive~0 0))) (.cse1 (and .cse14 (= ~pumpRunning~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse6 (not (<= |old(~waterLevel~0)| 1))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (= 1 ~systemActive~0))) (.cse13 (not (< 1 |old(~waterLevel~0)|))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse9 (and .cse11 .cse14 .cse12)) (.cse10 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse5 .cse2 .cse3 .cse6) (or .cse0 .cse1 .cse5 .cse7 .cse2) (or .cse0 .cse8 .cse5 .cse7 .cse9 .cse10) (or .cse0 .cse1 .cse7 .cse2 .cse4) (or .cse1 .cse5 (not (= 2 |old(~waterLevel~0)|)) .cse2 .cse3) (or .cse8 .cse5 .cse3 .cse6 .cse9 .cse10) (or .cse0 .cse5 .cse7 (and .cse11 .cse12 (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse13 .cse10) (or .cse0 .cse5 .cse13 .cse3 .cse9 .cse10)))) [2021-12-16 01:02:04,015 INFO L854 garLoopResultBuilder]: At program point L588(line 588) the Hoare annotation is: (let ((.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse13 (= ~methaneLevelCritical~0 0)) (.cse10 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~5#1|)) (.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~systemActive~0 0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (< 1 |old(~waterLevel~0)|))) (.cse12 (and .cse9 (<= ~waterLevel~0 0) (= ~waterLevel~0 |old(~waterLevel~0)|) .cse13 .cse10 .cse11)) (.cse8 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not .cse13)) (.cse7 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse2) (or .cse0 .cse4 .cse2 .cse5) (or .cse0 .cse2 .cse3 .cse5) (or .cse0 .cse1 .cse4 .cse6 .cse7) (or .cse0 .cse8 .cse1 .cse4 .cse7) (or (and .cse9 (= ~waterLevel~0 1) .cse10 .cse11) .cse0 .cse1 .cse6 .cse3 .cse7) (or .cse12 .cse8 .cse1 (not (<= |old(~waterLevel~0)| 0)) .cse3 .cse7) (or .cse12 .cse8 .cse1 .cse3 (and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse9 .cse10 .cse11) (not (<= |old(~waterLevel~0)| 1)) .cse7)))) [2021-12-16 01:02:04,015 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 513 539) no Hoare annotation was computed. [2021-12-16 01:02:04,015 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 420) no Hoare annotation was computed. [2021-12-16 01:02:04,027 INFO L854 garLoopResultBuilder]: At program point L584(line 584) the Hoare annotation is: (let ((.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~5#1|)) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse14 (<= 1 ~methaneLevelCritical~0))) (let ((.cse4 (and .cse7 (<= ~waterLevel~0 0) (= ~waterLevel~0 |old(~waterLevel~0)|) .cse8 .cse9 .cse14 (= ~systemActive~0 1))) (.cse10 (= 0 ~methaneLevelCritical~0)) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse12 (not (= ~systemActive~0 0))) (.cse6 (not .cse14)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse13 (not (< 1 |old(~waterLevel~0)|))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse11 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse5 .cse1 .cse6 (and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse7 .cse8 .cse9) .cse10 .cse11) (or .cse4 .cse0 .cse5 .cse1 .cse6 (not (<= |old(~waterLevel~0)| 0)) .cse10 .cse11) (or .cse0 .cse1 .cse6 .cse2) (or .cse0 .cse6 .cse2 .cse12) (or .cse5 .cse1 .cse3 (not (<= |old(~waterLevel~0)| 1)) .cse11) (or .cse0 .cse2 .cse3 .cse12) (or .cse0 (= ~waterLevel~0 1) .cse1 .cse6 .cse13 .cse11) (or .cse0 .cse1 .cse6 (and .cse7 .cse8 .cse9) .cse13 .cse11) (or .cse0 .cse1 .cse13 .cse3 .cse11)))) [2021-12-16 01:02:04,027 INFO L854 garLoopResultBuilder]: At program point L807(lines 802 810) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse24 (= ~methaneLevelCritical~0 0)) (.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse23 (<= ~waterLevel~0 0)) (.cse16 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse7 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~5#1|)) (.cse9 (= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse22 (= ~pumpRunning~0 0))) (let ((.cse14 (not (<= |old(~waterLevel~0)| 0))) (.cse18 (and .cse5 .cse23 .cse16 .cse7 .cse9 .cse22)) (.cse19 (= 0 ~methaneLevelCritical~0)) (.cse6 (= ~waterLevel~0 1)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (not (< 1 |old(~waterLevel~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse17 (not (= ~systemActive~0 0))) (.cse4 (and .cse16 .cse9 .cse22)) (.cse13 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse1 (not (= 1 ~systemActive~0))) (.cse11 (not .cse24)) (.cse15 (and .cse5 .cse23 .cse16 .cse24 .cse7 .cse8 .cse9)) (.cse20 (not (<= |old(~waterLevel~0)| 1))) (.cse12 (not (<= 1 |old(~pumpRunning~0)|))) (.cse21 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (and .cse5 .cse6 .cse7 .cse8 .cse9) .cse0 .cse1 .cse10 .cse11 .cse12) (or .cse13 .cse1 .cse14 .cse11 .cse15 .cse12) (or .cse1 (not (= 2 |old(~waterLevel~0)|)) .cse3 .cse11 .cse4 (and .cse16 (<= 1 ~pumpRunning~0) .cse9)) (or .cse0 .cse2 .cse3 .cse4 .cse17) (or .cse0 .cse18 .cse13 .cse1 .cse2 .cse14 .cse19 .cse12) (or .cse1 .cse3 .cse11 .cse20 .cse4) (or .cse0 .cse18 .cse13 .cse1 .cse2 (and .cse21 .cse5 .cse7 .cse9 .cse22) .cse19 .cse12) (or .cse0 .cse1 .cse2 (and .cse6 .cse22) .cse10 .cse12) (or .cse0 (and .cse5 .cse7 .cse9) .cse1 .cse2 .cse10 .cse12) (or .cse0 .cse3 .cse11 .cse17 .cse4) (or .cse13 .cse1 .cse11 .cse15 .cse20 .cse12 (and .cse21 .cse5 .cse7 .cse8 .cse9))))) [2021-12-16 01:02:04,028 INFO L854 garLoopResultBuilder]: At program point L580(line 580) the Hoare annotation is: (let ((.cse13 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse17 (<= 1 ~methaneLevelCritical~0)) (.cse12 (<= 1 ~switchedOnBeforeTS~0)) (.cse14 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (let ((.cse4 (and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse12 .cse14)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (not (= ~systemActive~0 0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse5 (and .cse12 (<= ~waterLevel~0 0) .cse13 (<= 1 ~pumpRunning~0) .cse14 .cse17 (= ~systemActive~0 1))) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse11 (not (<= |old(~waterLevel~0)| 0))) (.cse8 (= 0 ~methaneLevelCritical~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse7 (not .cse17)) (.cse15 (and .cse12 (= ~waterLevel~0 1) .cse14)) (.cse16 (not (< 1 |old(~waterLevel~0)|))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse5 .cse6 .cse1 .cse7 .cse8 .cse9) (or .cse4 (not (= |old(~waterLevel~0)| 1)) .cse6 .cse1 .cse3 .cse9) (or .cse0 .cse1 .cse7 .cse2) (or .cse0 .cse7 .cse2 .cse10) (or .cse0 .cse2 .cse3 .cse10) (or .cse6 .cse1 .cse11 .cse3 (and .cse12 .cse13 .cse14) .cse9) (or .cse0 .cse1 .cse15 .cse16 .cse3 .cse9) (or .cse0 .cse5 .cse6 .cse1 .cse7 .cse11 .cse8 .cse9) (or .cse0 .cse1 .cse7 .cse15 .cse16 .cse9)))) [2021-12-16 01:02:04,028 INFO L858 garLoopResultBuilder]: For program point L580-1(line 580) no Hoare annotation was computed. [2021-12-16 01:02:04,028 INFO L854 garLoopResultBuilder]: At program point L1006(lines 1001 1009) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:02:04,028 INFO L861 garLoopResultBuilder]: At program point L494(lines 431 498) the Hoare annotation is: true [2021-12-16 01:02:04,028 INFO L858 garLoopResultBuilder]: For program point L461(lines 461 467) no Hoare annotation was computed. [2021-12-16 01:02:04,028 INFO L858 garLoopResultBuilder]: For program point L461-1(lines 461 467) no Hoare annotation was computed. [2021-12-16 01:02:04,029 INFO L854 garLoopResultBuilder]: At program point L713(line 713) the Hoare annotation is: (let ((.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse7 (<= ~waterLevel~0 1)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse9 (= ~systemActive~0 1)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (< 1 ~waterLevel~0)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (<= ~waterLevel~0 2)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse6 .cse7 .cse3 .cse8 .cse9) (and .cse0 .cse6 .cse7 .cse2 .cse3 .cse9) (and .cse0 .cse1 .cse3 .cse4 .cse8 .cse5))) [2021-12-16 01:02:04,029 INFO L854 garLoopResultBuilder]: At program point L998(lines 994 1000) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:02:04,029 INFO L854 garLoopResultBuilder]: At program point L453(line 453) the Hoare annotation is: (let ((.cse1 (= ~systemActive~0 0)) (.cse4 (= 2 ~waterLevel~0)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse9 (= 1 ~systemActive~0)) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse7 (<= ~waterLevel~0 1)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse6 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) .cse3) (and .cse4 .cse0 .cse2 .cse5 .cse6) (and .cse0 .cse7 .cse1 .cse8 .cse3) (and .cse4 .cse0 .cse2 .cse9 .cse3) (and .cse0 .cse7 .cse2 .cse3 .cse9) (and .cse0 .cse7 .cse8 .cse3 .cse9) (and .cse4 .cse0 .cse1 .cse8 .cse3) (and .cse4 .cse0 .cse8 .cse9 .cse3) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse7 .cse2 .cse5 .cse6))) [2021-12-16 01:02:04,029 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-16 01:02:04,029 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-16 01:02:04,029 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-16 01:02:04,029 INFO L854 garLoopResultBuilder]: At program point L491(lines 440 492) the Hoare annotation is: false [2021-12-16 01:02:04,030 INFO L854 garLoopResultBuilder]: At program point L933(lines 928 935) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:02:04,030 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-16 01:02:04,030 INFO L854 garLoopResultBuilder]: At program point L991(lines 987 993) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:02:04,030 INFO L858 garLoopResultBuilder]: For program point L479(lines 479 485) no Hoare annotation was computed. [2021-12-16 01:02:04,031 INFO L854 garLoopResultBuilder]: At program point L479-2(lines 471 486) the Hoare annotation is: (let ((.cse4 (= 1 ~systemActive~0)) (.cse5 (= ~systemActive~0 0)) (.cse2 (<= ~waterLevel~0 2)) (.cse7 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse8 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse1 .cse2 .cse3) (and .cse0 .cse6 (<= 2 ~waterLevel~0) .cse2 .cse7 .cse8) (and .cse0 (< 1 ~waterLevel~0) .cse1 .cse6 .cse2 .cse4) (and .cse0 .cse9 (= ~waterLevel~0 1) .cse1 .cse6 .cse8) (and .cse0 .cse2 .cse7 .cse3 .cse4) (and .cse0 .cse9 .cse6 .cse2 .cse7 .cse4) (and .cse0 .cse5 .cse2 .cse7 .cse3) (and .cse0 .cse9 (<= ~waterLevel~0 0) .cse1 .cse6 .cse8))) [2021-12-16 01:02:04,031 INFO L858 garLoopResultBuilder]: For program point L442(lines 441 490) no Hoare annotation was computed. [2021-12-16 01:02:04,031 INFO L858 garLoopResultBuilder]: For program point L471(lines 471 486) no Hoare annotation was computed. [2021-12-16 01:02:04,031 INFO L854 garLoopResultBuilder]: At program point L727(lines 722 729) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse2 (<= ~waterLevel~0 2)) (.cse6 (<= 1 ~methaneLevelCritical~0)) (.cse4 (= 1 ~systemActive~0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse7 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 (<= 2 ~waterLevel~0) .cse2 .cse6 .cse7) (and .cse0 (< 1 ~waterLevel~0) .cse1 .cse5 .cse2 .cse4) (and .cse0 .cse8 (= ~waterLevel~0 1) .cse1 .cse5 .cse7) (and .cse0 .cse2 .cse6 .cse3 .cse4) (and .cse0 .cse8 .cse5 .cse2 .cse6 .cse4) (and .cse0 .cse8 (<= ~waterLevel~0 0) .cse1 .cse5 .cse7))) [2021-12-16 01:02:04,031 INFO L858 garLoopResultBuilder]: For program point L913(lines 913 920) no Hoare annotation was computed. [2021-12-16 01:02:04,031 INFO L854 garLoopResultBuilder]: At program point L463(line 463) the Hoare annotation is: (let ((.cse5 (= 1 ~systemActive~0)) (.cse1 (= ~systemActive~0 0)) (.cse9 (<= 1 ~methaneLevelCritical~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse3 (<= ~waterLevel~0 2)) (.cse8 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and (= 2 ~waterLevel~0) .cse0 .cse2 .cse5 .cse4) (and .cse0 .cse6 (= ~waterLevel~0 1) .cse2 .cse7 .cse8) (and .cse0 (<= ~waterLevel~0 1) .cse2 .cse4 .cse5) (and .cse0 .cse3 .cse9 .cse4 .cse5) (and .cse0 .cse1 .cse3 .cse9 .cse4) (and .cse0 .cse6 (<= ~waterLevel~0 0) .cse2 .cse7 .cse8) (and .cse0 .cse2 .cse7 (<= 2 ~waterLevel~0) .cse3 .cse8))) [2021-12-16 01:02:04,031 INFO L854 garLoopResultBuilder]: At program point L719(lines 707 721) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= ~systemActive~0 0)) (.cse2 (<= ~waterLevel~0 2)) (.cse3 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 (= ~methaneLevelCritical~0 0) .cse2 .cse3) (and .cse0 .cse1 .cse2 (<= 1 ~methaneLevelCritical~0) .cse3))) [2021-12-16 01:02:04,032 INFO L858 garLoopResultBuilder]: For program point L913-2(lines 913 920) no Hoare annotation was computed. [2021-12-16 01:02:04,032 INFO L854 garLoopResultBuilder]: At program point L488(lines 441 490) the Hoare annotation is: (let ((.cse4 (= 2 ~waterLevel~0)) (.cse12 (<= ~waterLevel~0 1)) (.cse9 (= 1 ~systemActive~0)) (.cse10 (<= 1 ~switchedOnBeforeTS~0)) (.cse7 (<= ~waterLevel~0 0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse6 (= ~systemActive~0 1)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse11 (= ~waterLevel~0 1)) (.cse1 (= ~systemActive~0 0)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) .cse3) (and .cse4 .cse0 .cse2 .cse5 .cse6) (and .cse0 .cse7 .cse1 .cse8 .cse3) (and .cse4 .cse0 .cse2 .cse9 .cse3) (and .cse0 .cse10 .cse11 .cse2 .cse5 .cse6) (and .cse0 .cse12 .cse2 .cse3 .cse9) (and .cse4 .cse0 .cse1 .cse8 .cse3) (and .cse4 .cse0 .cse8 .cse9 .cse3) (and .cse0 .cse12 .cse8 .cse9 .cse3) (and .cse0 .cse10 .cse7 .cse2 .cse5 .cse6) (and .cse0 .cse11 .cse1 .cse8 .cse3))) [2021-12-16 01:02:04,033 INFO L858 garLoopResultBuilder]: For program point L711(lines 711 717) no Hoare annotation was computed. [2021-12-16 01:02:04,033 INFO L858 garLoopResultBuilder]: For program point L711-1(lines 711 717) no Hoare annotation was computed. [2021-12-16 01:02:04,033 INFO L858 garLoopResultBuilder]: For program point L451(lines 451 457) no Hoare annotation was computed. [2021-12-16 01:02:04,033 INFO L858 garLoopResultBuilder]: For program point L451-1(lines 451 457) no Hoare annotation was computed. [2021-12-16 01:02:04,033 INFO L861 garLoopResultBuilder]: At program point L897(lines 889 899) the Hoare annotation is: true [2021-12-16 01:02:04,033 INFO L858 garLoopResultBuilder]: For program point L443(lines 443 447) no Hoare annotation was computed. [2021-12-16 01:02:04,033 INFO L861 garLoopResultBuilder]: At program point L922(lines 903 925) the Hoare annotation is: true [2021-12-16 01:02:04,033 INFO L854 garLoopResultBuilder]: At program point L885(lines 881 887) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:02:04,033 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 746 757) no Hoare annotation was computed. [2021-12-16 01:02:04,034 INFO L858 garLoopResultBuilder]: For program point L750-1(lines 746 757) no Hoare annotation was computed. [2021-12-16 01:02:04,034 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 746 757) the Hoare annotation is: (let ((.cse5 (not (<= |old(~waterLevel~0)| 1))) (.cse6 (not (= ~systemActive~0 0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= 2 |old(~waterLevel~0)|))) (.cse8 (not (<= 1 ~pumpRunning~0))) (.cse3 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse3 .cse4 .cse5) (or .cse0 .cse3 .cse4 .cse5 .cse6) (or (not (<= |old(~waterLevel~0)| 2)) .cse0 (and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse7 (not (< 1 |old(~waterLevel~0)|)) .cse6) (or .cse0 .cse1 .cse7 .cse3 .cse5) (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 .cse8 .cse3 .cse4 .cse5) (or .cse0 .cse7 .cse3 .cse5 .cse6) (or .cse0 .cse2 .cse3 .cse4 .cse6) (or .cse0 .cse1 .cse2 .cse7 .cse3) (or .cse1 .cse2 .cse8 .cse3 .cse4))) [2021-12-16 01:02:04,034 INFO L854 garLoopResultBuilder]: At program point L820(lines 811 824) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= ~waterLevel~0 1))) (.cse5 (and (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|) .cse3)) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (and (or (not (= 2 ~waterLevel~0)) .cse0 .cse1 .cse2 .cse3) (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse4 .cse0 .cse2 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse4 .cse0 .cse1 .cse2 .cse5) (or .cse4 .cse0 .cse6 .cse1 .cse5) (or .cse0 .cse6 (not (<= ~waterLevel~0 2)) .cse1 .cse3)))) [2021-12-16 01:02:04,034 INFO L854 garLoopResultBuilder]: At program point L562(line 562) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 1))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (not (< 1 ~waterLevel~0))) (.cse2 (and (= |processEnvironment__wrappee__methaneQuery_~tmp~4#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0))) (.cse7 (not (<= ~waterLevel~0 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 .cse4 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 .cse2 .cse5 .cse3) (or .cse1 .cse2 .cse6 .cse5 .cse7 .cse3) (or .cse1 .cse6 .cse2 .cse7 .cse3 .cse4))) [2021-12-16 01:02:04,034 INFO L858 garLoopResultBuilder]: For program point L556(lines 556 564) no Hoare annotation was computed. [2021-12-16 01:02:04,034 INFO L858 garLoopResultBuilder]: For program point L552(lines 552 569) no Hoare annotation was computed. [2021-12-16 01:02:04,034 INFO L858 garLoopResultBuilder]: For program point L614(lines 614 620) no Hoare annotation was computed. [2021-12-16 01:02:04,035 INFO L854 garLoopResultBuilder]: At program point L612(line 612) the Hoare annotation is: (let ((.cse4 (not (<= ~waterLevel~0 1))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0))) (and (or (not (= 2 ~waterLevel~0)) .cse0 .cse1 .cse2 .cse3) (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse4 .cse0 .cse2 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse4 .cse0 .cse5 .cse1) (or .cse4 .cse0 .cse1 .cse2) (or .cse0 .cse5 (not (<= ~waterLevel~0 2)) .cse1 .cse3))) [2021-12-16 01:02:04,036 INFO L854 garLoopResultBuilder]: At program point L614-2(lines 607 623) the Hoare annotation is: (let ((.cse2 (= 2 ~waterLevel~0)) (.cse3 (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~6#1| ~methaneLevelCritical~0)) (.cse4 (not (<= ~waterLevel~0 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (<= ~waterLevel~0 2)) .cse1 (and .cse2 .cse3 (= ~pumpRunning~0 0))) (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse4 .cse0 .cse5 (not (<= 1 |old(~pumpRunning~0)|))) (or (not .cse2) .cse0 .cse1 .cse5 (and (<= 1 ~pumpRunning~0) .cse3)) (or .cse4 .cse0 .cse1 .cse5))) [2021-12-16 01:02:04,037 INFO L858 garLoopResultBuilder]: For program point L612-1(line 612) no Hoare annotation was computed. [2021-12-16 01:02:04,038 INFO L854 garLoopResultBuilder]: At program point L703(lines 688 706) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0))) (let ((.cse4 (not (<= ~waterLevel~0 1))) (.cse6 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0) .cse3)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (and (or (not (= 2 ~waterLevel~0)) .cse0 .cse1 .cse2 .cse3) (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse4 .cse0 .cse2 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse4 .cse0 .cse5 .cse6 .cse1) (or .cse4 .cse0 .cse6 .cse1 .cse2) (or .cse0 .cse5 (not (<= ~waterLevel~0 2)) .cse1 .cse3)))) [2021-12-16 01:02:04,038 INFO L854 garLoopResultBuilder]: At program point L604(lines 599 606) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 1))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 .cse2 (not (<= 1 |old(~pumpRunning~0)|))) (or (not (= 2 ~waterLevel~0)) .cse1 .cse3 .cse2 (and (<= 1 ~pumpRunning~0) (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~6#1| ~methaneLevelCritical~0))) (or .cse0 .cse1 .cse3 .cse2) (or .cse1 (not (<= 1 ~methaneLevelCritical~0)) (not (<= ~waterLevel~0 2)) .cse3))) [2021-12-16 01:02:04,038 INFO L858 garLoopResultBuilder]: For program point L697(lines 697 701) no Hoare annotation was computed. [2021-12-16 01:02:04,038 INFO L858 garLoopResultBuilder]: For program point L697-2(lines 697 701) no Hoare annotation was computed. [2021-12-16 01:02:04,038 INFO L854 garLoopResultBuilder]: At program point L567(line 567) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= ~waterLevel~0 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse2 .cse3 .cse1) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2 .cse3))) [2021-12-16 01:02:04,043 INFO L858 garLoopResultBuilder]: For program point L567-1(lines 548 572) no Hoare annotation was computed. [2021-12-16 01:02:04,043 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 548 572) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (not (<= ~waterLevel~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse5 (= ~pumpRunning~0 0))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 .cse2 .cse3 (not (<= 1 |old(~pumpRunning~0)|))) (or (not (= 2 ~waterLevel~0)) .cse1 .cse4 .cse3 .cse5) (or .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (<= ~waterLevel~0 2)) .cse4) (or .cse0 .cse1 .cse4 .cse3 .cse5))) [2021-12-16 01:02:04,043 INFO L858 garLoopResultBuilder]: For program point L815(lines 815 821) no Hoare annotation was computed. [2021-12-16 01:02:04,043 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 548 572) no Hoare annotation was computed. [2021-12-16 01:02:04,043 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 643 651) no Hoare annotation was computed. [2021-12-16 01:02:04,043 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 643 651) the Hoare annotation is: true [2021-12-16 01:02:04,044 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 643 651) no Hoare annotation was computed. [2021-12-16 01:02:04,044 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 632 642) the Hoare annotation is: true [2021-12-16 01:02:04,044 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 632 642) no Hoare annotation was computed. [2021-12-16 01:02:04,044 INFO L854 garLoopResultBuilder]: At program point L775(lines 770 778) the Hoare annotation is: (let ((.cse0 (not (= 2 ~waterLevel~0))) (.cse2 (not (= ~pumpRunning~0 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse6 (not (<= ~waterLevel~0 1))) (.cse1 (= |isMethaneAlarm_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse3 (not (= 1 ~systemActive~0))) (.cse8 (not (<= 1 ~pumpRunning~0))) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse1 .cse3 .cse7 .cse8) (or .cse0 .cse1 .cse2 .cse3 .cse7) (or .cse5 .cse6 .cse1 .cse3 .cse8 .cse4))) [2021-12-16 01:02:04,044 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 632 642) no Hoare annotation was computed. [2021-12-16 01:02:04,046 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:02:04,047 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-16 01:02:04,134 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.12 01:02:04 BoogieIcfgContainer [2021-12-16 01:02:04,151 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-16 01:02:04,152 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-16 01:02:04,152 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-16 01:02:04,152 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-16 01:02:04,152 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 01:01:25" (3/4) ... [2021-12-16 01:02:04,154 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-16 01:02:04,159 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-16 01:02:04,159 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-16 01:02:04,159 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-16 01:02:04,159 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-16 01:02:04,159 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-16 01:02:04,160 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-16 01:02:04,160 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-12-16 01:02:04,160 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-12-16 01:02:04,160 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-12-16 01:02:04,169 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 50 nodes and edges [2021-12-16 01:02:04,183 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-16 01:02:04,184 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-16 01:02:04,184 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-16 01:02:04,184 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-16 01:02:04,185 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 01:02:04,185 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 01:02:04,217 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 0)) && (((((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1))) && ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0))) && (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && (((((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(1 == systemActive)) || !(2 == \old(waterLevel))) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && (((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && waterLevel <= 2)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) [2021-12-16 01:02:04,217 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) && (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && pumpRunning == \old(pumpRunning)) || !(\old(waterLevel) <= 2)) || ((((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && systemActive == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && pumpRunning == \old(pumpRunning)) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0))) && (((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && (((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || !(\old(waterLevel) <= 0)) || !(methaneLevelCritical == 0)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((((!(\old(waterLevel) <= 2) || ((((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && systemActive == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning))) [2021-12-16 01:02:04,218 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(2 == \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || ((((tmp == waterLevel && waterLevel == \old(waterLevel)) && 2 <= waterLevel) && \result == waterLevel) && pumpRunning == 0)) && ((((pumpRunning <= tmp___0 || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || !(systemActive == 0))) && ((((((((tmp == waterLevel && pumpRunning <= tmp___0) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && \result == waterLevel) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1))) && (((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || (((((((tmp == waterLevel && 1 <= switchedOnBeforeTS) && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && 1 <= methaneLevelCritical) && \result == waterLevel) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || ((((tmp == waterLevel && pumpRunning <= tmp___0) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) <= 1))) && (((((((tmp == waterLevel && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && \result == waterLevel) || !(\old(waterLevel) <= 2)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && ((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((tmp == waterLevel && 1 <= switchedOnBeforeTS) && pumpRunning <= tmp___0) && waterLevel <= 0) && methaneLevelCritical == tmp) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || ((((((tmp == waterLevel && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && pumpRunning <= tmp___0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((tmp == waterLevel && 1 <= switchedOnBeforeTS) && methaneLevelCritical == tmp) && \result == waterLevel)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || (((tmp == waterLevel && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && ((((pumpRunning <= tmp___0 || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) <= 1)) || !(systemActive == 0))) && (((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((((tmp == waterLevel && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical == tmp) && \result == waterLevel) && pumpRunning == 0)) || (((((((tmp == waterLevel && 1 <= switchedOnBeforeTS) && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && 1 <= methaneLevelCritical) && \result == waterLevel) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || ((((((tmp == waterLevel && 1 <= switchedOnBeforeTS) && waterLevel == 1) && pumpRunning <= tmp___0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (waterLevel == 1 && pumpRunning == 0)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && (((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || (((((((tmp == waterLevel && 1 <= switchedOnBeforeTS) && pumpRunning <= tmp___0) && waterLevel <= 0) && methaneLevelCritical == tmp) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || !(\old(waterLevel) <= 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((!(1 == systemActive) || !(2 == \old(waterLevel))) || (((tmp == waterLevel && waterLevel == \old(waterLevel)) && 1 <= pumpRunning) && \result == waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || ((((tmp == waterLevel && waterLevel == \old(waterLevel)) && 2 <= waterLevel) && \result == waterLevel) && pumpRunning == 0)) [2021-12-16 01:02:04,218 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 < \old(waterLevel))) || (((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) && (((((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1))) && ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0))) && (((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && pumpRunning == 0)) || (((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical == tmp) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && (((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && 1 <= pumpRunning)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && (((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || ((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((((((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(\old(waterLevel) <= 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((((((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning))) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) [2021-12-16 01:02:04,218 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) && (((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0))) && (((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && ((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && ((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(pumpRunning))) [2021-12-16 01:02:04,218 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0)) && (((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || !(\old(waterLevel) <= 0)) || !(methaneLevelCritical == 0)) || ((((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || !(1 <= \old(pumpRunning)))) && (((((!(1 == systemActive) || !(2 == \old(waterLevel))) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0)) || ((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && \result == waterLevel))) && ((((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0)) || !(systemActive == 0))) && (((((((!(\old(waterLevel) <= 2) || (((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && \result == waterLevel) && pumpRunning == 0)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0))) && (((((((!(\old(waterLevel) <= 2) || (((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && \result == waterLevel) && pumpRunning == 0)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical == tmp) && \result == waterLevel) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (waterLevel == 1 && pumpRunning == 0)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || ((1 <= switchedOnBeforeTS && methaneLevelCritical == tmp) && \result == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 0)) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0))) && ((((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) || ((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) [2021-12-16 01:02:04,218 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(2 == waterLevel) || \result == methaneLevelCritical) || !(pumpRunning == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && (((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || \result == methaneLevelCritical) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning))) && ((((!(2 == waterLevel) || \result == methaneLevelCritical) || !(pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && (((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || \result == methaneLevelCritical) || !(1 == systemActive)) || !(1 <= pumpRunning)) || !(methaneLevelCritical == 0)) [2021-12-16 01:02:04,218 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(2 == waterLevel) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || pumpRunning == 0) && ((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((!(waterLevel <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || (1 <= \result && pumpRunning == 0))) && ((((!(waterLevel <= 1) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || (1 <= \result && pumpRunning == 0))) && ((((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) [2021-12-16 01:02:04,219 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || ((2 == waterLevel && tmp == methaneLevelCritical) && pumpRunning == 0)) && ((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((!(2 == waterLevel) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && tmp == methaneLevelCritical))) && (((!(waterLevel <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) [2021-12-16 01:02:04,219 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((((!(2 == waterLevel) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && tmp == methaneLevelCritical))) && (((!(waterLevel <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-16 01:02:04,219 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(2 == waterLevel) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || pumpRunning == 0) && ((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((!(waterLevel <= 1) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && tmp___0 == 0) && \result == 0) && pumpRunning == 0)) || !(\old(pumpRunning) == 0))) && ((((!(waterLevel <= 1) || !(1 == systemActive)) || (((pumpRunning == \old(pumpRunning) && tmp___0 == 0) && \result == 0) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && ((((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) [2021-12-16 01:02:04,262 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-16 01:02:04,263 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-16 01:02:04,263 INFO L158 Benchmark]: Toolchain (without parser) took 40186.64ms. Allocated memory was 88.1MB in the beginning and 683.7MB in the end (delta: 595.6MB). Free memory was 44.4MB in the beginning and 344.0MB in the end (delta: -299.6MB). Peak memory consumption was 298.0MB. Max. memory is 16.1GB. [2021-12-16 01:02:04,263 INFO L158 Benchmark]: CDTParser took 0.20ms. Allocated memory is still 88.1MB. Free memory was 61.8MB in the beginning and 61.7MB in the end (delta: 49.0kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-16 01:02:04,264 INFO L158 Benchmark]: CACSL2BoogieTranslator took 511.62ms. Allocated memory was 88.1MB in the beginning and 121.6MB in the end (delta: 33.6MB). Free memory was 44.2MB in the beginning and 84.9MB in the end (delta: -40.7MB). Peak memory consumption was 6.7MB. Max. memory is 16.1GB. [2021-12-16 01:02:04,264 INFO L158 Benchmark]: Boogie Procedure Inliner took 70.73ms. Allocated memory is still 121.6MB. Free memory was 84.9MB in the beginning and 82.8MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-16 01:02:04,264 INFO L158 Benchmark]: Boogie Preprocessor took 55.82ms. Allocated memory is still 121.6MB. Free memory was 82.8MB in the beginning and 80.7MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-16 01:02:04,265 INFO L158 Benchmark]: RCFGBuilder took 397.95ms. Allocated memory is still 121.6MB. Free memory was 80.7MB in the beginning and 83.7MB in the end (delta: -3.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-16 01:02:04,265 INFO L158 Benchmark]: TraceAbstraction took 39013.83ms. Allocated memory was 121.6MB in the beginning and 683.7MB in the end (delta: 562.0MB). Free memory was 82.9MB in the beginning and 351.4MB in the end (delta: -268.4MB). Peak memory consumption was 407.6MB. Max. memory is 16.1GB. [2021-12-16 01:02:04,265 INFO L158 Benchmark]: Witness Printer took 111.03ms. Allocated memory is still 683.7MB. Free memory was 351.4MB in the beginning and 344.0MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-16 01:02:04,268 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.20ms. Allocated memory is still 88.1MB. Free memory was 61.8MB in the beginning and 61.7MB in the end (delta: 49.0kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 511.62ms. Allocated memory was 88.1MB in the beginning and 121.6MB in the end (delta: 33.6MB). Free memory was 44.2MB in the beginning and 84.9MB in the end (delta: -40.7MB). Peak memory consumption was 6.7MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 70.73ms. Allocated memory is still 121.6MB. Free memory was 84.9MB in the beginning and 82.8MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 55.82ms. Allocated memory is still 121.6MB. Free memory was 82.8MB in the beginning and 80.7MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 397.95ms. Allocated memory is still 121.6MB. Free memory was 80.7MB in the beginning and 83.7MB in the end (delta: -3.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * TraceAbstraction took 39013.83ms. Allocated memory was 121.6MB in the beginning and 683.7MB in the end (delta: 562.0MB). Free memory was 82.9MB in the beginning and 351.4MB in the end (delta: -268.4MB). Peak memory consumption was 407.6MB. Max. memory is 16.1GB. * Witness Printer took 111.03ms. Allocated memory is still 683.7MB. Free memory was 351.4MB in the beginning and 344.0MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 420]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 106 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 38.9s, OverallIterations: 14, TraceHistogramMax: 8, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 12.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 17.1s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 9056 SdHoareTripleChecker+Valid, 7.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 8985 mSDsluCounter, 10536 SdHoareTripleChecker+Invalid, 5.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 8005 mSDsCounter, 4176 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 15227 IncrementalHoareTripleChecker+Invalid, 19403 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 4176 mSolverCounterUnsat, 2531 mSDtfsCounter, 15227 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 2765 GetRequests, 2287 SyntacticMatches, 11 SemanticMatches, 467 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10458 ImplicationChecksByTransitivity, 5.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=2027occurred in iteration=13, InterpolantAutomatonStates: 384, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 14 MinimizatonAttempts, 1094 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 49 LocationsWithAnnotation, 5405 PreInvPairs, 6076 NumberOfFragments, 6403 HoareAnnotationTreeSize, 5405 FomulaSimplifications, 29521 FormulaSimplificationTreeSizeReduction, 2.2s HoareSimplificationTime, 49 FomulaSimplificationsInter, 163262 FormulaSimplificationTreeSizeReductionInter, 14.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 6.6s InterpolantComputationTime, 2462 NumberOfCodeBlocks, 2462 NumberOfCodeBlocksAsserted, 19 NumberOfCheckSat, 3428 ConstructedInterpolants, 0 QuantifiedInterpolants, 7390 SizeOfPredicates, 12 NumberOfNonLiveVariables, 3673 ConjunctsInSsa, 70 ConjunctsInUnsatCore, 24 InterpolantComputations, 9 PerfectInterpolantSequences, 3157/3556 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 994]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 574]: Loop Invariant Derived loop invariant: ((((((((((((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 < \old(waterLevel))) || (((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) && (((((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1))) && ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0))) && (((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && pumpRunning == 0)) || (((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical == tmp) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && (((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && 1 <= pumpRunning)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && (((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || ((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((((((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(\old(waterLevel) <= 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((((((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning))) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 440]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 707]: Loop Invariant Derived loop invariant: ((((splverifierCounter == 0 && systemActive == 0) && methaneLevelCritical == 0) && waterLevel <= 2) && pumpRunning == 0) || ((((splverifierCounter == 0 && systemActive == 0) && waterLevel <= 2) && 1 <= methaneLevelCritical) && pumpRunning == 0) - InvariantResult [Line: 599]: Loop Invariant Derived loop invariant: ((((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((((!(2 == waterLevel) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && tmp == methaneLevelCritical))) && (((!(waterLevel <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 837]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 802]: Loop Invariant Derived loop invariant: ((((((((((((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0)) && (((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || !(\old(waterLevel) <= 0)) || !(methaneLevelCritical == 0)) || ((((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || !(1 <= \old(pumpRunning)))) && (((((!(1 == systemActive) || !(2 == \old(waterLevel))) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0)) || ((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && \result == waterLevel))) && ((((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0)) || !(systemActive == 0))) && (((((((!(\old(waterLevel) <= 2) || (((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && \result == waterLevel) && pumpRunning == 0)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0))) && (((((((!(\old(waterLevel) <= 2) || (((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && \result == waterLevel) && pumpRunning == 0)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical == tmp) && \result == waterLevel) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (waterLevel == 1 && pumpRunning == 0)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || ((1 <= switchedOnBeforeTS && methaneLevelCritical == tmp) && \result == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 0)) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0))) && ((((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) || ((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) - InvariantResult [Line: 889]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 431]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 607]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || ((2 == waterLevel && tmp == methaneLevelCritical) && pumpRunning == 0)) && ((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((!(2 == waterLevel) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && tmp == methaneLevelCritical))) && (((!(waterLevel <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 987]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 722]: Loop Invariant Derived loop invariant: (((((((((splverifierCounter == 0 && methaneLevelCritical == 0) && waterLevel <= 2) && pumpRunning == 0) && 1 == systemActive) || (((((splverifierCounter == 0 && 1 <= pumpRunning) && 2 <= waterLevel) && waterLevel <= 2) && 1 <= methaneLevelCritical) && systemActive == 1)) || (((((splverifierCounter == 0 && 1 < waterLevel) && methaneLevelCritical == 0) && 1 <= pumpRunning) && waterLevel <= 2) && 1 == systemActive)) || (((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && waterLevel == 1) && methaneLevelCritical == 0) && 1 <= pumpRunning) && systemActive == 1)) || ((((splverifierCounter == 0 && waterLevel <= 2) && 1 <= methaneLevelCritical) && pumpRunning == 0) && 1 == systemActive)) || (((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && 1 <= pumpRunning) && waterLevel <= 2) && 1 <= methaneLevelCritical) && 1 == systemActive)) || (((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && waterLevel <= 0) && methaneLevelCritical == 0) && 1 <= pumpRunning) && systemActive == 1) - InvariantResult [Line: 416]: Loop Invariant Derived loop invariant: (((((((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) && (((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0))) && (((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && ((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && ((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 688]: Loop Invariant Derived loop invariant: (((((((!(2 == waterLevel) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || pumpRunning == 0) && ((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((!(waterLevel <= 1) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && tmp___0 == 0) && \result == 0) && pumpRunning == 0)) || !(\old(pumpRunning) == 0))) && ((((!(waterLevel <= 1) || !(1 == systemActive)) || (((pumpRunning == \old(pumpRunning) && tmp___0 == 0) && \result == 0) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && ((((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) - InvariantResult [Line: 928]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 903]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 881]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 734]: Loop Invariant Derived loop invariant: (((((((((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) && (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && pumpRunning == \old(pumpRunning)) || !(\old(waterLevel) <= 2)) || ((((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && systemActive == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && pumpRunning == \old(pumpRunning)) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0))) && (((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && (((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || !(\old(waterLevel) <= 0)) || !(methaneLevelCritical == 0)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((((!(\old(waterLevel) <= 2) || ((((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && systemActive == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 946]: Loop Invariant Derived loop invariant: ((((((((((((((((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(2 == \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || ((((tmp == waterLevel && waterLevel == \old(waterLevel)) && 2 <= waterLevel) && \result == waterLevel) && pumpRunning == 0)) && ((((pumpRunning <= tmp___0 || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || !(systemActive == 0))) && ((((((((tmp == waterLevel && pumpRunning <= tmp___0) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && \result == waterLevel) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1))) && (((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || (((((((tmp == waterLevel && 1 <= switchedOnBeforeTS) && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && 1 <= methaneLevelCritical) && \result == waterLevel) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || ((((tmp == waterLevel && pumpRunning <= tmp___0) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) <= 1))) && (((((((tmp == waterLevel && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && \result == waterLevel) || !(\old(waterLevel) <= 2)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && ((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((tmp == waterLevel && 1 <= switchedOnBeforeTS) && pumpRunning <= tmp___0) && waterLevel <= 0) && methaneLevelCritical == tmp) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || ((((((tmp == waterLevel && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && pumpRunning <= tmp___0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((tmp == waterLevel && 1 <= switchedOnBeforeTS) && methaneLevelCritical == tmp) && \result == waterLevel)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || (((tmp == waterLevel && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && ((((pumpRunning <= tmp___0 || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) <= 1)) || !(systemActive == 0))) && (((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((((tmp == waterLevel && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical == tmp) && \result == waterLevel) && pumpRunning == 0)) || (((((((tmp == waterLevel && 1 <= switchedOnBeforeTS) && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && 1 <= methaneLevelCritical) && \result == waterLevel) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || ((((((tmp == waterLevel && 1 <= switchedOnBeforeTS) && waterLevel == 1) && pumpRunning <= tmp___0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (waterLevel == 1 && pumpRunning == 0)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && (((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || (((((((tmp == waterLevel && 1 <= switchedOnBeforeTS) && pumpRunning <= tmp___0) && waterLevel <= 0) && methaneLevelCritical == tmp) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || !(\old(waterLevel) <= 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((!(1 == systemActive) || !(2 == \old(waterLevel))) || (((tmp == waterLevel && waterLevel == \old(waterLevel)) && 1 <= pumpRunning) && \result == waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || ((((tmp == waterLevel && waterLevel == \old(waterLevel)) && 2 <= waterLevel) && \result == waterLevel) && pumpRunning == 0)) - InvariantResult [Line: 770]: Loop Invariant Derived loop invariant: ((((((!(2 == waterLevel) || \result == methaneLevelCritical) || !(pumpRunning == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && (((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || \result == methaneLevelCritical) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning))) && ((((!(2 == waterLevel) || \result == methaneLevelCritical) || !(pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && (((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || \result == methaneLevelCritical) || !(1 == systemActive)) || !(1 <= pumpRunning)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 936]: Loop Invariant Derived loop invariant: (((((((((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 0)) && (((((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1))) && ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0))) && (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && (((((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(1 == systemActive)) || !(2 == \old(waterLevel))) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && (((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && waterLevel <= 2)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 1001]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 827]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 811]: Loop Invariant Derived loop invariant: (((((((!(2 == waterLevel) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || pumpRunning == 0) && ((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((!(waterLevel <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || (1 <= \result && pumpRunning == 0))) && ((((!(waterLevel <= 1) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || (1 <= \result && pumpRunning == 0))) && ((((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: (((((((((((((splverifierCounter == 0 && systemActive == 0) && methaneLevelCritical == 0) && waterLevel <= 2) && pumpRunning == 0) || ((((2 == waterLevel && splverifierCounter == 0) && methaneLevelCritical == 0) && 1 <= pumpRunning) && systemActive == 1)) || ((((splverifierCounter == 0 && waterLevel <= 0) && systemActive == 0) && 1 <= methaneLevelCritical) && pumpRunning == 0)) || ((((2 == waterLevel && splverifierCounter == 0) && methaneLevelCritical == 0) && 1 == systemActive) && pumpRunning == 0)) || (((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && waterLevel == 1) && methaneLevelCritical == 0) && 1 <= pumpRunning) && systemActive == 1)) || ((((splverifierCounter == 0 && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == 0) && 1 == systemActive)) || ((((2 == waterLevel && splverifierCounter == 0) && systemActive == 0) && 1 <= methaneLevelCritical) && pumpRunning == 0)) || ((((2 == waterLevel && splverifierCounter == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && pumpRunning == 0)) || ((((splverifierCounter == 0 && waterLevel <= 1) && 1 <= methaneLevelCritical) && 1 == systemActive) && pumpRunning == 0)) || (((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && waterLevel <= 0) && methaneLevelCritical == 0) && 1 <= pumpRunning) && systemActive == 1)) || ((((splverifierCounter == 0 && waterLevel == 1) && systemActive == 0) && 1 <= methaneLevelCritical) && pumpRunning == 0) RESULT: Ultimate proved your program to be correct! [2021-12-16 01:02:04,361 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE