./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash e7a194b3d6e079d2329a0d70eaa59b34ff3d58300de8b046ef1cd7cff7f67b94 --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-16 01:01:26,627 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-16 01:01:26,637 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-16 01:01:26,671 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-16 01:01:26,672 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-16 01:01:26,672 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-16 01:01:26,673 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-16 01:01:26,675 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-16 01:01:26,683 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-16 01:01:26,686 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-16 01:01:26,687 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-16 01:01:26,688 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-16 01:01:26,689 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-16 01:01:26,691 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-16 01:01:26,693 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-16 01:01:26,696 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-16 01:01:26,696 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-16 01:01:26,697 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-16 01:01:26,698 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-16 01:01:26,708 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-16 01:01:26,709 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-16 01:01:26,716 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-16 01:01:26,716 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-16 01:01:26,717 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-16 01:01:26,719 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-16 01:01:26,719 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-16 01:01:26,719 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-16 01:01:26,720 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-16 01:01:26,720 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-16 01:01:26,721 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-16 01:01:26,721 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-16 01:01:26,722 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-16 01:01:26,722 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-16 01:01:26,723 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-16 01:01:26,724 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-16 01:01:26,724 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-16 01:01:26,724 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-16 01:01:26,724 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-16 01:01:26,725 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-16 01:01:26,725 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-16 01:01:26,726 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-16 01:01:26,728 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-16 01:01:26,745 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-16 01:01:26,745 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-16 01:01:26,745 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-16 01:01:26,746 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-16 01:01:26,746 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-16 01:01:26,747 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-16 01:01:26,747 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-16 01:01:26,748 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-16 01:01:26,748 INFO L138 SettingsManager]: * Use SBE=true [2021-12-16 01:01:26,748 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-16 01:01:26,748 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-16 01:01:26,749 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-16 01:01:26,749 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-16 01:01:26,749 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-16 01:01:26,749 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-16 01:01:26,750 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-16 01:01:26,750 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-16 01:01:26,750 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-16 01:01:26,750 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-16 01:01:26,750 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-16 01:01:26,751 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-16 01:01:26,751 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-16 01:01:26,751 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-16 01:01:26,751 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-16 01:01:26,752 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 01:01:26,752 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-16 01:01:26,752 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-16 01:01:26,752 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-16 01:01:26,753 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-16 01:01:26,753 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-16 01:01:26,753 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-16 01:01:26,753 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-16 01:01:26,753 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-16 01:01:26,754 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-16 01:01:26,754 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> e7a194b3d6e079d2329a0d70eaa59b34ff3d58300de8b046ef1cd7cff7f67b94 [2021-12-16 01:01:26,986 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-16 01:01:27,015 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-16 01:01:27,017 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-16 01:01:27,017 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-16 01:01:27,018 INFO L275 PluginConnector]: CDTParser initialized [2021-12-16 01:01:27,019 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c [2021-12-16 01:01:27,091 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/64012d40c/25b50fec4cec4d0fb730d18369ab5ccc/FLAG7aefd1a28 [2021-12-16 01:01:27,471 INFO L306 CDTParser]: Found 1 translation units. [2021-12-16 01:01:27,472 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c [2021-12-16 01:01:27,487 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/64012d40c/25b50fec4cec4d0fb730d18369ab5ccc/FLAG7aefd1a28 [2021-12-16 01:01:27,852 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/64012d40c/25b50fec4cec4d0fb730d18369ab5ccc [2021-12-16 01:01:27,854 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-16 01:01:27,855 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-16 01:01:27,857 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-16 01:01:27,857 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-16 01:01:27,869 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-16 01:01:27,870 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 01:01:27" (1/1) ... [2021-12-16 01:01:27,871 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4ceca685 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:27, skipping insertion in model container [2021-12-16 01:01:27,871 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 01:01:27" (1/1) ... [2021-12-16 01:01:27,877 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-16 01:01:27,916 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-16 01:01:28,141 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c[17915,17928] [2021-12-16 01:01:28,148 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 01:01:28,161 INFO L203 MainTranslator]: Completed pre-run [2021-12-16 01:01:28,216 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c[17915,17928] [2021-12-16 01:01:28,227 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 01:01:28,245 INFO L208 MainTranslator]: Completed translation [2021-12-16 01:01:28,246 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:28 WrapperNode [2021-12-16 01:01:28,246 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-16 01:01:28,247 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-16 01:01:28,247 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-16 01:01:28,247 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-16 01:01:28,254 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:28" (1/1) ... [2021-12-16 01:01:28,266 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:28" (1/1) ... [2021-12-16 01:01:28,295 INFO L137 Inliner]: procedures = 58, calls = 161, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 286 [2021-12-16 01:01:28,296 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-16 01:01:28,296 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-16 01:01:28,296 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-16 01:01:28,296 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-16 01:01:28,302 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:28" (1/1) ... [2021-12-16 01:01:28,302 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:28" (1/1) ... [2021-12-16 01:01:28,305 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:28" (1/1) ... [2021-12-16 01:01:28,305 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:28" (1/1) ... [2021-12-16 01:01:28,308 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:28" (1/1) ... [2021-12-16 01:01:28,312 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:28" (1/1) ... [2021-12-16 01:01:28,328 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:28" (1/1) ... [2021-12-16 01:01:28,330 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-16 01:01:28,331 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-16 01:01:28,331 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-16 01:01:28,331 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-16 01:01:28,332 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:28" (1/1) ... [2021-12-16 01:01:28,341 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 01:01:28,348 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 01:01:28,359 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-16 01:01:28,360 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-16 01:01:28,386 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-16 01:01:28,387 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-16 01:01:28,387 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-16 01:01:28,387 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-16 01:01:28,387 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-16 01:01:28,387 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-16 01:01:28,387 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-16 01:01:28,388 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 01:01:28,388 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 01:01:28,388 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-16 01:01:28,388 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-16 01:01:28,388 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2021-12-16 01:01:28,388 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2021-12-16 01:01:28,388 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-12-16 01:01:28,389 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-12-16 01:01:28,389 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-16 01:01:28,389 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-16 01:01:28,389 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-16 01:01:28,389 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-16 01:01:28,389 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-16 01:01:28,389 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-16 01:01:28,390 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-16 01:01:28,447 INFO L236 CfgBuilder]: Building ICFG [2021-12-16 01:01:28,448 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-16 01:01:28,685 INFO L277 CfgBuilder]: Performing block encoding [2021-12-16 01:01:28,692 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-16 01:01:28,693 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-16 01:01:28,695 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 01:01:28 BoogieIcfgContainer [2021-12-16 01:01:28,695 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-16 01:01:28,696 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-16 01:01:28,696 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-16 01:01:28,700 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-16 01:01:28,700 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.12 01:01:27" (1/3) ... [2021-12-16 01:01:28,701 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2f598e8d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 01:01:28, skipping insertion in model container [2021-12-16 01:01:28,701 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 01:01:28" (2/3) ... [2021-12-16 01:01:28,701 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2f598e8d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 01:01:28, skipping insertion in model container [2021-12-16 01:01:28,702 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 01:01:28" (3/3) ... [2021-12-16 01:01:28,703 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product53.cil.c [2021-12-16 01:01:28,708 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-16 01:01:28,708 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-16 01:01:28,753 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-16 01:01:28,759 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-16 01:01:28,760 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-16 01:01:28,798 INFO L276 IsEmpty]: Start isEmpty. Operand has 105 states, 78 states have (on average 1.3717948717948718) internal successors, (107), 88 states have internal predecessors, (107), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2021-12-16 01:01:28,805 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-12-16 01:01:28,805 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:28,806 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:28,807 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:28,812 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:28,812 INFO L85 PathProgramCache]: Analyzing trace with hash 836117038, now seen corresponding path program 1 times [2021-12-16 01:01:28,833 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:28,833 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [53266746] [2021-12-16 01:01:28,834 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:28,834 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:28,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,051 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-16 01:01:29,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,068 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-16 01:01:29,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,080 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:29,081 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:29,081 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [53266746] [2021-12-16 01:01:29,082 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [53266746] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:29,082 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:29,082 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-16 01:01:29,083 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [337224712] [2021-12-16 01:01:29,083 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:29,086 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-16 01:01:29,086 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:29,109 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-16 01:01:29,110 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 01:01:29,113 INFO L87 Difference]: Start difference. First operand has 105 states, 78 states have (on average 1.3717948717948718) internal successors, (107), 88 states have internal predecessors, (107), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 01:01:29,155 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:29,155 INFO L93 Difference]: Finished difference Result 201 states and 272 transitions. [2021-12-16 01:01:29,156 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-16 01:01:29,157 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-12-16 01:01:29,157 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:29,165 INFO L225 Difference]: With dead ends: 201 [2021-12-16 01:01:29,165 INFO L226 Difference]: Without dead ends: 96 [2021-12-16 01:01:29,169 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 01:01:29,172 INFO L933 BasicCegarLoop]: 133 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 133 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:29,173 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 133 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 01:01:29,185 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 96 states. [2021-12-16 01:01:29,208 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 96 to 96. [2021-12-16 01:01:29,209 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 96 states, 71 states have (on average 1.3098591549295775) internal successors, (93), 80 states have internal predecessors, (93), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2021-12-16 01:01:29,214 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 96 states to 96 states and 124 transitions. [2021-12-16 01:01:29,215 INFO L78 Accepts]: Start accepts. Automaton has 96 states and 124 transitions. Word has length 32 [2021-12-16 01:01:29,216 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:29,216 INFO L470 AbstractCegarLoop]: Abstraction has 96 states and 124 transitions. [2021-12-16 01:01:29,216 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 01:01:29,216 INFO L276 IsEmpty]: Start isEmpty. Operand 96 states and 124 transitions. [2021-12-16 01:01:29,223 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2021-12-16 01:01:29,223 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:29,224 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:29,225 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-16 01:01:29,225 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:29,226 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:29,227 INFO L85 PathProgramCache]: Analyzing trace with hash 485124754, now seen corresponding path program 1 times [2021-12-16 01:01:29,227 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:29,227 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [368514580] [2021-12-16 01:01:29,228 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:29,228 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:29,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-16 01:01:29,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,322 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-12-16 01:01:29,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,327 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:29,327 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:29,328 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [368514580] [2021-12-16 01:01:29,328 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [368514580] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:29,328 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:29,328 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 01:01:29,329 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1446059494] [2021-12-16 01:01:29,329 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:29,331 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-16 01:01:29,333 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:29,333 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-16 01:01:29,334 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 01:01:29,334 INFO L87 Difference]: Start difference. First operand 96 states and 124 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-16 01:01:29,366 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:29,368 INFO L93 Difference]: Finished difference Result 184 states and 243 transitions. [2021-12-16 01:01:29,368 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-16 01:01:29,368 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2021-12-16 01:01:29,369 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:29,374 INFO L225 Difference]: With dead ends: 184 [2021-12-16 01:01:29,374 INFO L226 Difference]: Without dead ends: 96 [2021-12-16 01:01:29,376 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 01:01:29,378 INFO L933 BasicCegarLoop]: 122 mSDtfsCounter, 101 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 101 SdHoareTripleChecker+Valid, 122 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:29,380 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [101 Valid, 122 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 01:01:29,380 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 96 states. [2021-12-16 01:01:29,387 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 96 to 96. [2021-12-16 01:01:29,387 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 96 states, 71 states have (on average 1.295774647887324) internal successors, (92), 80 states have internal predecessors, (92), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2021-12-16 01:01:29,388 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 96 states to 96 states and 123 transitions. [2021-12-16 01:01:29,388 INFO L78 Accepts]: Start accepts. Automaton has 96 states and 123 transitions. Word has length 37 [2021-12-16 01:01:29,389 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:29,389 INFO L470 AbstractCegarLoop]: Abstraction has 96 states and 123 transitions. [2021-12-16 01:01:29,389 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-16 01:01:29,389 INFO L276 IsEmpty]: Start isEmpty. Operand 96 states and 123 transitions. [2021-12-16 01:01:29,390 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2021-12-16 01:01:29,390 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:29,391 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:29,391 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-16 01:01:29,391 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:29,391 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:29,392 INFO L85 PathProgramCache]: Analyzing trace with hash 88830114, now seen corresponding path program 1 times [2021-12-16 01:01:29,392 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:29,392 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1898242994] [2021-12-16 01:01:29,392 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:29,392 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:29,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,450 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-16 01:01:29,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,462 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-12-16 01:01:29,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,465 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2021-12-16 01:01:29,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,467 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:29,468 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:29,468 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1898242994] [2021-12-16 01:01:29,468 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1898242994] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:29,469 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:29,469 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-16 01:01:29,469 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [654962296] [2021-12-16 01:01:29,469 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:29,470 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-16 01:01:29,470 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:29,471 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-16 01:01:29,471 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-16 01:01:29,471 INFO L87 Difference]: Start difference. First operand 96 states and 123 transitions. Second operand has 4 states, 4 states have (on average 9.25) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-16 01:01:29,654 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:29,655 INFO L93 Difference]: Finished difference Result 288 states and 392 transitions. [2021-12-16 01:01:29,655 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-16 01:01:29,655 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.25) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2021-12-16 01:01:29,655 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:29,659 INFO L225 Difference]: With dead ends: 288 [2021-12-16 01:01:29,659 INFO L226 Difference]: Without dead ends: 200 [2021-12-16 01:01:29,660 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-16 01:01:29,665 INFO L933 BasicCegarLoop]: 138 mSDtfsCounter, 186 mSDsluCounter, 154 mSDsCounter, 0 mSdLazyCounter, 93 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 192 SdHoareTripleChecker+Valid, 292 SdHoareTripleChecker+Invalid, 156 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 93 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:29,666 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [192 Valid, 292 Invalid, 156 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 93 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 01:01:29,668 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 200 states. [2021-12-16 01:01:29,693 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 200 to 182. [2021-12-16 01:01:29,693 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 182 states, 135 states have (on average 1.2740740740740741) internal successors, (172), 143 states have internal predecessors, (172), 26 states have call successors, (26), 17 states have call predecessors, (26), 20 states have return successors, (43), 26 states have call predecessors, (43), 24 states have call successors, (43) [2021-12-16 01:01:29,694 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 182 states to 182 states and 241 transitions. [2021-12-16 01:01:29,695 INFO L78 Accepts]: Start accepts. Automaton has 182 states and 241 transitions. Word has length 46 [2021-12-16 01:01:29,695 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:29,695 INFO L470 AbstractCegarLoop]: Abstraction has 182 states and 241 transitions. [2021-12-16 01:01:29,695 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.25) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-16 01:01:29,695 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 241 transitions. [2021-12-16 01:01:29,696 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2021-12-16 01:01:29,696 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:29,696 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:29,697 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-16 01:01:29,697 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:29,697 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:29,697 INFO L85 PathProgramCache]: Analyzing trace with hash 385655368, now seen corresponding path program 1 times [2021-12-16 01:01:29,697 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:29,697 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1738668633] [2021-12-16 01:01:29,697 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:29,697 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:29,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,717 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-16 01:01:29,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,723 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-16 01:01:29,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,730 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:29,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,733 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-12-16 01:01:29,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,736 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:29,736 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:29,736 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1738668633] [2021-12-16 01:01:29,737 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1738668633] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:29,737 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:29,737 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-16 01:01:29,737 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [844933625] [2021-12-16 01:01:29,737 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:29,737 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-16 01:01:29,737 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:29,738 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-16 01:01:29,738 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-16 01:01:29,738 INFO L87 Difference]: Start difference. First operand 182 states and 241 transitions. Second operand has 4 states, 4 states have (on average 10.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 01:01:29,806 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:29,806 INFO L93 Difference]: Finished difference Result 304 states and 389 transitions. [2021-12-16 01:01:29,807 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-16 01:01:29,807 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 52 [2021-12-16 01:01:29,807 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:29,808 INFO L225 Difference]: With dead ends: 304 [2021-12-16 01:01:29,808 INFO L226 Difference]: Without dead ends: 166 [2021-12-16 01:01:29,809 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-16 01:01:29,809 INFO L933 BasicCegarLoop]: 113 mSDtfsCounter, 72 mSDsluCounter, 125 mSDsCounter, 0 mSdLazyCounter, 57 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 238 SdHoareTripleChecker+Invalid, 73 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 57 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:29,809 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [79 Valid, 238 Invalid, 73 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 57 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 01:01:29,810 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166 states. [2021-12-16 01:01:29,817 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 166 to 164. [2021-12-16 01:01:29,818 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 164 states, 123 states have (on average 1.2845528455284554) internal successors, (158), 131 states have internal predecessors, (158), 20 states have call successors, (20), 15 states have call predecessors, (20), 20 states have return successors, (31), 22 states have call predecessors, (31), 20 states have call successors, (31) [2021-12-16 01:01:29,819 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 164 states to 164 states and 209 transitions. [2021-12-16 01:01:29,819 INFO L78 Accepts]: Start accepts. Automaton has 164 states and 209 transitions. Word has length 52 [2021-12-16 01:01:29,819 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:29,819 INFO L470 AbstractCegarLoop]: Abstraction has 164 states and 209 transitions. [2021-12-16 01:01:29,819 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 01:01:29,819 INFO L276 IsEmpty]: Start isEmpty. Operand 164 states and 209 transitions. [2021-12-16 01:01:29,820 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-12-16 01:01:29,820 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:29,820 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:29,820 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-16 01:01:29,820 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:29,821 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:29,821 INFO L85 PathProgramCache]: Analyzing trace with hash -2065653903, now seen corresponding path program 1 times [2021-12-16 01:01:29,821 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:29,821 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1090337929] [2021-12-16 01:01:29,821 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:29,821 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:29,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,840 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-16 01:01:29,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,843 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-16 01:01:29,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,849 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:29,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,868 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-12-16 01:01:29,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:29,871 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:29,871 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:29,871 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1090337929] [2021-12-16 01:01:29,871 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1090337929] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:29,871 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:29,871 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 01:01:29,872 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [52941448] [2021-12-16 01:01:29,872 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:29,872 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 01:01:29,872 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:29,872 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 01:01:29,872 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 01:01:29,872 INFO L87 Difference]: Start difference. First operand 164 states and 209 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 01:01:29,995 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:29,995 INFO L93 Difference]: Finished difference Result 328 states and 426 transitions. [2021-12-16 01:01:29,995 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-16 01:01:29,996 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2021-12-16 01:01:29,996 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:29,997 INFO L225 Difference]: With dead ends: 328 [2021-12-16 01:01:29,997 INFO L226 Difference]: Without dead ends: 172 [2021-12-16 01:01:29,997 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-16 01:01:29,998 INFO L933 BasicCegarLoop]: 112 mSDtfsCounter, 73 mSDsluCounter, 346 mSDsCounter, 0 mSdLazyCounter, 124 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 458 SdHoareTripleChecker+Invalid, 147 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 124 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:29,998 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [76 Valid, 458 Invalid, 147 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 124 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 01:01:29,998 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 172 states. [2021-12-16 01:01:30,006 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 172 to 167. [2021-12-16 01:01:30,007 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 167 states, 126 states have (on average 1.2777777777777777) internal successors, (161), 134 states have internal predecessors, (161), 20 states have call successors, (20), 15 states have call predecessors, (20), 20 states have return successors, (31), 22 states have call predecessors, (31), 20 states have call successors, (31) [2021-12-16 01:01:30,008 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 167 states to 167 states and 212 transitions. [2021-12-16 01:01:30,008 INFO L78 Accepts]: Start accepts. Automaton has 167 states and 212 transitions. Word has length 56 [2021-12-16 01:01:30,008 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:30,008 INFO L470 AbstractCegarLoop]: Abstraction has 167 states and 212 transitions. [2021-12-16 01:01:30,009 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 01:01:30,009 INFO L276 IsEmpty]: Start isEmpty. Operand 167 states and 212 transitions. [2021-12-16 01:01:30,009 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-12-16 01:01:30,009 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:30,010 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:30,010 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-16 01:01:30,010 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:30,010 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:30,010 INFO L85 PathProgramCache]: Analyzing trace with hash -1642952077, now seen corresponding path program 1 times [2021-12-16 01:01:30,010 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:30,010 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [707684049] [2021-12-16 01:01:30,011 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:30,011 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:30,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,051 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-16 01:01:30,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,057 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-16 01:01:30,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,068 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:30,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,092 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-12-16 01:01:30,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,095 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:30,095 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:30,096 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [707684049] [2021-12-16 01:01:30,096 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [707684049] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:30,096 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:30,096 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 01:01:30,096 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1797919976] [2021-12-16 01:01:30,096 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:30,097 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 01:01:30,097 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:30,098 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 01:01:30,098 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 01:01:30,098 INFO L87 Difference]: Start difference. First operand 167 states and 212 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-16 01:01:30,219 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:30,219 INFO L93 Difference]: Finished difference Result 339 states and 445 transitions. [2021-12-16 01:01:30,219 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-16 01:01:30,219 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2021-12-16 01:01:30,220 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:30,220 INFO L225 Difference]: With dead ends: 339 [2021-12-16 01:01:30,220 INFO L226 Difference]: Without dead ends: 180 [2021-12-16 01:01:30,221 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=34, Invalid=56, Unknown=0, NotChecked=0, Total=90 [2021-12-16 01:01:30,221 INFO L933 BasicCegarLoop]: 107 mSDtfsCounter, 168 mSDsluCounter, 234 mSDsCounter, 0 mSdLazyCounter, 107 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 171 SdHoareTripleChecker+Valid, 341 SdHoareTripleChecker+Invalid, 154 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 107 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:30,222 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [171 Valid, 341 Invalid, 154 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 107 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 01:01:30,222 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 180 states. [2021-12-16 01:01:30,228 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 180 to 169. [2021-12-16 01:01:30,228 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 169 states, 128 states have (on average 1.2734375) internal successors, (163), 136 states have internal predecessors, (163), 20 states have call successors, (20), 15 states have call predecessors, (20), 20 states have return successors, (31), 22 states have call predecessors, (31), 20 states have call successors, (31) [2021-12-16 01:01:30,229 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 169 states to 169 states and 214 transitions. [2021-12-16 01:01:30,229 INFO L78 Accepts]: Start accepts. Automaton has 169 states and 214 transitions. Word has length 56 [2021-12-16 01:01:30,229 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:30,229 INFO L470 AbstractCegarLoop]: Abstraction has 169 states and 214 transitions. [2021-12-16 01:01:30,229 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-16 01:01:30,229 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 214 transitions. [2021-12-16 01:01:30,230 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-12-16 01:01:30,230 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:30,230 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:30,230 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-16 01:01:30,230 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:30,230 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:30,230 INFO L85 PathProgramCache]: Analyzing trace with hash 846576885, now seen corresponding path program 1 times [2021-12-16 01:01:30,231 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:30,231 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1806606568] [2021-12-16 01:01:30,231 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:30,231 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:30,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,274 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-16 01:01:30,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-16 01:01:30,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,299 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:30,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-12-16 01:01:30,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,320 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:30,320 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:30,320 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1806606568] [2021-12-16 01:01:30,321 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1806606568] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:30,321 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:30,321 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-16 01:01:30,327 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [629522757] [2021-12-16 01:01:30,327 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:30,328 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-16 01:01:30,328 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:30,328 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-16 01:01:30,328 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-16 01:01:30,328 INFO L87 Difference]: Start difference. First operand 169 states and 214 transitions. Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-16 01:01:30,517 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:30,518 INFO L93 Difference]: Finished difference Result 477 states and 626 transitions. [2021-12-16 01:01:30,518 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-16 01:01:30,518 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2021-12-16 01:01:30,518 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:30,520 INFO L225 Difference]: With dead ends: 477 [2021-12-16 01:01:30,520 INFO L226 Difference]: Without dead ends: 316 [2021-12-16 01:01:30,521 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-16 01:01:30,521 INFO L933 BasicCegarLoop]: 165 mSDtfsCounter, 232 mSDsluCounter, 202 mSDsCounter, 0 mSdLazyCounter, 175 mSolverCounterSat, 72 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 239 SdHoareTripleChecker+Valid, 367 SdHoareTripleChecker+Invalid, 247 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 72 IncrementalHoareTripleChecker+Valid, 175 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:30,521 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [239 Valid, 367 Invalid, 247 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [72 Valid, 175 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-16 01:01:30,522 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 316 states. [2021-12-16 01:01:30,547 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 316 to 308. [2021-12-16 01:01:30,547 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 308 states, 231 states have (on average 1.2467532467532467) internal successors, (288), 243 states have internal predecessors, (288), 40 states have call successors, (40), 33 states have call predecessors, (40), 36 states have return successors, (66), 41 states have call predecessors, (66), 40 states have call successors, (66) [2021-12-16 01:01:30,549 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 308 states to 308 states and 394 transitions. [2021-12-16 01:01:30,550 INFO L78 Accepts]: Start accepts. Automaton has 308 states and 394 transitions. Word has length 56 [2021-12-16 01:01:30,551 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:30,551 INFO L470 AbstractCegarLoop]: Abstraction has 308 states and 394 transitions. [2021-12-16 01:01:30,551 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-16 01:01:30,551 INFO L276 IsEmpty]: Start isEmpty. Operand 308 states and 394 transitions. [2021-12-16 01:01:30,552 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2021-12-16 01:01:30,553 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:30,553 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:30,553 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-16 01:01:30,553 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:30,553 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:30,553 INFO L85 PathProgramCache]: Analyzing trace with hash 1874240715, now seen corresponding path program 1 times [2021-12-16 01:01:30,553 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:30,553 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1122683111] [2021-12-16 01:01:30,553 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:30,554 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:30,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-16 01:01:30,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,607 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-16 01:01:30,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,614 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:30,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 01:01:30,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,625 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-16 01:01:30,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,638 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-16 01:01:30,639 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:30,639 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1122683111] [2021-12-16 01:01:30,639 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1122683111] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:30,639 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:30,639 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-16 01:01:30,639 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1473515484] [2021-12-16 01:01:30,640 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:30,640 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-16 01:01:30,640 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:30,640 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 01:01:30,640 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-16 01:01:30,641 INFO L87 Difference]: Start difference. First operand 308 states and 394 transitions. Second operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-16 01:01:30,810 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:30,810 INFO L93 Difference]: Finished difference Result 624 states and 811 transitions. [2021-12-16 01:01:30,811 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-16 01:01:30,811 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 58 [2021-12-16 01:01:30,811 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:30,812 INFO L225 Difference]: With dead ends: 624 [2021-12-16 01:01:30,812 INFO L226 Difference]: Without dead ends: 324 [2021-12-16 01:01:30,813 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2021-12-16 01:01:30,814 INFO L933 BasicCegarLoop]: 109 mSDtfsCounter, 125 mSDsluCounter, 388 mSDsCounter, 0 mSdLazyCounter, 218 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 131 SdHoareTripleChecker+Valid, 497 SdHoareTripleChecker+Invalid, 259 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 218 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:30,814 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [131 Valid, 497 Invalid, 259 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 218 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 01:01:30,814 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 324 states. [2021-12-16 01:01:30,824 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 324 to 304. [2021-12-16 01:01:30,825 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 304 states, 227 states have (on average 1.2158590308370043) internal successors, (276), 239 states have internal predecessors, (276), 40 states have call successors, (40), 33 states have call predecessors, (40), 36 states have return successors, (66), 41 states have call predecessors, (66), 40 states have call successors, (66) [2021-12-16 01:01:30,826 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 304 states to 304 states and 382 transitions. [2021-12-16 01:01:30,826 INFO L78 Accepts]: Start accepts. Automaton has 304 states and 382 transitions. Word has length 58 [2021-12-16 01:01:30,826 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:30,826 INFO L470 AbstractCegarLoop]: Abstraction has 304 states and 382 transitions. [2021-12-16 01:01:30,826 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-16 01:01:30,826 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 382 transitions. [2021-12-16 01:01:30,827 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-12-16 01:01:30,827 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:30,827 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:30,827 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-16 01:01:30,827 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:30,827 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:30,827 INFO L85 PathProgramCache]: Analyzing trace with hash -1421347697, now seen corresponding path program 1 times [2021-12-16 01:01:30,828 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:30,828 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [631201206] [2021-12-16 01:01:30,828 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:30,828 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:30,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 01:01:30,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-16 01:01:30,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-12-16 01:01:30,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,924 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:30,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-16 01:01:30,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:30,928 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 01:01:30,929 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:30,929 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [631201206] [2021-12-16 01:01:30,929 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [631201206] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:30,929 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:30,929 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-12-16 01:01:30,929 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2134768867] [2021-12-16 01:01:30,929 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:30,929 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-12-16 01:01:30,929 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:30,929 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-12-16 01:01:30,929 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2021-12-16 01:01:30,930 INFO L87 Difference]: Start difference. First operand 304 states and 382 transitions. Second operand has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 7 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-16 01:01:31,482 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:31,482 INFO L93 Difference]: Finished difference Result 950 states and 1254 transitions. [2021-12-16 01:01:31,482 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2021-12-16 01:01:31,483 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 7 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 60 [2021-12-16 01:01:31,484 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:31,486 INFO L225 Difference]: With dead ends: 950 [2021-12-16 01:01:31,487 INFO L226 Difference]: Without dead ends: 709 [2021-12-16 01:01:31,488 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 39 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 145 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=153, Invalid=549, Unknown=0, NotChecked=0, Total=702 [2021-12-16 01:01:31,489 INFO L933 BasicCegarLoop]: 160 mSDtfsCounter, 452 mSDsluCounter, 523 mSDsCounter, 0 mSdLazyCounter, 672 mSolverCounterSat, 168 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 457 SdHoareTripleChecker+Valid, 683 SdHoareTripleChecker+Invalid, 840 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 168 IncrementalHoareTripleChecker+Valid, 672 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:31,490 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [457 Valid, 683 Invalid, 840 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [168 Valid, 672 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-16 01:01:31,491 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 709 states. [2021-12-16 01:01:31,516 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 709 to 585. [2021-12-16 01:01:31,517 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 585 states, 437 states have (on average 1.2151029748283753) internal successors, (531), 463 states have internal predecessors, (531), 77 states have call successors, (77), 58 states have call predecessors, (77), 70 states have return successors, (127), 79 states have call predecessors, (127), 77 states have call successors, (127) [2021-12-16 01:01:31,519 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 585 states to 585 states and 735 transitions. [2021-12-16 01:01:31,519 INFO L78 Accepts]: Start accepts. Automaton has 585 states and 735 transitions. Word has length 60 [2021-12-16 01:01:31,519 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:31,519 INFO L470 AbstractCegarLoop]: Abstraction has 585 states and 735 transitions. [2021-12-16 01:01:31,520 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 7 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-16 01:01:31,520 INFO L276 IsEmpty]: Start isEmpty. Operand 585 states and 735 transitions. [2021-12-16 01:01:31,521 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2021-12-16 01:01:31,521 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:31,521 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:31,521 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-16 01:01:31,521 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:31,521 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:31,522 INFO L85 PathProgramCache]: Analyzing trace with hash 118762499, now seen corresponding path program 1 times [2021-12-16 01:01:31,522 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:31,522 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [98868717] [2021-12-16 01:01:31,522 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:31,522 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:31,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:31,554 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 01:01:31,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:31,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-16 01:01:31,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:31,566 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:31,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:31,570 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-16 01:01:31,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:31,574 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:31,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:31,577 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2021-12-16 01:01:31,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:31,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2021-12-16 01:01:31,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:31,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-16 01:01:31,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:31,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:31,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:31,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2021-12-16 01:01:31,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:31,603 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 6 proven. 10 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2021-12-16 01:01:31,603 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:31,604 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [98868717] [2021-12-16 01:01:31,604 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [98868717] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 01:01:31,604 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [687212429] [2021-12-16 01:01:31,604 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:31,604 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 01:01:31,604 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 01:01:31,605 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 01:01:31,629 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-16 01:01:31,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:31,710 INFO L263 TraceCheckSpWp]: Trace formula consists of 507 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-16 01:01:31,714 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 01:01:32,044 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 26 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 01:01:32,044 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-16 01:01:32,253 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 18 proven. 10 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-16 01:01:32,253 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [687212429] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-16 01:01:32,253 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-16 01:01:32,253 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 14 [2021-12-16 01:01:32,253 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [93155589] [2021-12-16 01:01:32,254 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-16 01:01:32,254 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2021-12-16 01:01:32,254 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:32,254 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2021-12-16 01:01:32,254 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=153, Unknown=0, NotChecked=0, Total=182 [2021-12-16 01:01:32,255 INFO L87 Difference]: Start difference. First operand 585 states and 735 transitions. Second operand has 14 states, 14 states have (on average 10.571428571428571) internal successors, (148), 10 states have internal predecessors, (148), 5 states have call successors, (23), 6 states have call predecessors, (23), 6 states have return successors, (22), 6 states have call predecessors, (22), 5 states have call successors, (22) [2021-12-16 01:01:33,085 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:33,086 INFO L93 Difference]: Finished difference Result 1227 states and 1586 transitions. [2021-12-16 01:01:33,086 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2021-12-16 01:01:33,086 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 10.571428571428571) internal successors, (148), 10 states have internal predecessors, (148), 5 states have call successors, (23), 6 states have call predecessors, (23), 6 states have return successors, (22), 6 states have call predecessors, (22), 5 states have call successors, (22) Word has length 109 [2021-12-16 01:01:33,086 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:33,089 INFO L225 Difference]: With dead ends: 1227 [2021-12-16 01:01:33,089 INFO L226 Difference]: Without dead ends: 703 [2021-12-16 01:01:33,091 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 286 GetRequests, 246 SyntacticMatches, 1 SemanticMatches, 39 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 343 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=379, Invalid=1261, Unknown=0, NotChecked=0, Total=1640 [2021-12-16 01:01:33,091 INFO L933 BasicCegarLoop]: 220 mSDtfsCounter, 447 mSDsluCounter, 1184 mSDsCounter, 0 mSdLazyCounter, 1068 mSolverCounterSat, 233 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 450 SdHoareTripleChecker+Valid, 1404 SdHoareTripleChecker+Invalid, 1301 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 233 IncrementalHoareTripleChecker+Valid, 1068 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:33,091 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [450 Valid, 1404 Invalid, 1301 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [233 Valid, 1068 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-12-16 01:01:33,093 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 703 states. [2021-12-16 01:01:33,112 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 703 to 641. [2021-12-16 01:01:33,113 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 641 states, 475 states have (on average 1.2) internal successors, (570), 507 states have internal predecessors, (570), 86 states have call successors, (86), 71 states have call predecessors, (86), 79 states have return successors, (114), 83 states have call predecessors, (114), 86 states have call successors, (114) [2021-12-16 01:01:33,115 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 641 states to 641 states and 770 transitions. [2021-12-16 01:01:33,115 INFO L78 Accepts]: Start accepts. Automaton has 641 states and 770 transitions. Word has length 109 [2021-12-16 01:01:33,115 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:33,116 INFO L470 AbstractCegarLoop]: Abstraction has 641 states and 770 transitions. [2021-12-16 01:01:33,116 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 10.571428571428571) internal successors, (148), 10 states have internal predecessors, (148), 5 states have call successors, (23), 6 states have call predecessors, (23), 6 states have return successors, (22), 6 states have call predecessors, (22), 5 states have call successors, (22) [2021-12-16 01:01:33,116 INFO L276 IsEmpty]: Start isEmpty. Operand 641 states and 770 transitions. [2021-12-16 01:01:33,117 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 188 [2021-12-16 01:01:33,118 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:33,118 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:33,135 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-16 01:01:33,335 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-16 01:01:33,336 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:33,336 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:33,336 INFO L85 PathProgramCache]: Analyzing trace with hash 430860499, now seen corresponding path program 1 times [2021-12-16 01:01:33,336 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:33,336 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [261286272] [2021-12-16 01:01:33,336 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:33,336 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:33,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:33,377 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 01:01:33,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:33,383 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-16 01:01:33,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:33,393 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:33,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:33,397 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-16 01:01:33,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:33,400 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:33,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:33,404 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-12-16 01:01:33,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:33,412 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:33,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:33,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-16 01:01:33,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:33,415 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-16 01:01:33,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:33,418 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:33,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:33,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2021-12-16 01:01:33,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:33,441 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:33,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:33,444 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-16 01:01:33,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:33,446 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 149 [2021-12-16 01:01:33,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:33,448 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2021-12-16 01:01:33,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:33,452 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:33,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:33,454 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 179 [2021-12-16 01:01:33,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:33,471 INFO L134 CoverageAnalysis]: Checked inductivity of 197 backedges. 78 proven. 0 refuted. 0 times theorem prover too weak. 119 trivial. 0 not checked. [2021-12-16 01:01:33,471 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:33,471 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [261286272] [2021-12-16 01:01:33,471 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [261286272] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 01:01:33,472 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 01:01:33,472 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-16 01:01:33,472 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1700404450] [2021-12-16 01:01:33,472 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 01:01:33,472 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-16 01:01:33,472 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:33,473 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-16 01:01:33,473 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2021-12-16 01:01:33,473 INFO L87 Difference]: Start difference. First operand 641 states and 770 transitions. Second operand has 10 states, 10 states have (on average 9.5) internal successors, (95), 7 states have internal predecessors, (95), 4 states have call successors, (13), 5 states have call predecessors, (13), 2 states have return successors, (13), 4 states have call predecessors, (13), 4 states have call successors, (13) [2021-12-16 01:01:34,095 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:34,096 INFO L93 Difference]: Finished difference Result 1786 states and 2182 transitions. [2021-12-16 01:01:34,096 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2021-12-16 01:01:34,096 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 9.5) internal successors, (95), 7 states have internal predecessors, (95), 4 states have call successors, (13), 5 states have call predecessors, (13), 2 states have return successors, (13), 4 states have call predecessors, (13), 4 states have call successors, (13) Word has length 187 [2021-12-16 01:01:34,096 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:34,101 INFO L225 Difference]: With dead ends: 1786 [2021-12-16 01:01:34,102 INFO L226 Difference]: Without dead ends: 1153 [2021-12-16 01:01:34,104 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 46 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 251 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=229, Invalid=893, Unknown=0, NotChecked=0, Total=1122 [2021-12-16 01:01:34,104 INFO L933 BasicCegarLoop]: 217 mSDtfsCounter, 409 mSDsluCounter, 624 mSDsCounter, 0 mSdLazyCounter, 825 mSolverCounterSat, 152 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 413 SdHoareTripleChecker+Valid, 841 SdHoareTripleChecker+Invalid, 977 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 152 IncrementalHoareTripleChecker+Valid, 825 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:34,104 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [413 Valid, 841 Invalid, 977 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [152 Valid, 825 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-16 01:01:34,105 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1153 states. [2021-12-16 01:01:34,149 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1153 to 1138. [2021-12-16 01:01:34,151 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1138 states, 849 states have (on average 1.16489988221437) internal successors, (989), 897 states have internal predecessors, (989), 149 states have call successors, (149), 128 states have call predecessors, (149), 139 states have return successors, (195), 146 states have call predecessors, (195), 149 states have call successors, (195) [2021-12-16 01:01:34,154 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1138 states to 1138 states and 1333 transitions. [2021-12-16 01:01:34,155 INFO L78 Accepts]: Start accepts. Automaton has 1138 states and 1333 transitions. Word has length 187 [2021-12-16 01:01:34,155 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:34,155 INFO L470 AbstractCegarLoop]: Abstraction has 1138 states and 1333 transitions. [2021-12-16 01:01:34,156 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 9.5) internal successors, (95), 7 states have internal predecessors, (95), 4 states have call successors, (13), 5 states have call predecessors, (13), 2 states have return successors, (13), 4 states have call predecessors, (13), 4 states have call successors, (13) [2021-12-16 01:01:34,156 INFO L276 IsEmpty]: Start isEmpty. Operand 1138 states and 1333 transitions. [2021-12-16 01:01:34,161 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 192 [2021-12-16 01:01:34,161 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 01:01:34,161 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:34,161 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-12-16 01:01:34,161 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:01:34,162 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:01:34,162 INFO L85 PathProgramCache]: Analyzing trace with hash -813407625, now seen corresponding path program 1 times [2021-12-16 01:01:34,162 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:01:34,162 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1156805504] [2021-12-16 01:01:34,162 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:34,162 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:01:34,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,210 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 01:01:34,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,217 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-16 01:01:34,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,221 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:34,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,226 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-16 01:01:34,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:34,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,233 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-12-16 01:01:34,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,239 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:34,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,241 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-16 01:01:34,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,244 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-16 01:01:34,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:34,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,254 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2021-12-16 01:01:34,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,257 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-12-16 01:01:34,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:01:34,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,303 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-16 01:01:34,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,305 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 153 [2021-12-16 01:01:34,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 162 [2021-12-16 01:01:34,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,311 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 01:01:34,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,313 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 183 [2021-12-16 01:01:34,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,316 INFO L134 CoverageAnalysis]: Checked inductivity of 197 backedges. 66 proven. 5 refuted. 0 times theorem prover too weak. 126 trivial. 0 not checked. [2021-12-16 01:01:34,316 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:01:34,316 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1156805504] [2021-12-16 01:01:34,316 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1156805504] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 01:01:34,316 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [287293868] [2021-12-16 01:01:34,316 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:01:34,316 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 01:01:34,317 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 01:01:34,317 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 01:01:34,337 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-16 01:01:34,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:01:34,451 INFO L263 TraceCheckSpWp]: Trace formula consists of 721 conjuncts, 13 conjunts are in the unsatisfiable core [2021-12-16 01:01:34,455 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 01:01:34,819 INFO L134 CoverageAnalysis]: Checked inductivity of 197 backedges. 143 proven. 4 refuted. 0 times theorem prover too weak. 50 trivial. 0 not checked. [2021-12-16 01:01:34,819 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-16 01:01:35,360 INFO L134 CoverageAnalysis]: Checked inductivity of 197 backedges. 77 proven. 39 refuted. 0 times theorem prover too weak. 81 trivial. 0 not checked. [2021-12-16 01:01:35,360 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [287293868] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-16 01:01:35,360 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-16 01:01:35,360 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 10, 11] total 26 [2021-12-16 01:01:35,360 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1608309881] [2021-12-16 01:01:35,360 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-16 01:01:35,361 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2021-12-16 01:01:35,361 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:01:35,361 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2021-12-16 01:01:35,361 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=121, Invalid=529, Unknown=0, NotChecked=0, Total=650 [2021-12-16 01:01:35,362 INFO L87 Difference]: Start difference. First operand 1138 states and 1333 transitions. Second operand has 26 states, 26 states have (on average 8.576923076923077) internal successors, (223), 21 states have internal predecessors, (223), 9 states have call successors, (38), 10 states have call predecessors, (38), 9 states have return successors, (37), 8 states have call predecessors, (37), 9 states have call successors, (37) [2021-12-16 01:01:36,458 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:01:36,458 INFO L93 Difference]: Finished difference Result 2415 states and 2913 transitions. [2021-12-16 01:01:36,459 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2021-12-16 01:01:36,459 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 8.576923076923077) internal successors, (223), 21 states have internal predecessors, (223), 9 states have call successors, (38), 10 states have call predecessors, (38), 9 states have return successors, (37), 8 states have call predecessors, (37), 9 states have call successors, (37) Word has length 191 [2021-12-16 01:01:36,459 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:01:36,460 INFO L225 Difference]: With dead ends: 2415 [2021-12-16 01:01:36,460 INFO L226 Difference]: Without dead ends: 0 [2021-12-16 01:01:36,465 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 463 GetRequests, 410 SyntacticMatches, 3 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 510 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=557, Invalid=2095, Unknown=0, NotChecked=0, Total=2652 [2021-12-16 01:01:36,466 INFO L933 BasicCegarLoop]: 142 mSDtfsCounter, 882 mSDsluCounter, 396 mSDsCounter, 0 mSdLazyCounter, 1549 mSolverCounterSat, 358 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 885 SdHoareTripleChecker+Valid, 538 SdHoareTripleChecker+Invalid, 1907 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 358 IncrementalHoareTripleChecker+Valid, 1549 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2021-12-16 01:01:36,466 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [885 Valid, 538 Invalid, 1907 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [358 Valid, 1549 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2021-12-16 01:01:36,466 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-16 01:01:36,466 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-16 01:01:36,466 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 01:01:36,466 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-16 01:01:36,466 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 191 [2021-12-16 01:01:36,467 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:01:36,467 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-16 01:01:36,467 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 8.576923076923077) internal successors, (223), 21 states have internal predecessors, (223), 9 states have call successors, (38), 10 states have call predecessors, (38), 9 states have return successors, (37), 8 states have call predecessors, (37), 9 states have call successors, (37) [2021-12-16 01:01:36,468 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-16 01:01:36,468 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-16 01:01:36,470 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-16 01:01:36,501 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-16 01:01:36,679 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2021-12-16 01:01:36,681 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-16 01:01:45,424 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 551 558) the Hoare annotation is: (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) (not (= 1 ~systemActive~0)) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|))) [2021-12-16 01:01:45,424 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 551 558) no Hoare annotation was computed. [2021-12-16 01:01:45,424 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 551 558) no Hoare annotation was computed. [2021-12-16 01:01:45,424 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 458 464) no Hoare annotation was computed. [2021-12-16 01:01:45,424 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 458 464) the Hoare annotation is: true [2021-12-16 01:01:45,424 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 943 954) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 |old(~methaneLevelCritical~0)|)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~pumpRunning~0)))) (and (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 (not (<= ~waterLevel~0 2))) (or .cse0 (not (= ~waterLevel~0 2)) .cse1 .cse2) (or (not (= |old(~methaneLevelCritical~0)| 0)) (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 .cse2 (= ~methaneLevelCritical~0 0)))) [2021-12-16 01:01:45,425 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 943 954) no Hoare annotation was computed. [2021-12-16 01:01:45,425 INFO L858 garLoopResultBuilder]: For program point L947-1(lines 943 954) no Hoare annotation was computed. [2021-12-16 01:01:45,425 INFO L858 garLoopResultBuilder]: For program point L833(line 833) no Hoare annotation was computed. [2021-12-16 01:01:45,425 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 812 841) no Hoare annotation was computed. [2021-12-16 01:01:45,425 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 812 841) the Hoare annotation is: true [2021-12-16 01:01:45,425 INFO L858 garLoopResultBuilder]: For program point L826(lines 826 830) no Hoare annotation was computed. [2021-12-16 01:01:45,425 INFO L861 garLoopResultBuilder]: At program point L826-1(lines 826 830) the Hoare annotation is: true [2021-12-16 01:01:45,425 INFO L858 garLoopResultBuilder]: For program point L823(line 823) no Hoare annotation was computed. [2021-12-16 01:01:45,425 INFO L861 garLoopResultBuilder]: At program point L822-2(lines 822 836) the Hoare annotation is: true [2021-12-16 01:01:45,425 INFO L861 garLoopResultBuilder]: At program point L818(line 818) the Hoare annotation is: true [2021-12-16 01:01:45,425 INFO L858 garLoopResultBuilder]: For program point L818-1(line 818) no Hoare annotation was computed. [2021-12-16 01:01:45,425 INFO L861 garLoopResultBuilder]: At program point L837(lines 812 841) the Hoare annotation is: true [2021-12-16 01:01:45,426 INFO L854 garLoopResultBuilder]: At program point L960(lines 955 963) the Hoare annotation is: (let ((.cse11 (= 0 ~methaneLevelCritical~0)) (.cse13 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse15 (= ~methaneLevelCritical~0 0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse14 (<= ~waterLevel~0 1)) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|))) (let ((.cse9 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (and .cse6 .cse14 (= ~waterLevel~0 |old(~waterLevel~0)|) .cse7 .cse8)) (.cse0 (and .cse13 .cse6 .cse14 .cse15 .cse7 .cse8)) (.cse4 (not .cse15)) (.cse12 (not (= |old(~waterLevel~0)| 1))) (.cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not (= 1 ~systemActive~0))) (.cse10 (and .cse13 .cse6 .cse14 (<= 1 ~pumpRunning~0) .cse7 (not .cse11) .cse8 (= ~systemActive~0 1))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (<= |old(~waterLevel~0)| 1)) .cse5) (or .cse2 (and .cse6 (= ~waterLevel~0 1) .cse7 .cse8) (not (= |old(~waterLevel~0)| 2)) .cse5) (or .cse9 .cse2 (not (= |old(~pumpRunning~0)| 0))) (or .cse9 .cse1 .cse2 .cse3 .cse10 .cse11 .cse5) (or .cse0 .cse12 .cse1 .cse2 .cse4 .cse5) (or .cse12 .cse1 .cse2 .cse10 .cse11 .cse5)))) [2021-12-16 01:01:45,426 INFO L858 garLoopResultBuilder]: For program point L923(lines 923 927) no Hoare annotation was computed. [2021-12-16 01:01:45,426 INFO L854 garLoopResultBuilder]: At program point L923-2(lines 919 930) the Hoare annotation is: (let ((.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (let ((.cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse4 (<= ~waterLevel~0 1) .cse5)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3) (or .cse1 (and .cse4 (= ~waterLevel~0 1) .cse5) (not (= |old(~waterLevel~0)| 2)) .cse3) (or .cse6 .cse0 .cse1 .cse2 (and .cse4 (= ~waterLevel~0 |old(~waterLevel~0)|) .cse5) .cse3) (or .cse6 .cse1 (not (= |old(~pumpRunning~0)| 0)))))) [2021-12-16 01:01:45,426 INFO L854 garLoopResultBuilder]: At program point L791(line 791) the Hoare annotation is: (let ((.cse21 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse11 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse12 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse13 (< |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2)) (.cse27 (= ~methaneLevelCritical~0 0)) (.cse19 (= ~waterLevel~0 1)) (.cse26 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse18 (<= 1 ~switchedOnBeforeTS~0)) (.cse10 (<= ~waterLevel~0 1)) (.cse20 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~5#1|)) (.cse4 (= 0 ~methaneLevelCritical~0)) (.cse22 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse23 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|)) (.cse14 (= ~pumpRunning~0 0)) (.cse28 (= 1 ~systemActive~0)) (.cse24 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse25 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| ~waterLevel~0))) (let ((.cse3 (and .cse26 .cse18 .cse10 .cse20 (not .cse4) .cse22 .cse23 .cse14 .cse28 .cse24 .cse25)) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~waterLevel~0)| 1))) (.cse8 (and .cse18 .cse19 .cse20 .cse22 .cse23 .cse14 .cse24 .cse25)) (.cse9 (not (= |old(~waterLevel~0)| 2))) (.cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not .cse28)) (.cse15 (and .cse26 .cse18 .cse10 .cse27 .cse20 .cse22 .cse23 .cse14 .cse24 .cse25)) (.cse7 (and .cse18 .cse11 .cse20 .cse12 .cse22 .cse23 .cse13 .cse14)) (.cse16 (not .cse27)) (.cse17 (and .cse26 .cse18 .cse10 .cse27 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse1 .cse2 .cse7 .cse3 .cse4 .cse5) (or .cse2 .cse8 .cse9 .cse5 .cse4) (or .cse6 .cse2 (not (= |old(~pumpRunning~0)| 0)) (and .cse10 .cse11 .cse12 .cse13 .cse14)) (or .cse0 .cse1 .cse2 .cse15 .cse16 .cse17 .cse5) (or (and .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25) .cse2 .cse8 .cse9 .cse5) (or .cse1 .cse2 (and .cse18 .cse11 .cse20 .cse21 .cse12 .cse22 .cse23 .cse13) .cse15 .cse7 .cse16 (not (<= |old(~waterLevel~0)| 1)) .cse17 .cse5)))) [2021-12-16 01:01:45,426 INFO L858 garLoopResultBuilder]: For program point L791-1(line 791) no Hoare annotation was computed. [2021-12-16 01:01:45,426 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 431 457) no Hoare annotation was computed. [2021-12-16 01:01:45,426 INFO L858 garLoopResultBuilder]: For program point L445-1(lines 445 451) no Hoare annotation was computed. [2021-12-16 01:01:45,427 INFO L854 garLoopResultBuilder]: At program point L532(line 532) the Hoare annotation is: (let ((.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse10 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~5#1|)) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse9 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|))) (let ((.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse5 (<= ~waterLevel~0 1) .cse10 .cse6 .cse7 .cse8 .cse9)) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse1 (= 0 ~methaneLevelCritical~0) .cse3) (or .cse4 .cse1 (not (= |old(~pumpRunning~0)| 0))) (or .cse0 .cse1 .cse2 (and .cse5 (= ~waterLevel~0 |old(~waterLevel~0)|) .cse6 .cse7 .cse8 .cse9) (not (<= |old(~waterLevel~0)| 1)) .cse3) (or .cse1 (and .cse5 (= ~waterLevel~0 1) .cse10 .cse6 .cse7 .cse8 .cse9) (not (= |old(~waterLevel~0)| 2)) .cse3)))) [2021-12-16 01:01:45,427 INFO L854 garLoopResultBuilder]: At program point L528(line 528) the Hoare annotation is: (let ((.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~5#1|)) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse11 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse6 (and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse7 (<= ~waterLevel~0 1) .cse8 (<= 1 ~pumpRunning~0) .cse9 (not (= 0 ~methaneLevelCritical~0)) .cse10 .cse11 (= ~systemActive~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))) (or .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse2 (not (<= |old(~waterLevel~0)| 1)) .cse4) (or (not (= |old(~waterLevel~0)| 1)) .cse5 .cse1 .cse6 .cse4) (or .cse0 .cse5 .cse1 (and .cse7 (= ~waterLevel~0 |old(~waterLevel~0)|) .cse8 .cse9 .cse10 .cse11) .cse6 .cse4) (or .cse1 (and .cse7 (= ~waterLevel~0 1) .cse8 .cse9 .cse10 .cse11) .cse3 .cse4)))) [2021-12-16 01:01:45,427 INFO L858 garLoopResultBuilder]: For program point L912(line 912) no Hoare annotation was computed. [2021-12-16 01:01:45,427 INFO L854 garLoopResultBuilder]: At program point L776(line 776) the Hoare annotation is: (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse0 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or (not (<= |old(~waterLevel~0)| 2)) (and .cse0 .cse1 (= ~pumpRunning~0 0)) .cse2 (not (= |old(~pumpRunning~0)| 0))) (or (and .cse0 .cse1 .cse3) .cse2 (not (= |old(~waterLevel~0)| 2)) .cse4) (or (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse2 (and .cse0 .cse3 .cse1) (not (<= |old(~waterLevel~0)| 1)) .cse4))) [2021-12-16 01:01:45,427 INFO L858 garLoopResultBuilder]: For program point L776-1(line 776) no Hoare annotation was computed. [2021-12-16 01:01:45,427 INFO L854 garLoopResultBuilder]: At program point L537(line 537) the Hoare annotation is: (let ((.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 .cse2) (or .cse1 (not (= |old(~waterLevel~0)| 2)) .cse2) (or .cse0 (and (= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 0)) .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-16 01:01:45,427 INFO L858 garLoopResultBuilder]: For program point L793(lines 793 803) no Hoare annotation was computed. [2021-12-16 01:01:45,428 INFO L854 garLoopResultBuilder]: At program point L537-1(lines 518 542) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse17 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse18 (<= ~waterLevel~0 1)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse9 (= ~waterLevel~0 1)) (.cse10 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~5#1|)) (.cse12 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse13 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|)) (.cse15 (= ~pumpRunning~0 0))) (let ((.cse1 (and .cse8 .cse9 .cse10 .cse12 .cse13 .cse15)) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse5 (and .cse17 .cse8 .cse18 .cse10 .cse12 .cse13 .cse15)) (.cse7 (and .cse17 .cse8 .cse18 (= ~methaneLevelCritical~0 0) .cse10 .cse11 .cse12 .cse13)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse16 (not (<= |old(~waterLevel~0)| 1))) (.cse4 (= 0 ~methaneLevelCritical~0)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse14 (= ~waterLevel~0 |old(~waterLevel~0)|))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 (not (= |old(~waterLevel~0)| 1)) .cse6 .cse0 .cse7 .cse3) (or .cse0 .cse1 (and .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) .cse2 .cse3) (or .cse5 .cse6 .cse0 (and .cse8 .cse14 .cse10 .cse12 .cse13 .cse15) .cse7 (and .cse8 .cse14 .cse10 .cse11 .cse12 .cse13) .cse16 .cse3) (or .cse6 .cse0 .cse16 .cse15 .cse4 .cse3) (or (not (<= |old(~waterLevel~0)| 2)) (and .cse14 .cse15) .cse0 (and (= ~waterLevel~0 2) .cse14 (<= 1 ~pumpRunning~0)) (not (= |old(~pumpRunning~0)| 0)))))) [2021-12-16 01:01:45,428 INFO L858 garLoopResultBuilder]: For program point L438(lines 438 444) no Hoare annotation was computed. [2021-12-16 01:01:45,428 INFO L854 garLoopResultBuilder]: At program point L566(lines 559 569) the Hoare annotation is: (let ((.cse14 (= 0 ~methaneLevelCritical~0)) (.cse15 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse16 (<= ~waterLevel~0 1)) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse11 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|)) (.cse17 (= ~methaneLevelCritical~0 0))) (let ((.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse5 (not .cse17)) (.cse6 (and .cse15 .cse8 .cse16 .cse17 .cse9 .cse10 .cse11)) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse12 (and .cse8 (= ~waterLevel~0 |old(~waterLevel~0)|) .cse9 .cse10 .cse11)) (.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse13 (and .cse15 .cse8 .cse16 (<= 1 ~pumpRunning~0) .cse9 (not .cse14) .cse10 .cse11 (= ~systemActive~0 1))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or (= ~waterLevel~0 1) .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse0 .cse5 .cse6 .cse2) (or .cse7 .cse0 (not (= |old(~pumpRunning~0)| 0))) (or .cse0 (and .cse8 .cse9 .cse10 .cse11) .cse1 .cse2) (or .cse12 .cse4 .cse0 .cse5 (not (<= |old(~waterLevel~0)| 1)) .cse6 .cse2) (or .cse7 .cse12 .cse4 .cse0 .cse13 .cse14 .cse2) (or .cse3 .cse4 .cse0 .cse13 .cse14 .cse2)))) [2021-12-16 01:01:45,428 INFO L858 garLoopResultBuilder]: For program point L789(lines 789 806) no Hoare annotation was computed. [2021-12-16 01:01:45,428 INFO L858 garLoopResultBuilder]: For program point L438-2(lines 434 456) no Hoare annotation was computed. [2021-12-16 01:01:45,428 INFO L854 garLoopResultBuilder]: At program point L789-1(lines 781 809) the Hoare annotation is: (let ((.cse25 (= ~waterLevel~0 1)) (.cse4 (= 0 ~methaneLevelCritical~0)) (.cse28 (= 1 ~systemActive~0)) (.cse10 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse13 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse16 (< |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2)) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse29 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse23 (<= ~waterLevel~0 1)) (.cse30 (= ~methaneLevelCritical~0 0)) (.cse11 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~5#1|)) (.cse14 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse15 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|)) (.cse24 (= ~pumpRunning~0 0)) (.cse26 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse27 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| ~waterLevel~0))) (let ((.cse0 (not (= |old(~waterLevel~0)| 1))) (.cse17 (and .cse29 .cse9 .cse23 .cse30 .cse11 .cse14 .cse15 .cse24 .cse26 .cse27)) (.cse18 (not .cse30)) (.cse20 (and .cse29 .cse9 .cse23 .cse30 .cse11 .cse12 .cse14 .cse15 .cse26 .cse27)) (.cse8 (and .cse9 .cse11 .cse10 .cse13 .cse14 .cse15 .cse16 .cse24)) (.cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse19 (not (<= |old(~waterLevel~0)| 1))) (.cse3 (and .cse29 .cse9 .cse23 .cse11 (not .cse4) .cse14 .cse15 .cse24 .cse28 .cse26 .cse27)) (.cse2 (not .cse28)) (.cse6 (and .cse9 .cse25 .cse11 .cse14 .cse15 .cse24 .cse26 .cse27)) (.cse7 (not (= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse2 .cse6 .cse7 .cse5 .cse4) (or .cse8 .cse1 .cse2 (and .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16) .cse17 .cse18 .cse19 .cse20 .cse5) (or .cse0 .cse1 .cse2 .cse17 .cse18 .cse20 .cse5) (let ((.cse21 (= |timeShift_getWaterLevel_#res#1| 2)) (.cse22 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2))) (or (not (<= |old(~waterLevel~0)| 2)) (and .cse21 (= ~waterLevel~0 2) .cse10 .cse12 .cse22) .cse2 (not (= |old(~pumpRunning~0)| 0)) (and .cse21 .cse10 (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse22) (and .cse23 .cse10 .cse13 .cse16 .cse24))) (or .cse8 .cse1 .cse2 .cse19 .cse3 .cse4 .cse5) (or (and .cse9 .cse25 .cse11 .cse12 .cse14 .cse15 .cse26 .cse27) .cse2 .cse6 .cse7 .cse5)))) [2021-12-16 01:01:45,428 INFO L854 garLoopResultBuilder]: At program point L913(lines 908 915) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))) (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 .cse2) (or .cse1 (not (= |old(~waterLevel~0)| 2)) .cse2))) [2021-12-16 01:01:45,429 INFO L854 garLoopResultBuilder]: At program point L992(lines 987 995) the Hoare annotation is: (let ((.cse9 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse12 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse4 (= 0 ~methaneLevelCritical~0)) (.cse27 (= 1 ~systemActive~0)) (.cse24 (= ~waterLevel~0 1)) (.cse10 (= ~pumpRunning~0 0)) (.cse26 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse14 (<= 1 ~switchedOnBeforeTS~0)) (.cse11 (<= ~waterLevel~0 1)) (.cse28 (= ~methaneLevelCritical~0 0)) (.cse15 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~5#1|)) (.cse16 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse17 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse18 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|)) (.cse25 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0))) (let ((.cse13 (and .cse26 .cse14 .cse11 .cse28 .cse15 .cse16 .cse17 .cse18 .cse25)) (.cse0 (not (= |old(~waterLevel~0)| 1))) (.cse19 (and .cse26 .cse14 .cse11 .cse28 .cse15 .cse17 .cse18 .cse10 .cse25)) (.cse21 (not .cse28)) (.cse22 (and .cse14 .cse24 .cse15 .cse17 .cse18 .cse10 .cse25)) (.cse23 (not (= |old(~waterLevel~0)| 2))) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not .cse27)) (.cse3 (and .cse26 .cse14 .cse11 .cse15 (not .cse4) .cse17 .cse18 .cse10 .cse27 .cse25)) (.cse20 (and .cse14 .cse9 .cse15 .cse12 .cse17 .cse18 .cse10)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (let ((.cse7 (= |timeShift_getWaterLevel_#res#1| 2)) (.cse8 (= ~waterLevel~0 2))) (or .cse6 .cse2 (and .cse7 .cse8 .cse9 .cse10) (and .cse7 .cse8 .cse9 (<= 1 ~pumpRunning~0)) (not (= |old(~pumpRunning~0)| 0)) (and .cse11 .cse9 .cse12 .cse10))) (or .cse13 (and .cse14 .cse9 .cse15 .cse16 .cse12 .cse17 .cse18) .cse1 .cse2 .cse19 .cse20 .cse21 (not (<= |old(~waterLevel~0)| 1)) .cse5) (or .cse13 .cse0 .cse1 .cse2 .cse19 .cse21 .cse5) (or .cse22 .cse2 .cse23 .cse5 .cse4) (or .cse22 .cse2 (and .cse14 .cse24 .cse15 .cse16 .cse17 .cse18 .cse25) .cse23 .cse5) (or .cse6 .cse1 .cse2 .cse3 .cse20 .cse4 .cse5)))) [2021-12-16 01:01:45,429 INFO L858 garLoopResultBuilder]: For program point L794(lines 794 800) no Hoare annotation was computed. [2021-12-16 01:01:45,429 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 431 457) the Hoare annotation is: (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse0 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or (not (<= |old(~waterLevel~0)| 2)) (and .cse0 .cse1 (= ~pumpRunning~0 0)) .cse2 (not (= |old(~pumpRunning~0)| 0))) (or (and .cse0 .cse1 .cse3) .cse2 (not (= |old(~waterLevel~0)| 2)) .cse4) (or (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse2 (and .cse0 .cse3 .cse1) (not (<= |old(~waterLevel~0)| 1)) .cse4))) [2021-12-16 01:01:45,429 INFO L858 garLoopResultBuilder]: For program point L526(lines 526 534) no Hoare annotation was computed. [2021-12-16 01:01:45,429 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 431 457) no Hoare annotation was computed. [2021-12-16 01:01:45,429 INFO L854 garLoopResultBuilder]: At program point L778(lines 771 780) the Hoare annotation is: (let ((.cse3 (= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (<= 1 ~switchedOnBeforeTS~0) .cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse0 (not (<= |old(~waterLevel~0)| 1)) .cse1 .cse2) (or (not (<= |old(~waterLevel~0)| 2)) (and .cse3 (= ~pumpRunning~0 0)) .cse0 (not (= |old(~pumpRunning~0)| 0))) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 2)) .cse2)))) [2021-12-16 01:01:45,429 INFO L858 garLoopResultBuilder]: For program point L522(lines 522 539) no Hoare annotation was computed. [2021-12-16 01:01:45,429 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 912) no Hoare annotation was computed. [2021-12-16 01:01:45,430 INFO L858 garLoopResultBuilder]: For program point L894(lines 894 901) no Hoare annotation was computed. [2021-12-16 01:01:45,430 INFO L858 garLoopResultBuilder]: For program point L894-2(lines 894 901) no Hoare annotation was computed. [2021-12-16 01:01:45,430 INFO L858 garLoopResultBuilder]: For program point L725(lines 725 731) no Hoare annotation was computed. [2021-12-16 01:01:45,430 INFO L858 garLoopResultBuilder]: For program point L725-1(lines 725 731) no Hoare annotation was computed. [2021-12-16 01:01:45,430 INFO L861 garLoopResultBuilder]: At program point L754(lines 695 758) the Hoare annotation is: true [2021-12-16 01:01:45,430 INFO L854 garLoopResultBuilder]: At program point L717(line 717) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse1 (= ~waterLevel~0 2)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 1)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse2 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse3) (and .cse0 .cse1 .cse5 .cse2) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse4 (= ~methaneLevelCritical~0 0) .cse5 .cse2))) [2021-12-16 01:01:45,430 INFO L861 garLoopResultBuilder]: At program point L903(lines 884 906) the Hoare annotation is: true [2021-12-16 01:01:45,430 INFO L854 garLoopResultBuilder]: At program point L870(lines 866 872) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:01:45,430 INFO L854 garLoopResultBuilder]: At program point L672(lines 668 674) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:01:45,431 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-16 01:01:45,431 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-16 01:01:45,431 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-16 01:01:45,431 INFO L854 garLoopResultBuilder]: At program point L751(lines 704 752) the Hoare annotation is: false [2021-12-16 01:01:45,431 INFO L858 garLoopResultBuilder]: For program point L706(lines 705 750) no Hoare annotation was computed. [2021-12-16 01:01:45,431 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-16 01:01:45,431 INFO L854 garLoopResultBuilder]: At program point L768(lines 763 770) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:01:45,431 INFO L858 garLoopResultBuilder]: For program point L735(lines 735 746) no Hoare annotation was computed. [2021-12-16 01:01:45,431 INFO L854 garLoopResultBuilder]: At program point L727(line 727) the Hoare annotation is: (let ((.cse1 (= ~systemActive~0 1)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= 1 ~pumpRunning~0))) (or (and .cse0 (<= ~waterLevel~0 2) .cse1 (= ~pumpRunning~0 0)) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) (<= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) .cse2 .cse1) (and .cse0 (= ~waterLevel~0 2) .cse2 (= 1 ~systemActive~0)))) [2021-12-16 01:01:45,431 INFO L854 garLoopResultBuilder]: At program point L748(lines 705 750) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse1 (= ~waterLevel~0 2)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 1)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse2 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse3) (and .cse0 .cse1 .cse5 .cse2) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse4 (= ~methaneLevelCritical~0 0) .cse5 .cse2))) [2021-12-16 01:01:45,432 INFO L858 garLoopResultBuilder]: For program point L715(lines 715 721) no Hoare annotation was computed. [2021-12-16 01:01:45,432 INFO L858 garLoopResultBuilder]: For program point L715-1(lines 715 721) no Hoare annotation was computed. [2021-12-16 01:01:45,432 INFO L858 garLoopResultBuilder]: For program point L707(lines 707 711) no Hoare annotation was computed. [2021-12-16 01:01:45,432 INFO L861 garLoopResultBuilder]: At program point L881(lines 873 883) the Hoare annotation is: true [2021-12-16 01:01:45,432 INFO L854 garLoopResultBuilder]: At program point L687(lines 682 690) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:01:45,432 INFO L854 garLoopResultBuilder]: At program point L679(lines 675 681) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:01:45,432 INFO L858 garLoopResultBuilder]: For program point L741(lines 741 745) no Hoare annotation was computed. [2021-12-16 01:01:45,432 INFO L854 garLoopResultBuilder]: At program point L741-2(lines 735 746) the Hoare annotation is: (let ((.cse2 (= ~systemActive~0 1)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (<= 1 ~pumpRunning~0))) (or (and .cse0 (<= 1 ~switchedOnBeforeTS~0) (<= ~waterLevel~0 1) .cse1 .cse2) (and .cse0 (<= ~waterLevel~0 2) .cse2 (= ~pumpRunning~0 0)) (and .cse0 (= ~waterLevel~0 2) .cse1 (= 1 ~systemActive~0)))) [2021-12-16 01:01:45,432 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 466 490) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)))) [2021-12-16 01:01:45,433 INFO L854 garLoopResultBuilder]: At program point L630(lines 615 633) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (let ((.cse1 (= ~pumpRunning~0 0))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0)) (and (= ~waterLevel~0 2) .cse1) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (not (= 0 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~6#1|)) .cse1))))) [2021-12-16 01:01:45,433 INFO L858 garLoopResultBuilder]: For program point L624(lines 624 628) no Hoare annotation was computed. [2021-12-16 01:01:45,433 INFO L858 garLoopResultBuilder]: For program point L624-2(lines 624 628) no Hoare annotation was computed. [2021-12-16 01:01:45,433 INFO L858 garLoopResultBuilder]: For program point L1000(lines 1000 1006) no Hoare annotation was computed. [2021-12-16 01:01:45,433 INFO L854 garLoopResultBuilder]: At program point L548(lines 543 550) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (and (= ~waterLevel~0 2) (<= 1 ~pumpRunning~0)) (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-16 01:01:45,433 INFO L854 garLoopResultBuilder]: At program point L480(line 480) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0)) (and (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|))))) [2021-12-16 01:01:45,433 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 466 490) no Hoare annotation was computed. [2021-12-16 01:01:45,433 INFO L858 garLoopResultBuilder]: For program point L474(lines 474 482) no Hoare annotation was computed. [2021-12-16 01:01:45,434 INFO L858 garLoopResultBuilder]: For program point L470(lines 470 487) no Hoare annotation was computed. [2021-12-16 01:01:45,434 INFO L854 garLoopResultBuilder]: At program point L1005(lines 996 1009) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 1))) (.cse3 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse1 (not (= ~waterLevel~0 2)) .cse2 .cse3) (or .cse0 (and (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) .cse3) .cse1 .cse2))) [2021-12-16 01:01:45,434 INFO L854 garLoopResultBuilder]: At program point L485(line 485) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-16 01:01:45,434 INFO L858 garLoopResultBuilder]: For program point L485-1(lines 466 490) no Hoare annotation was computed. [2021-12-16 01:01:45,434 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 931 942) no Hoare annotation was computed. [2021-12-16 01:01:45,434 INFO L858 garLoopResultBuilder]: For program point L935-1(lines 931 942) no Hoare annotation was computed. [2021-12-16 01:01:45,434 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 931 942) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse5 (not (<= |old(~waterLevel~0)| 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 ~pumpRunning~0))) (.cse2 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse3 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 .cse4 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse5) (or .cse0 .cse1 .cse2 .cse5) (or .cse1 .cse4 .cse2 .cse3))) [2021-12-16 01:01:45,434 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 492 516) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)))) [2021-12-16 01:01:45,434 INFO L854 garLoopResultBuilder]: At program point L506(line 506) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-16 01:01:45,435 INFO L854 garLoopResultBuilder]: At program point L502(line 502) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-16 01:01:45,435 INFO L858 garLoopResultBuilder]: For program point L500(lines 500 508) no Hoare annotation was computed. [2021-12-16 01:01:45,435 INFO L858 garLoopResultBuilder]: For program point L496(lines 496 513) no Hoare annotation was computed. [2021-12-16 01:01:45,435 INFO L854 garLoopResultBuilder]: At program point L649(lines 634 652) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-16 01:01:45,435 INFO L858 garLoopResultBuilder]: For program point L643(lines 643 647) no Hoare annotation was computed. [2021-12-16 01:01:45,435 INFO L858 garLoopResultBuilder]: For program point L643-2(lines 643 647) no Hoare annotation was computed. [2021-12-16 01:01:45,435 INFO L854 garLoopResultBuilder]: At program point L511(line 511) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))))) [2021-12-16 01:01:45,435 INFO L858 garLoopResultBuilder]: For program point L511-1(lines 492 516) no Hoare annotation was computed. [2021-12-16 01:01:45,435 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 492 516) no Hoare annotation was computed. [2021-12-16 01:01:45,436 INFO L854 garLoopResultBuilder]: At program point L1015(lines 1010 1018) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-16 01:01:45,436 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 570 578) no Hoare annotation was computed. [2021-12-16 01:01:45,436 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 570 578) the Hoare annotation is: true [2021-12-16 01:01:45,436 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 570 578) no Hoare annotation was computed. [2021-12-16 01:01:45,438 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:01:45,439 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-16 01:01:45,474 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.12 01:01:45 BoogieIcfgContainer [2021-12-16 01:01:45,475 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-16 01:01:45,476 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-16 01:01:45,477 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-16 01:01:45,478 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-16 01:01:45,482 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 01:01:28" (3/4) ... [2021-12-16 01:01:45,484 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-16 01:01:45,488 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-16 01:01:45,489 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-16 01:01:45,489 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-16 01:01:45,489 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-16 01:01:45,489 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-16 01:01:45,490 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 01:01:45,490 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-16 01:01:45,490 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2021-12-16 01:01:45,490 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-12-16 01:01:45,495 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 54 nodes and edges [2021-12-16 01:01:45,497 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-16 01:01:45,497 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-16 01:01:45,497 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-16 01:01:45,498 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-16 01:01:45,498 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 01:01:45,498 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 01:01:45,514 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || !(\old(waterLevel) <= 1)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) && (((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((!(1 == systemActive) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) [2021-12-16 01:01:45,515 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) && (((!(1 == systemActive) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) [2021-12-16 01:01:45,515 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && 1 == systemActive) && \result <= waterLevel) && tmp <= waterLevel)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) && ((((!(1 == systemActive) || (((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel) && tmp <= waterLevel)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) || 0 == methaneLevelCritical)) && (((((((((((((((1 <= switchedOnBeforeTS && methaneLevelCritical == tmp) && waterLevel == \old(waterLevel)) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && tmp < 2) && pumpRunning == 0) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && tmp < 2)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel) && tmp <= waterLevel)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && \result <= waterLevel) && tmp <= waterLevel)) || !(1 <= \old(pumpRunning)))) && ((((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel) && tmp <= waterLevel)) || !(methaneLevelCritical == 0)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && \result <= waterLevel) && tmp <= waterLevel)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || ((((\result == 2 && waterLevel == 2) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && tmp == 2)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || ((((\result == 2 && waterLevel == \old(waterLevel)) && 1 <= pumpRunning) && 2 <= waterLevel) && tmp == 2)) || ((((waterLevel <= 1 && waterLevel == \old(waterLevel)) && \result < 2) && tmp < 2) && pumpRunning == 0))) && (((((((((((((1 <= switchedOnBeforeTS && methaneLevelCritical == tmp) && waterLevel == \old(waterLevel)) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && tmp < 2) && pumpRunning == 0) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(\old(waterLevel) <= 1)) || ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && 1 == systemActive) && \result <= waterLevel) && tmp <= waterLevel)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && \result <= waterLevel) && tmp <= waterLevel) || !(1 == systemActive)) || (((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel) && tmp <= waterLevel)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) [2021-12-16 01:01:45,516 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 == systemActive) || (((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) || 0 == methaneLevelCritical) && (((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(pumpRunning)))) && ((((!(1 == systemActive) || (((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || (((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && (((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || (((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning)))) && (((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || !(\old(waterLevel) <= 1)) || pumpRunning == 0) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || ((waterLevel == 2 && waterLevel == \old(waterLevel)) && 1 <= pumpRunning)) || !(\old(pumpRunning) == 0)) [2021-12-16 01:01:45,516 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) && (((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= \old(pumpRunning)))) && ((!(1 == systemActive) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) [2021-12-16 01:01:45,516 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && 1 == systemActive) && \result <= waterLevel)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || (((\result == 2 && waterLevel == 2) && waterLevel == \old(waterLevel)) && pumpRunning == 0)) || (((\result == 2 && waterLevel == 2) && waterLevel == \old(waterLevel)) && 1 <= pumpRunning)) || !(\old(pumpRunning) == 0)) || (((waterLevel <= 1 && waterLevel == \old(waterLevel)) && \result < 2) && pumpRunning == 0))) && ((((((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && \result <= waterLevel) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel)) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning)))) && ((((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && \result <= waterLevel) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) || 0 == methaneLevelCritical)) && ((((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel) || !(1 == systemActive)) || ((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && \result <= waterLevel)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && ((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && 1 == systemActive) && \result <= waterLevel)) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) [2021-12-16 01:01:45,516 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((1 <= switchedOnBeforeTS && waterLevel <= 1) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) && (((!(1 == systemActive) || (((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && ((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((1 <= switchedOnBeforeTS && waterLevel <= 1) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && systemActive == 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && systemActive == 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) [2021-12-16 01:01:45,517 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((waterLevel == 1 || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(pumpRunning)))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((!(1 == systemActive) || (((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && ((((((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || ((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(pumpRunning)))) && ((((((!(\old(waterLevel) <= 2) || ((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && systemActive == 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && systemActive == 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) [2021-12-16 01:01:45,517 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((!(1 == systemActive) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-16 01:01:45,517 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((!(1 == systemActive) || !(waterLevel == 2)) || !(\old(pumpRunning) == 0)) || pumpRunning == 0)) && (((!(waterLevel <= 1) || (!(\result == 0) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) [2021-12-16 01:01:45,517 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((!(1 == systemActive) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-16 01:01:45,519 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((((!(1 == systemActive) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || (waterLevel == 2 && pumpRunning == 0)) || (((tmp___0 == 0 && \result == 0) && !(0 == tmp)) && pumpRunning == 0)) [2021-12-16 01:01:45,520 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((!(1 == systemActive) || (waterLevel == 2 && 1 <= pumpRunning)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-16 01:01:45,545 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-16 01:01:45,545 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-16 01:01:45,546 INFO L158 Benchmark]: Toolchain (without parser) took 17690.60ms. Allocated memory was 92.3MB in the beginning and 209.7MB in the end (delta: 117.4MB). Free memory was 55.6MB in the beginning and 174.7MB in the end (delta: -119.2MB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-16 01:01:45,546 INFO L158 Benchmark]: CDTParser took 0.19ms. Allocated memory is still 92.3MB. Free memory was 72.6MB in the beginning and 72.6MB in the end (delta: 49.1kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-16 01:01:45,546 INFO L158 Benchmark]: CACSL2BoogieTranslator took 389.89ms. Allocated memory is still 92.3MB. Free memory was 55.4MB in the beginning and 60.6MB in the end (delta: -5.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-16 01:01:45,546 INFO L158 Benchmark]: Boogie Procedure Inliner took 48.59ms. Allocated memory is still 92.3MB. Free memory was 60.6MB in the beginning and 58.1MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-16 01:01:45,546 INFO L158 Benchmark]: Boogie Preprocessor took 34.13ms. Allocated memory is still 92.3MB. Free memory was 58.1MB in the beginning and 56.4MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-16 01:01:45,547 INFO L158 Benchmark]: RCFGBuilder took 363.97ms. Allocated memory is still 92.3MB. Free memory was 56.4MB in the beginning and 39.0MB in the end (delta: 17.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-16 01:01:45,547 INFO L158 Benchmark]: TraceAbstraction took 16778.46ms. Allocated memory was 92.3MB in the beginning and 209.7MB in the end (delta: 117.4MB). Free memory was 38.4MB in the beginning and 182.1MB in the end (delta: -143.6MB). Peak memory consumption was 100.0MB. Max. memory is 16.1GB. [2021-12-16 01:01:45,547 INFO L158 Benchmark]: Witness Printer took 69.30ms. Allocated memory is still 209.7MB. Free memory was 182.1MB in the beginning and 174.7MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-16 01:01:45,548 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.19ms. Allocated memory is still 92.3MB. Free memory was 72.6MB in the beginning and 72.6MB in the end (delta: 49.1kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 389.89ms. Allocated memory is still 92.3MB. Free memory was 55.4MB in the beginning and 60.6MB in the end (delta: -5.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 48.59ms. Allocated memory is still 92.3MB. Free memory was 60.6MB in the beginning and 58.1MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 34.13ms. Allocated memory is still 92.3MB. Free memory was 58.1MB in the beginning and 56.4MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 363.97ms. Allocated memory is still 92.3MB. Free memory was 56.4MB in the beginning and 39.0MB in the end (delta: 17.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 16778.46ms. Allocated memory was 92.3MB in the beginning and 209.7MB in the end (delta: 117.4MB). Free memory was 38.4MB in the beginning and 182.1MB in the end (delta: -143.6MB). Peak memory consumption was 100.0MB. Max. memory is 16.1GB. * Witness Printer took 69.30ms. Allocated memory is still 209.7MB. Free memory was 182.1MB in the beginning and 174.7MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 912]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 105 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 16.7s, OverallIterations: 12, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 4.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 8.7s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3194 SdHoareTripleChecker+Valid, 2.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3147 mSDsluCounter, 5914 SdHoareTripleChecker+Invalid, 2.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4176 mSDsCounter, 1173 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4889 IncrementalHoareTripleChecker+Invalid, 6062 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1173 mSolverCounterUnsat, 1738 mSDtfsCounter, 4889 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 984 GetRequests, 793 SyntacticMatches, 5 SemanticMatches, 186 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1280 ImplicationChecksByTransitivity, 1.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1138occurred in iteration=11, InterpolantAutomatonStates: 162, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 12 MinimizatonAttempts, 265 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 49 LocationsWithAnnotation, 2739 PreInvPairs, 3198 NumberOfFragments, 4104 HoareAnnotationTreeSize, 2739 FomulaSimplifications, 9265 FormulaSimplificationTreeSizeReduction, 0.6s HoareSimplificationTime, 49 FomulaSimplificationsInter, 49740 FormulaSimplificationTreeSizeReductionInter, 8.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.4s InterpolantComputationTime, 1240 NumberOfCodeBlocks, 1240 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 1524 ConstructedInterpolants, 0 QuantifiedInterpolants, 2935 SizeOfPredicates, 6 NumberOfNonLiveVariables, 1228 ConjunctsInSsa, 21 ConjunctsInUnsatCore, 16 InterpolantComputations, 10 PerfectInterpolantSequences, 847/926 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 884]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 873]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 996]: Loop Invariant Derived loop invariant: (((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((!(1 == systemActive) || !(waterLevel == 2)) || !(\old(pumpRunning) == 0)) || pumpRunning == 0)) && (((!(waterLevel <= 1) || (!(\result == 0) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: ((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((((!(1 == systemActive) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || (waterLevel == 2 && pumpRunning == 0)) || (((tmp___0 == 0 && \result == 0) && !(0 == tmp)) && pumpRunning == 0)) - InvariantResult [Line: 695]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 771]: Loop Invariant Derived loop invariant: (((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || !(\old(waterLevel) <= 1)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) && (((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((!(1 == systemActive) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 705]: Loop Invariant Derived loop invariant: (((((splverifierCounter == 0 && waterLevel == 2) && systemActive == 1) && pumpRunning == 0) || (((splverifierCounter == 0 && waterLevel <= 1) && systemActive == 1) && pumpRunning == 0)) || (((splverifierCounter == 0 && waterLevel == 2) && 1 <= pumpRunning) && systemActive == 1)) || (((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && 1 <= pumpRunning) && systemActive == 1) - InvariantResult [Line: 559]: Loop Invariant Derived loop invariant: ((((((((waterLevel == 1 || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(pumpRunning)))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((!(1 == systemActive) || (((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && ((((((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || ((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(pumpRunning)))) && ((((((!(\old(waterLevel) <= 2) || ((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && systemActive == 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && systemActive == 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 763]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 668]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 919]: Loop Invariant Derived loop invariant: ((((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) && (((!(1 == systemActive) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 987]: Loop Invariant Derived loop invariant: ((((((((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && 1 == systemActive) && \result <= waterLevel)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || (((\result == 2 && waterLevel == 2) && waterLevel == \old(waterLevel)) && pumpRunning == 0)) || (((\result == 2 && waterLevel == 2) && waterLevel == \old(waterLevel)) && 1 <= pumpRunning)) || !(\old(pumpRunning) == 0)) || (((waterLevel <= 1 && waterLevel == \old(waterLevel)) && \result < 2) && pumpRunning == 0))) && ((((((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && \result <= waterLevel) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel)) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning)))) && ((((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && \result <= waterLevel) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) || 0 == methaneLevelCritical)) && ((((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel) || !(1 == systemActive)) || ((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && \result <= waterLevel)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && ((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && 1 == systemActive) && \result <= waterLevel)) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 866]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 955]: Loop Invariant Derived loop invariant: (((((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((1 <= switchedOnBeforeTS && waterLevel <= 1) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) && (((!(1 == systemActive) || (((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && ((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((1 <= switchedOnBeforeTS && waterLevel <= 1) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && systemActive == 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && systemActive == 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 518]: Loop Invariant Derived loop invariant: ((((((((!(1 == systemActive) || (((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) || 0 == methaneLevelCritical) && (((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(pumpRunning)))) && ((((!(1 == systemActive) || (((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || (((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && (((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || (((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning)))) && (((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || !(\old(waterLevel) <= 1)) || pumpRunning == 0) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || ((waterLevel == 2 && waterLevel == \old(waterLevel)) && 1 <= pumpRunning)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 634]: Loop Invariant Derived loop invariant: (((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((!(1 == systemActive) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 682]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 908]: Loop Invariant Derived loop invariant: (((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) && (((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= \old(pumpRunning)))) && ((!(1 == systemActive) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 704]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 543]: Loop Invariant Derived loop invariant: ((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((!(1 == systemActive) || (waterLevel == 2 && 1 <= pumpRunning)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 781]: Loop Invariant Derived loop invariant: ((((((((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && 1 == systemActive) && \result <= waterLevel) && tmp <= waterLevel)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) && ((((!(1 == systemActive) || (((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel) && tmp <= waterLevel)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) || 0 == methaneLevelCritical)) && (((((((((((((((1 <= switchedOnBeforeTS && methaneLevelCritical == tmp) && waterLevel == \old(waterLevel)) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && tmp < 2) && pumpRunning == 0) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && tmp < 2)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel) && tmp <= waterLevel)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && \result <= waterLevel) && tmp <= waterLevel)) || !(1 <= \old(pumpRunning)))) && ((((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel) && tmp <= waterLevel)) || !(methaneLevelCritical == 0)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && \result <= waterLevel) && tmp <= waterLevel)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || ((((\result == 2 && waterLevel == 2) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && tmp == 2)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || ((((\result == 2 && waterLevel == \old(waterLevel)) && 1 <= pumpRunning) && 2 <= waterLevel) && tmp == 2)) || ((((waterLevel <= 1 && waterLevel == \old(waterLevel)) && \result < 2) && tmp < 2) && pumpRunning == 0))) && (((((((((((((1 <= switchedOnBeforeTS && methaneLevelCritical == tmp) && waterLevel == \old(waterLevel)) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && tmp < 2) && pumpRunning == 0) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(\old(waterLevel) <= 1)) || ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && 1 == systemActive) && \result <= waterLevel) && tmp <= waterLevel)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && \result <= waterLevel) && tmp <= waterLevel) || !(1 == systemActive)) || (((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel) && tmp <= waterLevel)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 1010]: Loop Invariant Derived loop invariant: (((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((!(1 == systemActive) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 822]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 675]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 RESULT: Ultimate proved your program to be correct! [2021-12-16 01:01:45,604 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE