./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 9e826f48819dedbf1a290c3ced69eb835c065ed69febc6d0054f416e73afcb1c --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-17 15:09:53,741 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-17 15:09:53,743 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-17 15:09:53,792 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-17 15:09:53,793 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-17 15:09:53,796 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-17 15:09:53,798 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-17 15:09:53,803 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-17 15:09:53,804 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-17 15:09:53,808 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-17 15:09:53,818 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-17 15:09:53,819 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-17 15:09:53,819 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-17 15:09:53,820 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-17 15:09:53,820 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-17 15:09:53,821 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-17 15:09:53,822 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-17 15:09:53,822 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-17 15:09:53,823 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-17 15:09:53,824 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-17 15:09:53,825 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-17 15:09:53,830 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-17 15:09:53,843 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-17 15:09:53,844 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-17 15:09:53,852 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-17 15:09:53,852 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-17 15:09:53,852 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-17 15:09:53,853 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-17 15:09:53,853 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-17 15:09:53,854 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-17 15:09:53,855 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-17 15:09:53,855 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-17 15:09:53,856 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-17 15:09:53,857 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-17 15:09:53,858 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-17 15:09:53,858 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-17 15:09:53,858 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-17 15:09:53,859 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-17 15:09:53,859 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-17 15:09:53,859 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-17 15:09:53,860 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-17 15:09:53,861 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-17 15:09:53,903 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-17 15:09:53,904 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-17 15:09:53,904 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-17 15:09:53,904 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-17 15:09:53,905 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-17 15:09:53,905 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-17 15:09:53,906 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-17 15:09:53,906 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-17 15:09:53,906 INFO L138 SettingsManager]: * Use SBE=true [2021-12-17 15:09:53,906 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-17 15:09:53,907 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-17 15:09:53,907 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-17 15:09:53,907 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-17 15:09:53,907 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-17 15:09:53,907 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-17 15:09:53,908 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-17 15:09:53,908 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-17 15:09:53,908 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-17 15:09:53,908 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-17 15:09:53,908 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-17 15:09:53,908 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-17 15:09:53,909 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-17 15:09:53,909 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-17 15:09:53,909 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-17 15:09:53,909 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:09:53,909 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-17 15:09:53,909 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-17 15:09:53,910 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-17 15:09:53,910 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-17 15:09:53,911 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-17 15:09:53,911 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-17 15:09:53,911 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-17 15:09:53,911 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-17 15:09:53,911 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-17 15:09:53,911 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9e826f48819dedbf1a290c3ced69eb835c065ed69febc6d0054f416e73afcb1c [2021-12-17 15:09:54,262 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-17 15:09:54,285 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-17 15:09:54,287 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-17 15:09:54,288 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-17 15:09:54,288 INFO L275 PluginConnector]: CDTParser initialized [2021-12-17 15:09:54,289 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c [2021-12-17 15:09:54,355 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a3a0b3356/fff1ea5475a44c57b73a0e161d3229de/FLAGa722a1aad [2021-12-17 15:09:54,785 INFO L306 CDTParser]: Found 1 translation units. [2021-12-17 15:09:54,793 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c [2021-12-17 15:09:54,804 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a3a0b3356/fff1ea5475a44c57b73a0e161d3229de/FLAGa722a1aad [2021-12-17 15:09:54,816 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a3a0b3356/fff1ea5475a44c57b73a0e161d3229de [2021-12-17 15:09:54,818 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-17 15:09:54,819 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-17 15:09:54,821 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-17 15:09:54,821 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-17 15:09:54,824 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-17 15:09:54,824 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:09:54" (1/1) ... [2021-12-17 15:09:54,825 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@37e8ef7b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:54, skipping insertion in model container [2021-12-17 15:09:54,825 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:09:54" (1/1) ... [2021-12-17 15:09:54,830 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-17 15:09:54,865 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-17 15:09:55,065 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c[13125,13138] [2021-12-17 15:09:55,109 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:09:55,119 INFO L203 MainTranslator]: Completed pre-run [2021-12-17 15:09:55,179 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product55.cil.c[13125,13138] [2021-12-17 15:09:55,201 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:09:55,214 INFO L208 MainTranslator]: Completed translation [2021-12-17 15:09:55,215 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:55 WrapperNode [2021-12-17 15:09:55,215 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-17 15:09:55,216 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-17 15:09:55,216 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-17 15:09:55,216 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-17 15:09:55,221 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:55" (1/1) ... [2021-12-17 15:09:55,248 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:55" (1/1) ... [2021-12-17 15:09:55,280 INFO L137 Inliner]: procedures = 59, calls = 163, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 291 [2021-12-17 15:09:55,282 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-17 15:09:55,282 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-17 15:09:55,282 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-17 15:09:55,283 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-17 15:09:55,288 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:55" (1/1) ... [2021-12-17 15:09:55,289 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:55" (1/1) ... [2021-12-17 15:09:55,296 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:55" (1/1) ... [2021-12-17 15:09:55,297 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:55" (1/1) ... [2021-12-17 15:09:55,310 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:55" (1/1) ... [2021-12-17 15:09:55,314 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:55" (1/1) ... [2021-12-17 15:09:55,322 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:55" (1/1) ... [2021-12-17 15:09:55,324 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-17 15:09:55,325 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-17 15:09:55,325 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-17 15:09:55,325 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-17 15:09:55,330 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:55" (1/1) ... [2021-12-17 15:09:55,335 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:09:55,344 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:09:55,355 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-17 15:09:55,364 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-17 15:09:55,392 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-17 15:09:55,392 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-17 15:09:55,392 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-17 15:09:55,392 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-17 15:09:55,393 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-17 15:09:55,393 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-17 15:09:55,393 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-17 15:09:55,393 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:09:55,393 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:09:55,393 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-17 15:09:55,393 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-17 15:09:55,393 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2021-12-17 15:09:55,394 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2021-12-17 15:09:55,394 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-12-17 15:09:55,394 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-12-17 15:09:55,394 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-17 15:09:55,394 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-17 15:09:55,394 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-17 15:09:55,394 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-17 15:09:55,395 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-17 15:09:55,395 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-17 15:09:55,395 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-17 15:09:55,444 INFO L236 CfgBuilder]: Building ICFG [2021-12-17 15:09:55,446 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-17 15:09:55,703 INFO L277 CfgBuilder]: Performing block encoding [2021-12-17 15:09:55,708 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-17 15:09:55,708 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-17 15:09:55,709 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:09:55 BoogieIcfgContainer [2021-12-17 15:09:55,709 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-17 15:09:55,710 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-17 15:09:55,710 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-17 15:09:55,713 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-17 15:09:55,713 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.12 03:09:54" (1/3) ... [2021-12-17 15:09:55,713 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3a90db5d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:09:55, skipping insertion in model container [2021-12-17 15:09:55,713 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:09:55" (2/3) ... [2021-12-17 15:09:55,714 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3a90db5d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:09:55, skipping insertion in model container [2021-12-17 15:09:55,714 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:09:55" (3/3) ... [2021-12-17 15:09:55,715 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product55.cil.c [2021-12-17 15:09:55,718 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-17 15:09:55,718 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-17 15:09:55,747 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-17 15:09:55,751 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-17 15:09:55,752 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-17 15:09:55,763 INFO L276 IsEmpty]: Start isEmpty. Operand has 109 states, 81 states have (on average 1.3703703703703705) internal successors, (111), 92 states have internal predecessors, (111), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2021-12-17 15:09:55,768 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-12-17 15:09:55,768 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:55,769 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:55,769 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:55,772 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:55,772 INFO L85 PathProgramCache]: Analyzing trace with hash 158818465, now seen corresponding path program 1 times [2021-12-17 15:09:55,778 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:55,778 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1679974862] [2021-12-17 15:09:55,778 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:55,779 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:55,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,894 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-17 15:09:55,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-17 15:09:55,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:55,904 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:55,904 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:55,905 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1679974862] [2021-12-17 15:09:55,905 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1679974862] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:55,905 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:55,905 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-17 15:09:55,907 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1166425548] [2021-12-17 15:09:55,907 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:55,910 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-17 15:09:55,910 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:55,926 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-17 15:09:55,926 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:09:55,928 INFO L87 Difference]: Start difference. First operand has 109 states, 81 states have (on average 1.3703703703703705) internal successors, (111), 92 states have internal predecessors, (111), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:55,966 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:55,967 INFO L93 Difference]: Finished difference Result 209 states and 284 transitions. [2021-12-17 15:09:55,967 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-17 15:09:55,968 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-12-17 15:09:55,969 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:55,977 INFO L225 Difference]: With dead ends: 209 [2021-12-17 15:09:55,977 INFO L226 Difference]: Without dead ends: 100 [2021-12-17 15:09:55,981 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:09:55,984 INFO L933 BasicCegarLoop]: 139 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 139 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:55,985 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 139 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:55,996 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100 states. [2021-12-17 15:09:56,022 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100 to 100. [2021-12-17 15:09:56,023 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 100 states, 74 states have (on average 1.3108108108108107) internal successors, (97), 84 states have internal predecessors, (97), 17 states have call successors, (17), 9 states have call predecessors, (17), 8 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2021-12-17 15:09:56,024 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100 states to 100 states and 130 transitions. [2021-12-17 15:09:56,025 INFO L78 Accepts]: Start accepts. Automaton has 100 states and 130 transitions. Word has length 32 [2021-12-17 15:09:56,025 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:56,026 INFO L470 AbstractCegarLoop]: Abstraction has 100 states and 130 transitions. [2021-12-17 15:09:56,026 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:56,027 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 130 transitions. [2021-12-17 15:09:56,029 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-12-17 15:09:56,030 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:56,030 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:56,031 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-17 15:09:56,031 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:56,033 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:56,034 INFO L85 PathProgramCache]: Analyzing trace with hash -1314152562, now seen corresponding path program 1 times [2021-12-17 15:09:56,034 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:56,034 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [683903544] [2021-12-17 15:09:56,034 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:56,034 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:56,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-17 15:09:56,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,099 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-17 15:09:56,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,102 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:56,102 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:56,102 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [683903544] [2021-12-17 15:09:56,103 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [683903544] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:56,103 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:56,103 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-17 15:09:56,103 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1360262324] [2021-12-17 15:09:56,103 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:56,104 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-17 15:09:56,104 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:56,105 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-17 15:09:56,105 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:56,105 INFO L87 Difference]: Start difference. First operand 100 states and 130 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:56,116 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:56,116 INFO L93 Difference]: Finished difference Result 161 states and 209 transitions. [2021-12-17 15:09:56,117 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-17 15:09:56,117 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2021-12-17 15:09:56,117 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:56,118 INFO L225 Difference]: With dead ends: 161 [2021-12-17 15:09:56,118 INFO L226 Difference]: Without dead ends: 91 [2021-12-17 15:09:56,119 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:56,120 INFO L933 BasicCegarLoop]: 117 mSDtfsCounter, 16 mSDsluCounter, 96 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 213 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:56,120 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [20 Valid, 213 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:56,121 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2021-12-17 15:09:56,126 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 91. [2021-12-17 15:09:56,126 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91 states, 68 states have (on average 1.3235294117647058) internal successors, (90), 78 states have internal predecessors, (90), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2021-12-17 15:09:56,127 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 118 transitions. [2021-12-17 15:09:56,127 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 118 transitions. Word has length 33 [2021-12-17 15:09:56,127 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:56,127 INFO L470 AbstractCegarLoop]: Abstraction has 91 states and 118 transitions. [2021-12-17 15:09:56,128 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:56,128 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 118 transitions. [2021-12-17 15:09:56,129 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2021-12-17 15:09:56,129 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:56,129 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:56,129 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-17 15:09:56,129 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:56,130 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:56,130 INFO L85 PathProgramCache]: Analyzing trace with hash -1623741410, now seen corresponding path program 1 times [2021-12-17 15:09:56,130 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:56,130 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2129466097] [2021-12-17 15:09:56,130 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:56,131 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:56,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-17 15:09:56,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,176 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-12-17 15:09:56,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,179 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:56,179 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:56,179 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2129466097] [2021-12-17 15:09:56,180 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2129466097] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:56,180 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:56,180 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-17 15:09:56,180 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1766540190] [2021-12-17 15:09:56,180 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:56,181 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-17 15:09:56,181 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:56,181 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-17 15:09:56,181 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:56,181 INFO L87 Difference]: Start difference. First operand 91 states and 118 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-17 15:09:56,200 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:56,200 INFO L93 Difference]: Finished difference Result 256 states and 338 transitions. [2021-12-17 15:09:56,200 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-17 15:09:56,201 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2021-12-17 15:09:56,201 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:56,202 INFO L225 Difference]: With dead ends: 256 [2021-12-17 15:09:56,202 INFO L226 Difference]: Without dead ends: 173 [2021-12-17 15:09:56,203 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:09:56,204 INFO L933 BasicCegarLoop]: 145 mSDtfsCounter, 93 mSDsluCounter, 107 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 93 SdHoareTripleChecker+Valid, 252 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:56,204 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [93 Valid, 252 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:09:56,205 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 173 states. [2021-12-17 15:09:56,217 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 173 to 170. [2021-12-17 15:09:56,217 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 170 states, 125 states have (on average 1.344) internal successors, (168), 144 states have internal predecessors, (168), 28 states have call successors, (28), 16 states have call predecessors, (28), 16 states have return successors, (28), 17 states have call predecessors, (28), 28 states have call successors, (28) [2021-12-17 15:09:56,218 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 170 states to 170 states and 224 transitions. [2021-12-17 15:09:56,219 INFO L78 Accepts]: Start accepts. Automaton has 170 states and 224 transitions. Word has length 37 [2021-12-17 15:09:56,219 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:56,219 INFO L470 AbstractCegarLoop]: Abstraction has 170 states and 224 transitions. [2021-12-17 15:09:56,219 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-17 15:09:56,219 INFO L276 IsEmpty]: Start isEmpty. Operand 170 states and 224 transitions. [2021-12-17 15:09:56,221 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2021-12-17 15:09:56,221 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:56,221 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:56,221 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-17 15:09:56,221 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:56,222 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:56,222 INFO L85 PathProgramCache]: Analyzing trace with hash 1317125140, now seen corresponding path program 1 times [2021-12-17 15:09:56,222 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:56,222 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [905147792] [2021-12-17 15:09:56,222 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:56,223 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:56,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,271 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-17 15:09:56,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,275 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2021-12-17 15:09:56,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,283 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-17 15:09:56,283 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:56,283 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [905147792] [2021-12-17 15:09:56,283 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [905147792] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:56,283 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:56,284 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:09:56,284 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1115638532] [2021-12-17 15:09:56,284 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:56,284 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:09:56,284 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:56,285 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:09:56,285 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:09:56,285 INFO L87 Difference]: Start difference. First operand 170 states and 224 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:56,440 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:56,440 INFO L93 Difference]: Finished difference Result 442 states and 599 transitions. [2021-12-17 15:09:56,440 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-17 15:09:56,441 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2021-12-17 15:09:56,441 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:56,443 INFO L225 Difference]: With dead ends: 442 [2021-12-17 15:09:56,443 INFO L226 Difference]: Without dead ends: 280 [2021-12-17 15:09:56,444 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-12-17 15:09:56,450 INFO L933 BasicCegarLoop]: 132 mSDtfsCounter, 56 mSDsluCounter, 431 mSDsCounter, 0 mSdLazyCounter, 78 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 563 SdHoareTripleChecker+Invalid, 91 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 78 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:56,451 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [57 Valid, 563 Invalid, 91 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 78 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:09:56,452 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 280 states. [2021-12-17 15:09:56,469 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 280 to 267. [2021-12-17 15:09:56,469 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 267 states, 198 states have (on average 1.292929292929293) internal successors, (256), 215 states have internal predecessors, (256), 38 states have call successors, (38), 30 states have call predecessors, (38), 30 states have return successors, (50), 33 states have call predecessors, (50), 38 states have call successors, (50) [2021-12-17 15:09:56,471 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 267 states to 267 states and 344 transitions. [2021-12-17 15:09:56,471 INFO L78 Accepts]: Start accepts. Automaton has 267 states and 344 transitions. Word has length 41 [2021-12-17 15:09:56,471 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:56,471 INFO L470 AbstractCegarLoop]: Abstraction has 267 states and 344 transitions. [2021-12-17 15:09:56,471 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:09:56,472 INFO L276 IsEmpty]: Start isEmpty. Operand 267 states and 344 transitions. [2021-12-17 15:09:56,473 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-12-17 15:09:56,473 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:56,473 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:56,473 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-17 15:09:56,473 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:56,474 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:56,474 INFO L85 PathProgramCache]: Analyzing trace with hash -1401707673, now seen corresponding path program 1 times [2021-12-17 15:09:56,474 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:56,474 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1572528384] [2021-12-17 15:09:56,474 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:56,475 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:56,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,500 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-17 15:09:56,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,505 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-17 15:09:56,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,513 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:56,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,532 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-12-17 15:09:56,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,536 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:56,536 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:56,536 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1572528384] [2021-12-17 15:09:56,537 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1572528384] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:56,537 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:56,537 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:09:56,537 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1633552071] [2021-12-17 15:09:56,537 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:56,538 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:09:56,538 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:56,538 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:09:56,538 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:09:56,538 INFO L87 Difference]: Start difference. First operand 267 states and 344 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-17 15:09:56,697 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:56,697 INFO L93 Difference]: Finished difference Result 594 states and 777 transitions. [2021-12-17 15:09:56,698 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-17 15:09:56,698 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2021-12-17 15:09:56,698 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:56,700 INFO L225 Difference]: With dead ends: 594 [2021-12-17 15:09:56,700 INFO L226 Difference]: Without dead ends: 335 [2021-12-17 15:09:56,701 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-17 15:09:56,702 INFO L933 BasicCegarLoop]: 111 mSDtfsCounter, 74 mSDsluCounter, 345 mSDsCounter, 0 mSdLazyCounter, 126 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 456 SdHoareTripleChecker+Invalid, 151 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 126 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:56,702 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [77 Valid, 456 Invalid, 151 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:09:56,703 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 335 states. [2021-12-17 15:09:56,720 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 335 to 327. [2021-12-17 15:09:56,721 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 327 states, 244 states have (on average 1.2704918032786885) internal successors, (310), 261 states have internal predecessors, (310), 42 states have call successors, (42), 30 states have call predecessors, (42), 40 states have return successors, (64), 45 states have call predecessors, (64), 42 states have call successors, (64) [2021-12-17 15:09:56,722 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 327 states to 327 states and 416 transitions. [2021-12-17 15:09:56,723 INFO L78 Accepts]: Start accepts. Automaton has 327 states and 416 transitions. Word has length 56 [2021-12-17 15:09:56,723 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:56,723 INFO L470 AbstractCegarLoop]: Abstraction has 327 states and 416 transitions. [2021-12-17 15:09:56,723 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-17 15:09:56,724 INFO L276 IsEmpty]: Start isEmpty. Operand 327 states and 416 transitions. [2021-12-17 15:09:56,725 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-12-17 15:09:56,725 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:56,725 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:56,725 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-17 15:09:56,725 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:56,726 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:56,726 INFO L85 PathProgramCache]: Analyzing trace with hash -979005847, now seen corresponding path program 1 times [2021-12-17 15:09:56,726 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:56,726 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [168269289] [2021-12-17 15:09:56,726 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:56,727 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:56,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,750 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-17 15:09:56,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,764 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-17 15:09:56,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,772 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:56,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,786 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-12-17 15:09:56,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,788 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:56,789 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:56,789 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [168269289] [2021-12-17 15:09:56,789 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [168269289] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:56,789 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:56,789 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-17 15:09:56,789 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2139098933] [2021-12-17 15:09:56,790 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:56,790 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-17 15:09:56,790 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:56,790 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-17 15:09:56,791 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-17 15:09:56,791 INFO L87 Difference]: Start difference. First operand 327 states and 416 transitions. Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-17 15:09:56,879 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:56,879 INFO L93 Difference]: Finished difference Result 664 states and 871 transitions. [2021-12-17 15:09:56,880 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-17 15:09:56,880 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2021-12-17 15:09:56,880 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:56,882 INFO L225 Difference]: With dead ends: 664 [2021-12-17 15:09:56,882 INFO L226 Difference]: Without dead ends: 345 [2021-12-17 15:09:56,883 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:09:56,884 INFO L933 BasicCegarLoop]: 111 mSDtfsCounter, 78 mSDsluCounter, 244 mSDsCounter, 0 mSdLazyCounter, 93 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 82 SdHoareTripleChecker+Valid, 355 SdHoareTripleChecker+Invalid, 115 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 93 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:56,884 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [82 Valid, 355 Invalid, 115 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 93 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:09:56,885 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 345 states. [2021-12-17 15:09:56,896 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 345 to 331. [2021-12-17 15:09:56,897 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 331 states, 248 states have (on average 1.2661290322580645) internal successors, (314), 265 states have internal predecessors, (314), 42 states have call successors, (42), 30 states have call predecessors, (42), 40 states have return successors, (64), 45 states have call predecessors, (64), 42 states have call successors, (64) [2021-12-17 15:09:56,898 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 331 states to 331 states and 420 transitions. [2021-12-17 15:09:56,898 INFO L78 Accepts]: Start accepts. Automaton has 331 states and 420 transitions. Word has length 56 [2021-12-17 15:09:56,899 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:56,899 INFO L470 AbstractCegarLoop]: Abstraction has 331 states and 420 transitions. [2021-12-17 15:09:56,899 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-17 15:09:56,899 INFO L276 IsEmpty]: Start isEmpty. Operand 331 states and 420 transitions. [2021-12-17 15:09:56,900 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-12-17 15:09:56,900 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:56,900 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:56,901 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-17 15:09:56,901 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:56,901 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:56,901 INFO L85 PathProgramCache]: Analyzing trace with hash 1510523115, now seen corresponding path program 1 times [2021-12-17 15:09:56,901 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:56,901 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1861514479] [2021-12-17 15:09:56,902 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:56,902 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:56,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,931 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-17 15:09:56,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,936 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-17 15:09:56,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:56,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,963 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-12-17 15:09:56,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:56,965 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:56,966 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:56,966 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1861514479] [2021-12-17 15:09:56,966 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1861514479] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:56,966 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:56,966 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-17 15:09:56,966 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2054231808] [2021-12-17 15:09:56,967 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:56,967 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-17 15:09:56,968 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:56,968 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-17 15:09:56,968 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-17 15:09:56,968 INFO L87 Difference]: Start difference. First operand 331 states and 420 transitions. Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-17 15:09:57,164 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:57,165 INFO L93 Difference]: Finished difference Result 946 states and 1245 transitions. [2021-12-17 15:09:57,165 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-17 15:09:57,165 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2021-12-17 15:09:57,166 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:57,168 INFO L225 Difference]: With dead ends: 946 [2021-12-17 15:09:57,168 INFO L226 Difference]: Without dead ends: 623 [2021-12-17 15:09:57,169 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:09:57,169 INFO L933 BasicCegarLoop]: 166 mSDtfsCounter, 242 mSDsluCounter, 215 mSDsCounter, 0 mSdLazyCounter, 176 mSolverCounterSat, 77 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 249 SdHoareTripleChecker+Valid, 381 SdHoareTripleChecker+Invalid, 253 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 176 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:57,170 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [249 Valid, 381 Invalid, 253 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 176 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:09:57,170 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 623 states. [2021-12-17 15:09:57,186 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 623 to 616. [2021-12-17 15:09:57,187 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 616 states, 459 states have (on average 1.2287581699346406) internal successors, (564), 485 states have internal predecessors, (564), 83 states have call successors, (83), 67 states have call predecessors, (83), 73 states have return successors, (135), 84 states have call predecessors, (135), 83 states have call successors, (135) [2021-12-17 15:09:57,189 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 616 states to 616 states and 782 transitions. [2021-12-17 15:09:57,189 INFO L78 Accepts]: Start accepts. Automaton has 616 states and 782 transitions. Word has length 56 [2021-12-17 15:09:57,190 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:57,190 INFO L470 AbstractCegarLoop]: Abstraction has 616 states and 782 transitions. [2021-12-17 15:09:57,190 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-17 15:09:57,190 INFO L276 IsEmpty]: Start isEmpty. Operand 616 states and 782 transitions. [2021-12-17 15:09:57,191 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-12-17 15:09:57,191 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:57,192 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:57,192 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-17 15:09:57,192 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:57,192 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:57,192 INFO L85 PathProgramCache]: Analyzing trace with hash -193074427, now seen corresponding path program 1 times [2021-12-17 15:09:57,192 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:57,193 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1245177014] [2021-12-17 15:09:57,193 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:57,193 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:57,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:57,240 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:09:57,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:57,258 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-17 15:09:57,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:57,265 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-12-17 15:09:57,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:57,270 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:57,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:57,273 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-17 15:09:57,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:57,275 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:09:57,275 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:57,275 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1245177014] [2021-12-17 15:09:57,275 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1245177014] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:57,275 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:57,276 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-12-17 15:09:57,276 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2003784617] [2021-12-17 15:09:57,276 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:57,276 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-12-17 15:09:57,276 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:57,277 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-12-17 15:09:57,277 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2021-12-17 15:09:57,277 INFO L87 Difference]: Start difference. First operand 616 states and 782 transitions. Second operand has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 7 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-17 15:09:57,839 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:57,839 INFO L93 Difference]: Finished difference Result 1953 states and 2602 transitions. [2021-12-17 15:09:57,840 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2021-12-17 15:09:57,840 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 7 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 60 [2021-12-17 15:09:57,840 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:57,845 INFO L225 Difference]: With dead ends: 1953 [2021-12-17 15:09:57,845 INFO L226 Difference]: Without dead ends: 1458 [2021-12-17 15:09:57,846 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 39 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 152 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=153, Invalid=549, Unknown=0, NotChecked=0, Total=702 [2021-12-17 15:09:57,847 INFO L933 BasicCegarLoop]: 165 mSDtfsCounter, 570 mSDsluCounter, 464 mSDsCounter, 0 mSdLazyCounter, 578 mSolverCounterSat, 199 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 577 SdHoareTripleChecker+Valid, 629 SdHoareTripleChecker+Invalid, 777 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 199 IncrementalHoareTripleChecker+Valid, 578 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:57,847 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [577 Valid, 629 Invalid, 777 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [199 Valid, 578 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-17 15:09:57,848 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1458 states. [2021-12-17 15:09:57,879 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1458 to 1193. [2021-12-17 15:09:57,881 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1193 states, 890 states have (on average 1.2269662921348314) internal successors, (1092), 947 states have internal predecessors, (1092), 160 states have call successors, (160), 118 states have call predecessors, (160), 142 states have return successors, (260), 162 states have call predecessors, (260), 160 states have call successors, (260) [2021-12-17 15:09:57,884 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1193 states to 1193 states and 1512 transitions. [2021-12-17 15:09:57,885 INFO L78 Accepts]: Start accepts. Automaton has 1193 states and 1512 transitions. Word has length 60 [2021-12-17 15:09:57,885 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:57,885 INFO L470 AbstractCegarLoop]: Abstraction has 1193 states and 1512 transitions. [2021-12-17 15:09:57,885 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 7 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-17 15:09:57,886 INFO L276 IsEmpty]: Start isEmpty. Operand 1193 states and 1512 transitions. [2021-12-17 15:09:57,887 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2021-12-17 15:09:57,887 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:57,887 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:57,887 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-17 15:09:57,887 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:57,888 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:57,888 INFO L85 PathProgramCache]: Analyzing trace with hash -182301856, now seen corresponding path program 1 times [2021-12-17 15:09:57,888 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:57,888 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [223348811] [2021-12-17 15:09:57,888 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:57,888 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:57,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:57,911 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:09:57,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:57,917 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-17 15:09:57,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:57,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:09:57,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:57,931 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-17 15:09:57,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:57,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:57,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:57,950 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2021-12-17 15:09:57,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:57,952 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-12-17 15:09:57,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:57,954 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-17 15:09:57,954 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:57,954 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [223348811] [2021-12-17 15:09:57,954 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [223348811] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:09:57,954 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:09:57,955 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-17 15:09:57,955 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1665100042] [2021-12-17 15:09:57,955 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:09:57,955 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-17 15:09:57,955 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:57,955 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-17 15:09:57,956 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:09:57,956 INFO L87 Difference]: Start difference. First operand 1193 states and 1512 transitions. Second operand has 7 states, 7 states have (on average 10.142857142857142) internal successors, (71), 4 states have internal predecessors, (71), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2021-12-17 15:09:58,194 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:58,195 INFO L93 Difference]: Finished difference Result 1429 states and 1801 transitions. [2021-12-17 15:09:58,195 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-12-17 15:09:58,195 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 10.142857142857142) internal successors, (71), 4 states have internal predecessors, (71), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 90 [2021-12-17 15:09:58,195 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:58,197 INFO L225 Difference]: With dead ends: 1429 [2021-12-17 15:09:58,197 INFO L226 Difference]: Without dead ends: 611 [2021-12-17 15:09:58,199 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2021-12-17 15:09:58,199 INFO L933 BasicCegarLoop]: 152 mSDtfsCounter, 306 mSDsluCounter, 239 mSDsCounter, 0 mSdLazyCounter, 232 mSolverCounterSat, 109 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 315 SdHoareTripleChecker+Valid, 391 SdHoareTripleChecker+Invalid, 341 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 109 IncrementalHoareTripleChecker+Valid, 232 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:58,199 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [315 Valid, 391 Invalid, 341 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [109 Valid, 232 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:09:58,200 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 611 states. [2021-12-17 15:09:58,214 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 611 to 585. [2021-12-17 15:09:58,215 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 585 states, 437 states have (on average 1.194508009153318) internal successors, (522), 463 states have internal predecessors, (522), 77 states have call successors, (77), 58 states have call predecessors, (77), 70 states have return successors, (127), 79 states have call predecessors, (127), 77 states have call successors, (127) [2021-12-17 15:09:58,216 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 585 states to 585 states and 726 transitions. [2021-12-17 15:09:58,217 INFO L78 Accepts]: Start accepts. Automaton has 585 states and 726 transitions. Word has length 90 [2021-12-17 15:09:58,217 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:58,217 INFO L470 AbstractCegarLoop]: Abstraction has 585 states and 726 transitions. [2021-12-17 15:09:58,217 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 10.142857142857142) internal successors, (71), 4 states have internal predecessors, (71), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2021-12-17 15:09:58,217 INFO L276 IsEmpty]: Start isEmpty. Operand 585 states and 726 transitions. [2021-12-17 15:09:58,218 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2021-12-17 15:09:58,218 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:58,218 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:58,218 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-17 15:09:58,219 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:58,219 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:58,219 INFO L85 PathProgramCache]: Analyzing trace with hash 1799468227, now seen corresponding path program 1 times [2021-12-17 15:09:58,219 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:58,219 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1353938244] [2021-12-17 15:09:58,219 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:58,219 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:58,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,259 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:09:58,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,267 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-17 15:09:58,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,280 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:09:58,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,286 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-17 15:09:58,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,290 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:58,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,294 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2021-12-17 15:09:58,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2021-12-17 15:09:58,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,304 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-17 15:09:58,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,306 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:09:58,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2021-12-17 15:09:58,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,309 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 8 proven. 20 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-17 15:09:58,309 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:09:58,309 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1353938244] [2021-12-17 15:09:58,309 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1353938244] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:09:58,310 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [575252307] [2021-12-17 15:09:58,310 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:58,310 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:09:58,310 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:09:58,328 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:09:58,401 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-17 15:09:58,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:58,457 INFO L263 TraceCheckSpWp]: Trace formula consists of 506 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-17 15:09:58,462 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:09:58,670 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 26 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:09:58,670 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-17 15:09:58,864 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 18 proven. 10 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-17 15:09:58,865 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [575252307] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-17 15:09:58,865 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-17 15:09:58,865 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2021-12-17 15:09:58,865 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1135239163] [2021-12-17 15:09:58,865 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-17 15:09:58,866 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-12-17 15:09:58,866 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:09:58,866 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-12-17 15:09:58,866 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2021-12-17 15:09:58,867 INFO L87 Difference]: Start difference. First operand 585 states and 726 transitions. Second operand has 15 states, 15 states have (on average 9.866666666666667) internal successors, (148), 10 states have internal predecessors, (148), 6 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (20), 8 states have call predecessors, (20), 6 states have call successors, (20) [2021-12-17 15:09:59,689 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:09:59,689 INFO L93 Difference]: Finished difference Result 1242 states and 1576 transitions. [2021-12-17 15:09:59,690 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2021-12-17 15:09:59,690 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 9.866666666666667) internal successors, (148), 10 states have internal predecessors, (148), 6 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (20), 8 states have call predecessors, (20), 6 states have call successors, (20) Word has length 109 [2021-12-17 15:09:59,690 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:09:59,692 INFO L225 Difference]: With dead ends: 1242 [2021-12-17 15:09:59,692 INFO L226 Difference]: Without dead ends: 718 [2021-12-17 15:09:59,695 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 290 GetRequests, 247 SyntacticMatches, 1 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 447 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=441, Invalid=1451, Unknown=0, NotChecked=0, Total=1892 [2021-12-17 15:09:59,696 INFO L933 BasicCegarLoop]: 221 mSDtfsCounter, 540 mSDsluCounter, 904 mSDsCounter, 0 mSdLazyCounter, 929 mSolverCounterSat, 294 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 543 SdHoareTripleChecker+Valid, 1125 SdHoareTripleChecker+Invalid, 1223 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 294 IncrementalHoareTripleChecker+Valid, 929 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-12-17 15:09:59,696 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [543 Valid, 1125 Invalid, 1223 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [294 Valid, 929 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-12-17 15:09:59,697 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 718 states. [2021-12-17 15:09:59,715 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 718 to 646. [2021-12-17 15:09:59,716 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 646 states, 477 states have (on average 1.1740041928721174) internal successors, (560), 511 states have internal predecessors, (560), 87 states have call successors, (87), 72 states have call predecessors, (87), 81 states have return successors, (119), 84 states have call predecessors, (119), 87 states have call successors, (119) [2021-12-17 15:09:59,717 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 646 states to 646 states and 766 transitions. [2021-12-17 15:09:59,718 INFO L78 Accepts]: Start accepts. Automaton has 646 states and 766 transitions. Word has length 109 [2021-12-17 15:09:59,718 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:09:59,719 INFO L470 AbstractCegarLoop]: Abstraction has 646 states and 766 transitions. [2021-12-17 15:09:59,719 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 9.866666666666667) internal successors, (148), 10 states have internal predecessors, (148), 6 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (20), 8 states have call predecessors, (20), 6 states have call successors, (20) [2021-12-17 15:09:59,719 INFO L276 IsEmpty]: Start isEmpty. Operand 646 states and 766 transitions. [2021-12-17 15:09:59,722 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 188 [2021-12-17 15:09:59,722 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:09:59,723 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:09:59,744 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-17 15:09:59,944 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-17 15:09:59,944 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:09:59,945 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:09:59,945 INFO L85 PathProgramCache]: Analyzing trace with hash -85018451, now seen corresponding path program 1 times [2021-12-17 15:09:59,945 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:09:59,945 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [542249231] [2021-12-17 15:09:59,945 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:09:59,945 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:09:59,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:09:59,987 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:09:59,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,006 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-17 15:10:00,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,011 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:10:00,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,015 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-17 15:10:00,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,032 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:10:00,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,034 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-12-17 15:10:00,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:10:00,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,053 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-17 15:10:00,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,056 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-17 15:10:00,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,058 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:10:00,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,059 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2021-12-17 15:10:00,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:10:00,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,098 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-17 15:10:00,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 149 [2021-12-17 15:10:00,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,114 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2021-12-17 15:10:00,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:10:00,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 179 [2021-12-17 15:10:00,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,132 INFO L134 CoverageAnalysis]: Checked inductivity of 197 backedges. 78 proven. 0 refuted. 0 times theorem prover too weak. 119 trivial. 0 not checked. [2021-12-17 15:10:00,132 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:10:00,132 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [542249231] [2021-12-17 15:10:00,132 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [542249231] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:10:00,132 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:10:00,132 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-17 15:10:00,133 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1215781220] [2021-12-17 15:10:00,133 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:10:00,133 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-17 15:10:00,133 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:10:00,133 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-17 15:10:00,133 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2021-12-17 15:10:00,133 INFO L87 Difference]: Start difference. First operand 646 states and 766 transitions. Second operand has 10 states, 10 states have (on average 9.5) internal successors, (95), 7 states have internal predecessors, (95), 4 states have call successors, (13), 5 states have call predecessors, (13), 2 states have return successors, (13), 4 states have call predecessors, (13), 4 states have call successors, (13) [2021-12-17 15:10:00,811 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:10:00,811 INFO L93 Difference]: Finished difference Result 1813 states and 2185 transitions. [2021-12-17 15:10:00,811 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2021-12-17 15:10:00,812 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 9.5) internal successors, (95), 7 states have internal predecessors, (95), 4 states have call successors, (13), 5 states have call predecessors, (13), 2 states have return successors, (13), 4 states have call predecessors, (13), 4 states have call successors, (13) Word has length 187 [2021-12-17 15:10:00,812 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:10:00,816 INFO L225 Difference]: With dead ends: 1813 [2021-12-17 15:10:00,816 INFO L226 Difference]: Without dead ends: 1175 [2021-12-17 15:10:00,818 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 46 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 251 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=229, Invalid=893, Unknown=0, NotChecked=0, Total=1122 [2021-12-17 15:10:00,819 INFO L933 BasicCegarLoop]: 215 mSDtfsCounter, 456 mSDsluCounter, 538 mSDsCounter, 0 mSdLazyCounter, 778 mSolverCounterSat, 179 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 460 SdHoareTripleChecker+Valid, 753 SdHoareTripleChecker+Invalid, 957 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 179 IncrementalHoareTripleChecker+Valid, 778 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-17 15:10:00,819 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [460 Valid, 753 Invalid, 957 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [179 Valid, 778 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-17 15:10:00,820 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1175 states. [2021-12-17 15:10:00,856 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1175 to 1160. [2021-12-17 15:10:00,858 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1160 states, 863 states have (on average 1.1367323290845885) internal successors, (981), 916 states have internal predecessors, (981), 152 states have call successors, (152), 131 states have call predecessors, (152), 144 states have return successors, (206), 150 states have call predecessors, (206), 152 states have call successors, (206) [2021-12-17 15:10:00,879 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1160 states to 1160 states and 1339 transitions. [2021-12-17 15:10:00,880 INFO L78 Accepts]: Start accepts. Automaton has 1160 states and 1339 transitions. Word has length 187 [2021-12-17 15:10:00,880 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:10:00,880 INFO L470 AbstractCegarLoop]: Abstraction has 1160 states and 1339 transitions. [2021-12-17 15:10:00,881 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 9.5) internal successors, (95), 7 states have internal predecessors, (95), 4 states have call successors, (13), 5 states have call predecessors, (13), 2 states have return successors, (13), 4 states have call predecessors, (13), 4 states have call successors, (13) [2021-12-17 15:10:00,881 INFO L276 IsEmpty]: Start isEmpty. Operand 1160 states and 1339 transitions. [2021-12-17 15:10:00,884 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 196 [2021-12-17 15:10:00,884 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:10:00,885 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:10:00,885 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-12-17 15:10:00,885 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:10:00,885 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:10:00,885 INFO L85 PathProgramCache]: Analyzing trace with hash 1708525869, now seen corresponding path program 1 times [2021-12-17 15:10:00,886 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:10:00,886 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2088178612] [2021-12-17 15:10:00,886 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:10:00,886 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:10:00,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:10:00,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-17 15:10:00,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:10:00,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,952 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-17 15:10:00,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:10:00,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,958 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2021-12-17 15:10:00,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,962 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:10:00,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,964 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-17 15:10:00,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,966 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-17 15:10:00,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,968 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:10:00,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2021-12-17 15:10:00,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:00,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-12-17 15:10:00,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:10:01,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,015 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-17 15:10:01,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,017 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 147 [2021-12-17 15:10:01,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,022 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 157 [2021-12-17 15:10:01,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 166 [2021-12-17 15:10:01,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,026 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:10:01,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,028 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 187 [2021-12-17 15:10:01,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,030 INFO L134 CoverageAnalysis]: Checked inductivity of 201 backedges. 69 proven. 5 refuted. 0 times theorem prover too weak. 127 trivial. 0 not checked. [2021-12-17 15:10:01,030 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:10:01,030 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2088178612] [2021-12-17 15:10:01,030 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2088178612] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:10:01,030 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [930652898] [2021-12-17 15:10:01,031 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:10:01,031 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:10:01,031 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:10:01,048 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:10:01,049 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-17 15:10:01,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:10:01,149 INFO L263 TraceCheckSpWp]: Trace formula consists of 728 conjuncts, 13 conjunts are in the unsatisfiable core [2021-12-17 15:10:01,153 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:10:01,520 INFO L134 CoverageAnalysis]: Checked inductivity of 201 backedges. 147 proven. 4 refuted. 0 times theorem prover too weak. 50 trivial. 0 not checked. [2021-12-17 15:10:01,520 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-17 15:10:02,249 INFO L134 CoverageAnalysis]: Checked inductivity of 201 backedges. 78 proven. 42 refuted. 0 times theorem prover too weak. 81 trivial. 0 not checked. [2021-12-17 15:10:02,250 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [930652898] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-17 15:10:02,250 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-17 15:10:02,250 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 10, 11] total 26 [2021-12-17 15:10:02,250 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1477866080] [2021-12-17 15:10:02,250 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-17 15:10:02,251 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2021-12-17 15:10:02,251 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:10:02,251 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2021-12-17 15:10:02,251 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=121, Invalid=529, Unknown=0, NotChecked=0, Total=650 [2021-12-17 15:10:02,252 INFO L87 Difference]: Start difference. First operand 1160 states and 1339 transitions. Second operand has 26 states, 26 states have (on average 8.807692307692308) internal successors, (229), 22 states have internal predecessors, (229), 9 states have call successors, (41), 10 states have call predecessors, (41), 10 states have return successors, (40), 8 states have call predecessors, (40), 9 states have call successors, (40) [2021-12-17 15:10:03,417 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:10:03,417 INFO L93 Difference]: Finished difference Result 2431 states and 2891 transitions. [2021-12-17 15:10:03,417 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2021-12-17 15:10:03,418 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 8.807692307692308) internal successors, (229), 22 states have internal predecessors, (229), 9 states have call successors, (41), 10 states have call predecessors, (41), 10 states have return successors, (40), 8 states have call predecessors, (40), 9 states have call successors, (40) Word has length 195 [2021-12-17 15:10:03,418 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:10:03,419 INFO L225 Difference]: With dead ends: 2431 [2021-12-17 15:10:03,419 INFO L226 Difference]: Without dead ends: 0 [2021-12-17 15:10:03,423 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 474 GetRequests, 420 SyntacticMatches, 4 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 513 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=557, Invalid=2095, Unknown=0, NotChecked=0, Total=2652 [2021-12-17 15:10:03,424 INFO L933 BasicCegarLoop]: 140 mSDtfsCounter, 860 mSDsluCounter, 394 mSDsCounter, 0 mSdLazyCounter, 1619 mSolverCounterSat, 368 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 863 SdHoareTripleChecker+Valid, 534 SdHoareTripleChecker+Invalid, 1987 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 368 IncrementalHoareTripleChecker+Valid, 1619 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2021-12-17 15:10:03,424 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [863 Valid, 534 Invalid, 1987 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [368 Valid, 1619 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2021-12-17 15:10:03,424 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-17 15:10:03,424 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-17 15:10:03,424 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:10:03,424 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-17 15:10:03,425 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 195 [2021-12-17 15:10:03,425 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:10:03,425 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-17 15:10:03,425 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 8.807692307692308) internal successors, (229), 22 states have internal predecessors, (229), 9 states have call successors, (41), 10 states have call predecessors, (41), 10 states have return successors, (40), 8 states have call predecessors, (40), 9 states have call successors, (40) [2021-12-17 15:10:03,425 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-17 15:10:03,425 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-17 15:10:03,427 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-17 15:10:03,454 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-17 15:10:03,627 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2021-12-17 15:10:03,629 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-17 15:10:13,236 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 871 878) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 (not (= ~systemActive~0 1))) (or (= 0 ~systemActive~0) .cse0 (not (<= 2 ~waterLevel~0))))) [2021-12-17 15:10:13,236 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 871 878) no Hoare annotation was computed. [2021-12-17 15:10:13,236 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 871 878) no Hoare annotation was computed. [2021-12-17 15:10:13,236 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 778 784) no Hoare annotation was computed. [2021-12-17 15:10:13,236 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 778 784) the Hoare annotation is: true [2021-12-17 15:10:13,236 INFO L858 garLoopResultBuilder]: For program point L670-1(lines 666 677) no Hoare annotation was computed. [2021-12-17 15:10:13,236 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 666 677) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 |old(~methaneLevelCritical~0)|)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~pumpRunning~0)))) (and (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 (not (<= ~waterLevel~0 2))) (or .cse0 .cse1 (not (= ~waterLevel~0 2)) .cse2) (or (not (= |old(~methaneLevelCritical~0)| 0)) (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 .cse2 (= ~methaneLevelCritical~0 0)))) [2021-12-17 15:10:13,236 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 666 677) no Hoare annotation was computed. [2021-12-17 15:10:13,236 INFO L854 garLoopResultBuilder]: At program point L1018(line 1018) the Hoare annotation is: (let ((.cse22 (= 0 ~methaneLevelCritical~0)) (.cse27 (= 1 ~systemActive~0)) (.cse9 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse8 (< |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1| 2)) (.cse11 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse20 (= ~pumpRunning~0 0)) (.cse25 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse26 (<= ~waterLevel~0 1)) (.cse28 (= ~methaneLevelCritical~0 0)) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse19 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1| ~waterLevel~0)) (.cse12 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse13 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|)) (.cse14 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~7#1|)) (.cse21 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0))) (let ((.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse18 (not (= ~systemActive~0 0))) (.cse17 (not (= |old(~pumpRunning~0)| 0))) (.cse16 (not (<= |old(~waterLevel~0)| 1))) (.cse3 (and .cse25 .cse7 .cse26 .cse28 .cse10 .cse19 .cse12 .cse13 .cse14 .cse21)) (.cse4 (and .cse25 .cse7 .cse26 .cse28 .cse19 .cse12 .cse13 .cse14 .cse20 .cse21)) (.cse5 (not .cse28)) (.cse23 (not (= |old(~waterLevel~0)| 1))) (.cse6 (and .cse7 .cse9 .cse8 .cse11 .cse12 .cse13 .cse14 .cse20)) (.cse15 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not .cse27)) (.cse24 (and .cse25 .cse7 .cse26 .cse19 (not .cse22) .cse12 .cse13 .cse14 .cse20 .cse27 .cse21)) (.cse2 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (= ~waterLevel~0 1) .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse5 .cse1 .cse2) (or .cse6 (and .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14) .cse15 .cse0 .cse3 .cse4 .cse5 .cse16 .cse2) (or .cse17 .cse1 .cse18) (or (and .cse7 .cse19 .cse12 .cse13 .cse14 .cse20 .cse21) .cse0 .cse1 .cse2 .cse22) (or .cse0 .cse17 .cse1) (or (and .cse9 .cse20) .cse17 .cse18) (or .cse0 .cse17 (and .cse9 .cse8 .cse11 .cse20) .cse16) (or .cse23 .cse15 .cse0 .cse3 .cse4 .cse5 .cse2) (or .cse23 .cse15 .cse0 .cse24 .cse22 .cse2) (or (not (<= |old(~waterLevel~0)| 2)) .cse6 .cse15 .cse0 .cse24 .cse22 .cse2)))) [2021-12-17 15:10:13,236 INFO L854 garLoopResultBuilder]: At program point L857(line 857) the Hoare annotation is: (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (not (= ~systemActive~0 0))) (or .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse2 .cse3) (or .cse2 (not (= |old(~waterLevel~0)| 2)) .cse3) (or .cse1 (and (= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 0)) .cse2 .cse0))) [2021-12-17 15:10:13,236 INFO L858 garLoopResultBuilder]: For program point L1018-1(line 1018) no Hoare annotation was computed. [2021-12-17 15:10:13,237 INFO L854 garLoopResultBuilder]: At program point L857-1(lines 838 862) the Hoare annotation is: (let ((.cse20 (= ~methaneLevelCritical~0 0)) (.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse22 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse23 (<= ~waterLevel~0 1)) (.cse8 (= 0 ~methaneLevelCritical~0)) (.cse21 (= 1 ~systemActive~0)) (.cse11 (<= 1 ~switchedOnBeforeTS~0)) (.cse12 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse14 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse15 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|)) (.cse16 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~7#1|)) (.cse19 (= ~pumpRunning~0 0))) (let ((.cse7 (and .cse11 .cse12 .cse14 .cse15 .cse16 .cse19)) (.cse4 (and .cse22 .cse11 .cse23 (not .cse8) .cse14 .cse15 .cse16 .cse19 .cse21)) (.cse18 (not (= |old(~waterLevel~0)| 1))) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (and .cse22 .cse11 .cse23 .cse20 .cse13 .cse14 .cse15 .cse16)) (.cse10 (and .cse22 .cse11 .cse23 .cse20 .cse14 .cse15 .cse16 .cse19)) (.cse0 (not .cse21)) (.cse17 (not .cse20)) (.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or (= ~waterLevel~0 1) .cse0 .cse1 .cse2) (or .cse3 (not (= ~systemActive~0 0))) (or .cse4 .cse5 .cse6 .cse0 .cse7 .cse8 .cse2) (or .cse9 .cse6 .cse10 .cse0 .cse7 (and .cse11 .cse12 .cse13 .cse14 .cse15 .cse16) .cse17 (not (<= |old(~waterLevel~0)| 1)) .cse2) (or .cse9 .cse18 .cse6 .cse10 .cse0 .cse17 .cse2) (or .cse4 .cse18 .cse6 .cse0 .cse8 .cse2) (or .cse0 (and .cse11 .cse14 .cse15 .cse16 .cse19) .cse1 .cse2 .cse8) (or .cse5 (and .cse12 .cse19) .cse0 (and (= ~waterLevel~0 2) .cse12 (<= 1 ~pumpRunning~0)) .cse3) (or .cse9 .cse10 .cse0 .cse17 .cse1 .cse2)))) [2021-12-17 15:10:13,237 INFO L858 garLoopResultBuilder]: For program point L758(lines 758 764) no Hoare annotation was computed. [2021-12-17 15:10:13,237 INFO L854 garLoopResultBuilder]: At program point L886(lines 879 889) the Hoare annotation is: (let ((.cse18 (= ~methaneLevelCritical~0 0)) (.cse16 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse12 (<= 1 ~switchedOnBeforeTS~0)) (.cse17 (<= ~waterLevel~0 1)) (.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (= 0 ~methaneLevelCritical~0)) (.cse14 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse15 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|))) (let ((.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse9 (and .cse16 .cse12 .cse17 (<= 1 ~pumpRunning~0) .cse13 (not .cse10) .cse14 .cse15 (= ~systemActive~0 1))) (.cse11 (not (<= |old(~waterLevel~0)| 2))) (.cse8 (and .cse12 (= ~waterLevel~0 |old(~waterLevel~0)|) .cse13 .cse14 .cse15)) (.cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not .cse18)) (.cse6 (and .cse16 .cse12 .cse17 .cse18 .cse13 .cse14 .cse15)) (.cse2 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or (= ~waterLevel~0 1) .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse0 .cse5 .cse6 .cse2) (or .cse7 (not (= ~systemActive~0 0))) (or .cse8 .cse4 .cse0 .cse9 (not (<= |old(~waterLevel~0)| 1)) .cse10 .cse2) (or .cse11 .cse0 .cse7) (or .cse0 (and .cse12 .cse13 .cse14 .cse15) .cse1 .cse2) (or .cse3 .cse4 .cse0 .cse9 .cse10 .cse2) (or .cse11 .cse8 .cse4 .cse0 .cse5 .cse6 .cse2)))) [2021-12-17 15:10:13,237 INFO L858 garLoopResultBuilder]: For program point L758-2(lines 754 776) no Hoare annotation was computed. [2021-12-17 15:10:13,237 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 751 777) no Hoare annotation was computed. [2021-12-17 15:10:13,237 INFO L858 garLoopResultBuilder]: For program point L561(line 561) no Hoare annotation was computed. [2021-12-17 15:10:13,237 INFO L858 garLoopResultBuilder]: For program point L846(lines 846 854) no Hoare annotation was computed. [2021-12-17 15:10:13,237 INFO L854 garLoopResultBuilder]: At program point L1003(line 1003) the Hoare annotation is: (let ((.cse3 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse4 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|))) (let ((.cse0 (and .cse3 .cse4 (= ~pumpRunning~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or (not (<= |old(~waterLevel~0)| 2)) .cse0 .cse1 .cse2) (or .cse0 .cse2 (not (= ~systemActive~0 0))) (or (and .cse3 .cse4 .cse5) .cse1 (not (= |old(~waterLevel~0)| 2)) .cse6) (or (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 (and .cse3 .cse5 .cse4) (not (<= |old(~waterLevel~0)| 1)) .cse6)))) [2021-12-17 15:10:13,237 INFO L858 garLoopResultBuilder]: For program point L1003-1(line 1003) no Hoare annotation was computed. [2021-12-17 15:10:13,237 INFO L858 garLoopResultBuilder]: For program point L842(lines 842 859) no Hoare annotation was computed. [2021-12-17 15:10:13,237 INFO L858 garLoopResultBuilder]: For program point L1020(lines 1020 1030) no Hoare annotation was computed. [2021-12-17 15:10:13,237 INFO L858 garLoopResultBuilder]: For program point L1016(lines 1016 1033) no Hoare annotation was computed. [2021-12-17 15:10:13,237 INFO L854 garLoopResultBuilder]: At program point L1016-1(lines 1008 1036) the Hoare annotation is: (let ((.cse14 (= ~methaneLevelCritical~0 0)) (.cse15 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse24 (< |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1| 2)) (.cse23 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse25 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse30 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse29 (<= ~waterLevel~0 1)) (.cse8 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1| ~waterLevel~0)) (.cse21 (= 0 ~methaneLevelCritical~0)) (.cse9 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse10 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|)) (.cse11 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~7#1|)) (.cse12 (= ~pumpRunning~0 0)) (.cse31 (= 1 ~systemActive~0)) (.cse13 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0))) (let ((.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse20 (and .cse30 .cse6 .cse29 .cse8 (not .cse21) .cse9 .cse10 .cse11 .cse12 .cse31 .cse13)) (.cse4 (not (= ~systemActive~0 0))) (.cse17 (and .cse6 .cse24 .cse23 .cse25 .cse9 .cse10 .cse11 .cse12)) (.cse18 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (= |timeShift_getWaterLevel_#res#1| 2)) (.cse1 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~10#1| 2)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse22 (not (= |old(~waterLevel~0)| 1))) (.cse19 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse5 (not .cse31)) (.cse26 (and .cse30 .cse6 .cse29 .cse14 .cse8 .cse15 .cse9 .cse10 .cse11 .cse13)) (.cse27 (and .cse30 .cse6 .cse29 .cse14 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13)) (.cse28 (not .cse14)) (.cse16 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or (and .cse0 .cse1) .cse2 .cse3 .cse4) (let ((.cse7 (= ~waterLevel~0 1))) (or .cse5 (and .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (and .cse6 .cse7 .cse14 .cse15 .cse8 .cse9 .cse10 .cse11 .cse13) .cse3 .cse16)) (or .cse17 .cse18 .cse19 .cse5 .cse20 .cse21 .cse16) (or .cse22 .cse19 .cse5 .cse20 .cse21 .cse16) (or (and .cse23 .cse15) .cse2 .cse4) (or .cse5 (and .cse24 .cse25) .cse2 (not (<= |old(~waterLevel~0)| 1))) (or .cse17 .cse18 (and .cse6 .cse24 .cse23 .cse15 .cse25 .cse9 .cse10 .cse11) .cse19 .cse5 .cse26 .cse27 .cse28 .cse16) (or .cse18 .cse5 (and .cse29 .cse23 .cse12) (and .cse0 .cse23 (<= 1 ~pumpRunning~0) .cse1) (and .cse0 .cse23 .cse1 .cse15) .cse2) (or .cse22 .cse19 .cse5 .cse26 .cse27 .cse28 .cse16)))) [2021-12-17 15:10:13,237 INFO L854 garLoopResultBuilder]: At program point L562(lines 557 564) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (= ~systemActive~0 0))) (or .cse1 .cse2 .cse0) (or .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse2 .cse3) (or .cse2 (not (= |old(~waterLevel~0)| 2)) .cse3))) [2021-12-17 15:10:13,238 INFO L854 garLoopResultBuilder]: At program point L715(lines 710 718) the Hoare annotation is: (let ((.cse21 (= 0 ~methaneLevelCritical~0)) (.cse26 (= 1 ~systemActive~0)) (.cse17 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse18 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse27 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse28 (<= ~waterLevel~0 1)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse11 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse12 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|)) (.cse13 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~7#1|)) (.cse15 (= ~pumpRunning~0 0)) (.cse14 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0))) (let ((.cse0 (and .cse27 .cse7 .cse28 .cse9 .cse11 .cse12 .cse13 .cse15 .cse14)) (.cse1 (and .cse27 .cse7 .cse28 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14)) (.cse5 (not .cse9)) (.cse19 (and .cse7 .cse17 .cse18 .cse11 .cse12 .cse13 .cse15)) (.cse24 (not (= ~systemActive~0 0))) (.cse20 (not (<= |old(~waterLevel~0)| 1))) (.cse2 (not (= |old(~waterLevel~0)| 1))) (.cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse22 (and .cse27 .cse7 .cse28 (not .cse21) .cse11 .cse12 .cse13 .cse15 .cse26 .cse14)) (.cse4 (not .cse26)) (.cse23 (not (= |old(~pumpRunning~0)| 0))) (.cse25 (= |timeShift_getWaterLevel_#res#1| 2)) (.cse16 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (let ((.cse8 (= ~waterLevel~0 1))) (or (and .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14) .cse4 (and .cse7 .cse8 .cse11 .cse12 .cse13 .cse15 .cse14) .cse16 .cse6)) (or .cse0 (not (<= |old(~waterLevel~0)| 2)) .cse1 .cse3 .cse4 (and .cse7 .cse17 .cse10 .cse18 .cse11 .cse12 .cse13) .cse19 .cse5 .cse6) (or .cse3 .cse4 .cse19 .cse20 .cse21 .cse22 .cse6) (or (and .cse17 .cse15) .cse23 .cse24) (or .cse25 .cse23 .cse16 .cse24) (or (and .cse17 .cse18 .cse15) .cse4 .cse23 .cse20) (or .cse2 .cse3 .cse4 .cse21 .cse6 .cse22) (or .cse4 (and .cse25 .cse17 (<= 1 ~pumpRunning~0)) .cse23 (and .cse25 .cse17 .cse15) .cse16)))) [2021-12-17 15:10:13,238 INFO L858 garLoopResultBuilder]: For program point L1021(lines 1021 1027) no Hoare annotation was computed. [2021-12-17 15:10:13,238 INFO L858 garLoopResultBuilder]: For program point L765-1(lines 765 771) no Hoare annotation was computed. [2021-12-17 15:10:13,238 INFO L854 garLoopResultBuilder]: At program point L852(line 852) the Hoare annotation is: (let ((.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse12 (= ~methaneLevelCritical~0 0)) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse10 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|)) (.cse11 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~7#1|))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= |old(~waterLevel~0)| 2))) (.cse3 (and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse7 (<= ~waterLevel~0 1) .cse12 .cse8 .cse9 .cse10 .cse11)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (= ~systemActive~0 0))) (or .cse1 .cse2 .cse0) (or .cse3 (not (= |old(~waterLevel~0)| 1)) .cse4 .cse2 .cse5) (or .cse2 (= 0 ~methaneLevelCritical~0) .cse6 .cse5) (or .cse2 (and .cse7 (= ~waterLevel~0 1) .cse8 .cse9 .cse10 .cse11) .cse6 .cse5) (or .cse3 .cse1 .cse4 .cse2 (and .cse7 (= ~waterLevel~0 |old(~waterLevel~0)|) .cse12 .cse8 .cse9 .cse10 .cse11) .cse5)))) [2021-12-17 15:10:13,238 INFO L854 garLoopResultBuilder]: At program point L848(line 848) the Hoare annotation is: (let ((.cse3 (<= 1 ~switchedOnBeforeTS~0)) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse6 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|)) (.cse7 (= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~7#1|))) (let ((.cse10 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse3 (<= ~waterLevel~0 1) (<= 1 ~pumpRunning~0) .cse4 (not (= 0 ~methaneLevelCritical~0)) .cse5 .cse6 .cse7 (= ~systemActive~0 1))) (.cse2 (not (= 1 ~systemActive~0))) (.cse9 (not (= |old(~waterLevel~0)| 2))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 (and .cse3 (= ~waterLevel~0 |old(~waterLevel~0)|) .cse4 .cse5 .cse6 .cse7) (not (<= |old(~waterLevel~0)| 1)) .cse8) (or (= ~waterLevel~0 1) .cse2 .cse9 .cse8) (or .cse10 (not (= ~systemActive~0 0))) (or .cse11 .cse2 .cse10) (or .cse11 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse8) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 .cse8) (or .cse0 .cse2 .cse9 .cse8)))) [2021-12-17 15:10:13,238 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 751 777) the Hoare annotation is: (let ((.cse3 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse4 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|))) (let ((.cse0 (and .cse3 .cse4 (= ~pumpRunning~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or (not (<= |old(~waterLevel~0)| 2)) .cse0 .cse1 .cse2) (or .cse0 .cse2 (not (= ~systemActive~0 0))) (or (and .cse3 .cse4 .cse5) .cse1 (not (= |old(~waterLevel~0)| 2)) .cse6) (or (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse1 (and .cse3 .cse5 .cse4) (not (<= |old(~waterLevel~0)| 1)) .cse6)))) [2021-12-17 15:10:13,238 INFO L854 garLoopResultBuilder]: At program point L1005(lines 998 1007) the Hoare annotation is: (let ((.cse6 (= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse0 (and .cse6 (= ~pumpRunning~0 0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (= 1 ~systemActive~0))) (.cse4 (and (<= 1 ~switchedOnBeforeTS~0) .cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (not (= ~systemActive~0 0))) (or .cse2 .cse0 .cse3 .cse1) (or .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|)) .cse3 .cse4 .cse5) (or .cse3 .cse4 (not (= |old(~waterLevel~0)| 2)) .cse5)))) [2021-12-17 15:10:13,238 INFO L854 garLoopResultBuilder]: At program point L683(lines 678 686) the Hoare annotation is: (let ((.cse13 (= 0 ~methaneLevelCritical~0)) (.cse14 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse15 (<= ~waterLevel~0 1)) (.cse16 (= ~methaneLevelCritical~0 0)) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|))) (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse14 .cse7 .cse15 .cse16 .cse8 .cse9)) (.cse5 (not .cse16)) (.cse11 (not (= |old(~waterLevel~0)| 1))) (.cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse3 (not (= 1 ~systemActive~0))) (.cse4 (and .cse7 .cse15 (= ~waterLevel~0 |old(~waterLevel~0)|) .cse8 .cse9)) (.cse12 (and .cse14 .cse7 .cse15 (<= 1 ~pumpRunning~0) .cse8 (not .cse13) .cse9 (= ~systemActive~0 1))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse3 (and .cse7 (= ~waterLevel~0 1) .cse8 .cse9) (not (= |old(~waterLevel~0)| 2)) .cse6) (or .cse10 (not (= ~systemActive~0 0))) (or .cse0 .cse3 .cse10) (or .cse1 .cse11 .cse2 .cse3 .cse5 .cse6) (or .cse11 .cse2 .cse3 .cse12 .cse13 .cse6) (or .cse2 .cse3 .cse4 .cse12 (not (<= |old(~waterLevel~0)| 1)) .cse13 .cse6)))) [2021-12-17 15:10:13,238 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 751 777) no Hoare annotation was computed. [2021-12-17 15:10:13,238 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 561) no Hoare annotation was computed. [2021-12-17 15:10:13,238 INFO L858 garLoopResultBuilder]: For program point L646(lines 646 650) no Hoare annotation was computed. [2021-12-17 15:10:13,238 INFO L854 garLoopResultBuilder]: At program point L646-2(lines 642 653) the Hoare annotation is: (let ((.cse1 (<= 1 ~switchedOnBeforeTS~0)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (let ((.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse1 (<= ~waterLevel~0 1) .cse2)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (and .cse1 (= ~waterLevel~0 1) .cse2) (not (= |old(~waterLevel~0)| 2)) .cse3) (or (not (= |old(~waterLevel~0)| 1)) .cse4 .cse0 .cse5 .cse3) (or .cse6 (not (= ~systemActive~0 0))) (or (not (<= |old(~waterLevel~0)| 2)) .cse0 .cse6) (or .cse4 .cse0 .cse5 (not (<= |old(~waterLevel~0)| 1)) (and .cse1 (= ~waterLevel~0 |old(~waterLevel~0)|) .cse2) .cse3)))) [2021-12-17 15:10:13,238 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 418 447) no Hoare annotation was computed. [2021-12-17 15:10:13,238 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 418 447) the Hoare annotation is: true [2021-12-17 15:10:13,239 INFO L861 garLoopResultBuilder]: At program point L443(lines 418 447) the Hoare annotation is: true [2021-12-17 15:10:13,239 INFO L858 garLoopResultBuilder]: For program point L439(line 439) no Hoare annotation was computed. [2021-12-17 15:10:13,239 INFO L858 garLoopResultBuilder]: For program point L432(lines 432 436) no Hoare annotation was computed. [2021-12-17 15:10:13,239 INFO L861 garLoopResultBuilder]: At program point L432-1(lines 432 436) the Hoare annotation is: true [2021-12-17 15:10:13,239 INFO L858 garLoopResultBuilder]: For program point L429(line 429) no Hoare annotation was computed. [2021-12-17 15:10:13,239 INFO L861 garLoopResultBuilder]: At program point L428-2(lines 428 442) the Hoare annotation is: true [2021-12-17 15:10:13,239 INFO L861 garLoopResultBuilder]: At program point L424(line 424) the Hoare annotation is: true [2021-12-17 15:10:13,239 INFO L858 garLoopResultBuilder]: For program point L424-1(line 424) no Hoare annotation was computed. [2021-12-17 15:10:13,239 INFO L854 garLoopResultBuilder]: At program point L985(lines 973 987) the Hoare annotation is: (and (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= ~systemActive~0 0) (= ~pumpRunning~0 0)) [2021-12-17 15:10:13,239 INFO L858 garLoopResultBuilder]: For program point L597(lines 597 603) no Hoare annotation was computed. [2021-12-17 15:10:13,239 INFO L858 garLoopResultBuilder]: For program point L597-1(lines 597 603) no Hoare annotation was computed. [2021-12-17 15:10:13,239 INFO L858 garLoopResultBuilder]: For program point L977(lines 977 983) no Hoare annotation was computed. [2021-12-17 15:10:13,239 INFO L858 garLoopResultBuilder]: For program point L977-1(lines 977 983) no Hoare annotation was computed. [2021-12-17 15:10:13,239 INFO L854 garLoopResultBuilder]: At program point L622(lines 577 624) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse1 (= ~waterLevel~0 2)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 1)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse2 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse3) (and .cse0 (= ~systemActive~0 0) .cse3) (and .cse0 .cse1 .cse5 .cse2) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse4 (= ~methaneLevelCritical~0 0) .cse5 .cse2))) [2021-12-17 15:10:13,239 INFO L854 garLoopResultBuilder]: At program point L589(line 589) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse1 (= ~waterLevel~0 2)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 1)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse2 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse3) (and .cse0 (= ~systemActive~0 0) .cse3) (and .cse0 .cse1 .cse5 .cse2) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) .cse4 (= ~methaneLevelCritical~0 0) .cse5 .cse2))) [2021-12-17 15:10:13,239 INFO L854 garLoopResultBuilder]: At program point L552(lines 547 555) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:10:13,239 INFO L854 garLoopResultBuilder]: At program point L544(lines 540 546) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:10:13,239 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-17 15:10:13,239 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-17 15:10:13,239 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-17 15:10:13,239 INFO L854 garLoopResultBuilder]: At program point L995(lines 990 997) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:10:13,239 INFO L858 garLoopResultBuilder]: For program point L578(lines 577 624) no Hoare annotation was computed. [2021-12-17 15:10:13,239 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-17 15:10:13,240 INFO L854 garLoopResultBuilder]: At program point L479(lines 475 481) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:10:13,240 INFO L858 garLoopResultBuilder]: For program point L607(lines 607 620) no Hoare annotation was computed. [2021-12-17 15:10:13,240 INFO L858 garLoopResultBuilder]: For program point L508(lines 508 515) no Hoare annotation was computed. [2021-12-17 15:10:13,240 INFO L858 garLoopResultBuilder]: For program point L508-2(lines 508 515) no Hoare annotation was computed. [2021-12-17 15:10:13,240 INFO L854 garLoopResultBuilder]: At program point L537(lines 533 539) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:10:13,240 INFO L854 garLoopResultBuilder]: At program point L599(line 599) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse1 (= ~systemActive~0 1)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= 1 ~pumpRunning~0))) (or (and .cse0 (<= ~waterLevel~0 2) .cse1 .cse2) (and .cse0 (= ~systemActive~0 0) .cse2) (and .cse0 (<= 1 ~switchedOnBeforeTS~0) (<= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) .cse3 .cse1) (and .cse0 (= ~waterLevel~0 2) .cse3 (= 1 ~systemActive~0)))) [2021-12-17 15:10:13,240 INFO L861 garLoopResultBuilder]: At program point L628(lines 567 632) the Hoare annotation is: true [2021-12-17 15:10:13,240 INFO L854 garLoopResultBuilder]: At program point L979(line 979) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 2 ~waterLevel~0) (not (= 0 ~systemActive~0))) (and .cse0 (= ~systemActive~0 1)))) [2021-12-17 15:10:13,240 INFO L861 garLoopResultBuilder]: At program point L492(lines 484 494) the Hoare annotation is: true [2021-12-17 15:10:13,240 INFO L858 garLoopResultBuilder]: For program point L587(lines 587 593) no Hoare annotation was computed. [2021-12-17 15:10:13,240 INFO L858 garLoopResultBuilder]: For program point L587-1(lines 587 593) no Hoare annotation was computed. [2021-12-17 15:10:13,240 INFO L861 garLoopResultBuilder]: At program point L517(lines 498 520) the Hoare annotation is: true [2021-12-17 15:10:13,240 INFO L858 garLoopResultBuilder]: For program point L579(lines 579 583) no Hoare annotation was computed. [2021-12-17 15:10:13,240 INFO L854 garLoopResultBuilder]: At program point L625(lines 576 626) the Hoare annotation is: false [2021-12-17 15:10:13,240 INFO L858 garLoopResultBuilder]: For program point L613(lines 613 619) no Hoare annotation was computed. [2021-12-17 15:10:13,240 INFO L854 garLoopResultBuilder]: At program point L613-2(lines 607 620) the Hoare annotation is: (let ((.cse2 (= ~systemActive~0 1)) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (<= 1 ~pumpRunning~0))) (or (and .cse0 (<= 1 ~switchedOnBeforeTS~0) (<= ~waterLevel~0 1) .cse1 .cse2) (and .cse0 (<= ~waterLevel~0 2) .cse2 .cse3) (and .cse0 (= ~systemActive~0 0) .cse3) (and .cse0 (= ~waterLevel~0 2) .cse1 (= 1 ~systemActive~0)))) [2021-12-17 15:10:13,240 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 786 810) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)))) [2021-12-17 15:10:13,240 INFO L854 garLoopResultBuilder]: At program point L950(lines 935 953) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (<= ~waterLevel~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse1 (not (= ~waterLevel~0 2)) .cse2 .cse3) (or (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) .cse3) .cse0 .cse1 .cse2))) [2021-12-17 15:10:13,240 INFO L858 garLoopResultBuilder]: For program point L723(lines 723 729) no Hoare annotation was computed. [2021-12-17 15:10:13,240 INFO L858 garLoopResultBuilder]: For program point L944(lines 944 948) no Hoare annotation was computed. [2021-12-17 15:10:13,240 INFO L858 garLoopResultBuilder]: For program point L944-2(lines 944 948) no Hoare annotation was computed. [2021-12-17 15:10:13,240 INFO L854 garLoopResultBuilder]: At program point L868(lines 863 870) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse1 (not (= ~waterLevel~0 2)) (<= 1 ~pumpRunning~0) .cse2) (or .cse0 .cse1 .cse2))) [2021-12-17 15:10:13,241 INFO L854 garLoopResultBuilder]: At program point L800(line 800) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or (and (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:10:13,241 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 786 810) no Hoare annotation was computed. [2021-12-17 15:10:13,241 INFO L858 garLoopResultBuilder]: For program point L794(lines 794 802) no Hoare annotation was computed. [2021-12-17 15:10:13,241 INFO L854 garLoopResultBuilder]: At program point L728(lines 719 732) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1) .cse2) .cse3) (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse1 (not (= ~waterLevel~0 2)) .cse3 .cse2))) [2021-12-17 15:10:13,241 INFO L858 garLoopResultBuilder]: For program point L790(lines 790 807) no Hoare annotation was computed. [2021-12-17 15:10:13,241 INFO L854 garLoopResultBuilder]: At program point L805(line 805) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:10:13,241 INFO L858 garLoopResultBuilder]: For program point L805-1(lines 786 810) no Hoare annotation was computed. [2021-12-17 15:10:13,241 INFO L858 garLoopResultBuilder]: For program point L658-1(lines 654 665) no Hoare annotation was computed. [2021-12-17 15:10:13,241 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 654 665) no Hoare annotation was computed. [2021-12-17 15:10:13,241 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 654 665) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse5 (not (<= |old(~waterLevel~0)| 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 ~pumpRunning~0))) (.cse2 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse3 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse2 (not (= ~systemActive~0 0))) (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse1 .cse4 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse5) (or .cse0 .cse1 .cse2 .cse5) (or .cse1 .cse4 .cse2 .cse3))) [2021-12-17 15:10:13,241 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 812 836) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)))) [2021-12-17 15:10:13,241 INFO L854 garLoopResultBuilder]: At program point L826(line 826) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse1 (not (= ~waterLevel~0 2)) .cse2) (or .cse0 .cse1 .cse2))) [2021-12-17 15:10:13,241 INFO L854 garLoopResultBuilder]: At program point L822(line 822) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse1 (not (= ~waterLevel~0 2)) .cse2) (or .cse0 .cse1 .cse2))) [2021-12-17 15:10:13,241 INFO L858 garLoopResultBuilder]: For program point L820(lines 820 828) no Hoare annotation was computed. [2021-12-17 15:10:13,241 INFO L858 garLoopResultBuilder]: For program point L816(lines 816 833) no Hoare annotation was computed. [2021-12-17 15:10:13,241 INFO L854 garLoopResultBuilder]: At program point L969(lines 954 972) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse1 (not (= ~waterLevel~0 2)) .cse2) (or .cse0 .cse1 .cse2))) [2021-12-17 15:10:13,241 INFO L858 garLoopResultBuilder]: For program point L963(lines 963 967) no Hoare annotation was computed. [2021-12-17 15:10:13,241 INFO L854 garLoopResultBuilder]: At program point L738(lines 733 741) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or (not (<= 1 ~switchedOnBeforeTS~0)) .cse0 .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))) (or .cse1 (not (= ~waterLevel~0 2)) .cse2) (or .cse0 .cse1 .cse2))) [2021-12-17 15:10:13,241 INFO L858 garLoopResultBuilder]: For program point L963-2(lines 963 967) no Hoare annotation was computed. [2021-12-17 15:10:13,241 INFO L854 garLoopResultBuilder]: At program point L831(line 831) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= ~waterLevel~0 2)) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) (or (not (<= 1 ~switchedOnBeforeTS~0)) (not (<= ~waterLevel~0 1)) .cse0 (not (= ~methaneLevelCritical~0 0)) (not (<= 1 |old(~pumpRunning~0)|))))) [2021-12-17 15:10:13,241 INFO L858 garLoopResultBuilder]: For program point L831-1(lines 812 836) no Hoare annotation was computed. [2021-12-17 15:10:13,242 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 812 836) no Hoare annotation was computed. [2021-12-17 15:10:13,242 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 890 898) no Hoare annotation was computed. [2021-12-17 15:10:13,242 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 890 898) the Hoare annotation is: true [2021-12-17 15:10:13,242 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 890 898) no Hoare annotation was computed. [2021-12-17 15:10:13,246 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:10:13,248 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-17 15:10:13,289 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.12 03:10:13 BoogieIcfgContainer [2021-12-17 15:10:13,290 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-17 15:10:13,290 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-17 15:10:13,290 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-17 15:10:13,290 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-17 15:10:13,291 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:09:55" (3/4) ... [2021-12-17 15:10:13,293 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-17 15:10:13,301 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-17 15:10:13,302 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-17 15:10:13,302 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-17 15:10:13,302 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-17 15:10:13,302 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-17 15:10:13,302 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:10:13,303 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-17 15:10:13,303 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2021-12-17 15:10:13,303 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-12-17 15:10:13,308 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 55 nodes and edges [2021-12-17 15:10:13,310 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-17 15:10:13,310 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-17 15:10:13,310 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-17 15:10:13,311 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-17 15:10:13,311 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:10:13,311 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:10:13,327 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(systemActive == 0)) && (((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && ((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && (((!(1 == systemActive) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:13,327 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) && ((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && (!(\old(pumpRunning) == 0) || !(systemActive == 0))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || (((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning))) || !(\old(waterLevel) <= 1)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:13,328 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((\result == 2 && tmp == 2) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 2)) || !(systemActive == 0)) && ((((!(1 == systemActive) || (((((((1 <= switchedOnBeforeTS && waterLevel == 1) && tmp <= waterLevel) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0) && \result <= waterLevel)) || ((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && tmp <= waterLevel) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && \result <= waterLevel)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && (((((((((((((1 <= switchedOnBeforeTS && tmp < 2) && waterLevel == \old(waterLevel)) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && tmp <= waterLevel) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0) && 1 == systemActive) && \result <= waterLevel)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && tmp <= waterLevel) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0) && 1 == systemActive) && \result <= waterLevel)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && (((!(1 == systemActive) || (tmp < 2 && \result < 2)) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) <= 1))) && (((((((((((((((1 <= switchedOnBeforeTS && tmp < 2) && waterLevel == \old(waterLevel)) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0) || !(\old(waterLevel) <= 2)) || (((((((1 <= switchedOnBeforeTS && tmp < 2) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && tmp <= waterLevel) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && \result <= waterLevel)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && tmp <= waterLevel) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0) && \result <= waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || ((waterLevel <= 1 && waterLevel == \old(waterLevel)) && pumpRunning == 0)) || (((\result == 2 && waterLevel == \old(waterLevel)) && 1 <= pumpRunning) && tmp == 2)) || (((\result == 2 && waterLevel == \old(waterLevel)) && tmp == 2) && pumpRunning == \old(pumpRunning))) || !(\old(pumpRunning) == 0))) && ((((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && tmp <= waterLevel) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && \result <= waterLevel)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && tmp <= waterLevel) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0) && \result <= waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:13,328 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((waterLevel == 1 || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) && (!(\old(pumpRunning) == 0) || !(systemActive == 0))) && ((((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0) && 1 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) || !(1 <= \old(switchedOnBeforeTS))) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0)) || !(1 == systemActive)) || (((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0)) || (((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning)))) && (((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0) && 1 == systemActive) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((!(1 == systemActive) || ((((1 <= switchedOnBeforeTS && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) || 0 == methaneLevelCritical)) && ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || ((waterLevel == 2 && waterLevel == \old(waterLevel)) && 1 <= pumpRunning)) || !(\old(pumpRunning) == 0))) && ((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:13,328 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(systemActive == 0)) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= \old(pumpRunning)))) && ((!(1 == systemActive) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:13,329 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0) && \result <= waterLevel) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && \result <= waterLevel)) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && \result <= waterLevel) || !(1 == systemActive)) || ((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0) && \result <= waterLevel)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && ((((((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0) && \result <= waterLevel) || !(\old(waterLevel) <= 2)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && \result <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp)) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0)) || !(\old(waterLevel) <= 1)) || 0 == methaneLevelCritical) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0) && 1 == systemActive) && \result <= waterLevel)) || !(1 <= \old(pumpRunning)))) && (((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && (((\result == 2 || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 2)) || !(systemActive == 0))) && (((((waterLevel == \old(waterLevel) && \result < 2) && pumpRunning == 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) <= 1))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0) && 1 == systemActive) && \result <= waterLevel))) && ((((!(1 == systemActive) || ((\result == 2 && waterLevel == \old(waterLevel)) && 1 <= pumpRunning)) || !(\old(pumpRunning) == 0)) || ((\result == 2 && waterLevel == \old(waterLevel)) && pumpRunning == 0)) || !(\old(waterLevel) == 2)) [2021-12-17 15:10:13,329 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(waterLevel) <= 2) || (((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((1 <= switchedOnBeforeTS && waterLevel <= 1) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((!(1 == systemActive) || (((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && (!(\old(pumpRunning) == 0) || !(systemActive == 0))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && systemActive == 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || ((((1 <= switchedOnBeforeTS && waterLevel <= 1) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && systemActive == 1)) || !(\old(waterLevel) <= 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:13,329 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((waterLevel == 1 || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(pumpRunning)))) && (!(\old(pumpRunning) == 0) || !(systemActive == 0))) && ((((((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && systemActive == 1)) || !(\old(waterLevel) <= 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((!(1 == systemActive) || (((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && systemActive == 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((((!(\old(waterLevel) <= 2) || ((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(pumpRunning))) [2021-12-17 15:10:13,329 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((!(1 == systemActive) || !(waterLevel == 2)) || !(\old(pumpRunning) == 0))) && ((!(waterLevel <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:10:13,330 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(waterLevel <= 1) || !(1 == systemActive)) || (\result == 1 && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) && ((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((!(1 == systemActive) || !(waterLevel == 2)) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) [2021-12-17 15:10:13,332 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((!(1 == systemActive) || !(waterLevel == 2)) || !(\old(pumpRunning) == 0))) && ((!(waterLevel <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:10:13,332 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((!(1 == systemActive) || !(waterLevel == 2)) || !(\old(pumpRunning) == 0)) || pumpRunning == 0)) && (((((\result == 0 && tmp___0 == 0) && pumpRunning == 0) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:10:13,332 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((!(1 == systemActive) || !(waterLevel == 2)) || 1 <= pumpRunning) || !(\old(pumpRunning) == 0))) && ((!(waterLevel <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:10:13,361 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-17 15:10:13,361 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-17 15:10:13,362 INFO L158 Benchmark]: Toolchain (without parser) took 18542.84ms. Allocated memory was 86.0MB in the beginning and 243.3MB in the end (delta: 157.3MB). Free memory was 51.6MB in the beginning and 161.3MB in the end (delta: -109.7MB). Peak memory consumption was 47.6MB. Max. memory is 16.1GB. [2021-12-17 15:10:13,362 INFO L158 Benchmark]: CDTParser took 0.16ms. Allocated memory is still 86.0MB. Free memory was 58.3MB in the beginning and 58.2MB in the end (delta: 28.1kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-17 15:10:13,362 INFO L158 Benchmark]: CACSL2BoogieTranslator took 393.81ms. Allocated memory was 86.0MB in the beginning and 104.9MB in the end (delta: 18.9MB). Free memory was 51.3MB in the beginning and 73.7MB in the end (delta: -22.4MB). Peak memory consumption was 7.8MB. Max. memory is 16.1GB. [2021-12-17 15:10:13,363 INFO L158 Benchmark]: Boogie Procedure Inliner took 65.73ms. Allocated memory is still 104.9MB. Free memory was 73.7MB in the beginning and 71.3MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-17 15:10:13,363 INFO L158 Benchmark]: Boogie Preprocessor took 42.00ms. Allocated memory is still 104.9MB. Free memory was 71.3MB in the beginning and 69.3MB in the end (delta: 1.9MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-17 15:10:13,363 INFO L158 Benchmark]: RCFGBuilder took 384.74ms. Allocated memory is still 104.9MB. Free memory was 69.3MB in the beginning and 78.4MB in the end (delta: -9.1MB). Peak memory consumption was 19.3MB. Max. memory is 16.1GB. [2021-12-17 15:10:13,363 INFO L158 Benchmark]: TraceAbstraction took 17579.42ms. Allocated memory was 104.9MB in the beginning and 243.3MB in the end (delta: 138.4MB). Free memory was 78.0MB in the beginning and 168.6MB in the end (delta: -90.6MB). Peak memory consumption was 144.5MB. Max. memory is 16.1GB. [2021-12-17 15:10:13,364 INFO L158 Benchmark]: Witness Printer took 71.20ms. Allocated memory is still 243.3MB. Free memory was 168.6MB in the beginning and 161.3MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-17 15:10:13,365 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16ms. Allocated memory is still 86.0MB. Free memory was 58.3MB in the beginning and 58.2MB in the end (delta: 28.1kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 393.81ms. Allocated memory was 86.0MB in the beginning and 104.9MB in the end (delta: 18.9MB). Free memory was 51.3MB in the beginning and 73.7MB in the end (delta: -22.4MB). Peak memory consumption was 7.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 65.73ms. Allocated memory is still 104.9MB. Free memory was 73.7MB in the beginning and 71.3MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 42.00ms. Allocated memory is still 104.9MB. Free memory was 71.3MB in the beginning and 69.3MB in the end (delta: 1.9MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 384.74ms. Allocated memory is still 104.9MB. Free memory was 69.3MB in the beginning and 78.4MB in the end (delta: -9.1MB). Peak memory consumption was 19.3MB. Max. memory is 16.1GB. * TraceAbstraction took 17579.42ms. Allocated memory was 104.9MB in the beginning and 243.3MB in the end (delta: 138.4MB). Free memory was 78.0MB in the beginning and 168.6MB in the end (delta: -90.6MB). Peak memory consumption was 144.5MB. Max. memory is 16.1GB. * Witness Printer took 71.20ms. Allocated memory is still 243.3MB. Free memory was 168.6MB in the beginning and 161.3MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 561]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 109 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 17.5s, OverallIterations: 12, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 4.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 9.6s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3336 SdHoareTripleChecker+Valid, 2.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3291 mSDsluCounter, 5791 SdHoareTripleChecker+Invalid, 2.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3977 mSDsCounter, 1286 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4614 IncrementalHoareTripleChecker+Invalid, 5900 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1286 mSolverCounterUnsat, 1814 mSDtfsCounter, 4614 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 996 GetRequests, 802 SyntacticMatches, 6 SemanticMatches, 188 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1394 ImplicationChecksByTransitivity, 1.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1193occurred in iteration=8, InterpolantAutomatonStates: 162, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 12 MinimizatonAttempts, 423 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 51 LocationsWithAnnotation, 3239 PreInvPairs, 3727 NumberOfFragments, 4610 HoareAnnotationTreeSize, 3239 FomulaSimplifications, 10846 FormulaSimplificationTreeSizeReduction, 0.7s HoareSimplificationTime, 51 FomulaSimplificationsInter, 52586 FormulaSimplificationTreeSizeReductionInter, 8.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 2.3s InterpolantComputationTime, 1256 NumberOfCodeBlocks, 1256 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 1544 ConstructedInterpolants, 0 QuantifiedInterpolants, 2999 SizeOfPredicates, 6 NumberOfNonLiveVariables, 1234 ConjunctsInSsa, 21 ConjunctsInUnsatCore, 16 InterpolantComputations, 10 PerfectInterpolantSequences, 870/962 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 678]: Loop Invariant Derived loop invariant: (((((((((((!(\old(waterLevel) <= 2) || (((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((1 <= switchedOnBeforeTS && waterLevel <= 1) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((!(1 == systemActive) || (((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && (!(\old(pumpRunning) == 0) || !(systemActive == 0))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && systemActive == 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || ((((1 <= switchedOnBeforeTS && waterLevel <= 1) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result)) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && systemActive == 1)) || !(\old(waterLevel) <= 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 990]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 935]: Loop Invariant Derived loop invariant: (((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((!(1 == systemActive) || !(waterLevel == 2)) || !(\old(pumpRunning) == 0)) || pumpRunning == 0)) && (((((\result == 0 && tmp___0 == 0) && pumpRunning == 0) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 540]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 547]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 557]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(systemActive == 0)) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(1 <= \old(pumpRunning)))) && ((!(1 == systemActive) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 418]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 428]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 998]: Loop Invariant Derived loop invariant: (((((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(systemActive == 0)) && (((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && ((((!(\old(waterLevel) <= 2) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && (((!(1 == systemActive) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 863]: Loop Invariant Derived loop invariant: (((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((!(1 == systemActive) || !(waterLevel == 2)) || 1 <= pumpRunning) || !(\old(pumpRunning) == 0))) && ((!(waterLevel <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 642]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || ((1 <= switchedOnBeforeTS && waterLevel == 1) && pumpRunning == \old(pumpRunning))) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) && ((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && (!(\old(pumpRunning) == 0) || !(systemActive == 0))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || (((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && pumpRunning == \old(pumpRunning))) || !(\old(waterLevel) <= 1)) || ((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 567]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 498]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 484]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 879]: Loop Invariant Derived loop invariant: (((((((((waterLevel == 1 || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(pumpRunning)))) && (!(\old(pumpRunning) == 0) || !(systemActive == 0))) && ((((((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && systemActive == 1)) || !(\old(waterLevel) <= 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || !(\old(pumpRunning) == 0))) && (((!(1 == systemActive) || (((1 <= switchedOnBeforeTS && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && 1 <= pumpRunning) && pumpRunning == \old(pumpRunning)) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && systemActive == 1)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((((!(\old(waterLevel) <= 2) || ((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 719]: Loop Invariant Derived loop invariant: ((((!(waterLevel <= 1) || !(1 == systemActive)) || (\result == 1 && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) && ((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((!(1 == systemActive) || !(waterLevel == 2)) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) - InvariantResult [Line: 710]: Loop Invariant Derived loop invariant: (((((((((((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0) && \result <= waterLevel) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && \result <= waterLevel)) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && \result <= waterLevel) || !(1 == systemActive)) || ((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0) && \result <= waterLevel)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && ((((((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0) && \result <= waterLevel) || !(\old(waterLevel) <= 2)) || ((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && \result <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp)) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((((!(1 <= \old(switchedOnBeforeTS)) || !(1 == systemActive)) || ((((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0)) || !(\old(waterLevel) <= 1)) || 0 == methaneLevelCritical) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0) && 1 == systemActive) && \result <= waterLevel)) || !(1 <= \old(pumpRunning)))) && (((waterLevel == \old(waterLevel) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && (((\result == 2 || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 2)) || !(systemActive == 0))) && (((((waterLevel == \old(waterLevel) && \result < 2) && pumpRunning == 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) <= 1))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning))) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0) && 1 == systemActive) && \result <= waterLevel))) && ((((!(1 == systemActive) || ((\result == 2 && waterLevel == \old(waterLevel)) && 1 <= pumpRunning)) || !(\old(pumpRunning) == 0)) || ((\result == 2 && waterLevel == \old(waterLevel)) && pumpRunning == 0)) || !(\old(waterLevel) == 2)) - InvariantResult [Line: 1008]: Loop Invariant Derived loop invariant: (((((((((((\result == 2 && tmp == 2) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 2)) || !(systemActive == 0)) && ((((!(1 == systemActive) || (((((((1 <= switchedOnBeforeTS && waterLevel == 1) && tmp <= waterLevel) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0) && \result <= waterLevel)) || ((((((((1 <= switchedOnBeforeTS && waterLevel == 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && tmp <= waterLevel) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && \result <= waterLevel)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning)))) && (((((((((((((1 <= switchedOnBeforeTS && tmp < 2) && waterLevel == \old(waterLevel)) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && tmp <= waterLevel) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0) && 1 == systemActive) && \result <= waterLevel)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || ((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && tmp <= waterLevel) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0) && 1 == systemActive) && \result <= waterLevel)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && (((!(1 == systemActive) || (tmp < 2 && \result < 2)) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) <= 1))) && (((((((((((((((1 <= switchedOnBeforeTS && tmp < 2) && waterLevel == \old(waterLevel)) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0) || !(\old(waterLevel) <= 2)) || (((((((1 <= switchedOnBeforeTS && tmp < 2) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && \result < 2) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && tmp <= waterLevel) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && \result <= waterLevel)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && tmp <= waterLevel) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0) && \result <= waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || !(1 == systemActive)) || ((waterLevel <= 1 && waterLevel == \old(waterLevel)) && pumpRunning == 0)) || (((\result == 2 && waterLevel == \old(waterLevel)) && 1 <= pumpRunning) && tmp == 2)) || (((\result == 2 && waterLevel == \old(waterLevel)) && tmp == 2) && pumpRunning == \old(pumpRunning))) || !(\old(pumpRunning) == 0))) && ((((((!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && tmp <= waterLevel) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && \result <= waterLevel)) || (((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && tmp <= waterLevel) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0) && \result <= waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 576]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 733]: Loop Invariant Derived loop invariant: ((((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((!(1 == systemActive) || !(waterLevel == 2)) || !(\old(pumpRunning) == 0))) && ((!(waterLevel <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 838]: Loop Invariant Derived loop invariant: ((((((((((waterLevel == 1 || !(1 == systemActive)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) && (!(\old(pumpRunning) == 0) || !(systemActive == 0))) && ((((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0) && 1 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || (((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && (((((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) || !(1 <= \old(switchedOnBeforeTS))) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0)) || !(1 == systemActive)) || (((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0)) || (((((1 <= switchedOnBeforeTS && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning)))) && (((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && !(0 == methaneLevelCritical)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0) && 1 == systemActive) || !(\old(waterLevel) == 1)) || !(1 <= \old(switchedOnBeforeTS))) || !(1 == systemActive)) || 0 == methaneLevelCritical) || !(1 <= \old(pumpRunning)))) && ((((!(1 == systemActive) || ((((1 <= switchedOnBeforeTS && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) || 0 == methaneLevelCritical)) && ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || ((waterLevel == 2 && waterLevel == \old(waterLevel)) && 1 <= pumpRunning)) || !(\old(pumpRunning) == 0))) && ((((((((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) || (((((((waterLevel + 1 <= \old(waterLevel) && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && methaneLevelCritical == \result) && methaneLevelCritical == \result) && methaneLevelCritical == tmp) && pumpRunning == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 577]: Loop Invariant Derived loop invariant: ((((((splverifierCounter == 0 && waterLevel == 2) && systemActive == 1) && pumpRunning == 0) || (((splverifierCounter == 0 && waterLevel <= 1) && systemActive == 1) && pumpRunning == 0)) || ((splverifierCounter == 0 && systemActive == 0) && pumpRunning == 0)) || (((splverifierCounter == 0 && waterLevel == 2) && 1 <= pumpRunning) && systemActive == 1)) || (((((splverifierCounter == 0 && 1 <= switchedOnBeforeTS) && waterLevel <= 1) && methaneLevelCritical == 0) && 1 <= pumpRunning) && systemActive == 1) - InvariantResult [Line: 954]: Loop Invariant Derived loop invariant: ((((((!(1 <= switchedOnBeforeTS) || !(waterLevel <= 1)) || !(1 == systemActive)) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((!(1 == systemActive) || !(waterLevel == 2)) || !(\old(pumpRunning) == 0))) && ((!(waterLevel <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 973]: Loop Invariant Derived loop invariant: (splverifierCounter == 0 && systemActive == 0) && pumpRunning == 0 - InvariantResult [Line: 475]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 RESULT: Ultimate proved your program to be correct! [2021-12-17 15:10:13,431 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE