./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 96a9f4a5eb48d3a052332271e6f513d6efe176b9f027fc1b42847acbd4831cf9 --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-17 15:09:46,470 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-17 15:09:46,472 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-17 15:09:46,505 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-17 15:09:46,505 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-17 15:09:46,506 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-17 15:09:46,512 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-17 15:09:46,518 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-17 15:09:46,519 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-17 15:09:46,525 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-17 15:09:46,525 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-17 15:09:46,527 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-17 15:09:46,527 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-17 15:09:46,529 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-17 15:09:46,530 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-17 15:09:46,533 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-17 15:09:46,539 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-17 15:09:46,540 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-17 15:09:46,542 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-17 15:09:46,546 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-17 15:09:46,547 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-17 15:09:46,548 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-17 15:09:46,548 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-17 15:09:46,549 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-17 15:09:46,551 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-17 15:09:46,551 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-17 15:09:46,552 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-17 15:09:46,552 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-17 15:09:46,553 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-17 15:09:46,553 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-17 15:09:46,554 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-17 15:09:46,554 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-17 15:09:46,555 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-17 15:09:46,555 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-17 15:09:46,556 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-17 15:09:46,556 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-17 15:09:46,557 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-17 15:09:46,557 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-17 15:09:46,557 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-17 15:09:46,558 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-17 15:09:46,559 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-17 15:09:46,559 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-17 15:09:46,581 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-17 15:09:46,588 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-17 15:09:46,589 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-17 15:09:46,589 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-17 15:09:46,590 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-17 15:09:46,590 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-17 15:09:46,591 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-17 15:09:46,591 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-17 15:09:46,591 INFO L138 SettingsManager]: * Use SBE=true [2021-12-17 15:09:46,592 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-17 15:09:46,592 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-17 15:09:46,593 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-17 15:09:46,593 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-17 15:09:46,593 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-17 15:09:46,593 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-17 15:09:46,593 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-17 15:09:46,594 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-17 15:09:46,594 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-17 15:09:46,594 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-17 15:09:46,594 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-17 15:09:46,594 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-17 15:09:46,595 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-17 15:09:46,595 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-17 15:09:46,595 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-17 15:09:46,595 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:09:46,596 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-17 15:09:46,596 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-17 15:09:46,596 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-17 15:09:46,596 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-17 15:09:46,596 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-17 15:09:46,597 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-17 15:09:46,597 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-17 15:09:46,597 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-17 15:09:46,597 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-17 15:09:46,597 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 96a9f4a5eb48d3a052332271e6f513d6efe176b9f027fc1b42847acbd4831cf9 [2021-12-17 15:09:46,816 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-17 15:09:46,844 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-17 15:09:46,846 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-17 15:09:46,847 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-17 15:09:46,847 INFO L275 PluginConnector]: CDTParser initialized [2021-12-17 15:09:46,848 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c [2021-12-17 15:09:46,923 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d8997994e/2250d8692ed74f8b8e1de25b994e48f9/FLAG6b701841e [2021-12-17 15:09:47,389 INFO L306 CDTParser]: Found 1 translation units. [2021-12-17 15:09:47,390 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c [2021-12-17 15:09:47,403 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d8997994e/2250d8692ed74f8b8e1de25b994e48f9/FLAG6b701841e [2021-12-17 15:09:47,751 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d8997994e/2250d8692ed74f8b8e1de25b994e48f9 [2021-12-17 15:09:47,754 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-17 15:09:47,755 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-17 15:09:47,759 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-17 15:09:47,759 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-17 15:09:47,762 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-17 15:09:47,763 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:09:47" (1/1) ... [2021-12-17 15:09:47,765 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3c1b097b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:47, skipping insertion in model container [2021-12-17 15:09:47,765 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:09:47" (1/1) ... [2021-12-17 15:09:47,771 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-17 15:09:47,813 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-17 15:09:48,003 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c[11292,11305] [2021-12-17 15:09:48,080 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:09:48,089 INFO L203 MainTranslator]: Completed pre-run [2021-12-17 15:09:48,146 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c[11292,11305] [2021-12-17 15:09:48,185 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:09:48,209 INFO L208 MainTranslator]: Completed translation [2021-12-17 15:09:48,209 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:48 WrapperNode [2021-12-17 15:09:48,210 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-17 15:09:48,211 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-17 15:09:48,211 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-17 15:09:48,211 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-17 15:09:48,216 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:48" (1/1) ... [2021-12-17 15:09:48,236 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:48" (1/1) ... [2021-12-17 15:09:48,262 INFO L137 Inliner]: procedures = 58, calls = 161, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 270 [2021-12-17 15:09:48,262 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-17 15:09:48,263 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-17 15:09:48,263 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-17 15:09:48,263 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-17 15:09:48,277 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:48" (1/1) ... [2021-12-17 15:09:48,277 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:48" (1/1) ... [2021-12-17 15:09:48,279 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:48" (1/1) ... [2021-12-17 15:09:48,279 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:48" (1/1) ... [2021-12-17 15:09:48,284 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:48" (1/1) ... [2021-12-17 15:09:48,289 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:48" (1/1) ... [2021-12-17 15:09:48,291 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:48" (1/1) ... [2021-12-17 15:09:48,293 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-17 15:09:48,294 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-17 15:09:48,294 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-17 15:09:48,294 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-17 15:09:48,302 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:48" (1/1) ... [2021-12-17 15:09:48,327 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:09:48,337 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:09:48,368 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-17 15:09:48,377 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-17 15:09:48,404 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-17 15:09:48,405 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-17 15:09:48,405 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-17 15:09:48,405 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-17 15:09:48,405 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-17 15:09:48,405 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-17 15:09:48,405 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-17 15:09:48,405 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-17 15:09:48,405 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-17 15:09:48,406 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-12-17 15:09:48,406 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-12-17 15:09:48,406 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-12-17 15:09:48,406 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-12-17 15:09:48,406 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-12-17 15:09:48,406 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-12-17 15:09:48,407 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-17 15:09:48,407 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-17 15:09:48,407 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-17 15:09:48,407 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-17 15:09:48,407 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-17 15:09:48,407 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-17 15:09:48,408 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-17 15:09:48,493 INFO L236 CfgBuilder]: Building ICFG [2021-12-17 15:09:48,503 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-17 15:09:48,717 INFO L277 CfgBuilder]: Performing block encoding [2021-12-17 15:09:48,723 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-17 15:09:48,723 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-17 15:09:48,725 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:09:48 BoogieIcfgContainer [2021-12-17 15:09:48,725 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-17 15:09:48,727 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-17 15:09:48,729 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-17 15:09:48,734 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-17 15:09:48,734 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.12 03:09:47" (1/3) ... [2021-12-17 15:09:48,734 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@141eae22 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:09:48, skipping insertion in model container [2021-12-17 15:09:48,734 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:48" (2/3) ... [2021-12-17 15:09:48,735 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@141eae22 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:09:48, skipping insertion in model container [2021-12-17 15:09:48,735 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:09:48" (3/3) ... [2021-12-17 15:09:48,736 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product48.cil.c [2021-12-17 15:09:48,740 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-17 15:09:48,740 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-17 15:09:48,781 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-17 15:09:48,791 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-17 15:09:48,791 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-17 15:09:48,812 INFO L276 IsEmpty]: Start isEmpty. Operand has 106 states, 79 states have (on average 1.3544303797468353) internal successors, (107), 88 states have internal predecessors, (107), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) [2021-12-17 15:09:48,829 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-12-17 15:09:48,829 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:48,829 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:48,830 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:48,833 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:48,834 INFO L85 PathProgramCache]: Analyzing trace with hash -484637396, now seen corresponding path program 1 times [2021-12-17 15:09:48,841 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:48,842 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1185335287] [2021-12-17 15:09:48,842 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:48,843 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:48,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:49,055 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-17 15:09:49,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:49,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-17 15:09:49,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:49,074 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:49,075 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:49,075 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1185335287] [2021-12-17 15:09:49,075 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1185335287] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:49,076 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:49,076 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-17 15:09:49,077 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2000371252] [2021-12-17 15:09:49,078 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:49,081 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-17 15:09:49,081 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:49,107 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-17 15:09:49,107 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:09:49,109 INFO L87 Difference]: Start difference. First operand has 106 states, 79 states have (on average 1.3544303797468353) internal successors, (107), 88 states have internal predecessors, (107), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:49,146 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:49,146 INFO L93 Difference]: Finished difference Result 203 states and 272 transitions. [2021-12-17 15:09:49,147 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-17 15:09:49,148 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-12-17 15:09:49,148 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:49,155 INFO L225 Difference]: With dead ends: 203 [2021-12-17 15:09:49,155 INFO L226 Difference]: Without dead ends: 97 [2021-12-17 15:09:49,158 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:09:49,161 INFO L933 BasicCegarLoop]: 133 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 133 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:49,162 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 133 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:49,174 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2021-12-17 15:09:49,194 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 97. [2021-12-17 15:09:49,196 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 97 states, 72 states have (on average 1.2916666666666667) internal successors, (93), 80 states have internal predecessors, (93), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 12 states have call predecessors, (15), 15 states have call successors, (15) [2021-12-17 15:09:49,198 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97 states to 97 states and 124 transitions. [2021-12-17 15:09:49,199 INFO L78 Accepts]: Start accepts. Automaton has 97 states and 124 transitions. Word has length 32 [2021-12-17 15:09:49,199 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:49,200 INFO L470 AbstractCegarLoop]: Abstraction has 97 states and 124 transitions. [2021-12-17 15:09:49,201 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:49,201 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 124 transitions. [2021-12-17 15:09:49,203 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-12-17 15:09:49,204 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:49,204 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:49,204 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-17 15:09:49,204 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:49,205 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:49,205 INFO L85 PathProgramCache]: Analyzing trace with hash -1885221865, now seen corresponding path program 1 times [2021-12-17 15:09:49,205 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:49,206 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1443019115] [2021-12-17 15:09:49,206 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:49,206 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:49,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:49,270 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-17 15:09:49,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:49,277 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-17 15:09:49,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:49,281 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:49,281 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:49,281 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1443019115] [2021-12-17 15:09:49,282 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1443019115] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:49,282 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:49,282 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-17 15:09:49,282 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1187274634] [2021-12-17 15:09:49,282 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:49,284 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-17 15:09:49,284 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:49,284 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-17 15:09:49,285 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:49,285 INFO L87 Difference]: Start difference. First operand 97 states and 124 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:49,313 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:49,313 INFO L93 Difference]: Finished difference Result 154 states and 196 transitions. [2021-12-17 15:09:49,314 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-17 15:09:49,314 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2021-12-17 15:09:49,314 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:49,315 INFO L225 Difference]: With dead ends: 154 [2021-12-17 15:09:49,316 INFO L226 Difference]: Without dead ends: 88 [2021-12-17 15:09:49,316 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:49,318 INFO L933 BasicCegarLoop]: 111 mSDtfsCounter, 17 mSDsluCounter, 89 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 200 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:49,318 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [21 Valid, 200 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:49,319 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88 states. [2021-12-17 15:09:49,327 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88 to 88. [2021-12-17 15:09:49,327 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 88 states, 66 states have (on average 1.303030303030303) internal successors, (86), 74 states have internal predecessors, (86), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-17 15:09:49,329 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88 states to 88 states and 112 transitions. [2021-12-17 15:09:49,329 INFO L78 Accepts]: Start accepts. Automaton has 88 states and 112 transitions. Word has length 33 [2021-12-17 15:09:49,329 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:49,329 INFO L470 AbstractCegarLoop]: Abstraction has 88 states and 112 transitions. [2021-12-17 15:09:49,329 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:49,330 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 112 transitions. [2021-12-17 15:09:49,331 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-17 15:09:49,331 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:49,331 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:49,331 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-17 15:09:49,332 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:49,332 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:49,332 INFO L85 PathProgramCache]: Analyzing trace with hash 2024045384, now seen corresponding path program 1 times [2021-12-17 15:09:49,332 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:49,333 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1678611544] [2021-12-17 15:09:49,333 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:49,333 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:49,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:49,384 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:49,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:49,388 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-12-17 15:09:49,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:49,392 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:49,392 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:49,393 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1678611544] [2021-12-17 15:09:49,393 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1678611544] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:49,393 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:49,393 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-17 15:09:49,393 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [483216101] [2021-12-17 15:09:49,394 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:49,394 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-17 15:09:49,394 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:49,395 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-17 15:09:49,395 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:49,395 INFO L87 Difference]: Start difference. First operand 88 states and 112 transitions. Second operand has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-17 15:09:49,426 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:49,426 INFO L93 Difference]: Finished difference Result 246 states and 319 transitions. [2021-12-17 15:09:49,426 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-17 15:09:49,427 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2021-12-17 15:09:49,427 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:49,428 INFO L225 Difference]: With dead ends: 246 [2021-12-17 15:09:49,429 INFO L226 Difference]: Without dead ends: 166 [2021-12-17 15:09:49,429 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:49,430 INFO L933 BasicCegarLoop]: 137 mSDtfsCounter, 100 mSDsluCounter, 99 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 100 SdHoareTripleChecker+Valid, 236 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:49,431 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [100 Valid, 236 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:49,432 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166 states. [2021-12-17 15:09:49,450 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 166 to 163. [2021-12-17 15:09:49,450 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 163 states, 120 states have (on average 1.325) internal successors, (159), 135 states have internal predecessors, (159), 26 states have call successors, (26), 16 states have call predecessors, (26), 16 states have return successors, (26), 19 states have call predecessors, (26), 26 states have call successors, (26) [2021-12-17 15:09:49,452 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 163 states to 163 states and 211 transitions. [2021-12-17 15:09:49,452 INFO L78 Accepts]: Start accepts. Automaton has 163 states and 211 transitions. Word has length 38 [2021-12-17 15:09:49,453 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:49,453 INFO L470 AbstractCegarLoop]: Abstraction has 163 states and 211 transitions. [2021-12-17 15:09:49,453 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-17 15:09:49,453 INFO L276 IsEmpty]: Start isEmpty. Operand 163 states and 211 transitions. [2021-12-17 15:09:49,455 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2021-12-17 15:09:49,455 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:49,455 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:49,456 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-17 15:09:49,456 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:49,456 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:49,457 INFO L85 PathProgramCache]: Analyzing trace with hash 1147378310, now seen corresponding path program 1 times [2021-12-17 15:09:49,457 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:49,458 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [453504550] [2021-12-17 15:09:49,458 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:49,459 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:49,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:49,530 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-17 15:09:49,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:49,535 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2021-12-17 15:09:49,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:49,545 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-17 15:09:49,545 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:49,546 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [453504550] [2021-12-17 15:09:49,546 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [453504550] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:49,546 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:49,546 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:09:49,546 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [690239745] [2021-12-17 15:09:49,546 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:49,547 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:09:49,547 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:49,547 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:09:49,548 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:09:49,548 INFO L87 Difference]: Start difference. First operand 163 states and 211 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:49,662 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:49,663 INFO L93 Difference]: Finished difference Result 431 states and 566 transitions. [2021-12-17 15:09:49,663 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-17 15:09:49,663 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2021-12-17 15:09:49,664 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:49,666 INFO L225 Difference]: With dead ends: 431 [2021-12-17 15:09:49,666 INFO L226 Difference]: Without dead ends: 276 [2021-12-17 15:09:49,668 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-12-17 15:09:49,669 INFO L933 BasicCegarLoop]: 122 mSDtfsCounter, 59 mSDsluCounter, 397 mSDsCounter, 0 mSdLazyCounter, 70 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 519 SdHoareTripleChecker+Invalid, 81 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 70 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:49,670 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [60 Valid, 519 Invalid, 81 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 70 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:09:49,671 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 276 states. [2021-12-17 15:09:49,692 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 276 to 263. [2021-12-17 15:09:49,693 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 263 states, 196 states have (on average 1.2755102040816326) internal successors, (250), 213 states have internal predecessors, (250), 36 states have call successors, (36), 30 states have call predecessors, (36), 30 states have return successors, (44), 33 states have call predecessors, (44), 36 states have call successors, (44) [2021-12-17 15:09:49,695 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 330 transitions. [2021-12-17 15:09:49,695 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 330 transitions. Word has length 41 [2021-12-17 15:09:49,695 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:49,695 INFO L470 AbstractCegarLoop]: Abstraction has 263 states and 330 transitions. [2021-12-17 15:09:49,696 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:49,696 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 330 transitions. [2021-12-17 15:09:49,698 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-12-17 15:09:49,698 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:49,698 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:49,698 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-17 15:09:49,698 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:49,699 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:49,699 INFO L85 PathProgramCache]: Analyzing trace with hash 1864989139, now seen corresponding path program 1 times [2021-12-17 15:09:49,699 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:49,700 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1510218016] [2021-12-17 15:09:49,700 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:49,700 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:49,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:49,742 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:49,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:49,753 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-17 15:09:49,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:49,784 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:09:49,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:49,799 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-17 15:09:49,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:49,810 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:49,810 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:49,810 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1510218016] [2021-12-17 15:09:49,810 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1510218016] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:49,811 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:49,811 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:09:49,811 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [311227001] [2021-12-17 15:09:49,811 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:49,811 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:09:49,812 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:49,812 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:09:49,812 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:09:49,812 INFO L87 Difference]: Start difference. First operand 263 states and 330 transitions. Second operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-17 15:09:50,001 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:50,002 INFO L93 Difference]: Finished difference Result 582 states and 751 transitions. [2021-12-17 15:09:50,002 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-17 15:09:50,002 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 60 [2021-12-17 15:09:50,004 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:50,011 INFO L225 Difference]: With dead ends: 582 [2021-12-17 15:09:50,011 INFO L226 Difference]: Without dead ends: 327 [2021-12-17 15:09:50,014 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-17 15:09:50,022 INFO L933 BasicCegarLoop]: 101 mSDtfsCounter, 71 mSDsluCounter, 310 mSDsCounter, 0 mSdLazyCounter, 120 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 411 SdHoareTripleChecker+Invalid, 145 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 120 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:50,022 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [76 Valid, 411 Invalid, 145 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 120 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:09:50,023 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 327 states. [2021-12-17 15:09:50,064 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 327 to 315. [2021-12-17 15:09:50,065 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 315 states, 238 states have (on average 1.2605042016806722) internal successors, (300), 255 states have internal predecessors, (300), 40 states have call successors, (40), 30 states have call predecessors, (40), 36 states have return successors, (54), 41 states have call predecessors, (54), 40 states have call successors, (54) [2021-12-17 15:09:50,067 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 315 states to 315 states and 394 transitions. [2021-12-17 15:09:50,068 INFO L78 Accepts]: Start accepts. Automaton has 315 states and 394 transitions. Word has length 60 [2021-12-17 15:09:50,068 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:50,068 INFO L470 AbstractCegarLoop]: Abstraction has 315 states and 394 transitions. [2021-12-17 15:09:50,068 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-17 15:09:50,068 INFO L276 IsEmpty]: Start isEmpty. Operand 315 states and 394 transitions. [2021-12-17 15:09:50,070 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-12-17 15:09:50,070 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:50,071 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:50,071 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-17 15:09:50,071 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:50,071 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:50,071 INFO L85 PathProgramCache]: Analyzing trace with hash -506750123, now seen corresponding path program 1 times [2021-12-17 15:09:50,071 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:50,072 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [660862351] [2021-12-17 15:09:50,072 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:50,072 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:50,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:50,116 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:50,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:50,124 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-17 15:09:50,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:50,161 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:09:50,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:50,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-17 15:09:50,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:50,178 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:50,178 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:50,178 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [660862351] [2021-12-17 15:09:50,178 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [660862351] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:50,179 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:50,179 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:09:50,179 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1003985697] [2021-12-17 15:09:50,179 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:50,179 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:09:50,179 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:50,180 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:09:50,180 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:09:50,180 INFO L87 Difference]: Start difference. First operand 315 states and 394 transitions. Second operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-17 15:09:50,420 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:50,420 INFO L93 Difference]: Finished difference Result 646 states and 823 transitions. [2021-12-17 15:09:50,420 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-17 15:09:50,421 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 60 [2021-12-17 15:09:50,421 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:50,424 INFO L225 Difference]: With dead ends: 646 [2021-12-17 15:09:50,425 INFO L226 Difference]: Without dead ends: 339 [2021-12-17 15:09:50,426 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2021-12-17 15:09:50,429 INFO L933 BasicCegarLoop]: 116 mSDtfsCounter, 235 mSDsluCounter, 326 mSDsCounter, 0 mSdLazyCounter, 167 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 245 SdHoareTripleChecker+Valid, 442 SdHoareTripleChecker+Invalid, 230 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 167 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:50,431 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [245 Valid, 442 Invalid, 230 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 167 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:09:50,434 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 339 states. [2021-12-17 15:09:50,468 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 339 to 319. [2021-12-17 15:09:50,470 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 319 states, 242 states have (on average 1.256198347107438) internal successors, (304), 259 states have internal predecessors, (304), 40 states have call successors, (40), 30 states have call predecessors, (40), 36 states have return successors, (54), 41 states have call predecessors, (54), 40 states have call successors, (54) [2021-12-17 15:09:50,472 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 319 states to 319 states and 398 transitions. [2021-12-17 15:09:50,473 INFO L78 Accepts]: Start accepts. Automaton has 319 states and 398 transitions. Word has length 60 [2021-12-17 15:09:50,473 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:50,473 INFO L470 AbstractCegarLoop]: Abstraction has 319 states and 398 transitions. [2021-12-17 15:09:50,473 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-17 15:09:50,473 INFO L276 IsEmpty]: Start isEmpty. Operand 319 states and 398 transitions. [2021-12-17 15:09:50,479 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-12-17 15:09:50,479 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:50,479 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:50,479 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-17 15:09:50,479 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:50,480 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:50,480 INFO L85 PathProgramCache]: Analyzing trace with hash 879453271, now seen corresponding path program 1 times [2021-12-17 15:09:50,480 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:50,480 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1180468829] [2021-12-17 15:09:50,480 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:50,480 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:50,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:50,538 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:50,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:50,544 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-17 15:09:50,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:50,557 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:09:50,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:50,563 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-17 15:09:50,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:50,566 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:50,567 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:50,567 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1180468829] [2021-12-17 15:09:50,567 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1180468829] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:50,567 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:50,567 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-17 15:09:50,568 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1077455859] [2021-12-17 15:09:50,568 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:50,568 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-17 15:09:50,568 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:50,569 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-17 15:09:50,569 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-17 15:09:50,569 INFO L87 Difference]: Start difference. First operand 319 states and 398 transitions. Second operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-17 15:09:50,791 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:50,791 INFO L93 Difference]: Finished difference Result 905 states and 1172 transitions. [2021-12-17 15:09:50,791 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-17 15:09:50,792 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 60 [2021-12-17 15:09:50,792 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:50,795 INFO L225 Difference]: With dead ends: 905 [2021-12-17 15:09:50,795 INFO L226 Difference]: Without dead ends: 594 [2021-12-17 15:09:50,796 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:09:50,797 INFO L933 BasicCegarLoop]: 157 mSDtfsCounter, 234 mSDsluCounter, 196 mSDsCounter, 0 mSdLazyCounter, 156 mSolverCounterSat, 72 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 242 SdHoareTripleChecker+Valid, 353 SdHoareTripleChecker+Invalid, 228 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 72 IncrementalHoareTripleChecker+Valid, 156 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:50,797 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [242 Valid, 353 Invalid, 228 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [72 Valid, 156 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:09:50,798 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 594 states. [2021-12-17 15:09:50,822 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 594 to 587. [2021-12-17 15:09:50,823 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 587 states, 444 states have (on average 1.2274774774774775) internal successors, (545), 470 states have internal predecessors, (545), 77 states have call successors, (77), 63 states have call predecessors, (77), 65 states have return successors, (115), 76 states have call predecessors, (115), 77 states have call successors, (115) [2021-12-17 15:09:50,826 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 587 states to 587 states and 737 transitions. [2021-12-17 15:09:50,827 INFO L78 Accepts]: Start accepts. Automaton has 587 states and 737 transitions. Word has length 60 [2021-12-17 15:09:50,827 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:50,827 INFO L470 AbstractCegarLoop]: Abstraction has 587 states and 737 transitions. [2021-12-17 15:09:50,827 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-17 15:09:50,827 INFO L276 IsEmpty]: Start isEmpty. Operand 587 states and 737 transitions. [2021-12-17 15:09:50,828 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2021-12-17 15:09:50,828 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:50,829 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:50,829 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-17 15:09:50,829 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:50,829 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:50,829 INFO L85 PathProgramCache]: Analyzing trace with hash -269338319, now seen corresponding path program 1 times [2021-12-17 15:09:50,830 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:50,830 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [483577454] [2021-12-17 15:09:50,830 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:50,830 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:50,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:50,914 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:09:50,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:50,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-17 15:09:50,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:50,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2021-12-17 15:09:50,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:50,963 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:09:50,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:50,975 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2021-12-17 15:09:50,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:50,979 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:50,979 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:50,979 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [483577454] [2021-12-17 15:09:50,979 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [483577454] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:50,979 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:50,979 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-17 15:09:50,979 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [402933491] [2021-12-17 15:09:50,980 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:50,980 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-17 15:09:50,980 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:50,981 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-17 15:09:50,981 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2021-12-17 15:09:50,981 INFO L87 Difference]: Start difference. First operand 587 states and 737 transitions. Second operand has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-17 15:09:51,867 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:51,868 INFO L93 Difference]: Finished difference Result 1880 states and 2475 transitions. [2021-12-17 15:09:51,868 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2021-12-17 15:09:51,868 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 64 [2021-12-17 15:09:51,869 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:51,876 INFO L225 Difference]: With dead ends: 1880 [2021-12-17 15:09:51,876 INFO L226 Difference]: Without dead ends: 1405 [2021-12-17 15:09:51,879 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 297 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=221, Invalid=969, Unknown=0, NotChecked=0, Total=1190 [2021-12-17 15:09:51,879 INFO L933 BasicCegarLoop]: 178 mSDtfsCounter, 599 mSDsluCounter, 746 mSDsCounter, 0 mSdLazyCounter, 907 mSolverCounterSat, 215 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 610 SdHoareTripleChecker+Valid, 924 SdHoareTripleChecker+Invalid, 1122 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 215 IncrementalHoareTripleChecker+Valid, 907 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:51,880 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [610 Valid, 924 Invalid, 1122 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [215 Valid, 907 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2021-12-17 15:09:51,881 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1405 states. [2021-12-17 15:09:51,946 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1405 to 1144. [2021-12-17 15:09:51,947 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1144 states, 863 states have (on average 1.2247972190034762) internal successors, (1057), 920 states have internal predecessors, (1057), 152 states have call successors, (152), 112 states have call predecessors, (152), 128 states have return successors, (230), 150 states have call predecessors, (230), 152 states have call successors, (230) [2021-12-17 15:09:51,953 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1144 states to 1144 states and 1439 transitions. [2021-12-17 15:09:51,954 INFO L78 Accepts]: Start accepts. Automaton has 1144 states and 1439 transitions. Word has length 64 [2021-12-17 15:09:51,954 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:51,954 INFO L470 AbstractCegarLoop]: Abstraction has 1144 states and 1439 transitions. [2021-12-17 15:09:51,954 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-17 15:09:51,954 INFO L276 IsEmpty]: Start isEmpty. Operand 1144 states and 1439 transitions. [2021-12-17 15:09:51,956 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2021-12-17 15:09:51,956 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:51,956 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:51,956 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-17 15:09:51,957 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:51,957 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:51,957 INFO L85 PathProgramCache]: Analyzing trace with hash -1122798217, now seen corresponding path program 1 times [2021-12-17 15:09:51,957 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:51,957 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1715841085] [2021-12-17 15:09:51,958 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:51,958 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:51,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:51,987 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:09:51,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:51,995 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-17 15:09:51,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:52,008 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:09:52,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:52,014 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-17 15:09:52,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:52,019 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:09:52,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:52,022 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2021-12-17 15:09:52,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:52,024 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2021-12-17 15:09:52,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:52,026 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-17 15:09:52,026 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:52,026 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1715841085] [2021-12-17 15:09:52,026 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1715841085] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:52,026 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:52,026 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-17 15:09:52,027 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2051371494] [2021-12-17 15:09:52,027 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:52,027 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-17 15:09:52,027 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:52,028 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-17 15:09:52,028 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:09:52,028 INFO L87 Difference]: Start difference. First operand 1144 states and 1439 transitions. Second operand has 7 states, 7 states have (on average 10.714285714285714) internal successors, (75), 4 states have internal predecessors, (75), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2021-12-17 15:09:52,284 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:52,285 INFO L93 Difference]: Finished difference Result 1939 states and 2430 transitions. [2021-12-17 15:09:52,285 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-12-17 15:09:52,285 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 10.714285714285714) internal successors, (75), 4 states have internal predecessors, (75), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 94 [2021-12-17 15:09:52,286 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:52,290 INFO L225 Difference]: With dead ends: 1939 [2021-12-17 15:09:52,290 INFO L226 Difference]: Without dead ends: 803 [2021-12-17 15:09:52,293 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2021-12-17 15:09:52,294 INFO L933 BasicCegarLoop]: 145 mSDtfsCounter, 296 mSDsluCounter, 223 mSDsCounter, 0 mSdLazyCounter, 224 mSolverCounterSat, 105 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 305 SdHoareTripleChecker+Valid, 368 SdHoareTripleChecker+Invalid, 329 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 105 IncrementalHoareTripleChecker+Valid, 224 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:52,294 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [305 Valid, 368 Invalid, 329 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [105 Valid, 224 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:09:52,295 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 803 states. [2021-12-17 15:09:52,341 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 803 to 767. [2021-12-17 15:09:52,343 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 767 states, 582 states have (on average 1.2130584192439862) internal successors, (706), 621 states have internal predecessors, (706), 100 states have call successors, (100), 76 states have call predecessors, (100), 84 states have return successors, (140), 99 states have call predecessors, (140), 100 states have call successors, (140) [2021-12-17 15:09:52,346 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 767 states to 767 states and 946 transitions. [2021-12-17 15:09:52,347 INFO L78 Accepts]: Start accepts. Automaton has 767 states and 946 transitions. Word has length 94 [2021-12-17 15:09:52,347 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:52,347 INFO L470 AbstractCegarLoop]: Abstraction has 767 states and 946 transitions. [2021-12-17 15:09:52,347 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 10.714285714285714) internal successors, (75), 4 states have internal predecessors, (75), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2021-12-17 15:09:52,348 INFO L276 IsEmpty]: Start isEmpty. Operand 767 states and 946 transitions. [2021-12-17 15:09:52,349 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2021-12-17 15:09:52,349 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:52,349 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:52,349 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-17 15:09:52,350 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:52,350 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:52,350 INFO L85 PathProgramCache]: Analyzing trace with hash 1748536662, now seen corresponding path program 1 times [2021-12-17 15:09:52,350 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:52,350 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [348133830] [2021-12-17 15:09:52,351 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:52,351 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:52,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:52,399 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:09:52,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:52,409 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-17 15:09:52,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:52,424 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:09:52,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:52,432 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-17 15:09:52,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:52,441 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:09:52,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:52,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2021-12-17 15:09:52,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:52,452 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2021-12-17 15:09:52,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:52,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-17 15:09:52,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:52,458 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:52,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:52,460 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2021-12-17 15:09:52,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:52,463 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 16 proven. 11 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-12-17 15:09:52,463 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:52,463 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [348133830] [2021-12-17 15:09:52,463 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [348133830] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:09:52,463 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2052639609] [2021-12-17 15:09:52,463 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:52,464 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:09:52,464 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:09:52,467 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:09:52,503 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-17 15:09:52,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:52,585 INFO L263 TraceCheckSpWp]: Trace formula consists of 501 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-17 15:09:52,593 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:09:52,947 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 29 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:09:52,947 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-17 15:09:53,174 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 19 proven. 8 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-12-17 15:09:53,174 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2052639609] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-17 15:09:53,174 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-17 15:09:53,174 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2021-12-17 15:09:53,174 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1698382554] [2021-12-17 15:09:53,175 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-17 15:09:53,175 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-12-17 15:09:53,175 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:53,176 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-12-17 15:09:53,176 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2021-12-17 15:09:53,176 INFO L87 Difference]: Start difference. First operand 767 states and 946 transitions. Second operand has 15 states, 15 states have (on average 8.333333333333334) internal successors, (125), 10 states have internal predecessors, (125), 6 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 6 states have call successors, (20) [2021-12-17 15:09:54,449 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:54,450 INFO L93 Difference]: Finished difference Result 1767 states and 2244 transitions. [2021-12-17 15:09:54,450 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2021-12-17 15:09:54,450 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 8.333333333333334) internal successors, (125), 10 states have internal predecessors, (125), 6 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 6 states have call successors, (20) Word has length 108 [2021-12-17 15:09:54,451 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:54,457 INFO L225 Difference]: With dead ends: 1767 [2021-12-17 15:09:54,457 INFO L226 Difference]: Without dead ends: 1092 [2021-12-17 15:09:54,460 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 300 GetRequests, 245 SyntacticMatches, 1 SemanticMatches, 54 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 907 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=621, Invalid=2459, Unknown=0, NotChecked=0, Total=3080 [2021-12-17 15:09:54,461 INFO L933 BasicCegarLoop]: 253 mSDtfsCounter, 540 mSDsluCounter, 1147 mSDsCounter, 0 mSdLazyCounter, 1191 mSolverCounterSat, 293 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 548 SdHoareTripleChecker+Valid, 1400 SdHoareTripleChecker+Invalid, 1484 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 293 IncrementalHoareTripleChecker+Valid, 1191 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:54,462 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [548 Valid, 1400 Invalid, 1484 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [293 Valid, 1191 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2021-12-17 15:09:54,464 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1092 states. [2021-12-17 15:09:54,502 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1092 to 864. [2021-12-17 15:09:54,504 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 864 states, 647 states have (on average 1.1916537867078825) internal successors, (771), 698 states have internal predecessors, (771), 117 states have call successors, (117), 97 states have call predecessors, (117), 99 states have return successors, (143), 105 states have call predecessors, (143), 117 states have call successors, (143) [2021-12-17 15:09:54,507 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 864 states to 864 states and 1031 transitions. [2021-12-17 15:09:54,508 INFO L78 Accepts]: Start accepts. Automaton has 864 states and 1031 transitions. Word has length 108 [2021-12-17 15:09:54,509 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:54,510 INFO L470 AbstractCegarLoop]: Abstraction has 864 states and 1031 transitions. [2021-12-17 15:09:54,510 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 8.333333333333334) internal successors, (125), 10 states have internal predecessors, (125), 6 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 6 states have call successors, (20) [2021-12-17 15:09:54,510 INFO L276 IsEmpty]: Start isEmpty. Operand 864 states and 1031 transitions. [2021-12-17 15:09:54,516 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 200 [2021-12-17 15:09:54,517 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:54,517 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:54,544 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-17 15:09:54,741 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-17 15:09:54,741 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:54,742 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:54,742 INFO L85 PathProgramCache]: Analyzing trace with hash 277708338, now seen corresponding path program 1 times [2021-12-17 15:09:54,742 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:54,742 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [466725940] [2021-12-17 15:09:54,742 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:54,742 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:54,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,786 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:09:54,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,796 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-17 15:09:54,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,803 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:09:54,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-17 15:09:54,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:09:54,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,815 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2021-12-17 15:09:54,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,824 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:09:54,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,826 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:09:54,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,829 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:54,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,831 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:54,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,833 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2021-12-17 15:09:54,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:09:54,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,867 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:09:54,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,885 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:54,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,888 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 147 [2021-12-17 15:09:54,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,890 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2021-12-17 15:09:54,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,892 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 167 [2021-12-17 15:09:54,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,898 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:09:54,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 191 [2021-12-17 15:09:54,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,903 INFO L134 CoverageAnalysis]: Checked inductivity of 222 backedges. 87 proven. 3 refuted. 0 times theorem prover too weak. 132 trivial. 0 not checked. [2021-12-17 15:09:54,903 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:54,903 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [466725940] [2021-12-17 15:09:54,903 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [466725940] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:09:54,903 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [413579316] [2021-12-17 15:09:54,903 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:54,904 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:09:54,904 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:09:54,905 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:09:54,906 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-17 15:09:55,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,046 INFO L263 TraceCheckSpWp]: Trace formula consists of 738 conjuncts, 13 conjunts are in the unsatisfiable core [2021-12-17 15:09:55,056 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:09:55,498 INFO L134 CoverageAnalysis]: Checked inductivity of 222 backedges. 162 proven. 4 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2021-12-17 15:09:55,498 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-17 15:09:56,137 INFO L134 CoverageAnalysis]: Checked inductivity of 222 backedges. 82 proven. 42 refuted. 0 times theorem prover too weak. 98 trivial. 0 not checked. [2021-12-17 15:09:56,137 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [413579316] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-17 15:09:56,138 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-17 15:09:56,138 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 10, 11] total 26 [2021-12-17 15:09:56,138 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1677049874] [2021-12-17 15:09:56,138 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-17 15:09:56,139 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2021-12-17 15:09:56,139 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:56,139 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2021-12-17 15:09:56,140 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=116, Invalid=534, Unknown=0, NotChecked=0, Total=650 [2021-12-17 15:09:56,140 INFO L87 Difference]: Start difference. First operand 864 states and 1031 transitions. Second operand has 26 states, 26 states have (on average 7.961538461538462) internal successors, (207), 21 states have internal predecessors, (207), 10 states have call successors, (37), 8 states have call predecessors, (37), 10 states have return successors, (39), 10 states have call predecessors, (39), 10 states have call successors, (39) [2021-12-17 15:09:58,287 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:58,287 INFO L93 Difference]: Finished difference Result 2619 states and 3233 transitions. [2021-12-17 15:09:58,288 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 52 states. [2021-12-17 15:09:58,288 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 7.961538461538462) internal successors, (207), 21 states have internal predecessors, (207), 10 states have call successors, (37), 8 states have call predecessors, (37), 10 states have return successors, (39), 10 states have call predecessors, (39), 10 states have call successors, (39) Word has length 199 [2021-12-17 15:09:58,288 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:58,296 INFO L225 Difference]: With dead ends: 2619 [2021-12-17 15:09:58,296 INFO L226 Difference]: Without dead ends: 1763 [2021-12-17 15:09:58,300 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 506 GetRequests, 430 SyntacticMatches, 2 SemanticMatches, 74 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1414 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=1027, Invalid=4673, Unknown=0, NotChecked=0, Total=5700 [2021-12-17 15:09:58,301 INFO L933 BasicCegarLoop]: 203 mSDtfsCounter, 1295 mSDsluCounter, 1473 mSDsCounter, 0 mSdLazyCounter, 2797 mSolverCounterSat, 515 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1295 SdHoareTripleChecker+Valid, 1676 SdHoareTripleChecker+Invalid, 3312 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 515 IncrementalHoareTripleChecker+Valid, 2797 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:58,301 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1295 Valid, 1676 Invalid, 3312 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [515 Valid, 2797 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2021-12-17 15:09:58,303 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1763 states. [2021-12-17 15:09:58,384 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1763 to 1717. [2021-12-17 15:09:58,387 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1717 states, 1294 states have (on average 1.142967542503864) internal successors, (1479), 1378 states have internal predecessors, (1479), 233 states have call successors, (233), 201 states have call predecessors, (233), 189 states have return successors, (258), 198 states have call predecessors, (258), 233 states have call successors, (258) [2021-12-17 15:09:58,394 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1717 states to 1717 states and 1970 transitions. [2021-12-17 15:09:58,394 INFO L78 Accepts]: Start accepts. Automaton has 1717 states and 1970 transitions. Word has length 199 [2021-12-17 15:09:58,395 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:58,395 INFO L470 AbstractCegarLoop]: Abstraction has 1717 states and 1970 transitions. [2021-12-17 15:09:58,395 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 7.961538461538462) internal successors, (207), 21 states have internal predecessors, (207), 10 states have call successors, (37), 8 states have call predecessors, (37), 10 states have return successors, (39), 10 states have call predecessors, (39), 10 states have call successors, (39) [2021-12-17 15:09:58,395 INFO L276 IsEmpty]: Start isEmpty. Operand 1717 states and 1970 transitions. [2021-12-17 15:09:58,400 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 216 [2021-12-17 15:09:58,401 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:58,401 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:58,429 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2021-12-17 15:09:58,619 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2021-12-17 15:09:58,620 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:58,620 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:58,620 INFO L85 PathProgramCache]: Analyzing trace with hash 2042493462, now seen corresponding path program 1 times [2021-12-17 15:09:58,620 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:58,620 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2049659306] [2021-12-17 15:09:58,620 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:58,620 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:58,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,672 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:09:58,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,681 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-17 15:09:58,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,694 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:09:58,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-17 15:09:58,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,710 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:09:58,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,713 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2021-12-17 15:09:58,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,736 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:09:58,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,739 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:09:58,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,743 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:58,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,747 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:58,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,755 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-12-17 15:09:58,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,771 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2021-12-17 15:09:58,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,773 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2021-12-17 15:09:58,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,778 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:09:58,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,780 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:09:58,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,782 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:09:58,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,784 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-17 15:09:58,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,786 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 163 [2021-12-17 15:09:58,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,788 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 174 [2021-12-17 15:09:58,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,790 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 183 [2021-12-17 15:09:58,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,794 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:09:58,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,796 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 207 [2021-12-17 15:09:58,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,798 INFO L134 CoverageAnalysis]: Checked inductivity of 264 backedges. 98 proven. 46 refuted. 0 times theorem prover too weak. 120 trivial. 0 not checked. [2021-12-17 15:09:58,799 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:58,799 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2049659306] [2021-12-17 15:09:58,799 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2049659306] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:09:58,799 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1234425663] [2021-12-17 15:09:58,799 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:58,799 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:09:58,800 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:09:58,801 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:09:58,802 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-12-17 15:09:58,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,925 INFO L263 TraceCheckSpWp]: Trace formula consists of 780 conjuncts, 10 conjunts are in the unsatisfiable core [2021-12-17 15:09:58,929 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:09:59,333 INFO L134 CoverageAnalysis]: Checked inductivity of 264 backedges. 200 proven. 9 refuted. 0 times theorem prover too weak. 55 trivial. 0 not checked. [2021-12-17 15:09:59,333 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-17 15:09:59,919 INFO L134 CoverageAnalysis]: Checked inductivity of 264 backedges. 104 proven. 54 refuted. 0 times theorem prover too weak. 106 trivial. 0 not checked. [2021-12-17 15:09:59,919 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1234425663] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-17 15:09:59,919 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-17 15:09:59,920 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 8, 8] total 22 [2021-12-17 15:09:59,920 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [287606203] [2021-12-17 15:09:59,920 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-17 15:09:59,921 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2021-12-17 15:09:59,921 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:59,922 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2021-12-17 15:09:59,922 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=394, Unknown=0, NotChecked=0, Total=462 [2021-12-17 15:09:59,922 INFO L87 Difference]: Start difference. First operand 1717 states and 1970 transitions. Second operand has 22 states, 22 states have (on average 9.909090909090908) internal successors, (218), 15 states have internal predecessors, (218), 7 states have call successors, (48), 8 states have call predecessors, (48), 11 states have return successors, (41), 9 states have call predecessors, (41), 7 states have call successors, (41) [2021-12-17 15:10:01,551 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:10:01,552 INFO L93 Difference]: Finished difference Result 3404 states and 3927 transitions. [2021-12-17 15:10:01,552 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2021-12-17 15:10:01,553 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 9.909090909090908) internal successors, (218), 15 states have internal predecessors, (218), 7 states have call successors, (48), 8 states have call predecessors, (48), 11 states have return successors, (41), 9 states have call predecessors, (41), 7 states have call successors, (41) Word has length 215 [2021-12-17 15:10:01,553 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:10:01,561 INFO L225 Difference]: With dead ends: 3404 [2021-12-17 15:10:01,561 INFO L226 Difference]: Without dead ends: 1863 [2021-12-17 15:10:01,565 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 536 GetRequests, 478 SyntacticMatches, 2 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 743 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=654, Invalid=2652, Unknown=0, NotChecked=0, Total=3306 [2021-12-17 15:10:01,566 INFO L933 BasicCegarLoop]: 159 mSDtfsCounter, 559 mSDsluCounter, 603 mSDsCounter, 0 mSdLazyCounter, 1940 mSolverCounterSat, 244 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 567 SdHoareTripleChecker+Valid, 762 SdHoareTripleChecker+Invalid, 2184 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 244 IncrementalHoareTripleChecker+Valid, 1940 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2021-12-17 15:10:01,566 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [567 Valid, 762 Invalid, 2184 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [244 Valid, 1940 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2021-12-17 15:10:01,568 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1863 states. [2021-12-17 15:10:01,637 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1863 to 1647. [2021-12-17 15:10:01,640 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1647 states, 1248 states have (on average 1.1370192307692308) internal successors, (1419), 1322 states have internal predecessors, (1419), 207 states have call successors, (207), 193 states have call predecessors, (207), 191 states have return successors, (232), 192 states have call predecessors, (232), 207 states have call successors, (232) [2021-12-17 15:10:01,646 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1647 states to 1647 states and 1858 transitions. [2021-12-17 15:10:01,647 INFO L78 Accepts]: Start accepts. Automaton has 1647 states and 1858 transitions. Word has length 215 [2021-12-17 15:10:01,647 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:10:01,648 INFO L470 AbstractCegarLoop]: Abstraction has 1647 states and 1858 transitions. [2021-12-17 15:10:01,648 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 9.909090909090908) internal successors, (218), 15 states have internal predecessors, (218), 7 states have call successors, (48), 8 states have call predecessors, (48), 11 states have return successors, (41), 9 states have call predecessors, (41), 7 states have call successors, (41) [2021-12-17 15:10:01,648 INFO L276 IsEmpty]: Start isEmpty. Operand 1647 states and 1858 transitions. [2021-12-17 15:10:01,654 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 217 [2021-12-17 15:10:01,655 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:10:01,656 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:10:01,681 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-12-17 15:10:01,875 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:10:01,876 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:10:01,876 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:10:01,876 INFO L85 PathProgramCache]: Analyzing trace with hash -950542073, now seen corresponding path program 1 times [2021-12-17 15:10:01,876 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:10:01,876 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [560653551] [2021-12-17 15:10:01,876 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:10:01,876 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:10:01,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,931 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:10:01,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-17 15:10:01,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:10:01,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,951 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-17 15:10:01,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:10:01,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2021-12-17 15:10:01,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,962 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:10:01,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,967 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:10:01,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,969 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:10:01,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,970 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:10:01,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-12-17 15:10:01,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-12-17 15:10:01,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,985 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 123 [2021-12-17 15:10:01,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,995 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:10:01,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,997 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:10:01,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,999 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:10:02,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:02,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-17 15:10:02,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:02,004 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2021-12-17 15:10:02,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:02,008 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 175 [2021-12-17 15:10:02,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:02,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 184 [2021-12-17 15:10:02,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:02,057 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:10:02,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:02,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 208 [2021-12-17 15:10:02,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:02,079 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 86 proven. 9 refuted. 0 times theorem prover too weak. 170 trivial. 0 not checked. [2021-12-17 15:10:02,079 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:10:02,079 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [560653551] [2021-12-17 15:10:02,079 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [560653551] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:10:02,079 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1194426613] [2021-12-17 15:10:02,079 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:10:02,079 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:10:02,079 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:10:02,080 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:10:02,082 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2021-12-17 15:10:02,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:02,212 INFO L263 TraceCheckSpWp]: Trace formula consists of 780 conjuncts, 18 conjunts are in the unsatisfiable core [2021-12-17 15:10:02,216 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:10:02,629 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 142 proven. 26 refuted. 0 times theorem prover too weak. 97 trivial. 0 not checked. [2021-12-17 15:10:02,629 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-17 15:10:03,361 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 103 proven. 45 refuted. 0 times theorem prover too weak. 117 trivial. 0 not checked. [2021-12-17 15:10:03,361 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1194426613] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-17 15:10:03,361 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-17 15:10:03,362 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 8, 13] total 28 [2021-12-17 15:10:03,364 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1981842083] [2021-12-17 15:10:03,365 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-17 15:10:03,366 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2021-12-17 15:10:03,366 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:10:03,366 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2021-12-17 15:10:03,366 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=116, Invalid=640, Unknown=0, NotChecked=0, Total=756 [2021-12-17 15:10:03,367 INFO L87 Difference]: Start difference. First operand 1647 states and 1858 transitions. Second operand has 28 states, 28 states have (on average 9.25) internal successors, (259), 22 states have internal predecessors, (259), 14 states have call successors, (51), 12 states have call predecessors, (51), 15 states have return successors, (52), 14 states have call predecessors, (52), 14 states have call successors, (52) [2021-12-17 15:10:07,846 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:10:07,847 INFO L93 Difference]: Finished difference Result 3738 states and 4265 transitions. [2021-12-17 15:10:07,847 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 105 states. [2021-12-17 15:10:07,847 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 28 states have (on average 9.25) internal successors, (259), 22 states have internal predecessors, (259), 14 states have call successors, (51), 12 states have call predecessors, (51), 15 states have return successors, (52), 14 states have call predecessors, (52), 14 states have call successors, (52) Word has length 216 [2021-12-17 15:10:07,848 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:10:07,857 INFO L225 Difference]: With dead ends: 3738 [2021-12-17 15:10:07,857 INFO L226 Difference]: Without dead ends: 2279 [2021-12-17 15:10:07,865 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 638 GetRequests, 508 SyntacticMatches, 1 SemanticMatches, 129 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5547 ImplicationChecksByTransitivity, 1.8s TimeCoverageRelationStatistics Valid=2779, Invalid=14251, Unknown=0, NotChecked=0, Total=17030 [2021-12-17 15:10:07,865 INFO L933 BasicCegarLoop]: 496 mSDtfsCounter, 3355 mSDsluCounter, 1697 mSDsCounter, 0 mSdLazyCounter, 5406 mSolverCounterSat, 1946 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3355 SdHoareTripleChecker+Valid, 2193 SdHoareTripleChecker+Invalid, 7352 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1946 IncrementalHoareTripleChecker+Valid, 5406 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.7s IncrementalHoareTripleChecker+Time [2021-12-17 15:10:07,866 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3355 Valid, 2193 Invalid, 7352 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1946 Valid, 5406 Invalid, 0 Unknown, 0 Unchecked, 2.7s Time] [2021-12-17 15:10:07,868 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2279 states. [2021-12-17 15:10:07,954 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2279 to 2027. [2021-12-17 15:10:07,956 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2027 states, 1538 states have (on average 1.1339401820546164) internal successors, (1744), 1614 states have internal predecessors, (1744), 257 states have call successors, (257), 241 states have call predecessors, (257), 231 states have return successors, (276), 235 states have call predecessors, (276), 257 states have call successors, (276) [2021-12-17 15:10:07,961 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2027 states to 2027 states and 2277 transitions. [2021-12-17 15:10:07,962 INFO L78 Accepts]: Start accepts. Automaton has 2027 states and 2277 transitions. Word has length 216 [2021-12-17 15:10:07,962 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:10:07,962 INFO L470 AbstractCegarLoop]: Abstraction has 2027 states and 2277 transitions. [2021-12-17 15:10:07,963 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 28 states have (on average 9.25) internal successors, (259), 22 states have internal predecessors, (259), 14 states have call successors, (51), 12 states have call predecessors, (51), 15 states have return successors, (52), 14 states have call predecessors, (52), 14 states have call successors, (52) [2021-12-17 15:10:07,963 INFO L276 IsEmpty]: Start isEmpty. Operand 2027 states and 2277 transitions. [2021-12-17 15:10:07,969 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 253 [2021-12-17 15:10:07,969 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:10:07,969 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:10:07,998 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2021-12-17 15:10:08,192 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:10:08,193 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:10:08,193 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:10:08,193 INFO L85 PathProgramCache]: Analyzing trace with hash -461993167, now seen corresponding path program 1 times [2021-12-17 15:10:08,193 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:10:08,193 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [299276923] [2021-12-17 15:10:08,193 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:10:08,194 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:10:08,212 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:10:08,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,296 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-17 15:10:08,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,316 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:10:08,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-17 15:10:08,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,326 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:10:08,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2021-12-17 15:10:08,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,340 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:10:08,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,342 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:10:08,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,344 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:10:08,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,349 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:10:08,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,350 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-12-17 15:10:08,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,357 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-12-17 15:10:08,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 123 [2021-12-17 15:10:08,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,363 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:10:08,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,365 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:10:08,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,367 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-17 15:10:08,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-17 15:10:08,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,370 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2021-12-17 15:10:08,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,371 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2021-12-17 15:10:08,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 180 [2021-12-17 15:10:08,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,406 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:10:08,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,408 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 200 [2021-12-17 15:10:08,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,417 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 211 [2021-12-17 15:10:08,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 220 [2021-12-17 15:10:08,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,422 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:10:08,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,446 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 244 [2021-12-17 15:10:08,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,448 INFO L134 CoverageAnalysis]: Checked inductivity of 379 backedges. 111 proven. 38 refuted. 0 times theorem prover too weak. 230 trivial. 0 not checked. [2021-12-17 15:10:08,448 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:10:08,448 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [299276923] [2021-12-17 15:10:08,448 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [299276923] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:10:08,448 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [742327881] [2021-12-17 15:10:08,449 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:10:08,449 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:10:08,449 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:10:08,450 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:10:08,475 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2021-12-17 15:10:08,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:08,586 INFO L263 TraceCheckSpWp]: Trace formula consists of 874 conjuncts, 21 conjunts are in the unsatisfiable core [2021-12-17 15:10:08,590 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:10:09,065 INFO L134 CoverageAnalysis]: Checked inductivity of 379 backedges. 226 proven. 18 refuted. 0 times theorem prover too weak. 135 trivial. 0 not checked. [2021-12-17 15:10:09,066 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-17 15:10:09,862 INFO L134 CoverageAnalysis]: Checked inductivity of 379 backedges. 142 proven. 77 refuted. 0 times theorem prover too weak. 160 trivial. 0 not checked. [2021-12-17 15:10:09,862 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [742327881] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-17 15:10:09,862 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-17 15:10:09,862 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 11, 15] total 32 [2021-12-17 15:10:09,863 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1499959172] [2021-12-17 15:10:09,863 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-17 15:10:09,865 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2021-12-17 15:10:09,865 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:10:09,866 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2021-12-17 15:10:09,866 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=169, Invalid=823, Unknown=0, NotChecked=0, Total=992 [2021-12-17 15:10:09,867 INFO L87 Difference]: Start difference. First operand 2027 states and 2277 transitions. Second operand has 32 states, 32 states have (on average 8.8125) internal successors, (282), 27 states have internal predecessors, (282), 13 states have call successors, (49), 11 states have call predecessors, (49), 16 states have return successors, (53), 13 states have call predecessors, (53), 13 states have call successors, (53) [2021-12-17 15:10:11,907 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:10:11,907 INFO L93 Difference]: Finished difference Result 3639 states and 4163 transitions. [2021-12-17 15:10:11,907 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 54 states. [2021-12-17 15:10:11,908 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 32 states have (on average 8.8125) internal successors, (282), 27 states have internal predecessors, (282), 13 states have call successors, (49), 11 states have call predecessors, (49), 16 states have return successors, (53), 13 states have call predecessors, (53), 13 states have call successors, (53) Word has length 252 [2021-12-17 15:10:11,908 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:10:11,909 INFO L225 Difference]: With dead ends: 3639 [2021-12-17 15:10:11,909 INFO L226 Difference]: Without dead ends: 0 [2021-12-17 15:10:11,916 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 620 GetRequests, 538 SyntacticMatches, 4 SemanticMatches, 78 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1512 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=1326, Invalid=4994, Unknown=0, NotChecked=0, Total=6320 [2021-12-17 15:10:11,917 INFO L933 BasicCegarLoop]: 220 mSDtfsCounter, 1625 mSDsluCounter, 699 mSDsCounter, 0 mSdLazyCounter, 2244 mSolverCounterSat, 686 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1632 SdHoareTripleChecker+Valid, 919 SdHoareTripleChecker+Invalid, 2930 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 686 IncrementalHoareTripleChecker+Valid, 2244 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:10:11,917 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1632 Valid, 919 Invalid, 2930 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [686 Valid, 2244 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2021-12-17 15:10:11,918 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-17 15:10:11,918 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-17 15:10:11,918 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:10:11,918 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-17 15:10:11,919 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 252 [2021-12-17 15:10:11,919 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:10:11,919 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-17 15:10:11,919 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 32 states have (on average 8.8125) internal successors, (282), 27 states have internal predecessors, (282), 13 states have call successors, (49), 11 states have call predecessors, (49), 16 states have return successors, (53), 13 states have call predecessors, (53), 13 states have call successors, (53) [2021-12-17 15:10:11,919 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-17 15:10:11,919 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-17 15:10:11,922 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-17 15:10:11,948 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2021-12-17 15:10:12,145 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2021-12-17 15:10:12,147 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-17 15:10:32,043 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 624 631) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse7 (not (< 1 ~waterLevel~0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (<= ~waterLevel~0 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (<= ~waterLevel~0 1)) .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse6 .cse2 .cse4) (or .cse1 .cse7 .cse6 .cse2 .cse3 .cse4) (or .cse1 .cse7 .cse5 .cse6 .cse2 .cse4))) [2021-12-17 15:10:32,043 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 624 631) no Hoare annotation was computed. [2021-12-17 15:10:32,043 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 624 631) no Hoare annotation was computed. [2021-12-17 15:10:32,043 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 540 546) no Hoare annotation was computed. [2021-12-17 15:10:32,044 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 540 546) the Hoare annotation is: true [2021-12-17 15:10:32,044 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 758 769) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 |old(~methaneLevelCritical~0)|)) (.cse4 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse1 (not (< 1 ~waterLevel~0))) (.cse9 (not (<= ~waterLevel~0 1))) (.cse7 (not (= 1 ~systemActive~0))) (.cse10 (not (<= 1 ~pumpRunning~0))) (.cse6 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse3 (not (<= ~waterLevel~0 2))) (.cse5 (not (= ~systemActive~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse0 .cse7 .cse8 .cse3) (or .cse0 .cse7 .cse2 .cse1 .cse3 .cse4) (or .cse9 .cse0 .cse7 .cse2 .cse4) (or .cse9 .cse0 .cse2 .cse4 .cse5) (or .cse6 .cse7 .cse1 .cse10 .cse8 .cse3) (or .cse6 (not (<= 1 ~switchedOnBeforeTS~0)) .cse9 .cse7 .cse10 .cse8) (or .cse6 .cse0 .cse8 .cse3 .cse5))) [2021-12-17 15:10:32,044 INFO L858 garLoopResultBuilder]: For program point L762-1(lines 758 769) no Hoare annotation was computed. [2021-12-17 15:10:32,044 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 758 769) no Hoare annotation was computed. [2021-12-17 15:10:32,044 INFO L861 garLoopResultBuilder]: At program point L833(line 833) the Hoare annotation is: true [2021-12-17 15:10:32,045 INFO L858 garLoopResultBuilder]: For program point L833-1(line 833) no Hoare annotation was computed. [2021-12-17 15:10:32,045 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 827 856) no Hoare annotation was computed. [2021-12-17 15:10:32,045 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 827 856) the Hoare annotation is: true [2021-12-17 15:10:32,045 INFO L861 garLoopResultBuilder]: At program point L852(lines 827 856) the Hoare annotation is: true [2021-12-17 15:10:32,045 INFO L858 garLoopResultBuilder]: For program point L848(line 848) no Hoare annotation was computed. [2021-12-17 15:10:32,045 INFO L858 garLoopResultBuilder]: For program point L841(lines 841 845) no Hoare annotation was computed. [2021-12-17 15:10:32,046 INFO L861 garLoopResultBuilder]: At program point L841-1(lines 841 845) the Hoare annotation is: true [2021-12-17 15:10:32,046 INFO L858 garLoopResultBuilder]: For program point L838(line 838) no Hoare annotation was computed. [2021-12-17 15:10:32,046 INFO L861 garLoopResultBuilder]: At program point L837-2(lines 837 851) the Hoare annotation is: true [2021-12-17 15:10:32,046 INFO L854 garLoopResultBuilder]: At program point L956(line 956) the Hoare annotation is: (let ((.cse23 (<= 1 ~methaneLevelCritical~0)) (.cse8 (= ~pumpRunning~0 0)) (.cse5 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| ~waterLevel~0)) (.cse13 (<= 1 ~switchedOnBeforeTS~0)) (.cse25 (<= ~waterLevel~0 0)) (.cse24 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse14 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~5#1|)) (.cse15 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= |timeShift_getWaterLevel_#res#1| ~waterLevel~0))) (let ((.cse10 (not (= ~systemActive~0 0))) (.cse18 (not (<= |old(~waterLevel~0)| 0))) (.cse16 (and .cse5 .cse13 .cse25 .cse24 .cse6 .cse14 .cse15 (<= 1 ~pumpRunning~0) .cse7 (= ~systemActive~0 1))) (.cse11 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse19 (and .cse5 .cse13 .cse25 .cse6 .cse14 .cse23 .cse7 .cse8)) (.cse12 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse20 (= 0 ~methaneLevelCritical~0)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and .cse5 .cse6 .cse7 (< |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2) .cse8)) (.cse9 (not .cse24)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not .cse23)) (.cse22 (= ~waterLevel~0 1)) (.cse21 (not (< 1 |old(~waterLevel~0)|))) (.cse17 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 (and .cse5 (<= ~waterLevel~0 1) .cse6 .cse7 .cse8) .cse3 .cse9 .cse10) (or .cse0 .cse11 .cse1 (and .cse5 .cse12 .cse13 .cse14 .cse15 .cse7) .cse9 .cse16 .cse17) (or .cse0 .cse11 .cse1 .cse2 .cse18 .cse19 .cse20 .cse17) (or .cse0 .cse2 .cse3 .cse21 .cse10) (or (and .cse5 .cse13 .cse14 .cse15 .cse7) .cse1 (not (= 2 |old(~waterLevel~0)|)) .cse9 .cse17) (or .cse2 .cse3 (and .cse5 .cse6 .cse7 .cse8) (not (<= |old(~waterLevel~0)| 1)) .cse10) (or .cse0 .cse1 .cse22 .cse21 .cse9 .cse17) (or .cse0 .cse1 .cse2 (and .cse5 .cse13 .cse14 .cse7) .cse21 .cse17) (or .cse11 .cse1 .cse18 .cse9 .cse16 .cse17) (or .cse0 .cse11 .cse1 .cse2 .cse19 (and .cse5 .cse12 .cse13 .cse14 .cse7 .cse8) .cse20 .cse17) (or .cse0 .cse1 .cse3 .cse4 .cse9) (or .cse0 .cse1 .cse2 (and .cse22 .cse8) .cse21 .cse17)))) [2021-12-17 15:10:32,046 INFO L858 garLoopResultBuilder]: For program point L956-1(line 956) no Hoare annotation was computed. [2021-12-17 15:10:32,047 INFO L854 garLoopResultBuilder]: At program point L593(line 593) the Hoare annotation is: (let ((.cse5 (not (= ~systemActive~0 0))) (.cse1 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (< 1 |old(~waterLevel~0)|))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (and .cse1 (= ~pumpRunning~0 0)) .cse2 .cse3 .cse4) (or .cse0 .cse3 .cse4 .cse5) (or .cse6 .cse2 .cse7 (not (<= |old(~waterLevel~0)| 1)) .cse8) (or .cse0 .cse4 .cse7 .cse5) (or .cse0 .cse2 .cse3 .cse9 .cse8) (or .cse0 (and .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) .cse2 .cse4 .cse7) (or .cse0 .cse2 .cse9 .cse7 .cse8) (or .cse0 .cse6 .cse2 .cse3 .cse8))) [2021-12-17 15:10:32,047 INFO L854 garLoopResultBuilder]: At program point L593-1(lines 574 598) the Hoare annotation is: (let ((.cse22 (= ~methaneLevelCritical~0 0)) (.cse20 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse23 (<= ~waterLevel~0 0)) (.cse6 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~5#1|)) (.cse18 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse7 (= ~pumpRunning~0 0))) (let ((.cse17 (not (= ~systemActive~0 0))) (.cse9 (and .cse18 .cse7)) (.cse10 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse14 (and .cse4 .cse23 .cse18 .cse6 .cse7)) (.cse16 (= 0 ~methaneLevelCritical~0)) (.cse5 (= ~waterLevel~0 1)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (< 1 |old(~waterLevel~0)|))) (.cse19 (not (<= |old(~waterLevel~0)| 0))) (.cse21 (and .cse4 .cse23 .cse18 .cse22 .cse6 .cse20)) (.cse13 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse1 (not (= 1 ~systemActive~0))) (.cse11 (not .cse22)) (.cse15 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse12 (not (<= |old(~waterLevel~0)| 1))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5 .cse6 .cse7) .cse8) (or .cse9 .cse1 .cse10 .cse11 .cse12) (or .cse0 .cse9 .cse1 .cse2 .cse10) (or .cse0 .cse13 .cse1 .cse2 .cse14 (and .cse15 .cse4 .cse6 .cse7) .cse16 .cse8) (or .cse0 .cse2 .cse10 .cse17) (or .cse0 .cse10 .cse11 .cse17) (or .cse0 (and .cse18 (<= 1 ~pumpRunning~0)) .cse9 .cse1 .cse10 .cse11) (or .cse0 .cse13 .cse1 .cse2 .cse19 .cse14 .cse16 .cse8) (or (and .cse4 .cse5 .cse6 .cse20) .cse0 .cse1 .cse3 .cse11 .cse8) (or .cse21 .cse13 .cse1 .cse19 .cse11 .cse8) (or .cse21 .cse13 .cse1 .cse11 (and .cse15 .cse4 .cse6 .cse20) .cse12 .cse8)))) [2021-12-17 15:10:32,047 INFO L858 garLoopResultBuilder]: For program point L527-1(lines 527 533) no Hoare annotation was computed. [2021-12-17 15:10:32,047 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 513 539) no Hoare annotation was computed. [2021-12-17 15:10:32,047 INFO L858 garLoopResultBuilder]: For program point L420(line 420) no Hoare annotation was computed. [2021-12-17 15:10:32,047 INFO L858 garLoopResultBuilder]: For program point L738(lines 738 742) no Hoare annotation was computed. [2021-12-17 15:10:32,048 INFO L854 garLoopResultBuilder]: At program point L738-2(lines 734 745) the Hoare annotation is: (let ((.cse13 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse17 (<= 1 ~methaneLevelCritical~0)) (.cse12 (<= 1 ~switchedOnBeforeTS~0)) (.cse14 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (let ((.cse4 (and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse12 .cse14)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (not (= ~systemActive~0 0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse5 (and .cse12 (<= ~waterLevel~0 0) .cse13 (<= 1 ~pumpRunning~0) .cse14 .cse17 (= ~systemActive~0 1))) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse11 (not (<= |old(~waterLevel~0)| 0))) (.cse8 (= 0 ~methaneLevelCritical~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse7 (not .cse17)) (.cse15 (and .cse12 (= ~waterLevel~0 1) .cse14)) (.cse16 (not (< 1 |old(~waterLevel~0)|))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse5 .cse6 .cse1 .cse7 .cse8 .cse9) (or .cse4 (not (= |old(~waterLevel~0)| 1)) .cse6 .cse1 .cse3 .cse9) (or .cse0 .cse1 .cse7 .cse2) (or .cse0 .cse7 .cse2 .cse10) (or .cse0 .cse2 .cse3 .cse10) (or .cse6 .cse1 .cse11 .cse3 (and .cse12 .cse13 .cse14) .cse9) (or .cse0 .cse1 .cse15 .cse16 .cse3 .cse9) (or .cse0 .cse5 .cse6 .cse1 .cse7 .cse11 .cse8 .cse9) (or .cse0 .cse1 .cse7 .cse15 .cse16 .cse9)))) [2021-12-17 15:10:32,048 INFO L854 garLoopResultBuilder]: At program point L941(line 941) the Hoare annotation is: (let ((.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse14 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|))) (let ((.cse1 (and .cse12 .cse14 (= ~pumpRunning~0 0))) (.cse10 (and .cse12 .cse14 .cse13)) (.cse11 (not (< 1 |old(~waterLevel~0)|))) (.cse8 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse5 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (and .cse12 .cse13 .cse14)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= ~systemActive~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse3 .cse6) (or .cse0 .cse5 .cse7 .cse2 .cse3) (or .cse8 .cse5 .cse7 .cse6 (not (<= |old(~waterLevel~0)| 1)) .cse9) (or .cse10 .cse0 .cse5 .cse2 .cse11 .cse9) (or .cse10 .cse0 .cse5 .cse11 .cse6 .cse9) (or .cse0 .cse8 .cse5 .cse7 .cse2 .cse9) (or .cse0 .cse7 .cse3 .cse6 .cse4)))) [2021-12-17 15:10:32,049 INFO L858 garLoopResultBuilder]: For program point L941-1(line 941) no Hoare annotation was computed. [2021-12-17 15:10:32,049 INFO L858 garLoopResultBuilder]: For program point L520(lines 520 526) no Hoare annotation was computed. [2021-12-17 15:10:32,049 INFO L858 garLoopResultBuilder]: For program point L520-2(lines 516 538) no Hoare annotation was computed. [2021-12-17 15:10:32,049 INFO L858 garLoopResultBuilder]: For program point L582(lines 582 590) no Hoare annotation was computed. [2021-12-17 15:10:32,049 INFO L854 garLoopResultBuilder]: At program point L421(lines 416 423) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~systemActive~0 0))) (.cse8 (not (< 1 |old(~waterLevel~0)|))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse2) (or .cse0 .cse4 .cse2 .cse5) (or .cse6 .cse1 .cse3 (not (<= |old(~waterLevel~0)| 1)) .cse7) (or .cse0 .cse2 .cse3 .cse5) (or .cse0 .cse1 .cse4 .cse8 .cse7) (or .cse0 .cse1 .cse8 .cse3 .cse7) (or .cse0 .cse6 .cse1 .cse4 .cse7))) [2021-12-17 15:10:32,050 INFO L858 garLoopResultBuilder]: For program point L578(lines 578 595) no Hoare annotation was computed. [2021-12-17 15:10:32,050 INFO L858 garLoopResultBuilder]: For program point L958(lines 958 968) no Hoare annotation was computed. [2021-12-17 15:10:32,050 INFO L858 garLoopResultBuilder]: For program point L954(lines 954 971) no Hoare annotation was computed. [2021-12-17 15:10:32,050 INFO L854 garLoopResultBuilder]: At program point L954-1(lines 946 974) the Hoare annotation is: (let ((.cse20 (<= 1 ~switchedOnBeforeTS~0)) (.cse28 (<= ~waterLevel~0 0)) (.cse21 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~5#1|)) (.cse29 (<= 1 ~methaneLevelCritical~0)) (.cse25 (= ~pumpRunning~0 0)) (.cse18 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| ~waterLevel~0)) (.cse6 (<= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1|)) (.cse27 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse22 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse23 (= |timeShift_getWaterLevel_#res#1| ~waterLevel~0))) (let ((.cse10 (and .cse18 .cse6 .cse27 .cse22 .cse23)) (.cse16 (and .cse18 .cse27 .cse22 .cse23)) (.cse8 (not (<= |old(~waterLevel~0)| 1))) (.cse9 (not (= ~systemActive~0 0))) (.cse19 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse13 (and .cse18 .cse20 .cse28 .cse27 .cse21 .cse29 .cse23 .cse25)) (.cse14 (= 0 ~methaneLevelCritical~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not .cse29)) (.cse26 (= ~waterLevel~0 1)) (.cse24 (not (< 1 |old(~waterLevel~0)|))) (.cse11 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse17 (and .cse18 .cse20 .cse6 .cse28 .cse21 .cse27 .cse22 .cse23)) (.cse12 (not (<= |old(~waterLevel~0)| 0))) (.cse15 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= 2 |old(~waterLevel~0)|))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse5 (and .cse18 .cse27 (<= 2 ~waterLevel~0) .cse23 .cse25))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse4 .cse7 .cse8 .cse9) (or .cse10 .cse1 .cse4 .cse7 .cse8) (or .cse0 .cse11 .cse1 .cse3 .cse12 .cse13 .cse14 .cse15) (or .cse0 .cse10 .cse1 .cse3 .cse4 .cse8) (or .cse16 .cse0 .cse4 .cse7 .cse9) (or .cse0 .cse11 .cse1 .cse17 (and .cse18 .cse19 .cse20 .cse6 .cse21 .cse22 .cse23) .cse7 .cse15) (or .cse0 .cse1 .cse3 (and .cse18 .cse20 .cse21 .cse23) .cse24 .cse15) (or .cse0 .cse16 .cse3 .cse4 .cse9) (or .cse6 .cse3 .cse4 .cse8 .cse9) (or .cse0 .cse11 .cse1 .cse3 (and .cse18 .cse19 .cse20 .cse21 .cse23 .cse25) .cse13 .cse14 .cse15) (or .cse0 (and .cse18 .cse20 .cse26 .cse6 .cse21 .cse22 .cse23) .cse1 .cse24 .cse7 .cse15) (or .cse0 .cse1 .cse3 (and .cse26 .cse25) .cse24 .cse15) (or .cse11 .cse1 .cse17 .cse12 .cse7 .cse15) (or .cse1 .cse2 (and .cse18 .cse27 (<= 1 ~pumpRunning~0) .cse23) .cse4 .cse7 .cse5)))) [2021-12-17 15:10:32,051 INFO L858 garLoopResultBuilder]: For program point L959(lines 959 965) no Hoare annotation was computed. [2021-12-17 15:10:32,051 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 513 539) the Hoare annotation is: (let ((.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse14 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|))) (let ((.cse1 (and .cse12 .cse14 (= ~pumpRunning~0 0))) (.cse10 (and .cse12 .cse14 .cse13)) (.cse11 (not (< 1 |old(~waterLevel~0)|))) (.cse8 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse5 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (and .cse12 .cse13 .cse14)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= ~systemActive~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse3 .cse6) (or .cse0 .cse5 .cse7 .cse2 .cse3) (or .cse8 .cse5 .cse7 .cse6 (not (<= |old(~waterLevel~0)| 1)) .cse9) (or .cse10 .cse0 .cse5 .cse2 .cse11 .cse9) (or .cse10 .cse0 .cse5 .cse11 .cse6 .cse9) (or .cse0 .cse8 .cse5 .cse7 .cse2 .cse9) (or .cse0 .cse7 .cse3 .cse6 .cse4)))) [2021-12-17 15:10:32,051 INFO L854 garLoopResultBuilder]: At program point L943(lines 936 945) the Hoare annotation is: (let ((.cse11 (<= 1 ~switchedOnBeforeTS~0)) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse14 (= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse4 (not (= ~systemActive~0 0))) (.cse1 (and .cse14 (= ~pumpRunning~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse6 (not (<= |old(~waterLevel~0)| 1))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (= 1 ~systemActive~0))) (.cse13 (not (< 1 |old(~waterLevel~0)|))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse9 (and .cse11 .cse14 .cse12)) (.cse10 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse5 .cse2 .cse3 .cse6) (or .cse0 .cse1 .cse5 .cse7 .cse2) (or .cse0 .cse8 .cse5 .cse7 .cse9 .cse10) (or .cse0 .cse1 .cse7 .cse2 .cse4) (or .cse1 .cse5 (not (= 2 |old(~waterLevel~0)|)) .cse2 .cse3) (or .cse8 .cse5 .cse3 .cse6 .cse9 .cse10) (or .cse0 .cse5 .cse7 (and .cse11 .cse12 (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse13 .cse10) (or .cse0 .cse5 .cse13 .cse3 .cse9 .cse10)))) [2021-12-17 15:10:32,052 INFO L854 garLoopResultBuilder]: At program point L588(line 588) the Hoare annotation is: (let ((.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse13 (= ~methaneLevelCritical~0 0)) (.cse10 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~5#1|)) (.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~systemActive~0 0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (< 1 |old(~waterLevel~0)|))) (.cse12 (and .cse9 (<= ~waterLevel~0 0) (= ~waterLevel~0 |old(~waterLevel~0)|) .cse13 .cse10 .cse11)) (.cse8 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not .cse13)) (.cse7 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse2) (or .cse0 .cse4 .cse2 .cse5) (or .cse0 .cse2 .cse3 .cse5) (or .cse0 .cse1 .cse4 .cse6 .cse7) (or .cse0 .cse8 .cse1 .cse4 .cse7) (or (and .cse9 (= ~waterLevel~0 1) .cse10 .cse11) .cse0 .cse1 .cse6 .cse3 .cse7) (or .cse12 .cse8 .cse1 (not (<= |old(~waterLevel~0)| 0)) .cse3 .cse7) (or .cse12 .cse8 .cse1 .cse3 (and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse9 .cse10 .cse11) (not (<= |old(~waterLevel~0)| 1)) .cse7)))) [2021-12-17 15:10:32,052 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 513 539) no Hoare annotation was computed. [2021-12-17 15:10:32,052 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 420) no Hoare annotation was computed. [2021-12-17 15:10:32,052 INFO L854 garLoopResultBuilder]: At program point L584(line 584) the Hoare annotation is: (let ((.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~5#1|)) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse14 (<= 1 ~methaneLevelCritical~0))) (let ((.cse4 (and .cse7 (<= ~waterLevel~0 0) (= ~waterLevel~0 |old(~waterLevel~0)|) .cse8 .cse9 .cse14 (= ~systemActive~0 1))) (.cse10 (= 0 ~methaneLevelCritical~0)) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse12 (not (= ~systemActive~0 0))) (.cse6 (not .cse14)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse13 (not (< 1 |old(~waterLevel~0)|))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse11 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse5 .cse1 .cse6 (and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse7 .cse8 .cse9) .cse10 .cse11) (or .cse4 .cse0 .cse5 .cse1 .cse6 (not (<= |old(~waterLevel~0)| 0)) .cse10 .cse11) (or .cse0 .cse1 .cse6 .cse2) (or .cse0 .cse6 .cse2 .cse12) (or .cse5 .cse1 .cse3 (not (<= |old(~waterLevel~0)| 1)) .cse11) (or .cse0 .cse2 .cse3 .cse12) (or .cse0 (= ~waterLevel~0 1) .cse1 .cse6 .cse13 .cse11) (or .cse0 .cse1 .cse6 (and .cse7 .cse8 .cse9) .cse13 .cse11) (or .cse0 .cse1 .cse13 .cse3 .cse11)))) [2021-12-17 15:10:32,053 INFO L854 garLoopResultBuilder]: At program point L807(lines 802 810) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse24 (= ~methaneLevelCritical~0 0)) (.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse23 (<= ~waterLevel~0 0)) (.cse16 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse7 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~5#1|)) (.cse9 (= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse22 (= ~pumpRunning~0 0))) (let ((.cse14 (not (<= |old(~waterLevel~0)| 0))) (.cse18 (and .cse5 .cse23 .cse16 .cse7 .cse9 .cse22)) (.cse19 (= 0 ~methaneLevelCritical~0)) (.cse6 (= ~waterLevel~0 1)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (not (< 1 |old(~waterLevel~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse17 (not (= ~systemActive~0 0))) (.cse4 (and .cse16 .cse9 .cse22)) (.cse13 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse1 (not (= 1 ~systemActive~0))) (.cse11 (not .cse24)) (.cse15 (and .cse5 .cse23 .cse16 .cse24 .cse7 .cse8 .cse9)) (.cse20 (not (<= |old(~waterLevel~0)| 1))) (.cse12 (not (<= 1 |old(~pumpRunning~0)|))) (.cse21 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (and .cse5 .cse6 .cse7 .cse8 .cse9) .cse0 .cse1 .cse10 .cse11 .cse12) (or .cse13 .cse1 .cse14 .cse11 .cse15 .cse12) (or .cse1 (not (= 2 |old(~waterLevel~0)|)) .cse3 .cse11 .cse4 (and .cse16 (<= 1 ~pumpRunning~0) .cse9)) (or .cse0 .cse2 .cse3 .cse4 .cse17) (or .cse0 .cse18 .cse13 .cse1 .cse2 .cse14 .cse19 .cse12) (or .cse1 .cse3 .cse11 .cse20 .cse4) (or .cse0 .cse18 .cse13 .cse1 .cse2 (and .cse21 .cse5 .cse7 .cse9 .cse22) .cse19 .cse12) (or .cse0 .cse1 .cse2 (and .cse6 .cse22) .cse10 .cse12) (or .cse0 (and .cse5 .cse7 .cse9) .cse1 .cse2 .cse10 .cse12) (or .cse0 .cse3 .cse11 .cse17 .cse4) (or .cse13 .cse1 .cse11 .cse15 .cse20 .cse12 (and .cse21 .cse5 .cse7 .cse8 .cse9))))) [2021-12-17 15:10:32,053 INFO L854 garLoopResultBuilder]: At program point L580(line 580) the Hoare annotation is: (let ((.cse13 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse17 (<= 1 ~methaneLevelCritical~0)) (.cse12 (<= 1 ~switchedOnBeforeTS~0)) (.cse14 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (let ((.cse4 (and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse12 .cse14)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (not (= ~systemActive~0 0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse5 (and .cse12 (<= ~waterLevel~0 0) .cse13 (<= 1 ~pumpRunning~0) .cse14 .cse17 (= ~systemActive~0 1))) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse11 (not (<= |old(~waterLevel~0)| 0))) (.cse8 (= 0 ~methaneLevelCritical~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse7 (not .cse17)) (.cse15 (and .cse12 (= ~waterLevel~0 1) .cse14)) (.cse16 (not (< 1 |old(~waterLevel~0)|))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse5 .cse6 .cse1 .cse7 .cse8 .cse9) (or .cse4 (not (= |old(~waterLevel~0)| 1)) .cse6 .cse1 .cse3 .cse9) (or .cse0 .cse1 .cse7 .cse2) (or .cse0 .cse7 .cse2 .cse10) (or .cse0 .cse2 .cse3 .cse10) (or .cse6 .cse1 .cse11 .cse3 (and .cse12 .cse13 .cse14) .cse9) (or .cse0 .cse1 .cse15 .cse16 .cse3 .cse9) (or .cse0 .cse5 .cse6 .cse1 .cse7 .cse11 .cse8 .cse9) (or .cse0 .cse1 .cse7 .cse15 .cse16 .cse9)))) [2021-12-17 15:10:32,053 INFO L858 garLoopResultBuilder]: For program point L580-1(line 580) no Hoare annotation was computed. [2021-12-17 15:10:32,053 INFO L854 garLoopResultBuilder]: At program point L1006(lines 1001 1009) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:10:32,053 INFO L861 garLoopResultBuilder]: At program point L494(lines 431 498) the Hoare annotation is: true [2021-12-17 15:10:32,053 INFO L858 garLoopResultBuilder]: For program point L461(lines 461 467) no Hoare annotation was computed. [2021-12-17 15:10:32,053 INFO L858 garLoopResultBuilder]: For program point L461-1(lines 461 467) no Hoare annotation was computed. [2021-12-17 15:10:32,053 INFO L854 garLoopResultBuilder]: At program point L713(line 713) the Hoare annotation is: (let ((.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse7 (<= ~waterLevel~0 1)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse9 (= ~systemActive~0 1)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (< 1 ~waterLevel~0)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (<= ~waterLevel~0 2)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse6 .cse7 .cse3 .cse8 .cse9) (and .cse0 .cse6 .cse7 .cse2 .cse3 .cse9) (and .cse0 .cse1 .cse3 .cse4 .cse8 .cse5))) [2021-12-17 15:10:32,054 INFO L854 garLoopResultBuilder]: At program point L998(lines 994 1000) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:10:32,054 INFO L854 garLoopResultBuilder]: At program point L453(line 453) the Hoare annotation is: (let ((.cse1 (= ~systemActive~0 0)) (.cse4 (= 2 ~waterLevel~0)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse9 (= 1 ~systemActive~0)) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse7 (<= ~waterLevel~0 1)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse6 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) .cse3) (and .cse4 .cse0 .cse2 .cse5 .cse6) (and .cse0 .cse7 .cse1 .cse8 .cse3) (and .cse4 .cse0 .cse2 .cse9 .cse3) (and .cse0 .cse7 .cse2 .cse3 .cse9) (and .cse0 .cse7 .cse8 .cse3 .cse9) (and .cse4 .cse0 .cse1 .cse8 .cse3) (and .cse4 .cse0 .cse8 .cse9 .cse3) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse7 .cse2 .cse5 .cse6))) [2021-12-17 15:10:32,054 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-17 15:10:32,054 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-17 15:10:32,054 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-17 15:10:32,054 INFO L854 garLoopResultBuilder]: At program point L491(lines 440 492) the Hoare annotation is: false [2021-12-17 15:10:32,054 INFO L854 garLoopResultBuilder]: At program point L933(lines 928 935) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:10:32,054 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-17 15:10:32,054 INFO L854 garLoopResultBuilder]: At program point L991(lines 987 993) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:10:32,054 INFO L858 garLoopResultBuilder]: For program point L479(lines 479 485) no Hoare annotation was computed. [2021-12-17 15:10:32,054 INFO L854 garLoopResultBuilder]: At program point L479-2(lines 471 486) the Hoare annotation is: (let ((.cse4 (= 1 ~systemActive~0)) (.cse5 (= ~systemActive~0 0)) (.cse2 (<= ~waterLevel~0 2)) (.cse7 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse8 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse1 .cse2 .cse3) (and .cse0 .cse6 (<= 2 ~waterLevel~0) .cse2 .cse7 .cse8) (and .cse0 (< 1 ~waterLevel~0) .cse1 .cse6 .cse2 .cse4) (and .cse0 .cse9 (= ~waterLevel~0 1) .cse1 .cse6 .cse8) (and .cse0 .cse2 .cse7 .cse3 .cse4) (and .cse0 .cse9 .cse6 .cse2 .cse7 .cse4) (and .cse0 .cse5 .cse2 .cse7 .cse3) (and .cse0 .cse9 (<= ~waterLevel~0 0) .cse1 .cse6 .cse8))) [2021-12-17 15:10:32,054 INFO L858 garLoopResultBuilder]: For program point L442(lines 441 490) no Hoare annotation was computed. [2021-12-17 15:10:32,054 INFO L858 garLoopResultBuilder]: For program point L471(lines 471 486) no Hoare annotation was computed. [2021-12-17 15:10:32,054 INFO L854 garLoopResultBuilder]: At program point L727(lines 722 729) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse2 (<= ~waterLevel~0 2)) (.cse6 (<= 1 ~methaneLevelCritical~0)) (.cse4 (= 1 ~systemActive~0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse7 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 (<= 2 ~waterLevel~0) .cse2 .cse6 .cse7) (and .cse0 (< 1 ~waterLevel~0) .cse1 .cse5 .cse2 .cse4) (and .cse0 .cse8 (= ~waterLevel~0 1) .cse1 .cse5 .cse7) (and .cse0 .cse2 .cse6 .cse3 .cse4) (and .cse0 .cse8 .cse5 .cse2 .cse6 .cse4) (and .cse0 .cse8 (<= ~waterLevel~0 0) .cse1 .cse5 .cse7))) [2021-12-17 15:10:32,054 INFO L858 garLoopResultBuilder]: For program point L913(lines 913 920) no Hoare annotation was computed. [2021-12-17 15:10:32,055 INFO L854 garLoopResultBuilder]: At program point L463(line 463) the Hoare annotation is: (let ((.cse5 (= 1 ~systemActive~0)) (.cse1 (= ~systemActive~0 0)) (.cse9 (<= 1 ~methaneLevelCritical~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse3 (<= ~waterLevel~0 2)) (.cse8 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and (= 2 ~waterLevel~0) .cse0 .cse2 .cse5 .cse4) (and .cse0 .cse6 (= ~waterLevel~0 1) .cse2 .cse7 .cse8) (and .cse0 (<= ~waterLevel~0 1) .cse2 .cse4 .cse5) (and .cse0 .cse3 .cse9 .cse4 .cse5) (and .cse0 .cse1 .cse3 .cse9 .cse4) (and .cse0 .cse6 (<= ~waterLevel~0 0) .cse2 .cse7 .cse8) (and .cse0 .cse2 .cse7 (<= 2 ~waterLevel~0) .cse3 .cse8))) [2021-12-17 15:10:32,055 INFO L854 garLoopResultBuilder]: At program point L719(lines 707 721) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= ~systemActive~0 0)) (.cse2 (<= ~waterLevel~0 2)) (.cse3 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 (= ~methaneLevelCritical~0 0) .cse2 .cse3) (and .cse0 .cse1 .cse2 (<= 1 ~methaneLevelCritical~0) .cse3))) [2021-12-17 15:10:32,055 INFO L858 garLoopResultBuilder]: For program point L913-2(lines 913 920) no Hoare annotation was computed. [2021-12-17 15:10:32,055 INFO L854 garLoopResultBuilder]: At program point L488(lines 441 490) the Hoare annotation is: (let ((.cse4 (= 2 ~waterLevel~0)) (.cse12 (<= ~waterLevel~0 1)) (.cse9 (= 1 ~systemActive~0)) (.cse10 (<= 1 ~switchedOnBeforeTS~0)) (.cse7 (<= ~waterLevel~0 0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse6 (= ~systemActive~0 1)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse11 (= ~waterLevel~0 1)) (.cse1 (= ~systemActive~0 0)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) .cse3) (and .cse4 .cse0 .cse2 .cse5 .cse6) (and .cse0 .cse7 .cse1 .cse8 .cse3) (and .cse4 .cse0 .cse2 .cse9 .cse3) (and .cse0 .cse10 .cse11 .cse2 .cse5 .cse6) (and .cse0 .cse12 .cse2 .cse3 .cse9) (and .cse4 .cse0 .cse1 .cse8 .cse3) (and .cse4 .cse0 .cse8 .cse9 .cse3) (and .cse0 .cse12 .cse8 .cse9 .cse3) (and .cse0 .cse10 .cse7 .cse2 .cse5 .cse6) (and .cse0 .cse11 .cse1 .cse8 .cse3))) [2021-12-17 15:10:32,055 INFO L858 garLoopResultBuilder]: For program point L711(lines 711 717) no Hoare annotation was computed. [2021-12-17 15:10:32,055 INFO L858 garLoopResultBuilder]: For program point L711-1(lines 711 717) no Hoare annotation was computed. [2021-12-17 15:10:32,055 INFO L858 garLoopResultBuilder]: For program point L451(lines 451 457) no Hoare annotation was computed. [2021-12-17 15:10:32,055 INFO L858 garLoopResultBuilder]: For program point L451-1(lines 451 457) no Hoare annotation was computed. [2021-12-17 15:10:32,055 INFO L861 garLoopResultBuilder]: At program point L897(lines 889 899) the Hoare annotation is: true [2021-12-17 15:10:32,055 INFO L858 garLoopResultBuilder]: For program point L443(lines 443 447) no Hoare annotation was computed. [2021-12-17 15:10:32,055 INFO L861 garLoopResultBuilder]: At program point L922(lines 903 925) the Hoare annotation is: true [2021-12-17 15:10:32,055 INFO L854 garLoopResultBuilder]: At program point L885(lines 881 887) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:10:32,055 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 746 757) no Hoare annotation was computed. [2021-12-17 15:10:32,055 INFO L858 garLoopResultBuilder]: For program point L750-1(lines 746 757) no Hoare annotation was computed. [2021-12-17 15:10:32,055 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 746 757) the Hoare annotation is: (let ((.cse5 (not (<= |old(~waterLevel~0)| 1))) (.cse6 (not (= ~systemActive~0 0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= 2 |old(~waterLevel~0)|))) (.cse8 (not (<= 1 ~pumpRunning~0))) (.cse3 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse3 .cse4 .cse5) (or .cse0 .cse3 .cse4 .cse5 .cse6) (or (not (<= |old(~waterLevel~0)| 2)) .cse0 (and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse7 (not (< 1 |old(~waterLevel~0)|)) .cse6) (or .cse0 .cse1 .cse7 .cse3 .cse5) (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 .cse8 .cse3 .cse4 .cse5) (or .cse0 .cse7 .cse3 .cse5 .cse6) (or .cse0 .cse2 .cse3 .cse4 .cse6) (or .cse0 .cse1 .cse2 .cse7 .cse3) (or .cse1 .cse2 .cse8 .cse3 .cse4))) [2021-12-17 15:10:32,055 INFO L854 garLoopResultBuilder]: At program point L820(lines 811 824) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= ~waterLevel~0 1))) (.cse5 (and (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|) .cse3)) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (and (or (not (= 2 ~waterLevel~0)) .cse0 .cse1 .cse2 .cse3) (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse4 .cse0 .cse2 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse4 .cse0 .cse1 .cse2 .cse5) (or .cse4 .cse0 .cse6 .cse1 .cse5) (or .cse0 .cse6 (not (<= ~waterLevel~0 2)) .cse1 .cse3)))) [2021-12-17 15:10:32,056 INFO L854 garLoopResultBuilder]: At program point L562(line 562) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 1))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (not (< 1 ~waterLevel~0))) (.cse2 (and (= |processEnvironment__wrappee__methaneQuery_~tmp~4#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0))) (.cse7 (not (<= ~waterLevel~0 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 .cse4 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 .cse2 .cse5 .cse3) (or .cse1 .cse2 .cse6 .cse5 .cse7 .cse3) (or .cse1 .cse6 .cse2 .cse7 .cse3 .cse4))) [2021-12-17 15:10:32,056 INFO L858 garLoopResultBuilder]: For program point L556(lines 556 564) no Hoare annotation was computed. [2021-12-17 15:10:32,056 INFO L858 garLoopResultBuilder]: For program point L552(lines 552 569) no Hoare annotation was computed. [2021-12-17 15:10:32,056 INFO L858 garLoopResultBuilder]: For program point L614(lines 614 620) no Hoare annotation was computed. [2021-12-17 15:10:32,056 INFO L854 garLoopResultBuilder]: At program point L612(line 612) the Hoare annotation is: (let ((.cse4 (not (<= ~waterLevel~0 1))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0))) (and (or (not (= 2 ~waterLevel~0)) .cse0 .cse1 .cse2 .cse3) (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse4 .cse0 .cse2 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse4 .cse0 .cse5 .cse1) (or .cse4 .cse0 .cse1 .cse2) (or .cse0 .cse5 (not (<= ~waterLevel~0 2)) .cse1 .cse3))) [2021-12-17 15:10:32,056 INFO L854 garLoopResultBuilder]: At program point L614-2(lines 607 623) the Hoare annotation is: (let ((.cse2 (= 2 ~waterLevel~0)) (.cse3 (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~6#1| ~methaneLevelCritical~0)) (.cse4 (not (<= ~waterLevel~0 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (<= ~waterLevel~0 2)) .cse1 (and .cse2 .cse3 (= ~pumpRunning~0 0))) (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse4 .cse0 .cse5 (not (<= 1 |old(~pumpRunning~0)|))) (or (not .cse2) .cse0 .cse1 .cse5 (and (<= 1 ~pumpRunning~0) .cse3)) (or .cse4 .cse0 .cse1 .cse5))) [2021-12-17 15:10:32,056 INFO L858 garLoopResultBuilder]: For program point L612-1(line 612) no Hoare annotation was computed. [2021-12-17 15:10:32,056 INFO L854 garLoopResultBuilder]: At program point L703(lines 688 706) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0))) (let ((.cse4 (not (<= ~waterLevel~0 1))) (.cse6 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0) .cse3)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (and (or (not (= 2 ~waterLevel~0)) .cse0 .cse1 .cse2 .cse3) (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse4 .cse0 .cse2 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse4 .cse0 .cse5 .cse6 .cse1) (or .cse4 .cse0 .cse6 .cse1 .cse2) (or .cse0 .cse5 (not (<= ~waterLevel~0 2)) .cse1 .cse3)))) [2021-12-17 15:10:32,056 INFO L854 garLoopResultBuilder]: At program point L604(lines 599 606) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 1))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 .cse2 (not (<= 1 |old(~pumpRunning~0)|))) (or (not (= 2 ~waterLevel~0)) .cse1 .cse3 .cse2 (and (<= 1 ~pumpRunning~0) (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~6#1| ~methaneLevelCritical~0))) (or .cse0 .cse1 .cse3 .cse2) (or .cse1 (not (<= 1 ~methaneLevelCritical~0)) (not (<= ~waterLevel~0 2)) .cse3))) [2021-12-17 15:10:32,056 INFO L858 garLoopResultBuilder]: For program point L697(lines 697 701) no Hoare annotation was computed. [2021-12-17 15:10:32,056 INFO L858 garLoopResultBuilder]: For program point L697-2(lines 697 701) no Hoare annotation was computed. [2021-12-17 15:10:32,056 INFO L854 garLoopResultBuilder]: At program point L567(line 567) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= ~waterLevel~0 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse2 .cse3 .cse1) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2 .cse3))) [2021-12-17 15:10:32,056 INFO L858 garLoopResultBuilder]: For program point L567-1(lines 548 572) no Hoare annotation was computed. [2021-12-17 15:10:32,056 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 548 572) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (not (<= ~waterLevel~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse5 (= ~pumpRunning~0 0))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 .cse2 .cse3 (not (<= 1 |old(~pumpRunning~0)|))) (or (not (= 2 ~waterLevel~0)) .cse1 .cse4 .cse3 .cse5) (or .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (<= ~waterLevel~0 2)) .cse4) (or .cse0 .cse1 .cse4 .cse3 .cse5))) [2021-12-17 15:10:32,057 INFO L858 garLoopResultBuilder]: For program point L815(lines 815 821) no Hoare annotation was computed. [2021-12-17 15:10:32,057 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 548 572) no Hoare annotation was computed. [2021-12-17 15:10:32,057 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 643 651) no Hoare annotation was computed. [2021-12-17 15:10:32,057 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 643 651) the Hoare annotation is: true [2021-12-17 15:10:32,057 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 643 651) no Hoare annotation was computed. [2021-12-17 15:10:32,057 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 632 642) the Hoare annotation is: true [2021-12-17 15:10:32,057 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 632 642) no Hoare annotation was computed. [2021-12-17 15:10:32,057 INFO L854 garLoopResultBuilder]: At program point L775(lines 770 778) the Hoare annotation is: (let ((.cse0 (not (= 2 ~waterLevel~0))) (.cse2 (not (= ~pumpRunning~0 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse6 (not (<= ~waterLevel~0 1))) (.cse1 (= |isMethaneAlarm_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse3 (not (= 1 ~systemActive~0))) (.cse8 (not (<= 1 ~pumpRunning~0))) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse1 .cse3 .cse7 .cse8) (or .cse0 .cse1 .cse2 .cse3 .cse7) (or .cse5 .cse6 .cse1 .cse3 .cse8 .cse4))) [2021-12-17 15:10:32,057 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 632 642) no Hoare annotation was computed. [2021-12-17 15:10:32,061 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:10:32,062 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-17 15:10:32,111 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.12 03:10:32 BoogieIcfgContainer [2021-12-17 15:10:32,111 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-17 15:10:32,112 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-17 15:10:32,112 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-17 15:10:32,119 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-17 15:10:32,120 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:09:48" (3/4) ... [2021-12-17 15:10:32,122 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-17 15:10:32,128 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-17 15:10:32,128 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-17 15:10:32,128 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-17 15:10:32,128 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-17 15:10:32,128 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-17 15:10:32,129 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-17 15:10:32,129 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-12-17 15:10:32,129 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-12-17 15:10:32,129 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-12-17 15:10:32,136 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 50 nodes and edges [2021-12-17 15:10:32,136 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-17 15:10:32,137 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-17 15:10:32,137 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-17 15:10:32,137 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-17 15:10:32,138 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:10:32,138 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:10:32,161 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 0)) && (((((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1))) && ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0))) && (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && (((((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(1 == systemActive)) || !(2 == \old(waterLevel))) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && (((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && waterLevel <= 2)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:32,162 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) && (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && pumpRunning == \old(pumpRunning)) || !(\old(waterLevel) <= 2)) || ((((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && systemActive == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && pumpRunning == \old(pumpRunning)) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0))) && (((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && (((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || !(\old(waterLevel) <= 0)) || !(methaneLevelCritical == 0)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((((!(\old(waterLevel) <= 2) || ((((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && systemActive == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:32,163 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(2 == \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || ((((tmp == waterLevel && waterLevel == \old(waterLevel)) && 2 <= waterLevel) && \result == waterLevel) && pumpRunning == 0)) && ((((pumpRunning <= tmp___0 || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || !(systemActive == 0))) && ((((((((tmp == waterLevel && pumpRunning <= tmp___0) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && \result == waterLevel) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1))) && (((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || (((((((tmp == waterLevel && 1 <= switchedOnBeforeTS) && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && 1 <= methaneLevelCritical) && \result == waterLevel) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || ((((tmp == waterLevel && pumpRunning <= tmp___0) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) <= 1))) && (((((((tmp == waterLevel && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && \result == waterLevel) || !(\old(waterLevel) <= 2)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && ((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((tmp == waterLevel && 1 <= switchedOnBeforeTS) && pumpRunning <= tmp___0) && waterLevel <= 0) && methaneLevelCritical == tmp) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || ((((((tmp == waterLevel && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && pumpRunning <= tmp___0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((tmp == waterLevel && 1 <= switchedOnBeforeTS) && methaneLevelCritical == tmp) && \result == waterLevel)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || (((tmp == waterLevel && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && ((((pumpRunning <= tmp___0 || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) <= 1)) || !(systemActive == 0))) && (((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((((tmp == waterLevel && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical == tmp) && \result == waterLevel) && pumpRunning == 0)) || (((((((tmp == waterLevel && 1 <= switchedOnBeforeTS) && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && 1 <= methaneLevelCritical) && \result == waterLevel) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || ((((((tmp == waterLevel && 1 <= switchedOnBeforeTS) && waterLevel == 1) && pumpRunning <= tmp___0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (waterLevel == 1 && pumpRunning == 0)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && (((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || (((((((tmp == waterLevel && 1 <= switchedOnBeforeTS) && pumpRunning <= tmp___0) && waterLevel <= 0) && methaneLevelCritical == tmp) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || !(\old(waterLevel) <= 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((!(1 == systemActive) || !(2 == \old(waterLevel))) || (((tmp == waterLevel && waterLevel == \old(waterLevel)) && 1 <= pumpRunning) && \result == waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || ((((tmp == waterLevel && waterLevel == \old(waterLevel)) && 2 <= waterLevel) && \result == waterLevel) && pumpRunning == 0)) [2021-12-17 15:10:32,163 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 < \old(waterLevel))) || (((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) && (((((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1))) && ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0))) && (((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && pumpRunning == 0)) || (((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical == tmp) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && (((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && 1 <= pumpRunning)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && (((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || ((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((((((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(\old(waterLevel) <= 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((((((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning))) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:32,163 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) && (((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0))) && (((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && ((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && ((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:32,164 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0)) && (((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || !(\old(waterLevel) <= 0)) || !(methaneLevelCritical == 0)) || ((((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || !(1 <= \old(pumpRunning)))) && (((((!(1 == systemActive) || !(2 == \old(waterLevel))) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0)) || ((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && \result == waterLevel))) && ((((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0)) || !(systemActive == 0))) && (((((((!(\old(waterLevel) <= 2) || (((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && \result == waterLevel) && pumpRunning == 0)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0))) && (((((((!(\old(waterLevel) <= 2) || (((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && \result == waterLevel) && pumpRunning == 0)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical == tmp) && \result == waterLevel) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (waterLevel == 1 && pumpRunning == 0)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || ((1 <= switchedOnBeforeTS && methaneLevelCritical == tmp) && \result == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 0)) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0))) && ((((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) || ((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) [2021-12-17 15:10:32,164 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(2 == waterLevel) || \result == methaneLevelCritical) || !(pumpRunning == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && (((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || \result == methaneLevelCritical) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning))) && ((((!(2 == waterLevel) || \result == methaneLevelCritical) || !(pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && (((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || \result == methaneLevelCritical) || !(1 == systemActive)) || !(1 <= pumpRunning)) || !(methaneLevelCritical == 0)) [2021-12-17 15:10:32,164 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(2 == waterLevel) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || pumpRunning == 0) && ((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((!(waterLevel <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || (1 <= \result && pumpRunning == 0))) && ((((!(waterLevel <= 1) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || (1 <= \result && pumpRunning == 0))) && ((((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) [2021-12-17 15:10:32,165 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || ((2 == waterLevel && tmp == methaneLevelCritical) && pumpRunning == 0)) && ((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((!(2 == waterLevel) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && tmp == methaneLevelCritical))) && (((!(waterLevel <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) [2021-12-17 15:10:32,165 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((((!(2 == waterLevel) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && tmp == methaneLevelCritical))) && (((!(waterLevel <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:10:32,165 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(2 == waterLevel) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || pumpRunning == 0) && ((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((!(waterLevel <= 1) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && tmp___0 == 0) && \result == 0) && pumpRunning == 0)) || !(\old(pumpRunning) == 0))) && ((((!(waterLevel <= 1) || !(1 == systemActive)) || (((pumpRunning == \old(pumpRunning) && tmp___0 == 0) && \result == 0) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && ((((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) [2021-12-17 15:10:32,202 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-17 15:10:32,202 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-17 15:10:32,203 INFO L158 Benchmark]: Toolchain (without parser) took 44448.16ms. Allocated memory was 83.9MB in the beginning and 492.8MB in the end (delta: 408.9MB). Free memory was 50.2MB in the beginning and 408.3MB in the end (delta: -358.1MB). Peak memory consumption was 51.9MB. Max. memory is 16.1GB. [2021-12-17 15:10:32,203 INFO L158 Benchmark]: CDTParser took 0.20ms. Allocated memory is still 83.9MB. Free memory is still 41.3MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-17 15:10:32,204 INFO L158 Benchmark]: CACSL2BoogieTranslator took 450.82ms. Allocated memory was 83.9MB in the beginning and 121.6MB in the end (delta: 37.7MB). Free memory was 50.0MB in the beginning and 89.0MB in the end (delta: -39.0MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-17 15:10:32,204 INFO L158 Benchmark]: Boogie Procedure Inliner took 51.84ms. Allocated memory is still 121.6MB. Free memory was 89.0MB in the beginning and 86.9MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-17 15:10:32,204 INFO L158 Benchmark]: Boogie Preprocessor took 30.41ms. Allocated memory is still 121.6MB. Free memory was 86.9MB in the beginning and 84.8MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-17 15:10:32,204 INFO L158 Benchmark]: RCFGBuilder took 431.47ms. Allocated memory is still 121.6MB. Free memory was 84.8MB in the beginning and 67.9MB in the end (delta: 17.0MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-17 15:10:32,205 INFO L158 Benchmark]: TraceAbstraction took 43384.25ms. Allocated memory was 121.6MB in the beginning and 492.8MB in the end (delta: 371.2MB). Free memory was 67.4MB in the beginning and 415.7MB in the end (delta: -348.3MB). Peak memory consumption was 289.3MB. Max. memory is 16.1GB. [2021-12-17 15:10:32,206 INFO L158 Benchmark]: Witness Printer took 91.00ms. Allocated memory is still 492.8MB. Free memory was 415.7MB in the beginning and 408.3MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-17 15:10:32,210 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.20ms. Allocated memory is still 83.9MB. Free memory is still 41.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 450.82ms. Allocated memory was 83.9MB in the beginning and 121.6MB in the end (delta: 37.7MB). Free memory was 50.0MB in the beginning and 89.0MB in the end (delta: -39.0MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 51.84ms. Allocated memory is still 121.6MB. Free memory was 89.0MB in the beginning and 86.9MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 30.41ms. Allocated memory is still 121.6MB. Free memory was 86.9MB in the beginning and 84.8MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 431.47ms. Allocated memory is still 121.6MB. Free memory was 84.8MB in the beginning and 67.9MB in the end (delta: 17.0MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 43384.25ms. Allocated memory was 121.6MB in the beginning and 492.8MB in the end (delta: 371.2MB). Free memory was 67.4MB in the beginning and 415.7MB in the end (delta: -348.3MB). Peak memory consumption was 289.3MB. Max. memory is 16.1GB. * Witness Printer took 91.00ms. Allocated memory is still 492.8MB. Free memory was 415.7MB in the beginning and 408.3MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 420]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 106 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 43.3s, OverallIterations: 14, TraceHistogramMax: 8, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 13.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 19.9s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 9056 SdHoareTripleChecker+Valid, 8.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 8985 mSDsluCounter, 10536 SdHoareTripleChecker+Invalid, 6.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 8005 mSDsCounter, 4176 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 15227 IncrementalHoareTripleChecker+Invalid, 19403 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 4176 mSolverCounterUnsat, 2531 mSDtfsCounter, 15227 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 2765 GetRequests, 2287 SyntacticMatches, 11 SemanticMatches, 467 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10458 ImplicationChecksByTransitivity, 5.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=2027occurred in iteration=13, InterpolantAutomatonStates: 384, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 14 MinimizatonAttempts, 1094 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 49 LocationsWithAnnotation, 5405 PreInvPairs, 6076 NumberOfFragments, 6403 HoareAnnotationTreeSize, 5405 FomulaSimplifications, 29521 FormulaSimplificationTreeSizeReduction, 2.7s HoareSimplificationTime, 49 FomulaSimplificationsInter, 163262 FormulaSimplificationTreeSizeReductionInter, 17.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 6.6s InterpolantComputationTime, 2462 NumberOfCodeBlocks, 2462 NumberOfCodeBlocksAsserted, 19 NumberOfCheckSat, 3428 ConstructedInterpolants, 0 QuantifiedInterpolants, 7390 SizeOfPredicates, 12 NumberOfNonLiveVariables, 3673 ConjunctsInSsa, 70 ConjunctsInUnsatCore, 24 InterpolantComputations, 9 PerfectInterpolantSequences, 3157/3556 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 994]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 574]: Loop Invariant Derived loop invariant: ((((((((((((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 < \old(waterLevel))) || (((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) && (((((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1))) && ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0))) && (((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && pumpRunning == 0)) || (((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical == tmp) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && (((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && 1 <= pumpRunning)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && (((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || ((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((((((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(\old(waterLevel) <= 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((((((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning))) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 440]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 707]: Loop Invariant Derived loop invariant: ((((splverifierCounter == 0 && systemActive == 0) && methaneLevelCritical == 0) && waterLevel <= 2) && pumpRunning == 0) || ((((splverifierCounter == 0 && systemActive == 0) && waterLevel <= 2) && 1 <= methaneLevelCritical) && pumpRunning == 0) - InvariantResult [Line: 599]: Loop Invariant Derived loop invariant: ((((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((((!(2 == waterLevel) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && tmp == methaneLevelCritical))) && (((!(waterLevel <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 837]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 802]: Loop Invariant Derived loop invariant: ((((((((((((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0)) && (((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel) || !(\old(waterLevel) <= 2)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || !(\old(waterLevel) <= 0)) || !(methaneLevelCritical == 0)) || ((((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || !(1 <= \old(pumpRunning)))) && (((((!(1 == systemActive) || !(2 == \old(waterLevel))) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0)) || ((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && \result == waterLevel))) && ((((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0)) || !(systemActive == 0))) && (((((((!(\old(waterLevel) <= 2) || (((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && \result == waterLevel) && pumpRunning == 0)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0))) && (((((((!(\old(waterLevel) <= 2) || (((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && \result == waterLevel) && pumpRunning == 0)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical == tmp) && \result == waterLevel) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (waterLevel == 1 && pumpRunning == 0)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || ((1 <= switchedOnBeforeTS && methaneLevelCritical == tmp) && \result == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 0)) || ((waterLevel == \old(waterLevel) && \result == waterLevel) && pumpRunning == 0))) && ((((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) || ((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) - InvariantResult [Line: 889]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 431]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 607]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || ((2 == waterLevel && tmp == methaneLevelCritical) && pumpRunning == 0)) && ((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((!(2 == waterLevel) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && tmp == methaneLevelCritical))) && (((!(waterLevel <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 987]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 722]: Loop Invariant Derived loop invariant: (((((((((splverifierCounter == 0 && methaneLevelCritical == 0) && waterLevel <= 2) && pumpRunning == 0) && 1 == systemActive) || (((((splverifierCounter == 0 && 1 <= pumpRunning) && 2 <= waterLevel) && waterLevel <= 2) && 1 <= methaneLevelCritical) && systemActive == 1)) || (((((splverifierCounter == 0 && 1 < waterLevel) && methaneLevelCritical == 0) && 1 <= pumpRunning) && waterLevel <= 2) && 1 == systemActive)) || (((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && waterLevel == 1) && methaneLevelCritical == 0) && 1 <= pumpRunning) && systemActive == 1)) || ((((splverifierCounter == 0 && waterLevel <= 2) && 1 <= methaneLevelCritical) && pumpRunning == 0) && 1 == systemActive)) || (((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && 1 <= pumpRunning) && waterLevel <= 2) && 1 <= methaneLevelCritical) && 1 == systemActive)) || (((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && waterLevel <= 0) && methaneLevelCritical == 0) && 1 <= pumpRunning) && systemActive == 1) - InvariantResult [Line: 416]: Loop Invariant Derived loop invariant: (((((((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) && (((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0))) && (((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && ((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && ((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 688]: Loop Invariant Derived loop invariant: (((((((!(2 == waterLevel) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || pumpRunning == 0) && ((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((!(waterLevel <= 1) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && tmp___0 == 0) && \result == 0) && pumpRunning == 0)) || !(\old(pumpRunning) == 0))) && ((((!(waterLevel <= 1) || !(1 == systemActive)) || (((pumpRunning == \old(pumpRunning) && tmp___0 == 0) && \result == 0) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && ((((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) - InvariantResult [Line: 928]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 903]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 881]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 734]: Loop Invariant Derived loop invariant: (((((((((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) && (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && pumpRunning == \old(pumpRunning)) || !(\old(waterLevel) <= 2)) || ((((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && systemActive == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && pumpRunning == \old(pumpRunning)) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0))) && (((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && (((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || !(\old(waterLevel) <= 0)) || !(methaneLevelCritical == 0)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((((!(\old(waterLevel) <= 2) || ((((((1 <= switchedOnBeforeTS && waterLevel <= 0) && waterLevel == \old(waterLevel)) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && systemActive == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 946]: Loop Invariant Derived loop invariant: ((((((((((((((((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(2 == \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || ((((tmp == waterLevel && waterLevel == \old(waterLevel)) && 2 <= waterLevel) && \result == waterLevel) && pumpRunning == 0)) && ((((pumpRunning <= tmp___0 || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || !(systemActive == 0))) && ((((((((tmp == waterLevel && pumpRunning <= tmp___0) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && \result == waterLevel) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1))) && (((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || (((((((tmp == waterLevel && 1 <= switchedOnBeforeTS) && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && 1 <= methaneLevelCritical) && \result == waterLevel) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || ((((tmp == waterLevel && pumpRunning <= tmp___0) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) <= 1))) && (((((((tmp == waterLevel && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && \result == waterLevel) || !(\old(waterLevel) <= 2)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && ((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((tmp == waterLevel && 1 <= switchedOnBeforeTS) && pumpRunning <= tmp___0) && waterLevel <= 0) && methaneLevelCritical == tmp) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || ((((((tmp == waterLevel && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && pumpRunning <= tmp___0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((tmp == waterLevel && 1 <= switchedOnBeforeTS) && methaneLevelCritical == tmp) && \result == waterLevel)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || (((tmp == waterLevel && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && ((((pumpRunning <= tmp___0 || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) <= 1)) || !(systemActive == 0))) && (((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((((tmp == waterLevel && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical == tmp) && \result == waterLevel) && pumpRunning == 0)) || (((((((tmp == waterLevel && 1 <= switchedOnBeforeTS) && waterLevel <= 0) && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && 1 <= methaneLevelCritical) && \result == waterLevel) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || ((((((tmp == waterLevel && 1 <= switchedOnBeforeTS) && waterLevel == 1) && pumpRunning <= tmp___0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (waterLevel == 1 && pumpRunning == 0)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && (((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || (((((((tmp == waterLevel && 1 <= switchedOnBeforeTS) && pumpRunning <= tmp___0) && waterLevel <= 0) && methaneLevelCritical == tmp) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && \result == waterLevel)) || !(\old(waterLevel) <= 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((!(1 == systemActive) || !(2 == \old(waterLevel))) || (((tmp == waterLevel && waterLevel == \old(waterLevel)) && 1 <= pumpRunning) && \result == waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || ((((tmp == waterLevel && waterLevel == \old(waterLevel)) && 2 <= waterLevel) && \result == waterLevel) && pumpRunning == 0)) - InvariantResult [Line: 770]: Loop Invariant Derived loop invariant: ((((((!(2 == waterLevel) || \result == methaneLevelCritical) || !(pumpRunning == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && (((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || \result == methaneLevelCritical) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning))) && ((((!(2 == waterLevel) || \result == methaneLevelCritical) || !(pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && (((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || \result == methaneLevelCritical) || !(1 == systemActive)) || !(1 <= pumpRunning)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 936]: Loop Invariant Derived loop invariant: (((((((((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 0)) && (((((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1))) && ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0))) && (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && (((((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(1 == systemActive)) || !(2 == \old(waterLevel))) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && (((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && waterLevel <= 2)) || !(1 < \old(waterLevel))) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 1001]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 827]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 811]: Loop Invariant Derived loop invariant: (((((((!(2 == waterLevel) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || pumpRunning == 0) && ((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((!(waterLevel <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || (1 <= \result && pumpRunning == 0))) && ((((!(waterLevel <= 1) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || (1 <= \result && pumpRunning == 0))) && ((((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: (((((((((((((splverifierCounter == 0 && systemActive == 0) && methaneLevelCritical == 0) && waterLevel <= 2) && pumpRunning == 0) || ((((2 == waterLevel && splverifierCounter == 0) && methaneLevelCritical == 0) && 1 <= pumpRunning) && systemActive == 1)) || ((((splverifierCounter == 0 && waterLevel <= 0) && systemActive == 0) && 1 <= methaneLevelCritical) && pumpRunning == 0)) || ((((2 == waterLevel && splverifierCounter == 0) && methaneLevelCritical == 0) && 1 == systemActive) && pumpRunning == 0)) || (((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && waterLevel == 1) && methaneLevelCritical == 0) && 1 <= pumpRunning) && systemActive == 1)) || ((((splverifierCounter == 0 && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == 0) && 1 == systemActive)) || ((((2 == waterLevel && splverifierCounter == 0) && systemActive == 0) && 1 <= methaneLevelCritical) && pumpRunning == 0)) || ((((2 == waterLevel && splverifierCounter == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && pumpRunning == 0)) || ((((splverifierCounter == 0 && waterLevel <= 1) && 1 <= methaneLevelCritical) && 1 == systemActive) && pumpRunning == 0)) || (((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && waterLevel <= 0) && methaneLevelCritical == 0) && 1 <= pumpRunning) && systemActive == 1)) || ((((splverifierCounter == 0 && waterLevel == 1) && systemActive == 0) && 1 <= methaneLevelCritical) && pumpRunning == 0) RESULT: Ultimate proved your program to be correct! [2021-12-17 15:10:32,277 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE