./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash e7a194b3d6e079d2329a0d70eaa59b34ff3d58300de8b046ef1cd7cff7f67b94 --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-17 15:09:51,228 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-17 15:09:51,230 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-17 15:09:51,266 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-17 15:09:51,267 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-17 15:09:51,271 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-17 15:09:51,272 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-17 15:09:51,279 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-17 15:09:51,281 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-17 15:09:51,287 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-17 15:09:51,287 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-17 15:09:51,289 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-17 15:09:51,289 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-17 15:09:51,292 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-17 15:09:51,294 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-17 15:09:51,299 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-17 15:09:51,302 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-17 15:09:51,303 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-17 15:09:51,305 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-17 15:09:51,309 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-17 15:09:51,312 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-17 15:09:51,313 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-17 15:09:51,315 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-17 15:09:51,316 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-17 15:09:51,322 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-17 15:09:51,323 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-17 15:09:51,323 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-17 15:09:51,325 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-17 15:09:51,326 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-17 15:09:51,326 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-17 15:09:51,327 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-17 15:09:51,328 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-17 15:09:51,330 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-17 15:09:51,331 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-17 15:09:51,333 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-17 15:09:51,333 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-17 15:09:51,334 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-17 15:09:51,334 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-17 15:09:51,334 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-17 15:09:51,335 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-17 15:09:51,335 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-17 15:09:51,336 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-17 15:09:51,371 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-17 15:09:51,376 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-17 15:09:51,377 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-17 15:09:51,377 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-17 15:09:51,378 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-17 15:09:51,378 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-17 15:09:51,379 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-17 15:09:51,379 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-17 15:09:51,379 INFO L138 SettingsManager]: * Use SBE=true [2021-12-17 15:09:51,379 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-17 15:09:51,380 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-17 15:09:51,380 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-17 15:09:51,381 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-17 15:09:51,381 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-17 15:09:51,381 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-17 15:09:51,381 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-17 15:09:51,381 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-17 15:09:51,382 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-17 15:09:51,382 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-17 15:09:51,382 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-17 15:09:51,382 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-17 15:09:51,382 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-17 15:09:51,383 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-17 15:09:51,383 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-17 15:09:51,383 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:09:51,383 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-17 15:09:51,383 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-17 15:09:51,384 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-17 15:09:51,384 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-17 15:09:51,384 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-17 15:09:51,384 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-17 15:09:51,384 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-17 15:09:51,385 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-17 15:09:51,385 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-17 15:09:51,385 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> e7a194b3d6e079d2329a0d70eaa59b34ff3d58300de8b046ef1cd7cff7f67b94 [2021-12-17 15:09:51,621 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-17 15:09:51,651 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-17 15:09:51,653 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-17 15:09:51,654 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-17 15:09:51,655 INFO L275 PluginConnector]: CDTParser initialized [2021-12-17 15:09:51,657 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c [2021-12-17 15:09:51,716 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/41b4efa76/dcf5b79beabf4f4981bfb67a361b6d95/FLAG6c781b198 [2021-12-17 15:09:52,216 INFO L306 CDTParser]: Found 1 translation units. [2021-12-17 15:09:52,217 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c [2021-12-17 15:09:52,227 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/41b4efa76/dcf5b79beabf4f4981bfb67a361b6d95/FLAG6c781b198 [2021-12-17 15:09:52,551 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/41b4efa76/dcf5b79beabf4f4981bfb67a361b6d95 [2021-12-17 15:09:52,554 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-17 15:09:52,555 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-17 15:09:52,556 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-17 15:09:52,556 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-17 15:09:52,559 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-17 15:09:52,560 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:09:52" (1/1) ... [2021-12-17 15:09:52,561 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@69d9b9c7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:52, skipping insertion in model container [2021-12-17 15:09:52,561 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:09:52" (1/1) ... [2021-12-17 15:09:52,567 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-17 15:09:52,598 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-17 15:09:52,873 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c[17915,17928] [2021-12-17 15:09:52,881 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:09:52,889 INFO L203 MainTranslator]: Completed pre-run [2021-12-17 15:09:52,942 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c[17915,17928] [2021-12-17 15:09:52,947 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:09:52,962 INFO L208 MainTranslator]: Completed translation [2021-12-17 15:09:52,964 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:52 WrapperNode [2021-12-17 15:09:52,964 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-17 15:09:52,965 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-17 15:09:52,965 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-17 15:09:52,965 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-17 15:09:52,972 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:52" (1/1) ... [2021-12-17 15:09:52,988 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:52" (1/1) ... [2021-12-17 15:09:53,014 INFO L137 Inliner]: procedures = 58, calls = 161, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 286 [2021-12-17 15:09:53,015 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-17 15:09:53,016 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-17 15:09:53,016 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-17 15:09:53,016 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-17 15:09:53,023 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:52" (1/1) ... [2021-12-17 15:09:53,024 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:52" (1/1) ... [2021-12-17 15:09:53,026 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:52" (1/1) ... [2021-12-17 15:09:53,037 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:52" (1/1) ... [2021-12-17 15:09:53,042 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:52" (1/1) ... [2021-12-17 15:09:53,059 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:52" (1/1) ... [2021-12-17 15:09:53,060 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:52" (1/1) ... [2021-12-17 15:09:53,063 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-17 15:09:53,064 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-17 15:09:53,064 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-17 15:09:53,064 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-17 15:09:53,065 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:52" (1/1) ... [2021-12-17 15:09:53,076 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:09:53,089 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:09:53,105 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-17 15:09:53,125 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-17 15:09:53,148 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-17 15:09:53,148 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-17 15:09:53,148 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-17 15:09:53,148 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-17 15:09:53,149 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-17 15:09:53,149 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-17 15:09:53,149 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-17 15:09:53,149 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:09:53,149 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:09:53,150 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-17 15:09:53,150 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-17 15:09:53,150 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2021-12-17 15:09:53,150 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2021-12-17 15:09:53,150 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-12-17 15:09:53,151 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-12-17 15:09:53,151 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-17 15:09:53,151 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-17 15:09:53,151 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-17 15:09:53,151 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-17 15:09:53,151 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-17 15:09:53,151 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-17 15:09:53,152 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-17 15:09:53,243 INFO L236 CfgBuilder]: Building ICFG [2021-12-17 15:09:53,252 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-17 15:09:53,491 INFO L277 CfgBuilder]: Performing block encoding [2021-12-17 15:09:53,497 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-17 15:09:53,497 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-17 15:09:53,499 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:09:53 BoogieIcfgContainer [2021-12-17 15:09:53,499 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-17 15:09:53,500 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-17 15:09:53,501 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-17 15:09:53,504 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-17 15:09:53,504 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.12 03:09:52" (1/3) ... [2021-12-17 15:09:53,505 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@69c390b4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:09:53, skipping insertion in model container [2021-12-17 15:09:53,505 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:52" (2/3) ... [2021-12-17 15:09:53,505 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@69c390b4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:09:53, skipping insertion in model container [2021-12-17 15:09:53,505 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:09:53" (3/3) ... [2021-12-17 15:09:53,506 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product53.cil.c [2021-12-17 15:09:53,511 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-17 15:09:53,511 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-17 15:09:53,549 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-17 15:09:53,555 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-17 15:09:53,555 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-17 15:09:53,572 INFO L276 IsEmpty]: Start isEmpty. Operand has 105 states, 78 states have (on average 1.3717948717948718) internal successors, (107), 88 states have internal predecessors, (107), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2021-12-17 15:09:53,579 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-12-17 15:09:53,579 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:53,580 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:53,580 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:53,585 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:53,585 INFO L85 PathProgramCache]: Analyzing trace with hash 836117038, now seen corresponding path program 1 times [2021-12-17 15:09:53,593 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:53,594 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2090954360] [2021-12-17 15:09:53,594 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:53,595 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:53,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:53,837 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-17 15:09:53,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:53,856 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-17 15:09:53,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:53,868 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:53,869 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:53,869 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2090954360] [2021-12-17 15:09:53,870 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2090954360] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:53,870 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:53,870 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-17 15:09:53,872 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [250472995] [2021-12-17 15:09:53,872 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:53,876 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-17 15:09:53,877 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:53,903 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-17 15:09:53,904 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:09:53,907 INFO L87 Difference]: Start difference. First operand has 105 states, 78 states have (on average 1.3717948717948718) internal successors, (107), 88 states have internal predecessors, (107), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:53,960 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:53,961 INFO L93 Difference]: Finished difference Result 201 states and 272 transitions. [2021-12-17 15:09:53,962 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-17 15:09:53,963 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-12-17 15:09:53,963 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:53,974 INFO L225 Difference]: With dead ends: 201 [2021-12-17 15:09:53,974 INFO L226 Difference]: Without dead ends: 96 [2021-12-17 15:09:53,978 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:09:53,982 INFO L933 BasicCegarLoop]: 133 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 133 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:53,984 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 133 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:53,999 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 96 states. [2021-12-17 15:09:54,034 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 96 to 96. [2021-12-17 15:09:54,036 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 96 states, 71 states have (on average 1.3098591549295775) internal successors, (93), 80 states have internal predecessors, (93), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2021-12-17 15:09:54,042 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 96 states to 96 states and 124 transitions. [2021-12-17 15:09:54,044 INFO L78 Accepts]: Start accepts. Automaton has 96 states and 124 transitions. Word has length 32 [2021-12-17 15:09:54,044 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:54,044 INFO L470 AbstractCegarLoop]: Abstraction has 96 states and 124 transitions. [2021-12-17 15:09:54,045 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:54,046 INFO L276 IsEmpty]: Start isEmpty. Operand 96 states and 124 transitions. [2021-12-17 15:09:54,054 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2021-12-17 15:09:54,054 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:54,055 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:54,056 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-17 15:09:54,057 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:54,058 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:54,059 INFO L85 PathProgramCache]: Analyzing trace with hash 485124754, now seen corresponding path program 1 times [2021-12-17 15:09:54,059 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:54,059 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [473444669] [2021-12-17 15:09:54,059 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:54,059 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:54,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-17 15:09:54,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-12-17 15:09:54,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,173 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:54,174 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:54,175 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [473444669] [2021-12-17 15:09:54,175 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [473444669] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:54,175 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:54,175 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-17 15:09:54,176 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [216357520] [2021-12-17 15:09:54,176 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:54,178 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-17 15:09:54,181 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:54,182 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-17 15:09:54,182 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:54,182 INFO L87 Difference]: Start difference. First operand 96 states and 124 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-17 15:09:54,210 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:54,211 INFO L93 Difference]: Finished difference Result 184 states and 243 transitions. [2021-12-17 15:09:54,211 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-17 15:09:54,212 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2021-12-17 15:09:54,212 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:54,213 INFO L225 Difference]: With dead ends: 184 [2021-12-17 15:09:54,213 INFO L226 Difference]: Without dead ends: 96 [2021-12-17 15:09:54,214 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:54,215 INFO L933 BasicCegarLoop]: 122 mSDtfsCounter, 101 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 101 SdHoareTripleChecker+Valid, 122 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:54,216 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [101 Valid, 122 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:54,217 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 96 states. [2021-12-17 15:09:54,225 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 96 to 96. [2021-12-17 15:09:54,226 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 96 states, 71 states have (on average 1.295774647887324) internal successors, (92), 80 states have internal predecessors, (92), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2021-12-17 15:09:54,227 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 96 states to 96 states and 123 transitions. [2021-12-17 15:09:54,227 INFO L78 Accepts]: Start accepts. Automaton has 96 states and 123 transitions. Word has length 37 [2021-12-17 15:09:54,228 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:54,228 INFO L470 AbstractCegarLoop]: Abstraction has 96 states and 123 transitions. [2021-12-17 15:09:54,229 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-17 15:09:54,229 INFO L276 IsEmpty]: Start isEmpty. Operand 96 states and 123 transitions. [2021-12-17 15:09:54,230 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2021-12-17 15:09:54,230 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:54,230 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:54,231 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-17 15:09:54,231 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:54,231 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:54,231 INFO L85 PathProgramCache]: Analyzing trace with hash 88830114, now seen corresponding path program 1 times [2021-12-17 15:09:54,232 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:54,232 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [220295701] [2021-12-17 15:09:54,232 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:54,232 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:54,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,275 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-17 15:09:54,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,283 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-12-17 15:09:54,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,287 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2021-12-17 15:09:54,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,290 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:54,291 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:54,291 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [220295701] [2021-12-17 15:09:54,291 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [220295701] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:54,291 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:54,292 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-17 15:09:54,292 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1233108984] [2021-12-17 15:09:54,292 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:54,292 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-17 15:09:54,293 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:54,293 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-17 15:09:54,293 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-17 15:09:54,294 INFO L87 Difference]: Start difference. First operand 96 states and 123 transitions. Second operand has 4 states, 4 states have (on average 9.25) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-17 15:09:54,480 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:54,480 INFO L93 Difference]: Finished difference Result 288 states and 392 transitions. [2021-12-17 15:09:54,481 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-17 15:09:54,481 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.25) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2021-12-17 15:09:54,481 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:54,483 INFO L225 Difference]: With dead ends: 288 [2021-12-17 15:09:54,484 INFO L226 Difference]: Without dead ends: 200 [2021-12-17 15:09:54,485 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-17 15:09:54,486 INFO L933 BasicCegarLoop]: 133 mSDtfsCounter, 186 mSDsluCounter, 152 mSDsCounter, 0 mSdLazyCounter, 93 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 192 SdHoareTripleChecker+Valid, 285 SdHoareTripleChecker+Invalid, 156 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 93 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:54,487 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [192 Valid, 285 Invalid, 156 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 93 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:09:54,488 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 200 states. [2021-12-17 15:09:54,506 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 200 to 182. [2021-12-17 15:09:54,507 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 182 states, 135 states have (on average 1.2740740740740741) internal successors, (172), 143 states have internal predecessors, (172), 26 states have call successors, (26), 17 states have call predecessors, (26), 20 states have return successors, (43), 26 states have call predecessors, (43), 24 states have call successors, (43) [2021-12-17 15:09:54,508 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 182 states to 182 states and 241 transitions. [2021-12-17 15:09:54,508 INFO L78 Accepts]: Start accepts. Automaton has 182 states and 241 transitions. Word has length 46 [2021-12-17 15:09:54,509 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:54,509 INFO L470 AbstractCegarLoop]: Abstraction has 182 states and 241 transitions. [2021-12-17 15:09:54,509 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.25) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-17 15:09:54,509 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 241 transitions. [2021-12-17 15:09:54,510 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2021-12-17 15:09:54,510 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:54,511 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:54,511 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-17 15:09:54,511 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:54,511 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:54,512 INFO L85 PathProgramCache]: Analyzing trace with hash 385655368, now seen corresponding path program 1 times [2021-12-17 15:09:54,512 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:54,512 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [960036590] [2021-12-17 15:09:54,512 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:54,512 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:54,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,542 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-17 15:09:54,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,549 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-17 15:09:54,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,556 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:54,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,565 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-12-17 15:09:54,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,569 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:54,570 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:54,570 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [960036590] [2021-12-17 15:09:54,570 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [960036590] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:54,571 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:54,571 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-17 15:09:54,571 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1932274344] [2021-12-17 15:09:54,571 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:54,572 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-17 15:09:54,572 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:54,572 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-17 15:09:54,573 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-17 15:09:54,573 INFO L87 Difference]: Start difference. First operand 182 states and 241 transitions. Second operand has 4 states, 4 states have (on average 10.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-17 15:09:54,656 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:54,656 INFO L93 Difference]: Finished difference Result 304 states and 389 transitions. [2021-12-17 15:09:54,657 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-17 15:09:54,657 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 52 [2021-12-17 15:09:54,657 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:54,659 INFO L225 Difference]: With dead ends: 304 [2021-12-17 15:09:54,659 INFO L226 Difference]: Without dead ends: 166 [2021-12-17 15:09:54,660 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-17 15:09:54,661 INFO L933 BasicCegarLoop]: 113 mSDtfsCounter, 72 mSDsluCounter, 125 mSDsCounter, 0 mSdLazyCounter, 57 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 238 SdHoareTripleChecker+Invalid, 73 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 57 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:54,662 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [79 Valid, 238 Invalid, 73 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 57 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:09:54,662 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166 states. [2021-12-17 15:09:54,673 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 166 to 164. [2021-12-17 15:09:54,674 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 164 states, 123 states have (on average 1.2845528455284554) internal successors, (158), 131 states have internal predecessors, (158), 20 states have call successors, (20), 15 states have call predecessors, (20), 20 states have return successors, (31), 22 states have call predecessors, (31), 20 states have call successors, (31) [2021-12-17 15:09:54,675 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 164 states to 164 states and 209 transitions. [2021-12-17 15:09:54,675 INFO L78 Accepts]: Start accepts. Automaton has 164 states and 209 transitions. Word has length 52 [2021-12-17 15:09:54,675 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:54,676 INFO L470 AbstractCegarLoop]: Abstraction has 164 states and 209 transitions. [2021-12-17 15:09:54,676 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-17 15:09:54,676 INFO L276 IsEmpty]: Start isEmpty. Operand 164 states and 209 transitions. [2021-12-17 15:09:54,677 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-12-17 15:09:54,677 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:54,677 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:54,677 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-17 15:09:54,678 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:54,678 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:54,678 INFO L85 PathProgramCache]: Analyzing trace with hash -2065653903, now seen corresponding path program 1 times [2021-12-17 15:09:54,678 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:54,679 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1306032613] [2021-12-17 15:09:54,679 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:54,679 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:54,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,708 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-17 15:09:54,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,714 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-17 15:09:54,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:54,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,747 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-12-17 15:09:54,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,751 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:54,752 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:54,752 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1306032613] [2021-12-17 15:09:54,752 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1306032613] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:54,752 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:54,752 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:09:54,753 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [645222698] [2021-12-17 15:09:54,753 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:54,753 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:09:54,754 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:54,754 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:09:54,754 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:09:54,754 INFO L87 Difference]: Start difference. First operand 164 states and 209 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-17 15:09:54,901 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:54,901 INFO L93 Difference]: Finished difference Result 328 states and 426 transitions. [2021-12-17 15:09:54,902 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-17 15:09:54,902 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2021-12-17 15:09:54,902 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:54,904 INFO L225 Difference]: With dead ends: 328 [2021-12-17 15:09:54,904 INFO L226 Difference]: Without dead ends: 172 [2021-12-17 15:09:54,905 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-17 15:09:54,906 INFO L933 BasicCegarLoop]: 112 mSDtfsCounter, 73 mSDsluCounter, 346 mSDsCounter, 0 mSdLazyCounter, 124 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 458 SdHoareTripleChecker+Invalid, 147 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 124 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:54,906 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [76 Valid, 458 Invalid, 147 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 124 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:09:54,907 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 172 states. [2021-12-17 15:09:54,918 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 172 to 167. [2021-12-17 15:09:54,918 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 167 states, 126 states have (on average 1.2777777777777777) internal successors, (161), 134 states have internal predecessors, (161), 20 states have call successors, (20), 15 states have call predecessors, (20), 20 states have return successors, (31), 22 states have call predecessors, (31), 20 states have call successors, (31) [2021-12-17 15:09:54,919 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 167 states to 167 states and 212 transitions. [2021-12-17 15:09:54,920 INFO L78 Accepts]: Start accepts. Automaton has 167 states and 212 transitions. Word has length 56 [2021-12-17 15:09:54,920 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:54,920 INFO L470 AbstractCegarLoop]: Abstraction has 167 states and 212 transitions. [2021-12-17 15:09:54,921 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-17 15:09:54,921 INFO L276 IsEmpty]: Start isEmpty. Operand 167 states and 212 transitions. [2021-12-17 15:09:54,922 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-12-17 15:09:54,922 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:54,922 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:54,922 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-17 15:09:54,923 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:54,923 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:54,923 INFO L85 PathProgramCache]: Analyzing trace with hash -1642952077, now seen corresponding path program 1 times [2021-12-17 15:09:54,923 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:54,924 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [3678712] [2021-12-17 15:09:54,924 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:54,924 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:54,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,959 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-17 15:09:54,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,966 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-17 15:09:54,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:54,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:54,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,000 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-12-17 15:09:55,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,003 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:55,003 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:55,004 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [3678712] [2021-12-17 15:09:55,004 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [3678712] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:55,004 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:55,004 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:09:55,004 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1537703369] [2021-12-17 15:09:55,004 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:55,005 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:09:55,005 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:55,005 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:09:55,006 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:09:55,006 INFO L87 Difference]: Start difference. First operand 167 states and 212 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-17 15:09:55,152 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:55,152 INFO L93 Difference]: Finished difference Result 339 states and 445 transitions. [2021-12-17 15:09:55,152 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-17 15:09:55,153 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2021-12-17 15:09:55,153 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:55,155 INFO L225 Difference]: With dead ends: 339 [2021-12-17 15:09:55,156 INFO L226 Difference]: Without dead ends: 180 [2021-12-17 15:09:55,157 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=34, Invalid=56, Unknown=0, NotChecked=0, Total=90 [2021-12-17 15:09:55,158 INFO L933 BasicCegarLoop]: 107 mSDtfsCounter, 168 mSDsluCounter, 234 mSDsCounter, 0 mSdLazyCounter, 107 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 171 SdHoareTripleChecker+Valid, 341 SdHoareTripleChecker+Invalid, 154 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 107 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:55,159 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [171 Valid, 341 Invalid, 154 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 107 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:09:55,159 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 180 states. [2021-12-17 15:09:55,168 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 180 to 169. [2021-12-17 15:09:55,169 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 169 states, 128 states have (on average 1.2734375) internal successors, (163), 136 states have internal predecessors, (163), 20 states have call successors, (20), 15 states have call predecessors, (20), 20 states have return successors, (31), 22 states have call predecessors, (31), 20 states have call successors, (31) [2021-12-17 15:09:55,170 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 169 states to 169 states and 214 transitions. [2021-12-17 15:09:55,170 INFO L78 Accepts]: Start accepts. Automaton has 169 states and 214 transitions. Word has length 56 [2021-12-17 15:09:55,171 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:55,171 INFO L470 AbstractCegarLoop]: Abstraction has 169 states and 214 transitions. [2021-12-17 15:09:55,171 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-17 15:09:55,171 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 214 transitions. [2021-12-17 15:09:55,172 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-12-17 15:09:55,172 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:55,173 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:55,173 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-17 15:09:55,173 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:55,173 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:55,174 INFO L85 PathProgramCache]: Analyzing trace with hash 846576885, now seen corresponding path program 1 times [2021-12-17 15:09:55,174 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:55,174 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1728070957] [2021-12-17 15:09:55,174 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:55,174 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:55,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,208 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-17 15:09:55,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,215 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-17 15:09:55,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,227 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:55,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-12-17 15:09:55,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,246 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:55,247 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:55,247 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1728070957] [2021-12-17 15:09:55,247 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1728070957] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:55,247 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:55,248 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-17 15:09:55,248 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [586451124] [2021-12-17 15:09:55,248 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:55,249 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-17 15:09:55,249 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:55,249 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-17 15:09:55,249 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-17 15:09:55,250 INFO L87 Difference]: Start difference. First operand 169 states and 214 transitions. Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-17 15:09:55,495 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:55,495 INFO L93 Difference]: Finished difference Result 477 states and 626 transitions. [2021-12-17 15:09:55,496 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-17 15:09:55,496 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2021-12-17 15:09:55,496 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:55,498 INFO L225 Difference]: With dead ends: 477 [2021-12-17 15:09:55,498 INFO L226 Difference]: Without dead ends: 316 [2021-12-17 15:09:55,499 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:09:55,500 INFO L933 BasicCegarLoop]: 165 mSDtfsCounter, 232 mSDsluCounter, 202 mSDsCounter, 0 mSdLazyCounter, 175 mSolverCounterSat, 72 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 239 SdHoareTripleChecker+Valid, 367 SdHoareTripleChecker+Invalid, 247 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 72 IncrementalHoareTripleChecker+Valid, 175 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:55,500 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [239 Valid, 367 Invalid, 247 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [72 Valid, 175 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:09:55,501 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 316 states. [2021-12-17 15:09:55,514 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 316 to 308. [2021-12-17 15:09:55,515 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 308 states, 231 states have (on average 1.2467532467532467) internal successors, (288), 243 states have internal predecessors, (288), 40 states have call successors, (40), 33 states have call predecessors, (40), 36 states have return successors, (66), 41 states have call predecessors, (66), 40 states have call successors, (66) [2021-12-17 15:09:55,517 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 308 states to 308 states and 394 transitions. [2021-12-17 15:09:55,517 INFO L78 Accepts]: Start accepts. Automaton has 308 states and 394 transitions. Word has length 56 [2021-12-17 15:09:55,518 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:55,518 INFO L470 AbstractCegarLoop]: Abstraction has 308 states and 394 transitions. [2021-12-17 15:09:55,518 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-17 15:09:55,518 INFO L276 IsEmpty]: Start isEmpty. Operand 308 states and 394 transitions. [2021-12-17 15:09:55,519 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2021-12-17 15:09:55,519 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:55,519 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:55,520 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-17 15:09:55,520 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:55,520 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:55,520 INFO L85 PathProgramCache]: Analyzing trace with hash 1874240715, now seen corresponding path program 1 times [2021-12-17 15:09:55,521 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:55,521 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [93616053] [2021-12-17 15:09:55,521 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:55,521 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:55,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-17 15:09:55,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,577 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-17 15:09:55,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,587 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:55,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,605 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:09:55,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,609 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-17 15:09:55,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,622 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-17 15:09:55,622 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:55,623 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [93616053] [2021-12-17 15:09:55,623 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [93616053] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:55,623 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:55,623 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-17 15:09:55,623 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [633047006] [2021-12-17 15:09:55,623 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:55,623 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-17 15:09:55,624 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:55,624 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-17 15:09:55,624 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:09:55,624 INFO L87 Difference]: Start difference. First operand 308 states and 394 transitions. Second operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-17 15:09:55,844 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:55,844 INFO L93 Difference]: Finished difference Result 624 states and 811 transitions. [2021-12-17 15:09:55,844 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-17 15:09:55,844 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 58 [2021-12-17 15:09:55,845 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:55,847 INFO L225 Difference]: With dead ends: 624 [2021-12-17 15:09:55,847 INFO L226 Difference]: Without dead ends: 324 [2021-12-17 15:09:55,848 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2021-12-17 15:09:55,849 INFO L933 BasicCegarLoop]: 109 mSDtfsCounter, 125 mSDsluCounter, 388 mSDsCounter, 0 mSdLazyCounter, 218 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 131 SdHoareTripleChecker+Valid, 497 SdHoareTripleChecker+Invalid, 259 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 218 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:55,849 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [131 Valid, 497 Invalid, 259 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 218 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:09:55,850 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 324 states. [2021-12-17 15:09:55,867 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 324 to 304. [2021-12-17 15:09:55,868 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 304 states, 227 states have (on average 1.2158590308370043) internal successors, (276), 239 states have internal predecessors, (276), 40 states have call successors, (40), 33 states have call predecessors, (40), 36 states have return successors, (66), 41 states have call predecessors, (66), 40 states have call successors, (66) [2021-12-17 15:09:55,870 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 304 states to 304 states and 382 transitions. [2021-12-17 15:09:55,871 INFO L78 Accepts]: Start accepts. Automaton has 304 states and 382 transitions. Word has length 58 [2021-12-17 15:09:55,871 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:55,871 INFO L470 AbstractCegarLoop]: Abstraction has 304 states and 382 transitions. [2021-12-17 15:09:55,871 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-17 15:09:55,871 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 382 transitions. [2021-12-17 15:09:55,872 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-12-17 15:09:55,872 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:55,872 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:55,872 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-17 15:09:55,873 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:55,873 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:55,873 INFO L85 PathProgramCache]: Analyzing trace with hash -1421347697, now seen corresponding path program 1 times [2021-12-17 15:09:55,873 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:55,873 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [690971739] [2021-12-17 15:09:55,873 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:55,873 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:55,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:09:55,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,969 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-17 15:09:55,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,978 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-12-17 15:09:55,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,985 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:55,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,990 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-17 15:09:55,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,992 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:55,993 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:55,993 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [690971739] [2021-12-17 15:09:55,993 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [690971739] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:55,993 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:55,993 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-12-17 15:09:55,993 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1593414399] [2021-12-17 15:09:55,993 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:55,994 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-12-17 15:09:55,994 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:55,994 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-12-17 15:09:55,994 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2021-12-17 15:09:55,994 INFO L87 Difference]: Start difference. First operand 304 states and 382 transitions. Second operand has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 7 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-17 15:09:56,699 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:56,699 INFO L93 Difference]: Finished difference Result 950 states and 1254 transitions. [2021-12-17 15:09:56,699 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2021-12-17 15:09:56,700 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 7 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 60 [2021-12-17 15:09:56,700 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:56,704 INFO L225 Difference]: With dead ends: 950 [2021-12-17 15:09:56,704 INFO L226 Difference]: Without dead ends: 709 [2021-12-17 15:09:56,705 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 39 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 145 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=153, Invalid=549, Unknown=0, NotChecked=0, Total=702 [2021-12-17 15:09:56,708 INFO L933 BasicCegarLoop]: 160 mSDtfsCounter, 452 mSDsluCounter, 523 mSDsCounter, 0 mSdLazyCounter, 672 mSolverCounterSat, 168 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 457 SdHoareTripleChecker+Valid, 683 SdHoareTripleChecker+Invalid, 840 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 168 IncrementalHoareTripleChecker+Valid, 672 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:56,708 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [457 Valid, 683 Invalid, 840 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [168 Valid, 672 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-12-17 15:09:56,709 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 709 states. [2021-12-17 15:09:56,748 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 709 to 585. [2021-12-17 15:09:56,749 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 585 states, 437 states have (on average 1.2151029748283753) internal successors, (531), 463 states have internal predecessors, (531), 77 states have call successors, (77), 58 states have call predecessors, (77), 70 states have return successors, (127), 79 states have call predecessors, (127), 77 states have call successors, (127) [2021-12-17 15:09:56,752 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 585 states to 585 states and 735 transitions. [2021-12-17 15:09:56,753 INFO L78 Accepts]: Start accepts. Automaton has 585 states and 735 transitions. Word has length 60 [2021-12-17 15:09:56,753 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:56,753 INFO L470 AbstractCegarLoop]: Abstraction has 585 states and 735 transitions. [2021-12-17 15:09:56,754 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 7 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-17 15:09:56,754 INFO L276 IsEmpty]: Start isEmpty. Operand 585 states and 735 transitions. [2021-12-17 15:09:56,759 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2021-12-17 15:09:56,759 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:56,759 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:56,760 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-17 15:09:56,760 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:56,760 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:56,760 INFO L85 PathProgramCache]: Analyzing trace with hash 118762499, now seen corresponding path program 1 times [2021-12-17 15:09:56,760 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:56,761 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [855355585] [2021-12-17 15:09:56,761 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:56,761 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:56,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,825 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:09:56,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-17 15:09:56,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,843 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:09:56,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,850 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-17 15:09:56,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,856 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:56,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2021-12-17 15:09:56,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2021-12-17 15:09:56,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,898 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-17 15:09:56,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:56,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,908 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2021-12-17 15:09:56,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,910 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 6 proven. 10 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2021-12-17 15:09:56,911 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:56,911 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [855355585] [2021-12-17 15:09:56,911 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [855355585] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:09:56,911 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [922300136] [2021-12-17 15:09:56,911 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:56,911 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:09:56,911 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:09:56,913 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:09:56,918 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-17 15:09:57,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:57,014 INFO L263 TraceCheckSpWp]: Trace formula consists of 507 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-17 15:09:57,021 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:09:57,386 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 26 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:09:57,386 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-17 15:09:57,645 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 18 proven. 10 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-17 15:09:57,645 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [922300136] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-17 15:09:57,645 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-17 15:09:57,646 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 14 [2021-12-17 15:09:57,646 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1048818812] [2021-12-17 15:09:57,646 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-17 15:09:57,647 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2021-12-17 15:09:57,647 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:57,647 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2021-12-17 15:09:57,647 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=153, Unknown=0, NotChecked=0, Total=182 [2021-12-17 15:09:57,648 INFO L87 Difference]: Start difference. First operand 585 states and 735 transitions. Second operand has 14 states, 14 states have (on average 10.571428571428571) internal successors, (148), 10 states have internal predecessors, (148), 5 states have call successors, (23), 6 states have call predecessors, (23), 6 states have return successors, (22), 6 states have call predecessors, (22), 5 states have call successors, (22) [2021-12-17 15:09:58,657 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:58,657 INFO L93 Difference]: Finished difference Result 1227 states and 1586 transitions. [2021-12-17 15:09:58,658 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2021-12-17 15:09:58,658 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 10.571428571428571) internal successors, (148), 10 states have internal predecessors, (148), 5 states have call successors, (23), 6 states have call predecessors, (23), 6 states have return successors, (22), 6 states have call predecessors, (22), 5 states have call successors, (22) Word has length 109 [2021-12-17 15:09:58,658 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:58,662 INFO L225 Difference]: With dead ends: 1227 [2021-12-17 15:09:58,662 INFO L226 Difference]: Without dead ends: 703 [2021-12-17 15:09:58,665 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 286 GetRequests, 246 SyntacticMatches, 1 SemanticMatches, 39 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 343 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=379, Invalid=1261, Unknown=0, NotChecked=0, Total=1640 [2021-12-17 15:09:58,665 INFO L933 BasicCegarLoop]: 220 mSDtfsCounter, 447 mSDsluCounter, 1184 mSDsCounter, 0 mSdLazyCounter, 1068 mSolverCounterSat, 233 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 450 SdHoareTripleChecker+Valid, 1404 SdHoareTripleChecker+Invalid, 1301 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 233 IncrementalHoareTripleChecker+Valid, 1068 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:58,666 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [450 Valid, 1404 Invalid, 1301 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [233 Valid, 1068 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2021-12-17 15:09:58,667 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 703 states. [2021-12-17 15:09:58,697 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 703 to 641. [2021-12-17 15:09:58,698 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 641 states, 475 states have (on average 1.2) internal successors, (570), 507 states have internal predecessors, (570), 86 states have call successors, (86), 71 states have call predecessors, (86), 79 states have return successors, (114), 83 states have call predecessors, (114), 86 states have call successors, (114) [2021-12-17 15:09:58,709 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 641 states to 641 states and 770 transitions. [2021-12-17 15:09:58,709 INFO L78 Accepts]: Start accepts. Automaton has 641 states and 770 transitions. Word has length 109 [2021-12-17 15:09:58,709 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:58,710 INFO L470 AbstractCegarLoop]: Abstraction has 641 states and 770 transitions. [2021-12-17 15:09:58,710 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 10.571428571428571) internal successors, (148), 10 states have internal predecessors, (148), 5 states have call successors, (23), 6 states have call predecessors, (23), 6 states have return successors, (22), 6 states have call predecessors, (22), 5 states have call successors, (22) [2021-12-17 15:09:58,710 INFO L276 IsEmpty]: Start isEmpty. Operand 641 states and 770 transitions. [2021-12-17 15:09:58,712 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 188 [2021-12-17 15:09:58,713 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:58,713 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:58,742 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-17 15:09:58,930 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-17 15:09:58,931 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:58,931 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:58,931 INFO L85 PathProgramCache]: Analyzing trace with hash 430860499, now seen corresponding path program 1 times [2021-12-17 15:09:58,931 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:58,931 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1317684436] [2021-12-17 15:09:58,931 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:58,932 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:58,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,982 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:09:58,983 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-17 15:09:58,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,997 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:09:58,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-17 15:09:59,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,006 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:59,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,010 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-12-17 15:09:59,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,018 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:09:59,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,020 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-17 15:09:59,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-17 15:09:59,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,025 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:59,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,027 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2021-12-17 15:09:59,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,054 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:09:59,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,057 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-17 15:09:59,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,060 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 149 [2021-12-17 15:09:59,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,062 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2021-12-17 15:09:59,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,066 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:59,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,070 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 179 [2021-12-17 15:09:59,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,073 INFO L134 CoverageAnalysis]: Checked inductivity of 197 backedges. 78 proven. 0 refuted. 0 times theorem prover too weak. 119 trivial. 0 not checked. [2021-12-17 15:09:59,073 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:59,073 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1317684436] [2021-12-17 15:09:59,074 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1317684436] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:59,074 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:59,074 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-17 15:09:59,074 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1826708073] [2021-12-17 15:09:59,074 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:59,075 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-17 15:09:59,075 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:59,075 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-17 15:09:59,075 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2021-12-17 15:09:59,076 INFO L87 Difference]: Start difference. First operand 641 states and 770 transitions. Second operand has 10 states, 10 states have (on average 9.5) internal successors, (95), 7 states have internal predecessors, (95), 4 states have call successors, (13), 5 states have call predecessors, (13), 2 states have return successors, (13), 4 states have call predecessors, (13), 4 states have call successors, (13) [2021-12-17 15:09:59,858 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:59,858 INFO L93 Difference]: Finished difference Result 1786 states and 2182 transitions. [2021-12-17 15:09:59,859 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2021-12-17 15:09:59,859 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 9.5) internal successors, (95), 7 states have internal predecessors, (95), 4 states have call successors, (13), 5 states have call predecessors, (13), 2 states have return successors, (13), 4 states have call predecessors, (13), 4 states have call successors, (13) Word has length 187 [2021-12-17 15:09:59,859 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:59,864 INFO L225 Difference]: With dead ends: 1786 [2021-12-17 15:09:59,864 INFO L226 Difference]: Without dead ends: 1153 [2021-12-17 15:09:59,866 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 46 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 251 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=229, Invalid=893, Unknown=0, NotChecked=0, Total=1122 [2021-12-17 15:09:59,867 INFO L933 BasicCegarLoop]: 217 mSDtfsCounter, 409 mSDsluCounter, 624 mSDsCounter, 0 mSdLazyCounter, 825 mSolverCounterSat, 152 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 413 SdHoareTripleChecker+Valid, 841 SdHoareTripleChecker+Invalid, 977 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 152 IncrementalHoareTripleChecker+Valid, 825 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:59,867 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [413 Valid, 841 Invalid, 977 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [152 Valid, 825 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-12-17 15:09:59,868 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1153 states. [2021-12-17 15:09:59,934 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1153 to 1138. [2021-12-17 15:09:59,935 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1138 states, 849 states have (on average 1.16489988221437) internal successors, (989), 897 states have internal predecessors, (989), 149 states have call successors, (149), 128 states have call predecessors, (149), 139 states have return successors, (195), 146 states have call predecessors, (195), 149 states have call successors, (195) [2021-12-17 15:09:59,940 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1138 states to 1138 states and 1333 transitions. [2021-12-17 15:09:59,940 INFO L78 Accepts]: Start accepts. Automaton has 1138 states and 1333 transitions. Word has length 187 [2021-12-17 15:09:59,941 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:59,941 INFO L470 AbstractCegarLoop]: Abstraction has 1138 states and 1333 transitions. [2021-12-17 15:09:59,941 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 9.5) internal successors, (95), 7 states have internal predecessors, (95), 4 states have call successors, (13), 5 states have call predecessors, (13), 2 states have return successors, (13), 4 states have call predecessors, (13), 4 states have call successors, (13) [2021-12-17 15:09:59,941 INFO L276 IsEmpty]: Start isEmpty. Operand 1138 states and 1333 transitions. [2021-12-17 15:09:59,947 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 192 [2021-12-17 15:09:59,947 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:59,947 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:59,948 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-12-17 15:09:59,948 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:59,948 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:59,948 INFO L85 PathProgramCache]: Analyzing trace with hash -813407625, now seen corresponding path program 1 times [2021-12-17 15:09:59,949 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:59,949 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1612553737] [2021-12-17 15:09:59,949 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:59,949 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:59,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:10:00,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,021 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-17 15:10:00,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,026 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:10:00,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,033 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-17 15:10:00,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,038 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:10:00,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,041 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-12-17 15:10:00,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,048 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:10:00,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,050 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-17 15:10:00,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,053 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-17 15:10:00,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,056 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:10:00,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2021-12-17 15:10:00,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,065 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-12-17 15:10:00,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,115 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:10:00,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-17 15:10:00,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 153 [2021-12-17 15:10:00,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,121 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 162 [2021-12-17 15:10:00,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,126 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:10:00,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 183 [2021-12-17 15:10:00,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,133 INFO L134 CoverageAnalysis]: Checked inductivity of 197 backedges. 66 proven. 5 refuted. 0 times theorem prover too weak. 126 trivial. 0 not checked. [2021-12-17 15:10:00,133 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:10:00,134 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1612553737] [2021-12-17 15:10:00,134 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1612553737] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:10:00,134 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1455248898] [2021-12-17 15:10:00,134 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:10:00,134 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:10:00,134 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:10:00,135 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:10:00,161 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-17 15:10:00,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,262 INFO L263 TraceCheckSpWp]: Trace formula consists of 721 conjuncts, 13 conjunts are in the unsatisfiable core [2021-12-17 15:10:00,272 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:10:00,650 INFO L134 CoverageAnalysis]: Checked inductivity of 197 backedges. 143 proven. 4 refuted. 0 times theorem prover too weak. 50 trivial. 0 not checked. [2021-12-17 15:10:00,650 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-17 15:10:01,343 INFO L134 CoverageAnalysis]: Checked inductivity of 197 backedges. 77 proven. 39 refuted. 0 times theorem prover too weak. 81 trivial. 0 not checked. [2021-12-17 15:10:01,343 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1455248898] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-17 15:10:01,343 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-17 15:10:01,343 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 10, 11] total 26 [2021-12-17 15:10:01,343 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1959822003] [2021-12-17 15:10:01,344 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-17 15:10:01,344 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2021-12-17 15:10:01,344 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:10:01,345 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2021-12-17 15:10:01,345 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=121, Invalid=529, Unknown=0, NotChecked=0, Total=650 [2021-12-17 15:10:01,345 INFO L87 Difference]: Start difference. First operand 1138 states and 1333 transitions. Second operand has 26 states, 26 states have (on average 8.576923076923077) internal successors, (223), 21 states have internal predecessors, (223), 9 states have call successors, (38), 10 states have call predecessors, (38), 9 states have return successors, (37), 8 states have call predecessors, (37), 9 states have call successors, (37) [2021-12-17 15:10:02,760 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:10:02,761 INFO L93 Difference]: Finished difference Result 2415 states and 2913 transitions. [2021-12-17 15:10:02,761 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2021-12-17 15:10:02,761 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 8.576923076923077) internal successors, (223), 21 states have internal predecessors, (223), 9 states have call successors, (38), 10 states have call predecessors, (38), 9 states have return successors, (37), 8 states have call predecessors, (37), 9 states have call successors, (37) Word has length 191 [2021-12-17 15:10:02,762 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:10:02,763 INFO L225 Difference]: With dead ends: 2415 [2021-12-17 15:10:02,763 INFO L226 Difference]: Without dead ends: 0 [2021-12-17 15:10:02,768 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 463 GetRequests, 410 SyntacticMatches, 3 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 510 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=557, Invalid=2095, Unknown=0, NotChecked=0, Total=2652 [2021-12-17 15:10:02,769 INFO L933 BasicCegarLoop]: 142 mSDtfsCounter, 882 mSDsluCounter, 396 mSDsCounter, 0 mSdLazyCounter, 1537 mSolverCounterSat, 362 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 885 SdHoareTripleChecker+Valid, 538 SdHoareTripleChecker+Invalid, 1899 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 362 IncrementalHoareTripleChecker+Valid, 1537 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2021-12-17 15:10:02,769 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [885 Valid, 538 Invalid, 1899 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [362 Valid, 1537 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2021-12-17 15:10:02,769 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-17 15:10:02,769 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-17 15:10:02,769 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:10:02,769 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-17 15:10:02,770 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 191 [2021-12-17 15:10:02,770 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:10:02,770 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-17 15:10:02,770 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 8.576923076923077) internal successors, (223), 21 states have internal predecessors, (223), 9 states have call successors, (38), 10 states have call predecessors, (38), 9 states have return successors, (37), 8 states have call predecessors, (37), 9 states have call successors, (37) [2021-12-17 15:10:02,770 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-17 15:10:02,770 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-17 15:10:02,772 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-17 15:10:02,803 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2021-12-17 15:10:02,973 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2021-12-17 15:10:02,975 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-17 15:10:12,458 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 551 558) the Hoare annotation is: (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) (not (= 1 ~systemActive~0)) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|))) [2021-12-17 15:10:12,459 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 551 558) no Hoare annotation was computed. [2021-12-17 15:10:12,459 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 551 558) no Hoare annotation was computed. [2021-12-17 15:10:12,459 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 458 464) no Hoare annotation was computed. [2021-12-17 15:10:12,459 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 458 464) the Hoare annotation is: true [2021-12-17 15:10:12,459 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 943 954) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 |old(~methaneLevelCritical~0)|)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~pumpRunning~0)))) (and (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 (not (<= ~waterLevel~0 2))) (or .cse0 (not (= ~waterLevel~0 2)) .cse1 .cse2) (or (not (= |old(~methaneLevelCritical~0)| 0)) (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 .cse2 (= ~methaneLevelCritical~0 0)))) [2021-12-17 15:10:12,459 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 943 954) no Hoare annotation was computed. [2021-12-17 15:10:12,459 INFO L858 garLoopResultBuilder]: For program point L947-1(lines 943 954) no Hoare annotation was computed. [2021-12-17 15:10:12,459 INFO L858 garLoopResultBuilder]: For program point L833(line 833) no Hoare annotation was computed. [2021-12-17 15:10:12,459 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 812 841) no Hoare annotation was computed. [2021-12-17 15:10:12,460 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 812 841) the Hoare annotation is: true [2021-12-17 15:10:12,460 INFO L858 garLoopResultBuilder]: For program point L826(lines 826 830) no Hoare annotation was computed. [2021-12-17 15:10:12,460 INFO L861 garLoopResultBuilder]: At program point L826-1(lines 826 830) the Hoare annotation is: true [2021-12-17 15:10:12,460 INFO L858 garLoopResultBuilder]: For program point L823(line 823) no Hoare annotation was computed. [2021-12-17 15:10:12,460 INFO L861 garLoopResultBuilder]: At program point L822-2(lines 822 836) the Hoare annotation is: true [2021-12-17 15:10:12,460 INFO L861 garLoopResultBuilder]: At program point L818(line 818) the Hoare annotation is: true [2021-12-17 15:10:12,460 INFO L858 garLoopResultBuilder]: For program point L818-1(line 818) no Hoare annotation was computed. [2021-12-17 15:10:12,461 INFO L861 garLoopResultBuilder]: At program point L837(lines 812 841) the Hoare annotation is: true [2021-12-17 15:10:12,461 INFO L854 garLoopResultBuilder]: At program point L960(lines 955 963) the Hoare annotation is: (let ((.cse11 (= 0 ~methaneLevelCritical~0)) (.cse13 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse15 (= ~methaneLevelCritical~0 0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse14 (<= ~waterLevel~0 1)) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|))) (let ((.cse9 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (and .cse6 .cse14 (= ~waterLevel~0 |old(~waterLevel~0)|) .cse7 .cse8)) (.cse0 (and .cse13 .cse6 .cse14 .cse15 .cse7 .cse8)) (.cse4 (not .cse15)) (.cse12 (not (= |old(~waterLevel~0)| 1))) (.cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not (= 1 ~systemActive~0))) (.cse10 (and .cse13 .cse6 .cse14 (<= 1 ~pumpRunning~0) .cse7 (not .cse11) .cse8 (= ~systemActive~0 1))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (<= |old(~waterLevel~0)| 1)) .cse5) (or .cse2 (and .cse6 (= ~waterLevel~0 1) .cse7 .cse8) (not (= |old(~waterLevel~0)| 2)) .cse5) (or .cse9 .cse2 (not (= |old(~pumpRunning~0)| 0))) (or .cse9 .cse1 .cse2 .cse3 .cse10 .cse11 .cse5) (or .cse0 .cse12 .cse1 .cse2 .cse4 .cse5) (or .cse12 .cse1 .cse2 .cse10 .cse11 .cse5)))) [2021-12-17 15:10:12,461 INFO L858 garLoopResultBuilder]: For program point L923(lines 923 927) no Hoare annotation was computed. [2021-12-17 15:10:12,461 INFO L854 garLoopResultBuilder]: At program point L923-2(lines 919 930) the Hoare annotation is: (let ((.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (let ((.cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse4 (<= ~waterLevel~0 1) .cse5)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3) (or .cse1 (and .cse4 (= ~waterLevel~0 1) .cse5) (not (= |old(~waterLevel~0)| 2)) .cse3) (or .cse6 .cse0 .cse1 .cse2 (and .cse4 (= ~waterLevel~0 |old(~waterLevel~0)|) .cse5) .cse3) (or .cse6 .cse1 (not (= |old(~pumpRunning~0)| 0)))))) [2021-12-17 15:10:12,461 INFO L854 garLoopResultBuilder]: At program point L791(line 791) the Hoare annotation is: (let ((.cse21 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse11 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse12 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse13 (< |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2)) (.cse27 (= ~methaneLevelCritical~0 0)) (.cse19 (= ~waterLevel~0 1)) (.cse26 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse18 (<= 1 ~switchedOnBeforeTS~0)) (.cse10 (<= ~waterLevel~0 1)) (.cse20 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~5#1|)) (.cse4 (= 0 ~methaneLevelCritical~0)) (.cse22 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse23 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|)) (.cse14 (= ~pumpRunning~0 0)) (.cse28 (= 1 ~systemActive~0)) (.cse24 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse25 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| ~waterLevel~0))) (let ((.cse3 (and .cse26 .cse18 .cse10 .cse20 (not .cse4) .cse22 .cse23 .cse14 .cse28 .cse24 .cse25)) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~waterLevel~0)| 1))) (.cse8 (and .cse18 .cse19 .cse20 .cse22 .cse23 .cse14 .cse24 .cse25)) (.cse9 (not (= |old(~waterLevel~0)| 2))) (.cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not .cse28)) (.cse15 (and .cse26 .cse18 .cse10 .cse27 .cse20 .cse22 .cse23 .cse14 .cse24 .cse25)) (.cse7 (and .cse18 .cse11 .cse20 .cse12 .cse22 .cse23 .cse13 .cse14)) (.cse16 (not .cse27)) (.cse17 (and .cse26 .cse18 .cse10 .cse27 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse1 .cse2 .cse7 .cse3 .cse4 .cse5) (or .cse2 .cse8 .cse9 .cse5 .cse4) (or .cse6 .cse2 (not (= |old(~pumpRunning~0)| 0)) (and .cse10 .cse11 .cse12 .cse13 .cse14)) (or .cse0 .cse1 .cse2 .cse15 .cse16 .cse17 .cse5) (or (and .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25) .cse2 .cse8 .cse9 .cse5) (or .cse1 .cse2 (and .cse18 .cse11 .cse20 .cse21 .cse12 .cse22 .cse23 .cse13) .cse15 .cse7 .cse16 (not (<= |old(~waterLevel~0)| 1)) .cse17 .cse5)))) [2021-12-17 15:10:12,462 INFO L858 garLoopResultBuilder]: For program point L791-1(line 791) no Hoare annotation was computed. [2021-12-17 15:10:12,462 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 431 457) no Hoare annotation was computed. [2021-12-17 15:10:12,462 INFO L858 garLoopResultBuilder]: For program point L445-1(lines 445 451) no Hoare annotation was computed. [2021-12-17 15:10:12,462 INFO L854 garLoopResultBuilder]: At program point L532(line 532) the Hoare annotation is: (let ((.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse10 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~5#1|)) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse9 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|))) (let ((.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse5 (<= ~waterLevel~0 1) .cse10 .cse6 .cse7 .cse8 .cse9)) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse1 (= 0 ~methaneLevelCritical~0) .cse3) (or .cse4 .cse1 (not (= |old(~pumpRunning~0)| 0))) (or .cse0 .cse1 .cse2 (and .cse5 (= ~waterLevel~0 |old(~waterLevel~0)|) .cse6 .cse7 .cse8 .cse9) (not (<= |old(~waterLevel~0)| 1)) .cse3) (or .cse1 (and .cse5 (= ~waterLevel~0 1) .cse10 .cse6 .cse7 .cse8 .cse9) (not (= |old(~waterLevel~0)| 2)) .cse3)))) [2021-12-17 15:10:12,462 INFO L854 garLoopResultBuilder]: At program point L528(line 528) the Hoare annotation is: (let ((.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~5#1|)) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse11 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse6 (and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse7 (<= ~waterLevel~0 1) .cse8 (<= 1 ~pumpRunning~0) .cse9 (not (= 0 ~methaneLevelCritical~0)) .cse10 .cse11 (= ~systemActive~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))) (or .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse2 (not (<= |old(~waterLevel~0)| 1)) .cse4) (or (not (= |old(~waterLevel~0)| 1)) .cse5 .cse1 .cse6 .cse4) (or .cse0 .cse5 .cse1 (and .cse7 (= ~waterLevel~0 |old(~waterLevel~0)|) .cse8 .cse9 .cse10 .cse11) .cse6 .cse4) (or .cse1 (and .cse7 (= ~waterLevel~0 1) .cse8 .cse9 .cse10 .cse11) .cse3 .cse4)))) [2021-12-17 15:10:12,462 INFO L858 garLoopResultBuilder]: For program point L912(line 912) no Hoare annotation was computed. [2021-12-17 15:10:12,463 INFO L854 garLoopResultBuilder]: At program point L776(line 776) the Hoare annotation is: (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse0 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or (not (<= |old(~waterLevel~0)| 2)) (and .cse0 .cse1 (= ~pumpRunning~0 0)) .cse2 (not (= |old(~pumpRunning~0)| 0))) (or (and .cse0 .cse1 .cse3) .cse2 (not (= |old(~waterLevel~0)| 2)) .cse4) (or (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse2 (and .cse0 .cse3 .cse1) (not (<= |old(~waterLevel~0)| 1)) .cse4))) [2021-12-17 15:10:12,463 INFO L858 garLoopResultBuilder]: For program point L776-1(line 776) no Hoare annotation was computed. [2021-12-17 15:10:12,463 INFO L854 garLoopResultBuilder]: At program point L537(line 537) the Hoare annotation is: (let ((.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 .cse2) (or .cse1 (not (= |old(~waterLevel~0)| 2)) .cse2) (or .cse0 (and (= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 0)) .cse1 (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:10:12,463 INFO L858 garLoopResultBuilder]: For program point L793(lines 793 803) no Hoare annotation was computed. [2021-12-17 15:10:12,463 INFO L854 garLoopResultBuilder]: At program point L537-1(lines 518 542) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse17 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse18 (<= ~waterLevel~0 1)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse9 (= ~waterLevel~0 1)) (.cse10 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~5#1|)) (.cse12 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse13 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|)) (.cse15 (= ~pumpRunning~0 0))) (let ((.cse1 (and .cse8 .cse9 .cse10 .cse12 .cse13 .cse15)) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse5 (and .cse17 .cse8 .cse18 .cse10 .cse12 .cse13 .cse15)) (.cse7 (and .cse17 .cse8 .cse18 (= ~methaneLevelCritical~0 0) .cse10 .cse11 .cse12 .cse13)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse16 (not (<= |old(~waterLevel~0)| 1))) (.cse4 (= 0 ~methaneLevelCritical~0)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse14 (= ~waterLevel~0 |old(~waterLevel~0)|))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 (not (= |old(~waterLevel~0)| 1)) .cse6 .cse0 .cse7 .cse3) (or .cse0 .cse1 (and .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) .cse2 .cse3) (or .cse5 .cse6 .cse0 (and .cse8 .cse14 .cse10 .cse12 .cse13 .cse15) .cse7 (and .cse8 .cse14 .cse10 .cse11 .cse12 .cse13) .cse16 .cse3) (or .cse6 .cse0 .cse16 .cse15 .cse4 .cse3) (or (not (<= |old(~waterLevel~0)| 2)) (and .cse14 .cse15) .cse0 (and (= ~waterLevel~0 2) .cse14 (<= 1 ~pumpRunning~0)) (not (= |old(~pumpRunning~0)| 0)))))) [2021-12-17 15:10:12,463 INFO L858 garLoopResultBuilder]: For program point L438(lines 438 444) no Hoare annotation was computed. [2021-12-17 15:10:12,464 INFO L854 garLoopResultBuilder]: At program point L566(lines 559 569) the Hoare annotation is: (let ((.cse14 (= 0 ~methaneLevelCritical~0)) (.cse15 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse16 (<= ~waterLevel~0 1)) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse11 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|)) (.cse17 (= ~methaneLevelCritical~0 0))) (let ((.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse5 (not .cse17)) (.cse6 (and .cse15 .cse8 .cse16 .cse17 .cse9 .cse10 .cse11)) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse12 (and .cse8 (= ~waterLevel~0 |old(~waterLevel~0)|) .cse9 .cse10 .cse11)) (.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse13 (and .cse15 .cse8 .cse16 (<= 1 ~pumpRunning~0) .cse9 (not .cse14) .cse10 .cse11 (= ~systemActive~0 1))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or (= ~waterLevel~0 1) .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse0 .cse5 .cse6 .cse2) (or .cse7 .cse0 (not (= |old(~pumpRunning~0)| 0))) (or .cse0 (and .cse8 .cse9 .cse10 .cse11) .cse1 .cse2) (or .cse12 .cse4 .cse0 .cse5 (not (<= |old(~waterLevel~0)| 1)) .cse6 .cse2) (or .cse7 .cse12 .cse4 .cse0 .cse13 .cse14 .cse2) (or .cse3 .cse4 .cse0 .cse13 .cse14 .cse2)))) [2021-12-17 15:10:12,464 INFO L858 garLoopResultBuilder]: For program point L789(lines 789 806) no Hoare annotation was computed. [2021-12-17 15:10:12,464 INFO L858 garLoopResultBuilder]: For program point L438-2(lines 434 456) no Hoare annotation was computed. [2021-12-17 15:10:12,464 INFO L854 garLoopResultBuilder]: At program point L789-1(lines 781 809) the Hoare annotation is: (let ((.cse25 (= ~waterLevel~0 1)) (.cse4 (= 0 ~methaneLevelCritical~0)) (.cse28 (= 1 ~systemActive~0)) (.cse10 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse13 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse16 (< |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2)) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse29 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse23 (<= ~waterLevel~0 1)) (.cse30 (= ~methaneLevelCritical~0 0)) (.cse11 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~5#1|)) (.cse14 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse15 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|)) (.cse24 (= ~pumpRunning~0 0)) (.cse26 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse27 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| ~waterLevel~0))) (let ((.cse0 (not (= |old(~waterLevel~0)| 1))) (.cse17 (and .cse29 .cse9 .cse23 .cse30 .cse11 .cse14 .cse15 .cse24 .cse26 .cse27)) (.cse18 (not .cse30)) (.cse20 (and .cse29 .cse9 .cse23 .cse30 .cse11 .cse12 .cse14 .cse15 .cse26 .cse27)) (.cse8 (and .cse9 .cse11 .cse10 .cse13 .cse14 .cse15 .cse16 .cse24)) (.cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse19 (not (<= |old(~waterLevel~0)| 1))) (.cse3 (and .cse29 .cse9 .cse23 .cse11 (not .cse4) .cse14 .cse15 .cse24 .cse28 .cse26 .cse27)) (.cse2 (not .cse28)) (.cse6 (and .cse9 .cse25 .cse11 .cse14 .cse15 .cse24 .cse26 .cse27)) (.cse7 (not (= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse2 .cse6 .cse7 .cse5 .cse4) (or .cse8 .cse1 .cse2 (and .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16) .cse17 .cse18 .cse19 .cse20 .cse5) (or .cse0 .cse1 .cse2 .cse17 .cse18 .cse20 .cse5) (let ((.cse21 (= |timeShift_getWaterLevel_#res#1| 2)) (.cse22 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2))) (or (not (<= |old(~waterLevel~0)| 2)) (and .cse21 (= ~waterLevel~0 2) .cse10 .cse12 .cse22) .cse2 (not (= |old(~pumpRunning~0)| 0)) (and .cse21 .cse10 (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse22) (and .cse23 .cse10 .cse13 .cse16 .cse24))) (or .cse8 .cse1 .cse2 .cse19 .cse3 .cse4 .cse5) (or (and .cse9 .cse25 .cse11 .cse12 .cse14 .cse15 .cse26 .cse27) .cse2 .cse6 .cse7 .cse5)))) [2021-12-17 15:10:12,465 INFO L854 garLoopResultBuilder]: At program point L913(lines 908 915) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (not (= |old(~pumpRunning~0)| 0))) (or .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 .cse2) (or .cse1 (not (= |old(~waterLevel~0)| 2)) .cse2))) [2021-12-17 15:10:12,465 INFO L854 garLoopResultBuilder]: At program point L992(lines 987 995) the Hoare annotation is: (let ((.cse9 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse12 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse4 (= 0 ~methaneLevelCritical~0)) (.cse27 (= 1 ~systemActive~0)) (.cse24 (= ~waterLevel~0 1)) (.cse10 (= ~pumpRunning~0 0)) (.cse26 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse14 (<= 1 ~switchedOnBeforeTS~0)) (.cse11 (<= ~waterLevel~0 1)) (.cse28 (= ~methaneLevelCritical~0 0)) (.cse15 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~5#1|)) (.cse16 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse17 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse18 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|)) (.cse25 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0))) (let ((.cse13 (and .cse26 .cse14 .cse11 .cse28 .cse15 .cse16 .cse17 .cse18 .cse25)) (.cse0 (not (= |old(~waterLevel~0)| 1))) (.cse19 (and .cse26 .cse14 .cse11 .cse28 .cse15 .cse17 .cse18 .cse10 .cse25)) (.cse21 (not .cse28)) (.cse22 (and .cse14 .cse24 .cse15 .cse17 .cse18 .cse10 .cse25)) (.cse23 (not (= |old(~waterLevel~0)| 2))) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not .cse27)) (.cse3 (and .cse26 .cse14 .cse11 .cse15 (not .cse4) .cse17 .cse18 .cse10 .cse27 .cse25)) (.cse20 (and .cse14 .cse9 .cse15 .cse12 .cse17 .cse18 .cse10)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (let ((.cse7 (= |timeShift_getWaterLevel_#res#1| 2)) (.cse8 (= ~waterLevel~0 2))) (or .cse6 .cse2 (and .cse7 .cse8 .cse9 .cse10) (and .cse7 .cse8 .cse9 (<= 1 ~pumpRunning~0)) (not (= |old(~pumpRunning~0)| 0)) (and .cse11 .cse9 .cse12 .cse10))) (or .cse13 (and .cse14 .cse9 .cse15 .cse16 .cse12 .cse17 .cse18) .cse1 .cse2 .cse19 .cse20 .cse21 (not (<= |old(~waterLevel~0)| 1)) .cse5) (or .cse13 .cse0 .cse1 .cse2 .cse19 .cse21 .cse5) (or .cse22 .cse2 .cse23 .cse5 .cse4) (or .cse22 .cse2 (and .cse14 .cse24 .cse15 .cse16 .cse17 .cse18 .cse25) .cse23 .cse5) (or .cse6 .cse1 .cse2 .cse3 .cse20 .cse4 .cse5)))) [2021-12-17 15:10:12,465 INFO L858 garLoopResultBuilder]: For program point L794(lines 794 800) no Hoare annotation was computed. [2021-12-17 15:10:12,465 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 431 457) the Hoare annotation is: (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse0 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or (not (<= |old(~waterLevel~0)| 2)) (and .cse0 .cse1 (= ~pumpRunning~0 0)) .cse2 (not (= |old(~pumpRunning~0)| 0))) (or (and .cse0 .cse1 .cse3) .cse2 (not (= |old(~waterLevel~0)| 2)) .cse4) (or (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse2 (and .cse0 .cse3 .cse1) (not (<= |old(~waterLevel~0)| 1)) .cse4))) [2021-12-17 15:10:12,465 INFO L858 garLoopResultBuilder]: For program point L526(lines 526 534) no Hoare annotation was computed. [2021-12-17 15:10:12,465 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 431 457) no Hoare annotation was computed. [2021-12-17 15:10:12,466 INFO L854 garLoopResultBuilder]: At program point L778(lines 771 780) the Hoare annotation is: (let ((.cse3 (= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (<= 1 ~switchedOnBeforeTS~0) .cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse0 (not (<= |old(~waterLevel~0)| 1)) .cse1 .cse2) (or (not (<= |old(~waterLevel~0)| 2)) (and .cse3 (= ~pumpRunning~0 0)) .cse0 (not (= |old(~pumpRunning~0)| 0))) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 2)) .cse2)))) [2021-12-17 15:10:12,466 INFO L858 garLoopResultBuilder]: For program point L522(lines 522 539) no Hoare annotation was computed. [2021-12-17 15:10:12,466 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 912) no Hoare annotation was computed. [2021-12-17 15:10:12,466 INFO L858 garLoopResultBuilder]: For program point L894(lines 894 901) no Hoare annotation was computed. [2021-12-17 15:10:12,466 INFO L858 garLoopResultBuilder]: For program point L894-2(lines 894 901) no Hoare annotation was computed. [2021-12-17 15:10:12,466 INFO L858 garLoopResultBuilder]: For program point L725(lines 725 731) no Hoare annotation was computed. [2021-12-17 15:10:12,466 INFO L858 garLoopResultBuilder]: For program point L725-1(lines 725 731) no Hoare annotation was computed. [2021-12-17 15:10:12,467 INFO L861 garLoopResultBuilder]: At program point L754(lines 695 758) the Hoare annotation is: true [2021-12-17 15:10:12,467 INFO L854 garLoopResultBuilder]: At program point L717(line 717) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse1 (= ~waterLevel~0 2)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 1)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse2 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse3) (and .cse0 .cse1 .cse5 .cse2) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse4 (= ~methaneLevelCritical~0 0) .cse5 .cse2))) [2021-12-17 15:10:12,467 INFO L861 garLoopResultBuilder]: At program point L903(lines 884 906) the Hoare annotation is: true [2021-12-17 15:10:12,467 INFO L854 garLoopResultBuilder]: At program point L870(lines 866 872) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:10:12,467 INFO L854 garLoopResultBuilder]: At program point L672(lines 668 674) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:10:12,467 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-17 15:10:12,467 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-17 15:10:12,468 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-17 15:10:12,468 INFO L854 garLoopResultBuilder]: At program point L751(lines 704 752) the Hoare annotation is: false [2021-12-17 15:10:12,468 INFO L858 garLoopResultBuilder]: For program point L706(lines 705 750) no Hoare annotation was computed. [2021-12-17 15:10:12,468 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-17 15:10:12,468 INFO L854 garLoopResultBuilder]: At program point L768(lines 763 770) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:10:12,468 INFO L858 garLoopResultBuilder]: For program point L735(lines 735 746) no Hoare annotation was computed. [2021-12-17 15:10:12,468 INFO L854 garLoopResultBuilder]: At program point L727(line 727) the Hoare annotation is: (let ((.cse1 (= ~systemActive~0 1)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= 1 ~pumpRunning~0))) (or (and .cse0 (<= ~waterLevel~0 2) .cse1 (= ~pumpRunning~0 0)) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) (<= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) .cse2 .cse1) (and .cse0 (= ~waterLevel~0 2) .cse2 (= 1 ~systemActive~0)))) [2021-12-17 15:10:12,469 INFO L854 garLoopResultBuilder]: At program point L748(lines 705 750) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse1 (= ~waterLevel~0 2)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 1)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse2 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse3) (and .cse0 .cse1 .cse5 .cse2) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse4 (= ~methaneLevelCritical~0 0) .cse5 .cse2))) [2021-12-17 15:10:12,469 INFO L858 garLoopResultBuilder]: For program point L715(lines 715 721) no Hoare annotation was computed. [2021-12-17 15:10:12,469 INFO L858 garLoopResultBuilder]: For program point L715-1(lines 715 721) no Hoare annotation was computed. [2021-12-17 15:10:12,469 INFO L858 garLoopResultBuilder]: For program point L707(lines 707 711) no Hoare annotation was computed. [2021-12-17 15:10:12,469 INFO L861 garLoopResultBuilder]: At program point L881(lines 873 883) the Hoare annotation is: true [2021-12-17 15:10:12,469 INFO L854 garLoopResultBuilder]: At program point L687(lines 682 690) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:10:12,469 INFO L854 garLoopResultBuilder]: At program point L679(lines 675 681) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:10:12,469 INFO L858 garLoopResultBuilder]: For program point L741(lines 741 745) no Hoare annotation was computed. [2021-12-17 15:10:12,470 INFO L854 garLoopResultBuilder]: At program point L741-2(lines 735 746) the Hoare annotation is: (let ((.cse2 (= ~systemActive~0 1)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (<= 1 ~pumpRunning~0))) (or (and .cse0 (<= 1 ~switchedOnBeforeTS~0) (<= ~waterLevel~0 1) .cse1 .cse2) (and .cse0 (<= ~waterLevel~0 2) .cse2 (= ~pumpRunning~0 0)) (and .cse0 (= ~waterLevel~0 2) .cse1 (= 1 ~systemActive~0)))) [2021-12-17 15:10:12,470 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 466 490) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)))) [2021-12-17 15:10:12,470 INFO L854 garLoopResultBuilder]: At program point L630(lines 615 633) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (let ((.cse1 (= ~pumpRunning~0 0))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0)) (and (= ~waterLevel~0 2) .cse1) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (not (= 0 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~6#1|)) .cse1))))) [2021-12-17 15:10:12,470 INFO L858 garLoopResultBuilder]: For program point L624(lines 624 628) no Hoare annotation was computed. [2021-12-17 15:10:12,470 INFO L858 garLoopResultBuilder]: For program point L624-2(lines 624 628) no Hoare annotation was computed. [2021-12-17 15:10:12,470 INFO L858 garLoopResultBuilder]: For program point L1000(lines 1000 1006) no Hoare annotation was computed. [2021-12-17 15:10:12,470 INFO L854 garLoopResultBuilder]: At program point L548(lines 543 550) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (and (= ~waterLevel~0 2) (<= 1 ~pumpRunning~0)) (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:10:12,471 INFO L854 garLoopResultBuilder]: At program point L480(line 480) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0)) (and (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|))))) [2021-12-17 15:10:12,471 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 466 490) no Hoare annotation was computed. [2021-12-17 15:10:12,471 INFO L858 garLoopResultBuilder]: For program point L474(lines 474 482) no Hoare annotation was computed. [2021-12-17 15:10:12,471 INFO L858 garLoopResultBuilder]: For program point L470(lines 470 487) no Hoare annotation was computed. [2021-12-17 15:10:12,471 INFO L854 garLoopResultBuilder]: At program point L1005(lines 996 1009) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 1))) (.cse3 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse1 (not (= ~waterLevel~0 2)) .cse2 .cse3) (or .cse0 (and (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) .cse3) .cse1 .cse2))) [2021-12-17 15:10:12,471 INFO L854 garLoopResultBuilder]: At program point L485(line 485) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:10:12,471 INFO L858 garLoopResultBuilder]: For program point L485-1(lines 466 490) no Hoare annotation was computed. [2021-12-17 15:10:12,472 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 931 942) no Hoare annotation was computed. [2021-12-17 15:10:12,472 INFO L858 garLoopResultBuilder]: For program point L935-1(lines 931 942) no Hoare annotation was computed. [2021-12-17 15:10:12,472 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 931 942) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse5 (not (<= |old(~waterLevel~0)| 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 ~pumpRunning~0))) (.cse2 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse3 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 .cse4 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse5) (or .cse0 .cse1 .cse2 .cse5) (or .cse1 .cse4 .cse2 .cse3))) [2021-12-17 15:10:12,472 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 492 516) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)))) [2021-12-17 15:10:12,472 INFO L854 garLoopResultBuilder]: At program point L506(line 506) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:10:12,472 INFO L854 garLoopResultBuilder]: At program point L502(line 502) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:10:12,472 INFO L858 garLoopResultBuilder]: For program point L500(lines 500 508) no Hoare annotation was computed. [2021-12-17 15:10:12,473 INFO L858 garLoopResultBuilder]: For program point L496(lines 496 513) no Hoare annotation was computed. [2021-12-17 15:10:12,473 INFO L854 garLoopResultBuilder]: At program point L649(lines 634 652) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:10:12,473 INFO L858 garLoopResultBuilder]: For program point L643(lines 643 647) no Hoare annotation was computed. [2021-12-17 15:10:12,473 INFO L858 garLoopResultBuilder]: For program point L643-2(lines 643 647) no Hoare annotation was computed. [2021-12-17 15:10:12,473 INFO L854 garLoopResultBuilder]: At program point L511(line 511) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))))) [2021-12-17 15:10:12,473 INFO L858 garLoopResultBuilder]: For program point L511-1(lines 492 516) no Hoare annotation was computed. [2021-12-17 15:10:12,473 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 492 516) no Hoare annotation was computed. [2021-12-17 15:10:12,474 INFO L854 garLoopResultBuilder]: At program point L1015(lines 1010 1018) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:10:12,474 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 570 578) no Hoare annotation was computed. [2021-12-17 15:10:12,474 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 570 578) the Hoare annotation is: true [2021-12-17 15:10:12,474 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 570 578) no Hoare annotation was computed. [2021-12-17 15:10:12,476 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:10:12,477 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-17 15:10:12,519 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.12 03:10:12 BoogieIcfgContainer [2021-12-17 15:10:12,519 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-17 15:10:12,520 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-17 15:10:12,520 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-17 15:10:12,520 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-17 15:10:12,521 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:09:53" (3/4) ... [2021-12-17 15:10:12,523 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-17 15:10:12,528 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-17 15:10:12,528 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-17 15:10:12,528 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-17 15:10:12,529 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-17 15:10:12,529 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-17 15:10:12,529 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:10:12,529 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-17 15:10:12,529 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2021-12-17 15:10:12,529 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-12-17 15:10:12,536 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 54 nodes and edges [2021-12-17 15:10:12,537 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-17 15:10:12,537 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-17 15:10:12,538 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-17 15:10:12,538 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-17 15:10:12,539 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:10:12,539 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:10:12,558 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || !(\old(waterLevel) <= 1)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) && (((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((!(1 == systemActive) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:12,558 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) && (((!(1 == systemActive) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:10:12,559 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && 1 == systemActive) && \result <= waterLevel) && tmp <= waterLevel)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) && ((((!(1 == systemActive) || (((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel) && tmp <= waterLevel)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) || 0 == methaneLevelCritical)) && (((((((((((((((1 <= switchedOnBeforeTS && methaneLevelCritical == tmp) && waterLevel == \old(waterLevel)) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && tmp < 2) && pumpRunning == 0) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && tmp < 2)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel) && tmp <= waterLevel)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && \result <= waterLevel) && tmp <= waterLevel)) || !(1 <= \old(pumpRunning)))) && ((((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel) && tmp <= waterLevel)) || !(methaneLevelCritical == 0)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && \result <= waterLevel) && tmp <= waterLevel)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || ((((\result == 2 && waterLevel == 2) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && tmp == 2)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || ((((\result == 2 && waterLevel == \old(waterLevel)) && 1 <= pumpRunning) && 2 <= waterLevel) && tmp == 2)) || ((((waterLevel <= 1 && waterLevel == \old(waterLevel)) && \result < 2) && tmp < 2) && pumpRunning == 0))) && (((((((((((((1 <= switchedOnBeforeTS && methaneLevelCritical == tmp) && waterLevel == \old(waterLevel)) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && tmp < 2) && pumpRunning == 0) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(\old(waterLevel) <= 1)) || ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && 1 == systemActive) && \result <= waterLevel) && tmp <= waterLevel)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && \result <= waterLevel) && tmp <= waterLevel) || !(1 == systemActive)) || (((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel) && tmp <= waterLevel)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:12,559 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 == systemActive) || (((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) || 0 == methaneLevelCritical) && (((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(pumpRunning)))) && ((((!(1 == systemActive) || (((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || (((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && (((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || (((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning)))) && (((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || !(\old(waterLevel) <= 1)) || pumpRunning == 0) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || ((waterLevel == 2 && waterLevel == \old(waterLevel)) && 1 <= pumpRunning)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:10:12,559 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) && (((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= \old(pumpRunning)))) && ((!(1 == systemActive) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:12,560 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && 1 == systemActive) && \result <= waterLevel)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || (((\result == 2 && waterLevel == 2) && waterLevel == \old(waterLevel)) && pumpRunning == 0)) || (((\result == 2 && waterLevel == 2) && waterLevel == \old(waterLevel)) && 1 <= pumpRunning)) || !(\old(pumpRunning) == 0)) || (((waterLevel <= 1 && waterLevel == \old(waterLevel)) && \result < 2) && pumpRunning == 0))) && ((((((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && \result <= waterLevel) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel)) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning)))) && ((((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && \result <= waterLevel) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) || 0 == methaneLevelCritical)) && ((((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel) || !(1 == systemActive)) || ((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && \result <= waterLevel)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && ((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && 1 == systemActive) && \result <= waterLevel)) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:12,560 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((1 <= switchedOnBeforeTS && waterLevel <= 1) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) && (((!(1 == systemActive) || (((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && ((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((1 <= switchedOnBeforeTS && waterLevel <= 1) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && systemActive == 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && systemActive == 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:12,560 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((waterLevel == 1 || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(pumpRunning)))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((!(1 == systemActive) || (((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && ((((((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || ((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(pumpRunning)))) && ((((((!(\old(waterLevel) <= 2) || ((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && systemActive == 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && systemActive == 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:12,560 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((!(1 == systemActive) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:10:12,561 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((!(1 == systemActive) || !(waterLevel == 2)) || !(\old(pumpRunning) == 0)) || pumpRunning == 0)) && (((!(waterLevel <= 1) || (!(\result == 0) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:10:12,561 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((!(1 == systemActive) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:10:12,561 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((((!(1 == systemActive) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || (waterLevel == 2 && pumpRunning == 0)) || (((tmp___0 == 0 && \result == 0) && !(0 == tmp)) && pumpRunning == 0)) [2021-12-17 15:10:12,561 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((!(1 == systemActive) || (waterLevel == 2 && 1 <= pumpRunning)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:10:12,580 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-17 15:10:12,580 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-17 15:10:12,581 INFO L158 Benchmark]: Toolchain (without parser) took 20026.16ms. Allocated memory was 98.6MB in the beginning and 174.1MB in the end (delta: 75.5MB). Free memory was 65.4MB in the beginning and 129.1MB in the end (delta: -63.6MB). Peak memory consumption was 11.3MB. Max. memory is 16.1GB. [2021-12-17 15:10:12,581 INFO L158 Benchmark]: CDTParser took 0.30ms. Allocated memory is still 81.8MB. Free memory was 54.5MB in the beginning and 54.5MB in the end (delta: 26.8kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-17 15:10:12,581 INFO L158 Benchmark]: CACSL2BoogieTranslator took 408.44ms. Allocated memory is still 98.6MB. Free memory was 65.2MB in the beginning and 68.1MB in the end (delta: -2.9MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-12-17 15:10:12,582 INFO L158 Benchmark]: Boogie Procedure Inliner took 49.91ms. Allocated memory is still 98.6MB. Free memory was 68.1MB in the beginning and 64.4MB in the end (delta: 3.7MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2021-12-17 15:10:12,583 INFO L158 Benchmark]: Boogie Preprocessor took 47.31ms. Allocated memory is still 98.6MB. Free memory was 64.4MB in the beginning and 62.8MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-17 15:10:12,584 INFO L158 Benchmark]: RCFGBuilder took 435.51ms. Allocated memory is still 98.6MB. Free memory was 62.8MB in the beginning and 45.6MB in the end (delta: 17.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-17 15:10:12,584 INFO L158 Benchmark]: TraceAbstraction took 19018.77ms. Allocated memory was 98.6MB in the beginning and 174.1MB in the end (delta: 75.5MB). Free memory was 45.1MB in the beginning and 136.4MB in the end (delta: -91.3MB). Peak memory consumption was 79.2MB. Max. memory is 16.1GB. [2021-12-17 15:10:12,584 INFO L158 Benchmark]: Witness Printer took 60.69ms. Allocated memory is still 174.1MB. Free memory was 136.4MB in the beginning and 129.1MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-17 15:10:12,586 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.30ms. Allocated memory is still 81.8MB. Free memory was 54.5MB in the beginning and 54.5MB in the end (delta: 26.8kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 408.44ms. Allocated memory is still 98.6MB. Free memory was 65.2MB in the beginning and 68.1MB in the end (delta: -2.9MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 49.91ms. Allocated memory is still 98.6MB. Free memory was 68.1MB in the beginning and 64.4MB in the end (delta: 3.7MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 47.31ms. Allocated memory is still 98.6MB. Free memory was 64.4MB in the beginning and 62.8MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 435.51ms. Allocated memory is still 98.6MB. Free memory was 62.8MB in the beginning and 45.6MB in the end (delta: 17.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 19018.77ms. Allocated memory was 98.6MB in the beginning and 174.1MB in the end (delta: 75.5MB). Free memory was 45.1MB in the beginning and 136.4MB in the end (delta: -91.3MB). Peak memory consumption was 79.2MB. Max. memory is 16.1GB. * Witness Printer took 60.69ms. Allocated memory is still 174.1MB. Free memory was 136.4MB in the beginning and 129.1MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 912]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 105 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 18.9s, OverallIterations: 12, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 5.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 9.5s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3194 SdHoareTripleChecker+Valid, 3.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3147 mSDsluCounter, 5907 SdHoareTripleChecker+Invalid, 2.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4174 mSDsCounter, 1177 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4877 IncrementalHoareTripleChecker+Invalid, 6054 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1177 mSolverCounterUnsat, 1733 mSDtfsCounter, 4877 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 984 GetRequests, 793 SyntacticMatches, 5 SemanticMatches, 186 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1280 ImplicationChecksByTransitivity, 1.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1138occurred in iteration=11, InterpolantAutomatonStates: 162, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 12 MinimizatonAttempts, 265 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 49 LocationsWithAnnotation, 2739 PreInvPairs, 3198 NumberOfFragments, 4104 HoareAnnotationTreeSize, 2739 FomulaSimplifications, 9265 FormulaSimplificationTreeSizeReduction, 0.7s HoareSimplificationTime, 49 FomulaSimplificationsInter, 49740 FormulaSimplificationTreeSizeReductionInter, 8.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.8s InterpolantComputationTime, 1240 NumberOfCodeBlocks, 1240 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 1524 ConstructedInterpolants, 0 QuantifiedInterpolants, 2935 SizeOfPredicates, 6 NumberOfNonLiveVariables, 1228 ConjunctsInSsa, 21 ConjunctsInUnsatCore, 16 InterpolantComputations, 10 PerfectInterpolantSequences, 847/926 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 884]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 873]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 996]: Loop Invariant Derived loop invariant: (((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((!(1 == systemActive) || !(waterLevel == 2)) || !(\old(pumpRunning) == 0)) || pumpRunning == 0)) && (((!(waterLevel <= 1) || (!(\result == 0) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: ((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((((!(1 == systemActive) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || (waterLevel == 2 && pumpRunning == 0)) || (((tmp___0 == 0 && \result == 0) && !(0 == tmp)) && pumpRunning == 0)) - InvariantResult [Line: 695]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 771]: Loop Invariant Derived loop invariant: (((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || !(\old(waterLevel) <= 1)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) && (((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((!(1 == systemActive) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 705]: Loop Invariant Derived loop invariant: (((((splverifierCounter == 0 && waterLevel == 2) && systemActive == 1) && pumpRunning == 0) || (((splverifierCounter == 0 && waterLevel <= 1) && systemActive == 1) && pumpRunning == 0)) || (((splverifierCounter == 0 && waterLevel == 2) && 1 <= pumpRunning) && systemActive == 1)) || (((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && 1 <= pumpRunning) && systemActive == 1) - InvariantResult [Line: 559]: Loop Invariant Derived loop invariant: ((((((((waterLevel == 1 || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(pumpRunning)))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((!(1 == systemActive) || (((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && ((((((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || ((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(pumpRunning)))) && ((((((!(\old(waterLevel) <= 2) || ((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && systemActive == 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && systemActive == 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 763]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 668]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 919]: Loop Invariant Derived loop invariant: ((((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) && (((!(1 == systemActive) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning))) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 987]: Loop Invariant Derived loop invariant: ((((((((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && 1 == systemActive) && \result <= waterLevel)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || (((\result == 2 && waterLevel == 2) && waterLevel == \old(waterLevel)) && pumpRunning == 0)) || (((\result == 2 && waterLevel == 2) && waterLevel == \old(waterLevel)) && 1 <= pumpRunning)) || !(\old(pumpRunning) == 0)) || (((waterLevel <= 1 && waterLevel == \old(waterLevel)) && \result < 2) && pumpRunning == 0))) && ((((((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && \result <= waterLevel) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel)) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning)))) && ((((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && \result <= waterLevel) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) || 0 == methaneLevelCritical)) && ((((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel) || !(1 == systemActive)) || ((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && \result <= waterLevel)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && ((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && 1 == systemActive) && \result <= waterLevel)) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 866]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 955]: Loop Invariant Derived loop invariant: (((((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((1 <= switchedOnBeforeTS && waterLevel <= 1) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) && (((!(1 == systemActive) || (((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && ((((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((1 <= switchedOnBeforeTS && waterLevel <= 1) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && systemActive == 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && systemActive == 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 518]: Loop Invariant Derived loop invariant: ((((((((!(1 == systemActive) || (((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) || 0 == methaneLevelCritical) && (((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(pumpRunning)))) && ((((!(1 == systemActive) || (((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || (((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && (((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0)) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || (((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning)))) && (((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || !(\old(waterLevel) <= 1)) || pumpRunning == 0) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || ((waterLevel == 2 && waterLevel == \old(waterLevel)) && 1 <= pumpRunning)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 634]: Loop Invariant Derived loop invariant: (((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((!(1 == systemActive) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 682]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 908]: Loop Invariant Derived loop invariant: (((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) && (((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= \old(pumpRunning)))) && ((!(1 == systemActive) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 704]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 543]: Loop Invariant Derived loop invariant: ((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((!(1 == systemActive) || (waterLevel == 2 && 1 <= pumpRunning)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 781]: Loop Invariant Derived loop invariant: ((((((((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && 1 == systemActive) && \result <= waterLevel) && tmp <= waterLevel)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) && ((((!(1 == systemActive) || (((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel) && tmp <= waterLevel)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) || 0 == methaneLevelCritical)) && (((((((((((((((1 <= switchedOnBeforeTS && methaneLevelCritical == tmp) && waterLevel == \old(waterLevel)) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && tmp < 2) && pumpRunning == 0) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && tmp < 2)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel) && tmp <= waterLevel)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && \result <= waterLevel) && tmp <= waterLevel)) || !(1 <= \old(pumpRunning)))) && ((((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel) && tmp <= waterLevel)) || !(methaneLevelCritical == 0)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && \result <= waterLevel) && tmp <= waterLevel)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || ((((\result == 2 && waterLevel == 2) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && tmp == 2)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || ((((\result == 2 && waterLevel == \old(waterLevel)) && 1 <= pumpRunning) && 2 <= waterLevel) && tmp == 2)) || ((((waterLevel <= 1 && waterLevel == \old(waterLevel)) && \result < 2) && tmp < 2) && pumpRunning == 0))) && (((((((((((((1 <= switchedOnBeforeTS && methaneLevelCritical == tmp) && waterLevel == \old(waterLevel)) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && tmp < 2) && pumpRunning == 0) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(\old(waterLevel) <= 1)) || ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == tmp) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && 1 == systemActive) && \result <= waterLevel) && tmp <= waterLevel)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && \result <= waterLevel) && tmp <= waterLevel) || !(1 == systemActive)) || (((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == tmp) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && pumpRunning == 0) && \result <= waterLevel) && tmp <= waterLevel)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 1010]: Loop Invariant Derived loop invariant: (((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((!(1 == systemActive) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 822]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 675]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 RESULT: Ultimate proved your program to be correct! [2021-12-17 15:10:12,647 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE