./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version ff03de63 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 603cfb64133b588a2e9c81e31ac984484d295feb0a468539180131e3ac5a47d6 --- Real Ultimate output --- This is Ultimate 0.2.2-dev-ff03de6 [2021-12-21 13:16:48,888 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-21 13:16:48,890 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-21 13:16:48,918 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-21 13:16:48,918 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-21 13:16:48,919 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-21 13:16:48,920 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-21 13:16:48,922 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-21 13:16:48,923 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-21 13:16:48,924 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-21 13:16:48,924 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-21 13:16:48,936 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-21 13:16:48,937 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-21 13:16:48,937 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-21 13:16:48,938 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-21 13:16:48,939 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-21 13:16:48,939 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-21 13:16:48,940 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-21 13:16:48,941 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-21 13:16:48,942 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-21 13:16:48,943 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-21 13:16:48,947 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-21 13:16:48,947 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-21 13:16:48,949 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-21 13:16:48,951 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-21 13:16:48,951 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-21 13:16:48,951 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-21 13:16:48,952 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-21 13:16:48,952 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-21 13:16:48,953 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-21 13:16:48,953 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-21 13:16:48,954 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-21 13:16:48,954 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-21 13:16:48,955 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-21 13:16:48,955 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-21 13:16:48,955 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-21 13:16:48,956 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-21 13:16:48,956 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-21 13:16:48,956 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-21 13:16:48,957 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-21 13:16:48,958 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-21 13:16:48,964 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-21 13:16:48,986 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-21 13:16:48,987 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-21 13:16:48,987 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-21 13:16:48,987 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-21 13:16:48,988 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-21 13:16:48,988 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-21 13:16:48,989 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-21 13:16:48,989 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-21 13:16:48,989 INFO L138 SettingsManager]: * Use SBE=true [2021-12-21 13:16:48,989 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-21 13:16:48,990 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-21 13:16:48,990 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-21 13:16:48,990 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-21 13:16:48,990 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-21 13:16:48,990 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-21 13:16:48,991 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-21 13:16:48,991 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-21 13:16:48,996 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-21 13:16:48,996 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-21 13:16:48,997 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-21 13:16:48,997 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-21 13:16:48,997 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-21 13:16:48,997 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-21 13:16:48,997 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-21 13:16:48,997 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 13:16:48,997 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-21 13:16:48,998 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-21 13:16:48,998 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-21 13:16:48,998 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-21 13:16:48,998 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-21 13:16:48,998 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-21 13:16:48,998 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-21 13:16:48,998 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-21 13:16:48,999 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-21 13:16:48,999 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 603cfb64133b588a2e9c81e31ac984484d295feb0a468539180131e3ac5a47d6 [2021-12-21 13:16:49,197 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-21 13:16:49,229 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-21 13:16:49,231 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-21 13:16:49,231 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-21 13:16:49,233 INFO L275 PluginConnector]: CDTParser initialized [2021-12-21 13:16:49,234 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c [2021-12-21 13:16:49,271 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0220f2782/46e87a09c8c44a4cb7afe6c706faf1ec/FLAG8c07bfd1d [2021-12-21 13:16:49,661 INFO L306 CDTParser]: Found 1 translation units. [2021-12-21 13:16:49,661 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c [2021-12-21 13:16:49,672 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0220f2782/46e87a09c8c44a4cb7afe6c706faf1ec/FLAG8c07bfd1d [2021-12-21 13:16:50,035 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0220f2782/46e87a09c8c44a4cb7afe6c706faf1ec [2021-12-21 13:16:50,037 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-21 13:16:50,038 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-21 13:16:50,039 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-21 13:16:50,039 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-21 13:16:50,045 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-21 13:16:50,045 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 01:16:50" (1/1) ... [2021-12-21 13:16:50,046 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4ceca685 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:50, skipping insertion in model container [2021-12-21 13:16:50,046 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 01:16:50" (1/1) ... [2021-12-21 13:16:50,051 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-21 13:16:50,078 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-21 13:16:50,197 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c[3064,3077] [2021-12-21 13:16:50,273 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 13:16:50,281 INFO L203 MainTranslator]: Completed pre-run [2021-12-21 13:16:50,314 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c[3064,3077] [2021-12-21 13:16:50,342 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 13:16:50,360 INFO L208 MainTranslator]: Completed translation [2021-12-21 13:16:50,361 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:50 WrapperNode [2021-12-21 13:16:50,361 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-21 13:16:50,362 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-21 13:16:50,362 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-21 13:16:50,362 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-21 13:16:50,367 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:50" (1/1) ... [2021-12-21 13:16:50,389 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:50" (1/1) ... [2021-12-21 13:16:50,416 INFO L137 Inliner]: procedures = 56, calls = 158, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 264 [2021-12-21 13:16:50,420 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-21 13:16:50,421 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-21 13:16:50,421 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-21 13:16:50,421 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-21 13:16:50,426 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:50" (1/1) ... [2021-12-21 13:16:50,427 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:50" (1/1) ... [2021-12-21 13:16:50,437 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:50" (1/1) ... [2021-12-21 13:16:50,438 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:50" (1/1) ... [2021-12-21 13:16:50,442 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:50" (1/1) ... [2021-12-21 13:16:50,452 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:50" (1/1) ... [2021-12-21 13:16:50,453 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:50" (1/1) ... [2021-12-21 13:16:50,455 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-21 13:16:50,458 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-21 13:16:50,459 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-21 13:16:50,459 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-21 13:16:50,460 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:50" (1/1) ... [2021-12-21 13:16:50,465 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 13:16:50,475 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:16:50,500 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-21 13:16:50,520 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-21 13:16:50,531 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-21 13:16:50,531 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-21 13:16:50,532 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-21 13:16:50,532 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-21 13:16:50,532 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-21 13:16:50,532 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-21 13:16:50,532 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-21 13:16:50,532 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-21 13:16:50,532 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-21 13:16:50,533 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-12-21 13:16:50,533 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-12-21 13:16:50,533 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-12-21 13:16:50,533 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-12-21 13:16:50,533 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-12-21 13:16:50,534 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-12-21 13:16:50,534 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-21 13:16:50,534 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-21 13:16:50,534 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-21 13:16:50,534 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-21 13:16:50,534 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-21 13:16:50,602 INFO L234 CfgBuilder]: Building ICFG [2021-12-21 13:16:50,603 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-21 13:16:50,868 INFO L275 CfgBuilder]: Performing block encoding [2021-12-21 13:16:50,873 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-21 13:16:50,874 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-21 13:16:50,875 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:16:50 BoogieIcfgContainer [2021-12-21 13:16:50,876 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-21 13:16:50,877 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-21 13:16:50,877 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-21 13:16:50,884 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-21 13:16:50,885 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.12 01:16:50" (1/3) ... [2021-12-21 13:16:50,885 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7807eb5f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 01:16:50, skipping insertion in model container [2021-12-21 13:16:50,885 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:50" (2/3) ... [2021-12-21 13:16:50,886 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7807eb5f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 01:16:50, skipping insertion in model container [2021-12-21 13:16:50,886 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:16:50" (3/3) ... [2021-12-21 13:16:50,887 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product45.cil.c [2021-12-21 13:16:50,890 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-21 13:16:50,891 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-21 13:16:50,920 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-21 13:16:50,928 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-21 13:16:50,928 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-21 13:16:50,943 INFO L276 IsEmpty]: Start isEmpty. Operand has 98 states, 74 states have (on average 1.364864864864865) internal successors, (101), 82 states have internal predecessors, (101), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2021-12-21 13:16:50,948 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-12-21 13:16:50,948 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:50,949 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:50,949 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:50,953 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:50,953 INFO L85 PathProgramCache]: Analyzing trace with hash -1310639887, now seen corresponding path program 1 times [2021-12-21 13:16:50,958 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:50,959 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1029999983] [2021-12-21 13:16:50,959 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:50,960 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:51,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:51,140 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-21 13:16:51,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:51,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:16:51,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:51,170 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:16:51,171 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:51,171 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1029999983] [2021-12-21 13:16:51,172 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1029999983] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:51,172 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:51,172 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-21 13:16:51,173 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [733847183] [2021-12-21 13:16:51,174 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:51,177 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-21 13:16:51,177 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:51,203 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-21 13:16:51,205 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-21 13:16:51,207 INFO L87 Difference]: Start difference. First operand has 98 states, 74 states have (on average 1.364864864864865) internal successors, (101), 82 states have internal predecessors, (101), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-21 13:16:51,247 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:51,247 INFO L93 Difference]: Finished difference Result 187 states and 252 transitions. [2021-12-21 13:16:51,248 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-21 13:16:51,249 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-12-21 13:16:51,250 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:51,262 INFO L225 Difference]: With dead ends: 187 [2021-12-21 13:16:51,262 INFO L226 Difference]: Without dead ends: 89 [2021-12-21 13:16:51,266 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-21 13:16:51,269 INFO L933 BasicCegarLoop]: 123 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 123 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:51,271 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 123 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:16:51,324 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89 states. [2021-12-21 13:16:51,349 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89 to 89. [2021-12-21 13:16:51,351 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 89 states, 67 states have (on average 1.2985074626865671) internal successors, (87), 74 states have internal predecessors, (87), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-21 13:16:51,357 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89 states to 89 states and 114 transitions. [2021-12-21 13:16:51,358 INFO L78 Accepts]: Start accepts. Automaton has 89 states and 114 transitions. Word has length 32 [2021-12-21 13:16:51,359 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:51,359 INFO L470 AbstractCegarLoop]: Abstraction has 89 states and 114 transitions. [2021-12-21 13:16:51,359 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-21 13:16:51,359 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 114 transitions. [2021-12-21 13:16:51,363 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-12-21 13:16:51,363 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:51,363 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:51,364 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-21 13:16:51,365 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:51,365 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:51,365 INFO L85 PathProgramCache]: Analyzing trace with hash -527547429, now seen corresponding path program 1 times [2021-12-21 13:16:51,366 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:51,366 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1979445945] [2021-12-21 13:16:51,366 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:51,366 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:51,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:51,449 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-21 13:16:51,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:51,454 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-21 13:16:51,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:51,463 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:16:51,464 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:51,464 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1979445945] [2021-12-21 13:16:51,464 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1979445945] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:51,464 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:51,465 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-21 13:16:51,465 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [338399223] [2021-12-21 13:16:51,465 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:51,466 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-21 13:16:51,466 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:51,467 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 13:16:51,467 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:16:51,468 INFO L87 Difference]: Start difference. First operand 89 states and 114 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-21 13:16:51,479 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:51,481 INFO L93 Difference]: Finished difference Result 143 states and 183 transitions. [2021-12-21 13:16:51,482 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 13:16:51,483 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2021-12-21 13:16:51,483 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:51,485 INFO L225 Difference]: With dead ends: 143 [2021-12-21 13:16:51,485 INFO L226 Difference]: Without dead ends: 80 [2021-12-21 13:16:51,488 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:16:51,490 INFO L933 BasicCegarLoop]: 101 mSDtfsCounter, 12 mSDsluCounter, 85 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 186 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:51,491 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [15 Valid, 186 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:16:51,492 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2021-12-21 13:16:51,498 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 80. [2021-12-21 13:16:51,501 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 80 states, 61 states have (on average 1.3114754098360655) internal successors, (80), 68 states have internal predecessors, (80), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2021-12-21 13:16:51,501 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 102 transitions. [2021-12-21 13:16:51,501 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 102 transitions. Word has length 33 [2021-12-21 13:16:51,502 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:51,502 INFO L470 AbstractCegarLoop]: Abstraction has 80 states and 102 transitions. [2021-12-21 13:16:51,502 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-21 13:16:51,503 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 102 transitions. [2021-12-21 13:16:51,506 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2021-12-21 13:16:51,507 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:51,507 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:51,507 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-21 13:16:51,508 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:51,508 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:51,508 INFO L85 PathProgramCache]: Analyzing trace with hash 671106305, now seen corresponding path program 1 times [2021-12-21 13:16:51,508 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:51,509 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [27567649] [2021-12-21 13:16:51,509 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:51,509 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:51,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:51,580 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-21 13:16:51,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:51,592 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-12-21 13:16:51,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:51,597 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:16:51,598 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:51,598 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [27567649] [2021-12-21 13:16:51,598 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [27567649] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:51,599 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:51,599 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-21 13:16:51,599 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1166313711] [2021-12-21 13:16:51,599 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:51,600 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-21 13:16:51,600 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:51,600 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 13:16:51,601 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:16:51,601 INFO L87 Difference]: Start difference. First operand 80 states and 102 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-21 13:16:51,618 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:51,620 INFO L93 Difference]: Finished difference Result 152 states and 197 transitions. [2021-12-21 13:16:51,621 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 13:16:51,621 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2021-12-21 13:16:51,622 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:51,624 INFO L225 Difference]: With dead ends: 152 [2021-12-21 13:16:51,624 INFO L226 Difference]: Without dead ends: 80 [2021-12-21 13:16:51,626 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:16:51,628 INFO L933 BasicCegarLoop]: 100 mSDtfsCounter, 79 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 100 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:51,629 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [79 Valid, 100 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:16:51,630 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2021-12-21 13:16:51,634 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 80. [2021-12-21 13:16:51,636 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 80 states, 61 states have (on average 1.2950819672131149) internal successors, (79), 68 states have internal predecessors, (79), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2021-12-21 13:16:51,639 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 101 transitions. [2021-12-21 13:16:51,639 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 101 transitions. Word has length 37 [2021-12-21 13:16:51,641 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:51,641 INFO L470 AbstractCegarLoop]: Abstraction has 80 states and 101 transitions. [2021-12-21 13:16:51,641 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-21 13:16:51,642 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 101 transitions. [2021-12-21 13:16:51,642 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2021-12-21 13:16:51,642 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:51,643 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:51,643 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-21 13:16:51,643 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:51,643 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:51,644 INFO L85 PathProgramCache]: Analyzing trace with hash -488472773, now seen corresponding path program 1 times [2021-12-21 13:16:51,644 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:51,644 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [589665956] [2021-12-21 13:16:51,644 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:51,644 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:51,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:51,677 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-21 13:16:51,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:51,683 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-21 13:16:51,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:51,697 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:16:51,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:51,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2021-12-21 13:16:51,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:51,704 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:16:51,705 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:51,705 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [589665956] [2021-12-21 13:16:51,705 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [589665956] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:51,705 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:51,705 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-21 13:16:51,706 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [505584337] [2021-12-21 13:16:51,706 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:51,706 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-21 13:16:51,706 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:51,707 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 13:16:51,707 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 13:16:51,707 INFO L87 Difference]: Start difference. First operand 80 states and 101 transitions. Second operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-21 13:16:51,901 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:51,901 INFO L93 Difference]: Finished difference Result 235 states and 297 transitions. [2021-12-21 13:16:51,904 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:16:51,905 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 47 [2021-12-21 13:16:51,905 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:51,906 INFO L225 Difference]: With dead ends: 235 [2021-12-21 13:16:51,906 INFO L226 Difference]: Without dead ends: 163 [2021-12-21 13:16:51,906 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2021-12-21 13:16:51,907 INFO L933 BasicCegarLoop]: 131 mSDtfsCounter, 187 mSDsluCounter, 175 mSDsCounter, 0 mSdLazyCounter, 101 mSolverCounterSat, 54 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 190 SdHoareTripleChecker+Valid, 306 SdHoareTripleChecker+Invalid, 155 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 54 IncrementalHoareTripleChecker+Valid, 101 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:51,908 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [190 Valid, 306 Invalid, 155 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [54 Valid, 101 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-21 13:16:51,908 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 163 states. [2021-12-21 13:16:51,917 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 163 to 157. [2021-12-21 13:16:51,918 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 120 states have (on average 1.2583333333333333) internal successors, (151), 128 states have internal predecessors, (151), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2021-12-21 13:16:51,919 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 192 transitions. [2021-12-21 13:16:51,919 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 192 transitions. Word has length 47 [2021-12-21 13:16:51,921 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:51,921 INFO L470 AbstractCegarLoop]: Abstraction has 157 states and 192 transitions. [2021-12-21 13:16:51,921 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-21 13:16:51,921 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 192 transitions. [2021-12-21 13:16:51,922 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2021-12-21 13:16:51,924 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:51,924 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:51,924 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-21 13:16:51,924 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:51,925 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:51,925 INFO L85 PathProgramCache]: Analyzing trace with hash 1464828133, now seen corresponding path program 1 times [2021-12-21 13:16:51,927 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:51,927 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [866065775] [2021-12-21 13:16:51,927 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:51,927 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:51,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:51,975 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-21 13:16:51,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:51,980 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-21 13:16:51,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:51,996 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:16:51,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:51,998 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-12-21 13:16:51,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,000 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:16:52,000 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:52,001 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [866065775] [2021-12-21 13:16:52,001 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [866065775] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:52,001 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:52,001 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-21 13:16:52,001 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1768364991] [2021-12-21 13:16:52,001 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:52,002 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-21 13:16:52,002 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:52,002 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-21 13:16:52,002 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-21 13:16:52,002 INFO L87 Difference]: Start difference. First operand 157 states and 192 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-21 13:16:52,121 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:52,121 INFO L93 Difference]: Finished difference Result 324 states and 404 transitions. [2021-12-21 13:16:52,121 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:16:52,121 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 53 [2021-12-21 13:16:52,123 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:52,126 INFO L225 Difference]: With dead ends: 324 [2021-12-21 13:16:52,126 INFO L226 Difference]: Without dead ends: 175 [2021-12-21 13:16:52,127 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2021-12-21 13:16:52,131 INFO L933 BasicCegarLoop]: 91 mSDtfsCounter, 176 mSDsluCounter, 193 mSDsCounter, 0 mSdLazyCounter, 90 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 180 SdHoareTripleChecker+Valid, 284 SdHoareTripleChecker+Invalid, 137 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 90 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:52,131 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [180 Valid, 284 Invalid, 137 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 90 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:16:52,133 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 175 states. [2021-12-21 13:16:52,152 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 175 to 159. [2021-12-21 13:16:52,152 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 159 states, 122 states have (on average 1.2540983606557377) internal successors, (153), 130 states have internal predecessors, (153), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2021-12-21 13:16:52,153 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 159 states to 159 states and 194 transitions. [2021-12-21 13:16:52,153 INFO L78 Accepts]: Start accepts. Automaton has 159 states and 194 transitions. Word has length 53 [2021-12-21 13:16:52,153 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:52,153 INFO L470 AbstractCegarLoop]: Abstraction has 159 states and 194 transitions. [2021-12-21 13:16:52,154 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-21 13:16:52,154 INFO L276 IsEmpty]: Start isEmpty. Operand 159 states and 194 transitions. [2021-12-21 13:16:52,154 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2021-12-21 13:16:52,154 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:52,154 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:52,154 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-21 13:16:52,154 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:52,155 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:52,155 INFO L85 PathProgramCache]: Analyzing trace with hash 1042126307, now seen corresponding path program 1 times [2021-12-21 13:16:52,155 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:52,155 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1486105326] [2021-12-21 13:16:52,155 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:52,155 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:52,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-21 13:16:52,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,198 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-21 13:16:52,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:16:52,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,211 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-12-21 13:16:52,212 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,220 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-21 13:16:52,221 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:52,221 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1486105326] [2021-12-21 13:16:52,221 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1486105326] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:52,221 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:52,221 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-21 13:16:52,221 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1377092601] [2021-12-21 13:16:52,221 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:52,222 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-21 13:16:52,222 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:52,222 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-21 13:16:52,222 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:16:52,223 INFO L87 Difference]: Start difference. First operand 159 states and 194 transitions. Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-21 13:16:52,414 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:52,414 INFO L93 Difference]: Finished difference Result 322 states and 394 transitions. [2021-12-21 13:16:52,414 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-21 13:16:52,415 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) Word has length 53 [2021-12-21 13:16:52,415 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:52,416 INFO L225 Difference]: With dead ends: 322 [2021-12-21 13:16:52,416 INFO L226 Difference]: Without dead ends: 171 [2021-12-21 13:16:52,416 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2021-12-21 13:16:52,417 INFO L933 BasicCegarLoop]: 101 mSDtfsCounter, 120 mSDsluCounter, 348 mSDsCounter, 0 mSdLazyCounter, 205 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 127 SdHoareTripleChecker+Valid, 449 SdHoareTripleChecker+Invalid, 240 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 205 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:52,417 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [127 Valid, 449 Invalid, 240 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 205 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:16:52,417 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 171 states. [2021-12-21 13:16:52,424 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 171 to 157. [2021-12-21 13:16:52,424 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 120 states have (on average 1.225) internal successors, (147), 128 states have internal predecessors, (147), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2021-12-21 13:16:52,425 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 188 transitions. [2021-12-21 13:16:52,425 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 188 transitions. Word has length 53 [2021-12-21 13:16:52,425 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:52,425 INFO L470 AbstractCegarLoop]: Abstraction has 157 states and 188 transitions. [2021-12-21 13:16:52,425 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-21 13:16:52,425 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 188 transitions. [2021-12-21 13:16:52,426 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2021-12-21 13:16:52,426 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:52,426 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:52,426 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-21 13:16:52,426 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:52,426 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:52,427 INFO L85 PathProgramCache]: Analyzing trace with hash -2072494715, now seen corresponding path program 1 times [2021-12-21 13:16:52,427 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:52,427 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [515191433] [2021-12-21 13:16:52,427 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:52,427 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:52,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,460 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-21 13:16:52,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,464 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-21 13:16:52,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,493 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:16:52,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,497 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-12-21 13:16:52,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,500 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:16:52,501 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:52,501 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [515191433] [2021-12-21 13:16:52,501 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [515191433] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:52,501 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:52,501 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-21 13:16:52,501 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1223291778] [2021-12-21 13:16:52,501 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:52,501 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-21 13:16:52,502 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:52,502 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-21 13:16:52,502 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-21 13:16:52,502 INFO L87 Difference]: Start difference. First operand 157 states and 188 transitions. Second operand has 6 states, 6 states have (on average 8.0) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-21 13:16:52,613 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:52,613 INFO L93 Difference]: Finished difference Result 316 states and 385 transitions. [2021-12-21 13:16:52,614 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:16:52,614 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 59 [2021-12-21 13:16:52,614 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:52,615 INFO L225 Difference]: With dead ends: 316 [2021-12-21 13:16:52,615 INFO L226 Difference]: Without dead ends: 167 [2021-12-21 13:16:52,616 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-21 13:16:52,616 INFO L933 BasicCegarLoop]: 90 mSDtfsCounter, 69 mSDsluCounter, 273 mSDsCounter, 0 mSdLazyCounter, 112 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 363 SdHoareTripleChecker+Invalid, 135 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 112 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:52,617 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [74 Valid, 363 Invalid, 135 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 112 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:16:52,617 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167 states. [2021-12-21 13:16:52,623 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167 to 160. [2021-12-21 13:16:52,624 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 160 states, 123 states have (on average 1.2195121951219512) internal successors, (150), 131 states have internal predecessors, (150), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2021-12-21 13:16:52,625 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 160 states to 160 states and 191 transitions. [2021-12-21 13:16:52,625 INFO L78 Accepts]: Start accepts. Automaton has 160 states and 191 transitions. Word has length 59 [2021-12-21 13:16:52,625 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:52,626 INFO L470 AbstractCegarLoop]: Abstraction has 160 states and 191 transitions. [2021-12-21 13:16:52,626 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-21 13:16:52,626 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 191 transitions. [2021-12-21 13:16:52,627 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2021-12-21 13:16:52,627 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:52,627 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:52,627 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-21 13:16:52,628 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:52,628 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:52,628 INFO L85 PathProgramCache]: Analyzing trace with hash 1236936713, now seen corresponding path program 1 times [2021-12-21 13:16:52,628 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:52,629 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1044009319] [2021-12-21 13:16:52,629 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:52,629 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:52,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,677 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-21 13:16:52,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,684 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-21 13:16:52,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:16:52,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-12-21 13:16:52,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,715 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:16:52,715 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:52,715 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1044009319] [2021-12-21 13:16:52,715 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1044009319] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:52,715 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:52,716 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-21 13:16:52,716 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1138609515] [2021-12-21 13:16:52,716 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:52,716 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-21 13:16:52,716 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:52,717 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 13:16:52,717 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 13:16:52,717 INFO L87 Difference]: Start difference. First operand 160 states and 191 transitions. Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-21 13:16:52,850 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:52,850 INFO L93 Difference]: Finished difference Result 441 states and 552 transitions. [2021-12-21 13:16:52,850 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:16:52,851 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 59 [2021-12-21 13:16:52,851 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:52,852 INFO L225 Difference]: With dead ends: 441 [2021-12-21 13:16:52,852 INFO L226 Difference]: Without dead ends: 289 [2021-12-21 13:16:52,853 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 11 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:16:52,853 INFO L933 BasicCegarLoop]: 140 mSDtfsCounter, 215 mSDsluCounter, 167 mSDsCounter, 0 mSdLazyCounter, 147 mSolverCounterSat, 68 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 223 SdHoareTripleChecker+Valid, 307 SdHoareTripleChecker+Invalid, 215 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 68 IncrementalHoareTripleChecker+Valid, 147 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:52,853 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [223 Valid, 307 Invalid, 215 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [68 Valid, 147 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:16:52,854 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 289 states. [2021-12-21 13:16:52,863 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 289 to 287. [2021-12-21 13:16:52,863 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 287 states, 218 states have (on average 1.2064220183486238) internal successors, (263), 230 states have internal predecessors, (263), 36 states have call successors, (36), 31 states have call predecessors, (36), 32 states have return successors, (51), 36 states have call predecessors, (51), 36 states have call successors, (51) [2021-12-21 13:16:52,864 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 287 states to 287 states and 350 transitions. [2021-12-21 13:16:52,865 INFO L78 Accepts]: Start accepts. Automaton has 287 states and 350 transitions. Word has length 59 [2021-12-21 13:16:52,865 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:52,865 INFO L470 AbstractCegarLoop]: Abstraction has 287 states and 350 transitions. [2021-12-21 13:16:52,865 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 4 states have internal predecessors, (48), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-21 13:16:52,865 INFO L276 IsEmpty]: Start isEmpty. Operand 287 states and 350 transitions. [2021-12-21 13:16:52,866 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2021-12-21 13:16:52,866 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:52,866 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:52,866 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-21 13:16:52,866 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:52,866 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:52,867 INFO L85 PathProgramCache]: Analyzing trace with hash -1533447185, now seen corresponding path program 1 times [2021-12-21 13:16:52,867 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:52,867 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2082676501] [2021-12-21 13:16:52,867 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:52,867 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:52,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:16:52,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-21 13:16:52,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,985 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-12-21 13:16:52,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:16:53,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,004 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-12-21 13:16:53,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,006 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:16:53,007 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:53,007 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2082676501] [2021-12-21 13:16:53,007 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2082676501] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:53,007 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:53,007 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-21 13:16:53,007 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1357121030] [2021-12-21 13:16:53,007 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:53,008 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-21 13:16:53,008 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:53,008 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-21 13:16:53,008 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2021-12-21 13:16:53,008 INFO L87 Difference]: Start difference. First operand 287 states and 350 transitions. Second operand has 10 states, 10 states have (on average 5.0) internal successors, (50), 8 states have internal predecessors, (50), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-21 13:16:53,557 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:53,557 INFO L93 Difference]: Finished difference Result 849 states and 1072 transitions. [2021-12-21 13:16:53,557 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-12-21 13:16:53,557 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.0) internal successors, (50), 8 states have internal predecessors, (50), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 63 [2021-12-21 13:16:53,558 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:53,560 INFO L225 Difference]: With dead ends: 849 [2021-12-21 13:16:53,560 INFO L226 Difference]: Without dead ends: 620 [2021-12-21 13:16:53,561 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 206 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=187, Invalid=743, Unknown=0, NotChecked=0, Total=930 [2021-12-21 13:16:53,561 INFO L933 BasicCegarLoop]: 149 mSDtfsCounter, 602 mSDsluCounter, 557 mSDsCounter, 0 mSdLazyCounter, 678 mSolverCounterSat, 194 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 609 SdHoareTripleChecker+Valid, 706 SdHoareTripleChecker+Invalid, 872 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 194 IncrementalHoareTripleChecker+Valid, 678 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:53,562 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [609 Valid, 706 Invalid, 872 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [194 Valid, 678 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-21 13:16:53,562 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 620 states. [2021-12-21 13:16:53,582 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 620 to 533. [2021-12-21 13:16:53,583 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 533 states, 405 states have (on average 1.2) internal successors, (486), 429 states have internal predecessors, (486), 66 states have call successors, (66), 55 states have call predecessors, (66), 61 states have return successors, (90), 66 states have call predecessors, (90), 66 states have call successors, (90) [2021-12-21 13:16:53,584 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 533 states to 533 states and 642 transitions. [2021-12-21 13:16:53,585 INFO L78 Accepts]: Start accepts. Automaton has 533 states and 642 transitions. Word has length 63 [2021-12-21 13:16:53,585 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:53,585 INFO L470 AbstractCegarLoop]: Abstraction has 533 states and 642 transitions. [2021-12-21 13:16:53,585 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.0) internal successors, (50), 8 states have internal predecessors, (50), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-21 13:16:53,585 INFO L276 IsEmpty]: Start isEmpty. Operand 533 states and 642 transitions. [2021-12-21 13:16:53,586 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2021-12-21 13:16:53,586 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:53,586 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:53,586 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-21 13:16:53,586 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:53,586 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:53,587 INFO L85 PathProgramCache]: Analyzing trace with hash -706462267, now seen corresponding path program 1 times [2021-12-21 13:16:53,587 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:53,587 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [338586222] [2021-12-21 13:16:53,587 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:53,587 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:53,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,639 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:16:53,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,647 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:16:53,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:16:53,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-21 13:16:53,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:16:53,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2021-12-21 13:16:53,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,682 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2021-12-21 13:16:53,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,684 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2021-12-21 13:16:53,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,687 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:16:53,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,688 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2021-12-21 13:16:53,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,691 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 8 proven. 18 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-12-21 13:16:53,691 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:53,691 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [338586222] [2021-12-21 13:16:53,691 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [338586222] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:16:53,691 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1771438196] [2021-12-21 13:16:53,691 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:53,691 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:16:53,692 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:16:53,693 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:16:53,720 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-21 13:16:53,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,782 INFO L263 TraceCheckSpWp]: Trace formula consists of 495 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-21 13:16:53,787 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:16:54,035 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 28 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:16:54,036 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-21 13:16:54,225 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 18 proven. 8 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-12-21 13:16:54,225 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1771438196] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-21 13:16:54,225 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-21 13:16:54,226 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2021-12-21 13:16:54,226 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1159092525] [2021-12-21 13:16:54,226 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-21 13:16:54,226 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-12-21 13:16:54,227 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:54,227 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-12-21 13:16:54,227 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2021-12-21 13:16:54,227 INFO L87 Difference]: Start difference. First operand 533 states and 642 transitions. Second operand has 15 states, 15 states have (on average 9.066666666666666) internal successors, (136), 10 states have internal predecessors, (136), 6 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (21), 8 states have call predecessors, (21), 6 states have call successors, (21) [2021-12-21 13:16:54,970 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:54,970 INFO L93 Difference]: Finished difference Result 1166 states and 1440 transitions. [2021-12-21 13:16:54,971 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2021-12-21 13:16:54,971 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 9.066666666666666) internal successors, (136), 10 states have internal predecessors, (136), 6 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (21), 8 states have call predecessors, (21), 6 states have call successors, (21) Word has length 106 [2021-12-21 13:16:54,971 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:54,974 INFO L225 Difference]: With dead ends: 1166 [2021-12-21 13:16:54,974 INFO L226 Difference]: Without dead ends: 689 [2021-12-21 13:16:54,976 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 282 GetRequests, 239 SyntacticMatches, 1 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 447 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=438, Invalid=1454, Unknown=0, NotChecked=0, Total=1892 [2021-12-21 13:16:54,976 INFO L933 BasicCegarLoop]: 221 mSDtfsCounter, 491 mSDsluCounter, 833 mSDsCounter, 0 mSdLazyCounter, 783 mSolverCounterSat, 254 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 494 SdHoareTripleChecker+Valid, 1054 SdHoareTripleChecker+Invalid, 1037 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 254 IncrementalHoareTripleChecker+Valid, 783 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:54,976 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [494 Valid, 1054 Invalid, 1037 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [254 Valid, 783 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-21 13:16:54,977 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 689 states. [2021-12-21 13:16:55,027 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 689 to 602. [2021-12-21 13:16:55,028 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 602 states, 452 states have (on average 1.1991150442477876) internal successors, (542), 484 states have internal predecessors, (542), 77 states have call successors, (77), 66 states have call predecessors, (77), 72 states have return successors, (101), 74 states have call predecessors, (101), 77 states have call successors, (101) [2021-12-21 13:16:55,030 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 602 states to 602 states and 720 transitions. [2021-12-21 13:16:55,031 INFO L78 Accepts]: Start accepts. Automaton has 602 states and 720 transitions. Word has length 106 [2021-12-21 13:16:55,031 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:55,031 INFO L470 AbstractCegarLoop]: Abstraction has 602 states and 720 transitions. [2021-12-21 13:16:55,031 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 9.066666666666666) internal successors, (136), 10 states have internal predecessors, (136), 6 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (21), 8 states have call predecessors, (21), 6 states have call successors, (21) [2021-12-21 13:16:55,031 INFO L276 IsEmpty]: Start isEmpty. Operand 602 states and 720 transitions. [2021-12-21 13:16:55,033 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 189 [2021-12-21 13:16:55,033 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:55,034 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:55,070 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-21 13:16:55,247 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-21 13:16:55,248 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:55,248 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:55,248 INFO L85 PathProgramCache]: Analyzing trace with hash -1427499724, now seen corresponding path program 1 times [2021-12-21 13:16:55,248 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:55,248 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1054406467] [2021-12-21 13:16:55,248 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:55,248 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:55,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:55,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:16:55,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:55,317 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:16:55,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:55,325 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:16:55,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:55,330 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-21 13:16:55,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:55,335 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:16:55,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:55,338 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2021-12-21 13:16:55,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:55,345 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:16:55,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:55,347 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:16:55,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:55,348 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:16:55,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:55,350 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:16:55,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:55,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 109 [2021-12-21 13:16:55,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:55,370 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:16:55,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:55,372 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:16:55,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:55,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 147 [2021-12-21 13:16:55,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:55,387 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 156 [2021-12-21 13:16:55,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:55,390 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:16:55,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:55,392 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 180 [2021-12-21 13:16:55,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:55,393 INFO L134 CoverageAnalysis]: Checked inductivity of 212 backedges. 83 proven. 3 refuted. 0 times theorem prover too weak. 126 trivial. 0 not checked. [2021-12-21 13:16:55,393 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:55,393 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1054406467] [2021-12-21 13:16:55,393 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1054406467] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:16:55,394 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [869568155] [2021-12-21 13:16:55,394 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:55,394 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:16:55,394 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:16:55,395 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:16:55,396 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-21 13:16:55,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:55,496 INFO L263 TraceCheckSpWp]: Trace formula consists of 713 conjuncts, 13 conjunts are in the unsatisfiable core [2021-12-21 13:16:55,500 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:16:55,822 INFO L134 CoverageAnalysis]: Checked inductivity of 212 backedges. 154 proven. 4 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2021-12-21 13:16:55,822 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-21 13:16:56,440 INFO L134 CoverageAnalysis]: Checked inductivity of 212 backedges. 77 proven. 39 refuted. 0 times theorem prover too weak. 96 trivial. 0 not checked. [2021-12-21 13:16:56,440 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [869568155] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-21 13:16:56,440 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-21 13:16:56,441 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 10, 11] total 26 [2021-12-21 13:16:56,441 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [52535510] [2021-12-21 13:16:56,441 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-21 13:16:56,441 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2021-12-21 13:16:56,442 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:56,442 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2021-12-21 13:16:56,443 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=116, Invalid=534, Unknown=0, NotChecked=0, Total=650 [2021-12-21 13:16:56,443 INFO L87 Difference]: Start difference. First operand 602 states and 720 transitions. Second operand has 26 states, 26 states have (on average 7.576923076923077) internal successors, (197), 21 states have internal predecessors, (197), 9 states have call successors, (31), 8 states have call predecessors, (31), 10 states have return successors, (34), 9 states have call predecessors, (34), 9 states have call successors, (34) [2021-12-21 13:16:57,984 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:57,984 INFO L93 Difference]: Finished difference Result 1753 states and 2193 transitions. [2021-12-21 13:16:57,985 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2021-12-21 13:16:57,986 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 7.576923076923077) internal successors, (197), 21 states have internal predecessors, (197), 9 states have call successors, (31), 8 states have call predecessors, (31), 10 states have return successors, (34), 9 states have call predecessors, (34), 9 states have call successors, (34) Word has length 188 [2021-12-21 13:16:57,986 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:57,991 INFO L225 Difference]: With dead ends: 1753 [2021-12-21 13:16:57,991 INFO L226 Difference]: Without dead ends: 1159 [2021-12-21 13:16:57,996 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 478 GetRequests, 404 SyntacticMatches, 2 SemanticMatches, 72 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1310 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=976, Invalid=4426, Unknown=0, NotChecked=0, Total=5402 [2021-12-21 13:16:57,997 INFO L933 BasicCegarLoop]: 177 mSDtfsCounter, 1469 mSDsluCounter, 1205 mSDsCounter, 0 mSdLazyCounter, 2325 mSolverCounterSat, 664 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1469 SdHoareTripleChecker+Valid, 1382 SdHoareTripleChecker+Invalid, 2989 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 664 IncrementalHoareTripleChecker+Valid, 2325 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:57,997 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1469 Valid, 1382 Invalid, 2989 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [664 Valid, 2325 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2021-12-21 13:16:57,998 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1159 states. [2021-12-21 13:16:58,040 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1159 to 1065. [2021-12-21 13:16:58,042 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1065 states, 805 states have (on average 1.1440993788819875) internal successors, (921), 850 states have internal predecessors, (921), 138 states have call successors, (138), 121 states have call predecessors, (138), 121 states have return successors, (160), 127 states have call predecessors, (160), 138 states have call successors, (160) [2021-12-21 13:16:58,044 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1065 states to 1065 states and 1219 transitions. [2021-12-21 13:16:58,046 INFO L78 Accepts]: Start accepts. Automaton has 1065 states and 1219 transitions. Word has length 188 [2021-12-21 13:16:58,047 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:58,047 INFO L470 AbstractCegarLoop]: Abstraction has 1065 states and 1219 transitions. [2021-12-21 13:16:58,047 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 7.576923076923077) internal successors, (197), 21 states have internal predecessors, (197), 9 states have call successors, (31), 8 states have call predecessors, (31), 10 states have return successors, (34), 9 states have call predecessors, (34), 9 states have call successors, (34) [2021-12-21 13:16:58,047 INFO L276 IsEmpty]: Start isEmpty. Operand 1065 states and 1219 transitions. [2021-12-21 13:16:58,058 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 209 [2021-12-21 13:16:58,058 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:58,058 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:58,080 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-21 13:16:58,267 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2021-12-21 13:16:58,267 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:58,268 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:58,268 INFO L85 PathProgramCache]: Analyzing trace with hash 1648051732, now seen corresponding path program 1 times [2021-12-21 13:16:58,268 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:58,268 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1134520166] [2021-12-21 13:16:58,268 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:58,268 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:58,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,297 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:16:58,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,304 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:16:58,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,314 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:16:58,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,319 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-21 13:16:58,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:16:58,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,326 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2021-12-21 13:16:58,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,345 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:16:58,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,347 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:16:58,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,349 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:16:58,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,352 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:16:58,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,353 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-12-21 13:16:58,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,366 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2021-12-21 13:16:58,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2021-12-21 13:16:58,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,371 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:16:58,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:16:58,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,374 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:16:58,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,376 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 157 [2021-12-21 13:16:58,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,378 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 167 [2021-12-21 13:16:58,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,380 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2021-12-21 13:16:58,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,382 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:16:58,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,384 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 200 [2021-12-21 13:16:58,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,386 INFO L134 CoverageAnalysis]: Checked inductivity of 258 backedges. 86 proven. 53 refuted. 0 times theorem prover too weak. 119 trivial. 0 not checked. [2021-12-21 13:16:58,386 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:58,386 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1134520166] [2021-12-21 13:16:58,386 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1134520166] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:16:58,386 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [598841739] [2021-12-21 13:16:58,386 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:58,387 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:16:58,387 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:16:58,387 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:16:58,388 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-12-21 13:16:58,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:58,487 INFO L263 TraceCheckSpWp]: Trace formula consists of 762 conjuncts, 10 conjunts are in the unsatisfiable core [2021-12-21 13:16:58,491 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:16:58,862 INFO L134 CoverageAnalysis]: Checked inductivity of 258 backedges. 195 proven. 9 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2021-12-21 13:16:58,862 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-21 13:16:59,376 INFO L134 CoverageAnalysis]: Checked inductivity of 258 backedges. 99 proven. 54 refuted. 0 times theorem prover too weak. 105 trivial. 0 not checked. [2021-12-21 13:16:59,376 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [598841739] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-21 13:16:59,376 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-21 13:16:59,376 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 8, 8] total 22 [2021-12-21 13:16:59,376 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [561659542] [2021-12-21 13:16:59,376 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-21 13:16:59,377 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2021-12-21 13:16:59,377 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:59,377 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2021-12-21 13:16:59,377 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=394, Unknown=0, NotChecked=0, Total=462 [2021-12-21 13:16:59,378 INFO L87 Difference]: Start difference. First operand 1065 states and 1219 transitions. Second operand has 22 states, 22 states have (on average 10.227272727272727) internal successors, (225), 15 states have internal predecessors, (225), 7 states have call successors, (45), 8 states have call predecessors, (45), 11 states have return successors, (40), 10 states have call predecessors, (40), 7 states have call successors, (40) [2021-12-21 13:17:00,541 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:00,542 INFO L93 Difference]: Finished difference Result 2080 states and 2411 transitions. [2021-12-21 13:17:00,542 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-12-21 13:17:00,542 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 10.227272727272727) internal successors, (225), 15 states have internal predecessors, (225), 7 states have call successors, (45), 8 states have call predecessors, (45), 11 states have return successors, (40), 10 states have call predecessors, (40), 7 states have call successors, (40) Word has length 208 [2021-12-21 13:17:00,543 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:00,546 INFO L225 Difference]: With dead ends: 2080 [2021-12-21 13:17:00,546 INFO L226 Difference]: Without dead ends: 1119 [2021-12-21 13:17:00,549 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 507 GetRequests, 459 SyntacticMatches, 2 SemanticMatches, 46 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 406 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=449, Invalid=1807, Unknown=0, NotChecked=0, Total=2256 [2021-12-21 13:17:00,549 INFO L933 BasicCegarLoop]: 139 mSDtfsCounter, 687 mSDsluCounter, 482 mSDsCounter, 0 mSdLazyCounter, 1574 mSolverCounterSat, 310 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 691 SdHoareTripleChecker+Valid, 621 SdHoareTripleChecker+Invalid, 1884 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 310 IncrementalHoareTripleChecker+Valid, 1574 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:00,549 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [691 Valid, 621 Invalid, 1884 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [310 Valid, 1574 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2021-12-21 13:17:00,550 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1119 states. [2021-12-21 13:17:00,602 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1119 to 1063. [2021-12-21 13:17:00,603 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1063 states, 805 states have (on average 1.132919254658385) internal successors, (912), 848 states have internal predecessors, (912), 132 states have call successors, (132), 123 states have call predecessors, (132), 125 states have return successors, (154), 125 states have call predecessors, (154), 132 states have call successors, (154) [2021-12-21 13:17:00,606 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1063 states to 1063 states and 1198 transitions. [2021-12-21 13:17:00,606 INFO L78 Accepts]: Start accepts. Automaton has 1063 states and 1198 transitions. Word has length 208 [2021-12-21 13:17:00,606 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:00,606 INFO L470 AbstractCegarLoop]: Abstraction has 1063 states and 1198 transitions. [2021-12-21 13:17:00,607 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 10.227272727272727) internal successors, (225), 15 states have internal predecessors, (225), 7 states have call successors, (45), 8 states have call predecessors, (45), 11 states have return successors, (40), 10 states have call predecessors, (40), 7 states have call successors, (40) [2021-12-21 13:17:00,607 INFO L276 IsEmpty]: Start isEmpty. Operand 1063 states and 1198 transitions. [2021-12-21 13:17:00,609 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 210 [2021-12-21 13:17:00,609 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:17:00,609 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:00,629 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-12-21 13:17:00,826 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:17:00,827 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:00,827 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:00,827 INFO L85 PathProgramCache]: Analyzing trace with hash -22386492, now seen corresponding path program 1 times [2021-12-21 13:17:00,827 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:00,827 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [859544127] [2021-12-21 13:17:00,828 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:00,828 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:00,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:00,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,870 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:17:00,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:00,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,878 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-21 13:17:00,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:17:00,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2021-12-21 13:17:00,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,887 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:00,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,888 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:00,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,890 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:17:00,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,891 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:00,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,892 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-12-21 13:17:00,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2021-12-21 13:17:00,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 120 [2021-12-21 13:17:00,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,909 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:00,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:00,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:17:00,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2021-12-21 13:17:00,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,915 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 168 [2021-12-21 13:17:00,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,916 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 177 [2021-12-21 13:17:00,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:17:00,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,952 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 201 [2021-12-21 13:17:00,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,955 INFO L134 CoverageAnalysis]: Checked inductivity of 259 backedges. 73 proven. 31 refuted. 0 times theorem prover too weak. 155 trivial. 0 not checked. [2021-12-21 13:17:00,955 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:00,955 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [859544127] [2021-12-21 13:17:00,955 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [859544127] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:17:00,955 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2009657458] [2021-12-21 13:17:00,955 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:00,956 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:17:00,956 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:17:00,957 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:17:00,958 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2021-12-21 13:17:01,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:01,058 INFO L263 TraceCheckSpWp]: Trace formula consists of 762 conjuncts, 18 conjunts are in the unsatisfiable core [2021-12-21 13:17:01,061 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:17:01,407 INFO L134 CoverageAnalysis]: Checked inductivity of 259 backedges. 138 proven. 26 refuted. 0 times theorem prover too weak. 95 trivial. 0 not checked. [2021-12-21 13:17:01,408 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-21 13:17:02,072 INFO L134 CoverageAnalysis]: Checked inductivity of 259 backedges. 99 proven. 45 refuted. 0 times theorem prover too weak. 115 trivial. 0 not checked. [2021-12-21 13:17:02,072 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2009657458] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-21 13:17:02,072 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-21 13:17:02,072 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 8, 13] total 28 [2021-12-21 13:17:02,072 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1779470029] [2021-12-21 13:17:02,072 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-21 13:17:02,073 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2021-12-21 13:17:02,073 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:02,073 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2021-12-21 13:17:02,074 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=116, Invalid=640, Unknown=0, NotChecked=0, Total=756 [2021-12-21 13:17:02,074 INFO L87 Difference]: Start difference. First operand 1063 states and 1198 transitions. Second operand has 28 states, 28 states have (on average 9.285714285714286) internal successors, (260), 22 states have internal predecessors, (260), 14 states have call successors, (48), 12 states have call predecessors, (48), 15 states have return successors, (49), 15 states have call predecessors, (49), 14 states have call successors, (49) [2021-12-21 13:17:04,716 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:04,716 INFO L93 Difference]: Finished difference Result 2357 states and 2710 transitions. [2021-12-21 13:17:04,717 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 63 states. [2021-12-21 13:17:04,717 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 28 states have (on average 9.285714285714286) internal successors, (260), 22 states have internal predecessors, (260), 14 states have call successors, (48), 12 states have call predecessors, (48), 15 states have return successors, (49), 15 states have call predecessors, (49), 14 states have call successors, (49) Word has length 209 [2021-12-21 13:17:04,717 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:04,722 INFO L225 Difference]: With dead ends: 2357 [2021-12-21 13:17:04,722 INFO L226 Difference]: Without dead ends: 1404 [2021-12-21 13:17:04,726 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 551 GetRequests, 463 SyntacticMatches, 1 SemanticMatches, 87 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2019 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=1543, Invalid=6289, Unknown=0, NotChecked=0, Total=7832 [2021-12-21 13:17:04,727 INFO L933 BasicCegarLoop]: 344 mSDtfsCounter, 2403 mSDsluCounter, 1014 mSDsCounter, 0 mSdLazyCounter, 3968 mSolverCounterSat, 1252 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2403 SdHoareTripleChecker+Valid, 1358 SdHoareTripleChecker+Invalid, 5220 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1252 IncrementalHoareTripleChecker+Valid, 3968 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:04,727 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2403 Valid, 1358 Invalid, 5220 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1252 Valid, 3968 Invalid, 0 Unknown, 0 Unchecked, 1.6s Time] [2021-12-21 13:17:04,729 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1404 states. [2021-12-21 13:17:04,772 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1404 to 1259. [2021-12-21 13:17:04,773 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1259 states, 954 states have (on average 1.128930817610063) internal successors, (1077), 990 states have internal predecessors, (1077), 160 states have call successors, (160), 151 states have call predecessors, (160), 144 states have return successors, (176), 144 states have call predecessors, (176), 160 states have call successors, (176) [2021-12-21 13:17:04,776 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1259 states to 1259 states and 1413 transitions. [2021-12-21 13:17:04,777 INFO L78 Accepts]: Start accepts. Automaton has 1259 states and 1413 transitions. Word has length 209 [2021-12-21 13:17:04,777 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:04,777 INFO L470 AbstractCegarLoop]: Abstraction has 1259 states and 1413 transitions. [2021-12-21 13:17:04,778 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 28 states have (on average 9.285714285714286) internal successors, (260), 22 states have internal predecessors, (260), 14 states have call successors, (48), 12 states have call predecessors, (48), 15 states have return successors, (49), 15 states have call predecessors, (49), 14 states have call successors, (49) [2021-12-21 13:17:04,778 INFO L276 IsEmpty]: Start isEmpty. Operand 1259 states and 1413 transitions. [2021-12-21 13:17:04,781 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 264 [2021-12-21 13:17:04,781 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:17:04,781 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:04,806 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2021-12-21 13:17:05,004 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:17:05,004 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:05,005 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:05,005 INFO L85 PathProgramCache]: Analyzing trace with hash -161147261, now seen corresponding path program 1 times [2021-12-21 13:17:05,005 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:05,005 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1771038504] [2021-12-21 13:17:05,005 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:05,005 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:05,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,106 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:05,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:17:05,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,129 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:05,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,136 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-21 13:17:05,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,139 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:17:05,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,140 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2021-12-21 13:17:05,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,146 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:05,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:05,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,149 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:17:05,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,152 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:05,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-12-21 13:17:05,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,160 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2021-12-21 13:17:05,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,162 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 120 [2021-12-21 13:17:05,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,167 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:05,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,170 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:05,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:17:05,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2021-12-21 13:17:05,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2021-12-21 13:17:05,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,184 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2021-12-21 13:17:05,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,203 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:05,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,205 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-21 13:17:05,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,217 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:17:05,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-21 13:17:05,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,220 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 212 [2021-12-21 13:17:05,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,242 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 222 [2021-12-21 13:17:05,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,244 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 231 [2021-12-21 13:17:05,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,256 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:17:05,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,259 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 255 [2021-12-21 13:17:05,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,262 INFO L134 CoverageAnalysis]: Checked inductivity of 442 backedges. 194 proven. 36 refuted. 0 times theorem prover too weak. 212 trivial. 0 not checked. [2021-12-21 13:17:05,262 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:05,262 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1771038504] [2021-12-21 13:17:05,262 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1771038504] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:17:05,262 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [407141379] [2021-12-21 13:17:05,262 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:05,262 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:17:05,263 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:17:05,263 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:17:05,264 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2021-12-21 13:17:05,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:05,377 INFO L263 TraceCheckSpWp]: Trace formula consists of 899 conjuncts, 30 conjunts are in the unsatisfiable core [2021-12-21 13:17:05,382 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:17:05,889 INFO L134 CoverageAnalysis]: Checked inductivity of 442 backedges. 155 proven. 89 refuted. 0 times theorem prover too weak. 198 trivial. 0 not checked. [2021-12-21 13:17:05,889 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-21 13:17:06,619 INFO L134 CoverageAnalysis]: Checked inductivity of 442 backedges. 96 proven. 136 refuted. 0 times theorem prover too weak. 210 trivial. 0 not checked. [2021-12-21 13:17:06,620 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [407141379] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-21 13:17:06,620 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-21 13:17:06,620 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 11, 16] total 29 [2021-12-21 13:17:06,620 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [202374755] [2021-12-21 13:17:06,620 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-21 13:17:06,621 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2021-12-21 13:17:06,621 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:06,622 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2021-12-21 13:17:06,622 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=150, Invalid=662, Unknown=0, NotChecked=0, Total=812 [2021-12-21 13:17:06,622 INFO L87 Difference]: Start difference. First operand 1259 states and 1413 transitions. Second operand has 29 states, 29 states have (on average 10.620689655172415) internal successors, (308), 25 states have internal predecessors, (308), 18 states have call successors, (59), 13 states have call predecessors, (59), 19 states have return successors, (62), 18 states have call predecessors, (62), 18 states have call successors, (62) [2021-12-21 13:17:07,792 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:07,792 INFO L93 Difference]: Finished difference Result 1980 states and 2239 transitions. [2021-12-21 13:17:07,803 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2021-12-21 13:17:07,804 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 29 states have (on average 10.620689655172415) internal successors, (308), 25 states have internal predecessors, (308), 18 states have call successors, (59), 13 states have call predecessors, (59), 19 states have return successors, (62), 18 states have call predecessors, (62), 18 states have call successors, (62) Word has length 263 [2021-12-21 13:17:07,805 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:07,806 INFO L225 Difference]: With dead ends: 1980 [2021-12-21 13:17:07,806 INFO L226 Difference]: Without dead ends: 0 [2021-12-21 13:17:07,810 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 624 GetRequests, 570 SyntacticMatches, 5 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 551 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=579, Invalid=1971, Unknown=0, NotChecked=0, Total=2550 [2021-12-21 13:17:07,811 INFO L933 BasicCegarLoop]: 205 mSDtfsCounter, 1644 mSDsluCounter, 554 mSDsCounter, 0 mSdLazyCounter, 1670 mSolverCounterSat, 651 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1646 SdHoareTripleChecker+Valid, 759 SdHoareTripleChecker+Invalid, 2321 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 651 IncrementalHoareTripleChecker+Valid, 1670 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:07,811 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1646 Valid, 759 Invalid, 2321 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [651 Valid, 1670 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2021-12-21 13:17:07,811 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-21 13:17:07,811 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-21 13:17:07,811 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 13:17:07,812 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-21 13:17:07,812 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 263 [2021-12-21 13:17:07,812 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:07,812 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-21 13:17:07,812 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 29 states have (on average 10.620689655172415) internal successors, (308), 25 states have internal predecessors, (308), 18 states have call successors, (59), 13 states have call predecessors, (59), 19 states have return successors, (62), 18 states have call predecessors, (62), 18 states have call successors, (62) [2021-12-21 13:17:07,812 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-21 13:17:07,813 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-21 13:17:07,814 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-21 13:17:07,834 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2021-12-21 13:17:08,030 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2021-12-21 13:17:08,032 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-21 13:17:20,164 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 610 616) no Hoare annotation was computed. [2021-12-21 13:17:20,164 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 610 616) the Hoare annotation is: true [2021-12-21 13:17:20,164 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 83 94) the Hoare annotation is: (let ((.cse2 (<= ~waterLevel~0 1))) (let ((.cse6 (not (= ~pumpRunning~0 0))) (.cse3 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse7 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse9 (not .cse2)) (.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse8 (not (<= 0 ~waterLevel~0))) (.cse4 (not (<= 1 ~pumpRunning~0))) (.cse5 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or (not (< 1 ~waterLevel~0)) .cse0 .cse6 .cse1 .cse3 .cse5) (or .cse6 .cse1 .cse3 (not (<= 2 ~waterLevel~0)) .cse7 .cse5) (or .cse0 (not (<= ~waterLevel~0 0)) .cse6 .cse1 .cse8 .cse3) (or .cse0 .cse6 .cse1 (not (<= 1 ~waterLevel~0)) .cse3 .cse9) (or .cse6 .cse1 .cse8 .cse3 .cse7 .cse9) (or .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse8 .cse4 .cse5 (not (<= 1 ~switchedOnBeforeTS~0)))))) [2021-12-21 13:17:20,164 INFO L858 garLoopResultBuilder]: For program point L87-1(lines 83 94) no Hoare annotation was computed. [2021-12-21 13:17:20,164 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2021-12-21 13:17:20,165 INFO L858 garLoopResultBuilder]: For program point L897(lines 897 901) no Hoare annotation was computed. [2021-12-21 13:17:20,165 INFO L861 garLoopResultBuilder]: At program point L897-1(lines 897 901) the Hoare annotation is: true [2021-12-21 13:17:20,165 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 883 912) no Hoare annotation was computed. [2021-12-21 13:17:20,165 INFO L858 garLoopResultBuilder]: For program point L894(line 894) no Hoare annotation was computed. [2021-12-21 13:17:20,165 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 883 912) the Hoare annotation is: true [2021-12-21 13:17:20,165 INFO L861 garLoopResultBuilder]: At program point L893-2(lines 893 907) the Hoare annotation is: true [2021-12-21 13:17:20,165 INFO L861 garLoopResultBuilder]: At program point L889(line 889) the Hoare annotation is: true [2021-12-21 13:17:20,165 INFO L858 garLoopResultBuilder]: For program point L889-1(line 889) no Hoare annotation was computed. [2021-12-21 13:17:20,165 INFO L861 garLoopResultBuilder]: At program point L908(lines 883 912) the Hoare annotation is: true [2021-12-21 13:17:20,166 INFO L858 garLoopResultBuilder]: For program point L904(line 904) no Hoare annotation was computed. [2021-12-21 13:17:20,166 INFO L854 garLoopResultBuilder]: At program point L543(lines 536 545) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0)) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse12 (<= 1 ~switchedOnBeforeTS~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse10 (not (<= 0 |old(~waterLevel~0)|))) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (and .cse8 .cse12)) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 (not (< 1 |old(~waterLevel~0)|)) .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4 .cse6) (or .cse7 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse5 (and .cse8 (= ~waterLevel~0 1))) (or .cse7 .cse9 .cse1 .cse5 .cse4 .cse6) (or .cse7 .cse9 .cse1 .cse10 .cse5 (not (<= |old(~waterLevel~0)| 0))) (or .cse0 .cse1 .cse2 .cse10 .cse5 .cse4 .cse11) (or .cse0 .cse1 .cse2 .cse10 .cse3 .cse4 .cse11) (or (not (<= |old(~waterLevel~0)| 1)) .cse7 .cse9 .cse1 .cse10 .cse3) (or .cse7 .cse9 .cse1 .cse3 .cse4 .cse6)))) [2021-12-21 13:17:20,166 INFO L858 garLoopResultBuilder]: For program point L155(line 155) no Hoare annotation was computed. [2021-12-21 13:17:20,166 INFO L854 garLoopResultBuilder]: At program point L663(line 663) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0))) (let ((.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (not (< 1 |old(~waterLevel~0)|))) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (and .cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= 0 |old(~waterLevel~0)|))) (.cse11 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse3 .cse4 .cse6) (or .cse7 (not (= |old(~waterLevel~0)| 1)) .cse0 .cse3 (and .cse8 (= ~waterLevel~0 1))) (or .cse7 .cse9 .cse0 .cse3 .cse4 .cse6) (or .cse0 .cse1 .cse10 .cse11 .cse4) (or .cse7 .cse9 .cse0 .cse2 .cse3 (not (<= |old(~waterLevel~0)| 0))) (or .cse7 .cse9 .cse0 .cse10 .cse11 .cse4) (or (not (<= |old(~waterLevel~0)| 1)) .cse7 .cse9 .cse0 .cse2 .cse11) (or .cse0 .cse1 .cse2 .cse11 .cse4 .cse5)))) [2021-12-21 13:17:20,166 INFO L854 garLoopResultBuilder]: At program point L663-1(lines 644 668) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse11 (not (<= 2 |old(~waterLevel~0)|))) (.cse13 (not (= |old(~waterLevel~0)| 1))) (.cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse14 (= ~waterLevel~0 1)) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse20 (not (< 1 |old(~waterLevel~0)|))) (.cse10 (not (<= |old(~waterLevel~0)| 2))) (.cse8 (not (<= |old(~waterLevel~0)| 0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse18 (and (or .cse11 (= |old(~switchedOnBeforeTS~0)| 0)) (or .cse13 .cse9))) (.cse22 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse16 (<= ~waterLevel~0 0)) (.cse3 (<= 1 ~switchedOnBeforeTS~0)) (.cse17 (<= 0 ~waterLevel~0)) (.cse15 (not (<= |old(~waterLevel~0)| 1))) (.cse12 (not (= |old(~pumpRunning~0)| 0))) (.cse19 (and .cse0 .cse2)) (.cse4 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 0 |old(~waterLevel~0)|))) (.cse21 (not (= ~methaneLevelCritical~0 0)))) (and (or (and .cse0 .cse1 .cse2 .cse3) .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (or (and .cse0 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0) .cse1 .cse3) .cse4 .cse5 .cse7 .cse10 .cse11) (or .cse12 .cse13 .cse4 .cse7 (and .cse0 .cse14)) (or .cse15 .cse4 .cse5 (and .cse0 .cse1 .cse16 .cse3 .cse17) .cse7 .cse18) (or .cse12 .cse19 .cse4 .cse7 .cse10 .cse11) (or .cse4 .cse5 .cse20 .cse21 .cse10 (and .cse22 .cse1 .cse14 .cse3)) (or .cse12 .cse19 .cse4 .cse6 .cse7 .cse8) (or .cse12 .cse19 .cse4 .cse20 .cse21 (and (<= 1 ~pumpRunning~0) .cse2) .cse10) (or .cse4 .cse5 .cse6 .cse21 (and .cse22 .cse1 .cse2 .cse3) .cse8 .cse9) (or .cse15 .cse4 .cse5 .cse21 .cse18 (and .cse22 .cse1 .cse16 .cse3 .cse17)) (or .cse15 .cse12 .cse19 .cse4 .cse6 .cse21)))) [2021-12-21 13:17:20,166 INFO L858 garLoopResultBuilder]: For program point L597-1(lines 597 603) no Hoare annotation was computed. [2021-12-21 13:17:20,167 INFO L854 garLoopResultBuilder]: At program point L556(line 556) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse18 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse19 (< |timeShift___utac_acc__Specification5_spec__3_~tmp~3#1| 2)) (.cse20 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse22 (= ~waterLevel~0 1)) (.cse13 (not (<= 0 |old(~waterLevel~0)|))) (.cse9 (not (<= 1 ~methaneLevelCritical~0))) (.cse15 (and .cse1 .cse18 .cse19 .cse20)) (.cse24 (not (<= |old(~waterLevel~0)| 0))) (.cse11 (not (<= |old(~waterLevel~0)| 1))) (.cse23 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse2 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~3#1| ~waterLevel~0)) (.cse3 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse4 (<= ~waterLevel~0 0)) (.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (<= 0 ~waterLevel~0)) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse16 (not (<= 1 |old(~waterLevel~0)|))) (.cse10 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse12 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= 1 ~systemActive~0))) (.cse21 (not (< 1 |old(~waterLevel~0)|))) (.cse14 (not (= ~methaneLevelCritical~0 0))) (.cse17 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (not (= |old(~waterLevel~0)| 1)) .cse7 .cse8 .cse9 .cse10) (or .cse11 .cse12 .cse7 .cse13 .cse14 .cse15) (or .cse12 .cse7 .cse16 .cse9 .cse17 (and .cse1 .cse18 (<= ~waterLevel~0 1) .cse19 .cse20)) (or .cse7 .cse8 .cse21 .cse9 .cse17 (and .cse0 .cse1 .cse2 .cse3 .cse22 .cse5)) (or .cse7 (and .cse23 .cse0 .cse2 .cse3 .cse22 .cse5) .cse8 .cse21 .cse14 .cse17) (or (and .cse1 .cse18 .cse19 .cse3 .cse20 .cse5) .cse7 .cse8 .cse13 .cse9 .cse24 .cse10) (or .cse7 .cse8 .cse13 .cse14 (and .cse23 .cse18 .cse19 .cse3 .cse20 .cse5) .cse17 .cse24 .cse10) (or .cse12 .cse7 .cse13 .cse9 .cse15 .cse24) (or .cse11 (and .cse23 .cse0 .cse2 .cse3 .cse4 .cse5 .cse6) .cse7 .cse8 .cse16 .cse14 .cse17 .cse10) (or .cse12 .cse7 .cse21 .cse14 .cse17)))) [2021-12-21 13:17:20,167 INFO L858 garLoopResultBuilder]: For program point L556-1(line 556) no Hoare annotation was computed. [2021-12-21 13:17:20,167 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 583 609) no Hoare annotation was computed. [2021-12-21 13:17:20,167 INFO L854 garLoopResultBuilder]: At program point L156(lines 151 158) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (< 1 |old(~waterLevel~0)|))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= 0 |old(~waterLevel~0)|))) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse0 .cse7 .cse3 .cse4) (or .cse6 .cse0 .cse2 .cse3 (not (<= |old(~waterLevel~0)| 0))) (or .cse0 .cse1 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse6 (not (= |old(~waterLevel~0)| 1)) .cse0 .cse3) (or .cse0 .cse1 .cse7 .cse8 .cse4) (or .cse6 .cse0 .cse7 .cse8 .cse4) (or (not (<= |old(~waterLevel~0)| 1)) .cse6 .cse0 .cse2 .cse8) (or .cse0 .cse1 .cse2 .cse8 .cse4 .cse5))) [2021-12-21 13:17:20,167 INFO L858 garLoopResultBuilder]: For program point L590(lines 590 596) no Hoare annotation was computed. [2021-12-21 13:17:20,167 INFO L858 garLoopResultBuilder]: For program point L590-2(lines 586 608) no Hoare annotation was computed. [2021-12-21 13:17:20,167 INFO L858 garLoopResultBuilder]: For program point L652(lines 652 660) no Hoare annotation was computed. [2021-12-21 13:17:20,167 INFO L858 garLoopResultBuilder]: For program point L648(lines 648 665) no Hoare annotation was computed. [2021-12-21 13:17:20,168 INFO L854 garLoopResultBuilder]: At program point L132(lines 127 135) the Hoare annotation is: (let ((.cse21 (= ~methaneLevelCritical~0 0)) (.cse26 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse9 (not (<= |old(~waterLevel~0)| 0))) (.cse2 (not (<= 0 |old(~waterLevel~0)|))) (.cse15 (and .cse4 .cse5 .cse7)) (.cse17 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse18 (<= 1 ~waterLevel~0)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse22 (not (<= |old(~waterLevel~0)| 1))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse23 (not (<= 1 |old(~waterLevel~0)|))) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse16 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse6 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse24 (<= ~waterLevel~0 0)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse25 (<= 0 ~waterLevel~0)) (.cse10 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse20 (and .cse4 .cse26 .cse7)) (.cse14 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse11 (not .cse21)) (.cse13 (not (<= |old(~waterLevel~0)| 2))) (.cse19 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5 .cse6 .cse7 .cse8) .cse9 .cse10) (or .cse0 .cse1 .cse2 .cse11 (and .cse12 .cse5 .cse6 .cse7 .cse8) .cse13 .cse9 .cse10) (or .cse14 .cse0 .cse2 .cse3 .cse15 .cse9) (or (and .cse16 .cse4 .cse17 .cse18 .cse6 .cse8) .cse0 .cse1 .cse3 .cse13 .cse19) (or .cse20 .cse14 .cse21 .cse0 (not (< 1 |old(~waterLevel~0)|)) .cse3 .cse13) (or .cse22 .cse14 .cse21 .cse0 .cse23 .cse3 .cse15 .cse13) (or .cse22 .cse14 .cse0 .cse2 .cse11 .cse15) (or .cse0 .cse1 .cse11 (and .cse12 .cse16 .cse17 .cse18 .cse6 .cse8) .cse13 .cse19) (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse3 (and .cse16 .cse4 .cse6 .cse24 .cse8 .cse25) .cse10) (or .cse22 .cse0 .cse1 .cse23 .cse11 (and .cse12 .cse16 .cse6 .cse24 .cse8 .cse25) .cse13 .cse10) (or .cse20 .cse14 .cse0 .cse11 (and (<= 1 ~pumpRunning~0) .cse26 .cse7) .cse13 .cse19)))) [2021-12-21 13:17:20,168 INFO L854 garLoopResultBuilder]: At program point L541(line 541) the Hoare annotation is: (let ((.cse12 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse12 .cse13)) (.cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse6 (and (= ~pumpRunning~0 0) .cse12 .cse13)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse8 (not (<= 0 |old(~waterLevel~0)|))) (.cse10 (not (<= 1 ~methaneLevelCritical~0))) (.cse11 (not (<= |old(~waterLevel~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse0 .cse2 .cse3 .cse5) (or .cse0 .cse1 .cse8 .cse2 .cse3 .cse4 .cse9) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) .cse10 .cse3 .cse4) (or .cse6 .cse7 .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse10 .cse3) (or .cse6 (not (<= |old(~waterLevel~0)| 1)) .cse7 .cse0 .cse8 .cse2) (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse10 .cse4 .cse9) (or .cse0 .cse1 .cse8 .cse10 .cse4 .cse11 .cse9) (or .cse6 .cse7 .cse0 .cse8 .cse10 .cse11)))) [2021-12-21 13:17:20,168 INFO L858 garLoopResultBuilder]: For program point L541-1(line 541) no Hoare annotation was computed. [2021-12-21 13:17:20,168 INFO L858 garLoopResultBuilder]: For program point L558(lines 558 568) no Hoare annotation was computed. [2021-12-21 13:17:20,168 INFO L858 garLoopResultBuilder]: For program point L554(lines 554 571) no Hoare annotation was computed. [2021-12-21 13:17:20,168 INFO L854 garLoopResultBuilder]: At program point L554-1(lines 546 574) the Hoare annotation is: (let ((.cse5 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~3#1| 2)) (.cse6 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse25 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse15 (= ~pumpRunning~0 0)) (.cse26 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse27 (<= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|)) (.cse28 (< |timeShift___utac_acc__Specification5_spec__3_~tmp~3#1| 2)) (.cse17 (= 1 ~systemActive~0)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse10 (= ~methaneLevelCritical~0 0))) (let ((.cse12 (not (<= 1 |old(~waterLevel~0)|))) (.cse29 (not (<= |old(~waterLevel~0)| 0))) (.cse11 (not (<= 1 |old(~pumpRunning~0)|))) (.cse14 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse16 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~3#1| ~waterLevel~0)) (.cse18 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse19 (<= ~waterLevel~0 0)) (.cse20 (<= 1 ~switchedOnBeforeTS~0)) (.cse21 (<= 0 ~waterLevel~0)) (.cse22 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse9 (not (<= |old(~waterLevel~0)| 1))) (.cse24 (not (<= 0 |old(~waterLevel~0)|))) (.cse4 (not .cse10)) (.cse23 (and .cse25 .cse15 .cse26 .cse27 .cse28 .cse17 .cse7)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse17)) (.cse2 (not (< 1 |old(~waterLevel~0)|))) (.cse3 (and .cse25 .cse15 .cse5 .cse6 (<= 2 ~waterLevel~0) .cse17 .cse7)) (.cse13 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (and (<= 1 ~pumpRunning~0) .cse5 .cse6 .cse7) .cse8) (or .cse9 .cse10 .cse1 .cse11 .cse12 .cse13 (and .cse14 .cse0 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21) .cse8 .cse22) (or .cse9 .cse0 .cse10 .cse1 .cse12 .cse13 .cse8 .cse23) (or .cse1 .cse11 .cse24 .cse4 (and .cse25 .cse0 .cse26 .cse27 .cse28 .cse17 .cse18 .cse7 .cse20) .cse29 .cse22) (or .cse0 .cse1 .cse24 .cse13 .cse23 .cse29) (or .cse10 .cse1 .cse11 .cse24 (and .cse0 .cse15 .cse26 .cse28 .cse17 .cse18 .cse7 .cse20) .cse13 .cse8 .cse29 .cse22) (or .cse1 .cse11 .cse13 (and .cse14 .cse0 .cse15 .cse16 .cse17 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0) .cse18 .cse20) .cse8 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse11 .cse2 .cse4 (and .cse25 .cse14 .cse0 .cse27 .cse16 .cse17 .cse18 (= ~waterLevel~0 1) .cse20) .cse8) (or (not (= |old(~waterLevel~0)| 1)) .cse1 .cse11 .cse4 (and .cse25 .cse14 .cse0 .cse27 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21) .cse22) (or .cse9 .cse0 .cse1 .cse24 .cse4 .cse23) (or .cse0 .cse10 .cse1 .cse2 .cse3 .cse13 .cse8)))) [2021-12-21 13:17:20,168 INFO L858 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2021-12-21 13:17:20,169 INFO L854 garLoopResultBuilder]: At program point L63-2(lines 59 70) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (not (<= 2 |old(~waterLevel~0)|))) (.cse15 (not (= |old(~waterLevel~0)| 1))) (.cse17 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (and (or .cse8 (= |old(~switchedOnBeforeTS~0)| 0)) (or .cse15 .cse17))) (.cse11 (and .cse4 (<= ~waterLevel~0 0) .cse5 (<= 0 ~waterLevel~0))) (.cse16 (and .cse4 (= |old(~waterLevel~0)| ~waterLevel~0) .cse5)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse14 (not (<= |old(~waterLevel~0)| 0))) (.cse2 (not (< 1 |old(~waterLevel~0)|))) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (not (<= |old(~waterLevel~0)| 1))) (.cse12 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse13 (not (<= 0 |old(~waterLevel~0)|))) (.cse7 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (and .cse4 (= ~waterLevel~0 1) .cse5) .cse6) (or .cse0 .cse1 .cse7 (and .cse4 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0) .cse5) .cse6 .cse8) (or .cse9 .cse0 .cse1 .cse3 .cse10 .cse11) (or .cse12 .cse0 .cse2 .cse3 .cse6) (or .cse12 .cse0 .cse13 .cse3 .cse14) (or .cse12 .cse15 .cse0 .cse3) (or .cse16 .cse0 .cse1 .cse13 .cse3 .cse14 .cse17) (or .cse9 .cse0 .cse1 .cse7 .cse10 .cse11) (or .cse16 .cse0 .cse1 .cse13 .cse7 .cse14 .cse17) (or .cse12 .cse0 .cse2 .cse7 .cse6) (or .cse9 .cse12 .cse0 .cse13 .cse7)))) [2021-12-21 13:17:20,169 INFO L854 garLoopResultBuilder]: At program point L699(lines 694 701) the Hoare annotation is: (let ((.cse7 (not (<= |old(~waterLevel~0)| 0))) (.cse10 (not (< 1 |old(~waterLevel~0)|))) (.cse12 (not (= |old(~waterLevel~0)| 1))) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= 0 |old(~waterLevel~0)|))) (.cse13 (not (= ~methaneLevelCritical~0 0))) (.cse11 (not (<= |old(~waterLevel~0)| 2))) (.cse8 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or (and .cse0 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) .cse2) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse9 .cse3 .cse10 .cse6 .cse11) (or .cse9 .cse3 .cse5 .cse6 .cse7) (or (and .cse0 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0) .cse1 .cse2) .cse3 .cse4 .cse6 .cse11 (not (<= 2 |old(~waterLevel~0)|))) (or .cse9 .cse12 .cse3 .cse6) (or .cse3 .cse4 .cse10 .cse13 .cse11) (or .cse9 .cse3 .cse10 .cse13 .cse11) (or .cse12 .cse3 .cse4 (and .cse0 .cse1 (<= ~waterLevel~0 0) .cse2 (<= 0 ~waterLevel~0)) .cse6 .cse8) (or (not (<= |old(~waterLevel~0)| 1)) .cse9 .cse3 .cse5 .cse13) (or .cse3 .cse4 .cse5 .cse13 .cse11 .cse8))) [2021-12-21 13:17:20,169 INFO L854 garLoopResultBuilder]: At program point L658(line 658) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (<= |old(~waterLevel~0)| 0))) (.cse7 (not (< 1 |old(~waterLevel~0)|))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 0 |old(~waterLevel~0)|))) (.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (not (= ~methaneLevelCritical~0 0))) (.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse13 (<= 1 ~switchedOnBeforeTS~0)) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse0 .cse7 .cse3 .cse4) (or .cse6 .cse0 .cse2 .cse3 .cse8) (or .cse0 .cse1 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse6 .cse9 .cse0 .cse3) (or .cse0 .cse1 .cse7 .cse10 .cse4 (and .cse11 .cse12 (= ~waterLevel~0 1) .cse13)) (or .cse0 .cse1 .cse2 .cse10 (and .cse11 .cse12 (= |old(~waterLevel~0)| ~waterLevel~0) .cse13) .cse8 .cse5) (or .cse6 .cse0 .cse7 .cse10 .cse4) (or (not (<= |old(~waterLevel~0)| 1)) .cse6 .cse0 .cse2 .cse10) (or .cse9 .cse0 .cse1 .cse10 (and .cse11 .cse12 (<= ~waterLevel~0 0) .cse13 (<= 0 ~waterLevel~0)) .cse5))) [2021-12-21 13:17:20,169 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 583 609) the Hoare annotation is: (let ((.cse12 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse12 .cse13)) (.cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse6 (and (= ~pumpRunning~0 0) .cse12 .cse13)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse8 (not (<= 0 |old(~waterLevel~0)|))) (.cse10 (not (<= 1 ~methaneLevelCritical~0))) (.cse11 (not (<= |old(~waterLevel~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse0 .cse2 .cse3 .cse5) (or .cse0 .cse1 .cse8 .cse2 .cse3 .cse4 .cse9) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) .cse10 .cse3 .cse4) (or .cse6 .cse7 .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse10 .cse3) (or .cse6 (not (<= |old(~waterLevel~0)| 1)) .cse7 .cse0 .cse8 .cse2) (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse10 .cse4 .cse9) (or .cse0 .cse1 .cse8 .cse10 .cse4 .cse11 .cse9) (or .cse6 .cse7 .cse0 .cse8 .cse10 .cse11)))) [2021-12-21 13:17:20,169 INFO L858 garLoopResultBuilder]: For program point L559(lines 559 565) no Hoare annotation was computed. [2021-12-21 13:17:20,169 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 583 609) no Hoare annotation was computed. [2021-12-21 13:17:20,170 INFO L854 garLoopResultBuilder]: At program point L650(line 650) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (not (<= 2 |old(~waterLevel~0)|))) (.cse15 (not (= |old(~waterLevel~0)| 1))) (.cse17 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (and (or .cse8 (= |old(~switchedOnBeforeTS~0)| 0)) (or .cse15 .cse17))) (.cse11 (and .cse4 (<= ~waterLevel~0 0) .cse5 (<= 0 ~waterLevel~0))) (.cse16 (and .cse4 (= |old(~waterLevel~0)| ~waterLevel~0) .cse5)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse14 (not (<= |old(~waterLevel~0)| 0))) (.cse2 (not (< 1 |old(~waterLevel~0)|))) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (not (<= |old(~waterLevel~0)| 1))) (.cse12 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse13 (not (<= 0 |old(~waterLevel~0)|))) (.cse7 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (and .cse4 (= ~waterLevel~0 1) .cse5) .cse6) (or .cse0 .cse1 .cse7 (and .cse4 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0) .cse5) .cse6 .cse8) (or .cse9 .cse0 .cse1 .cse3 .cse10 .cse11) (or .cse12 .cse0 .cse2 .cse3 .cse6) (or .cse12 .cse0 .cse13 .cse3 .cse14) (or .cse12 .cse15 .cse0 .cse3) (or .cse16 .cse0 .cse1 .cse13 .cse3 .cse14 .cse17) (or .cse9 .cse0 .cse1 .cse7 .cse10 .cse11) (or .cse16 .cse0 .cse1 .cse13 .cse7 .cse14 .cse17) (or .cse12 .cse0 .cse2 .cse7 .cse6) (or .cse9 .cse12 .cse0 .cse13 .cse7)))) [2021-12-21 13:17:20,170 INFO L858 garLoopResultBuilder]: For program point L650-1(line 650) no Hoare annotation was computed. [2021-12-21 13:17:20,170 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 155) no Hoare annotation was computed. [2021-12-21 13:17:20,170 INFO L854 garLoopResultBuilder]: At program point L832(lines 789 834) the Hoare annotation is: (let ((.cse2 (<= 2 ~waterLevel~0)) (.cse5 (<= ~waterLevel~0 2)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse10 (<= ~waterLevel~0 1)) (.cse11 (<= 1 ~waterLevel~0)) (.cse8 (<= ~waterLevel~0 0)) (.cse9 (<= 0 ~waterLevel~0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse12 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse6 .cse2 .cse3 .cse4 .cse5) (and .cse7 .cse6 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse6 .cse3 .cse4 .cse8 .cse9) (and .cse0 .cse1 .cse10 .cse3 .cse4 .cse11) (and .cse0 .cse1 .cse3 .cse4 .cse8 .cse9) (and .cse0 .cse6 .cse10 .cse3 .cse4 .cse11) (and .cse7 .cse6 .cse3 .cse4 .cse8 .cse12 .cse9) (and .cse7 .cse6 .cse3 .cse4 (= ~waterLevel~0 1) .cse12))) [2021-12-21 13:17:20,170 INFO L858 garLoopResultBuilder]: For program point L799(lines 799 805) no Hoare annotation was computed. [2021-12-21 13:17:20,170 INFO L858 garLoopResultBuilder]: For program point L799-1(lines 799 805) no Hoare annotation was computed. [2021-12-21 13:17:20,170 INFO L861 garLoopResultBuilder]: At program point L952(lines 944 954) the Hoare annotation is: true [2021-12-21 13:17:20,170 INFO L858 garLoopResultBuilder]: For program point L791(lines 791 795) no Hoare annotation was computed. [2021-12-21 13:17:20,171 INFO L858 garLoopResultBuilder]: For program point L965(lines 965 972) no Hoare annotation was computed. [2021-12-21 13:17:20,171 INFO L858 garLoopResultBuilder]: For program point L965-2(lines 965 972) no Hoare annotation was computed. [2021-12-21 13:17:20,171 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-21 13:17:20,171 INFO L854 garLoopResultBuilder]: At program point L862(lines 858 864) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:17:20,171 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-21 13:17:20,171 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-21 13:17:20,171 INFO L858 garLoopResultBuilder]: For program point L825(lines 825 829) no Hoare annotation was computed. [2021-12-21 13:17:20,171 INFO L854 garLoopResultBuilder]: At program point L825-2(lines 819 830) the Hoare annotation is: (let ((.cse2 (<= ~waterLevel~0 1)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse9 (< 1 ~waterLevel~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse10 (<= ~waterLevel~0 2)) (.cse5 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (<= 0 ~waterLevel~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse3 .cse4 (= ~waterLevel~0 1)) (and .cse7 .cse8 .cse9 .cse3 .cse4 .cse10) (and .cse0 .cse1 .cse9 .cse3 .cse4 .cse10) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse6) (and .cse7 .cse1 .cse9 .cse3 .cse4 .cse10) (and .cse7 .cse8 .cse3 .cse4 (<= ~waterLevel~0 0) .cse6) (and .cse0 .cse8 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse10) (and .cse0 .cse8 .cse3 .cse4 .cse10 .cse5 .cse6))) [2021-12-21 13:17:20,172 INFO L861 garLoopResultBuilder]: At program point L974(lines 955 977) the Hoare annotation is: true [2021-12-21 13:17:20,172 INFO L854 garLoopResultBuilder]: At program point L941(lines 937 943) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:17:20,172 INFO L858 garLoopResultBuilder]: For program point L809(lines 809 815) no Hoare annotation was computed. [2021-12-21 13:17:20,172 INFO L858 garLoopResultBuilder]: For program point L809-1(lines 809 815) no Hoare annotation was computed. [2021-12-21 13:17:20,172 INFO L861 garLoopResultBuilder]: At program point L838(lines 779 842) the Hoare annotation is: true [2021-12-21 13:17:20,172 INFO L854 garLoopResultBuilder]: At program point L801(line 801) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse6 (<= 2 ~waterLevel~0)) (.cse7 (<= ~waterLevel~0 2)) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (<= ~waterLevel~0 1)) (.cse10 (<= ~waterLevel~0 0)) (.cse5 (<= 0 ~waterLevel~0)) (.cse9 (<= 1 ~pumpRunning~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse11 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse3 .cse4 .cse7) (and .cse0 .cse8 .cse6 .cse3 .cse4 .cse7) (and .cse9 .cse8 .cse6 .cse3 .cse4 .cse7) (and .cse0 .cse8 .cse3 .cse4 .cse10 .cse5) (and .cse0 .cse8 .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0)) (and .cse9 .cse8 .cse3 .cse4 .cse10 .cse11 .cse5) (and .cse9 .cse8 .cse3 .cse4 (= ~waterLevel~0 1) .cse11))) [2021-12-21 13:17:20,172 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-21 13:17:20,172 INFO L854 garLoopResultBuilder]: At program point L533(lines 528 535) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:17:20,173 INFO L854 garLoopResultBuilder]: At program point L835(lines 788 836) the Hoare annotation is: false [2021-12-21 13:17:20,173 INFO L858 garLoopResultBuilder]: For program point L790(lines 789 834) no Hoare annotation was computed. [2021-12-21 13:17:20,173 INFO L858 garLoopResultBuilder]: For program point L819(lines 819 830) no Hoare annotation was computed. [2021-12-21 13:17:20,173 INFO L854 garLoopResultBuilder]: At program point L877(lines 872 880) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:17:20,173 INFO L854 garLoopResultBuilder]: At program point L811(line 811) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse5 (<= 0 ~waterLevel~0)) (.cse8 (< 1 ~waterLevel~0)) (.cse9 (<= ~waterLevel~0 2)) (.cse0 (= ~pumpRunning~0 0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse2 (<= ~waterLevel~0 1)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and .cse0 .cse1 .cse8 .cse3 .cse4 .cse9) (and .cse6 .cse7 .cse8 .cse3 .cse4 .cse9) (and .cse0 .cse7 .cse3 .cse4 (<= ~waterLevel~0 0) .cse5) (and .cse0 .cse7 .cse8 .cse3 .cse4 .cse9) (and .cse0 .cse7 .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0)))) [2021-12-21 13:17:20,173 INFO L854 garLoopResultBuilder]: At program point L869(lines 865 871) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:17:20,173 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2021-12-21 13:17:20,173 INFO L858 garLoopResultBuilder]: For program point L75-1(lines 71 82) no Hoare annotation was computed. [2021-12-21 13:17:20,173 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 71 82) the Hoare annotation is: (let ((.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse10 (not (<= |old(~waterLevel~0)| 0))) (.cse8 (not (= |old(~waterLevel~0)| 1))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 1 ~pumpRunning~0))) (.cse11 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse9 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse6 .cse7 .cse3 .cse4 .cse5) (or .cse0 .cse8 .cse1 .cse6 .cse3) (or .cse0 .cse1 .cse6 .cse3 .cse4 .cse5) (or .cse1 .cse9 .cse6 .cse7 .cse3 .cse10 .cse11) (or .cse0 .cse1 .cse9 .cse6 .cse3 .cse10) (or .cse8 .cse1 .cse6 .cse7 (= ~waterLevel~0 1) .cse11) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse9 .cse2 .cse3))) [2021-12-21 13:17:20,174 INFO L854 garLoopResultBuilder]: At program point L632(line 632) the Hoare annotation is: (let ((.cse9 (= 1 ~systemActive~0))) (let ((.cse6 (not (<= 2 ~waterLevel~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (<= ~waterLevel~0 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse9)) (.cse2 (not (<= 0 ~waterLevel~0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) .cse9 (= |processEnvironment__wrappee__methaneQuery_~tmp~4#1| 0))) (.cse5 (not (<= ~waterLevel~0 1)))) (and (or .cse0 (not (<= ~waterLevel~0 0)) .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 (not (<= 1 ~waterLevel~0)) .cse3 .cse4 .cse5) (or .cse1 .cse2 (not (<= 1 |old(~pumpRunning~0)|)) .cse3 .cse5 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 .cse6 .cse7 .cse4 .cse8) (or .cse0 .cse1 .cse6 .cse3 .cse4 .cse8) (or .cse0 .cse1 .cse2 .cse7 .cse4 .cse5)))) [2021-12-21 13:17:20,174 INFO L858 garLoopResultBuilder]: For program point L626(lines 626 634) no Hoare annotation was computed. [2021-12-21 13:17:20,174 INFO L854 garLoopResultBuilder]: At program point L145(lines 136 149) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0))) (let ((.cse8 (not (<= 1 ~waterLevel~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= ~waterLevel~0 1))) (.cse11 (not (<= ~waterLevel~0 0))) (.cse6 (not (<= 0 ~waterLevel~0))) (.cse9 (and (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|) .cse1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 2 ~waterLevel~0))) (.cse10 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse2 .cse6 (not (<= 1 |old(~pumpRunning~0)|)) .cse4 .cse7 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse2 .cse8 .cse9 .cse10 .cse7) (or .cse0 .cse11 .cse2 .cse6 .cse9 .cse4) (or .cse0 .cse2 .cse8 .cse9 .cse4 .cse7) (or .cse0 .cse11 .cse2 .cse6 .cse9 .cse10) (or .cse0 .cse1 .cse2 .cse3 .cse10 .cse5)))) [2021-12-21 13:17:20,174 INFO L858 garLoopResultBuilder]: For program point L622(lines 622 639) no Hoare annotation was computed. [2021-12-21 13:17:20,174 INFO L858 garLoopResultBuilder]: For program point L684(lines 684 690) no Hoare annotation was computed. [2021-12-21 13:17:20,174 INFO L854 garLoopResultBuilder]: At program point L682(line 682) the Hoare annotation is: (let ((.cse2 (not (<= 2 ~waterLevel~0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0))) (.cse5 (not (<= ~waterLevel~0 2))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 0 ~waterLevel~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= ~waterLevel~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse6 (not (<= 1 |old(~pumpRunning~0)|)) .cse3 .cse7 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 .cse2 .cse8 .cse4 .cse5) (or .cse0 .cse1 .cse6 .cse8 .cse7) (or .cse0 .cse1 .cse6 .cse3 .cse7))) [2021-12-21 13:17:20,174 INFO L854 garLoopResultBuilder]: At program point L684-2(lines 677 693) the Hoare annotation is: (let ((.cse6 (not (<= ~waterLevel~0 2))) (.cse7 (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~6#1| ~methaneLevelCritical~0)) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~waterLevel~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (<= ~waterLevel~0 1)))) (and (or .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (< 1 ~waterLevel~0)) .cse4 .cse0 .cse5 .cse6 (and (= ~pumpRunning~0 0) .cse7)) (or .cse4 .cse0 (not (<= 2 ~waterLevel~0)) .cse2 .cse6 (and (<= 1 ~pumpRunning~0) .cse7)) (or .cse4 .cse0 .cse1 .cse5 .cse3) (or .cse4 .cse0 .cse1 .cse2 .cse3))) [2021-12-21 13:17:20,175 INFO L858 garLoopResultBuilder]: For program point L682-1(line 682) no Hoare annotation was computed. [2021-12-21 13:17:20,175 INFO L854 garLoopResultBuilder]: At program point L773(lines 758 776) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (= ~pumpRunning~0 0))) (let ((.cse7 (not (<= ~waterLevel~0 0))) (.cse5 (not (<= 0 ~waterLevel~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (and .cse11 .cse12)) (.cse4 (not (<= ~waterLevel~0 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse10 (not (<= 1 ~waterLevel~0))) (.cse8 (and (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0) .cse11 .cse12 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0))) (.cse9 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (<= ~waterLevel~0 1)))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2 .cse3 .cse4) (or .cse1 .cse5 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse6 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse7 .cse1 .cse5 .cse8 .cse9) (or .cse0 .cse7 .cse1 .cse5 .cse8 .cse2) (or .cse0 .cse1 .cse10 .cse8 .cse2 .cse6) (or (not (< 1 ~waterLevel~0)) .cse0 .cse1 .cse9 .cse3 .cse4) (or .cse0 .cse1 .cse10 .cse8 .cse9 .cse6)))) [2021-12-21 13:17:20,176 INFO L854 garLoopResultBuilder]: At program point L674(lines 669 676) the Hoare annotation is: (let ((.cse5 (not (<= 2 ~waterLevel~0))) (.cse7 (not (<= ~waterLevel~0 2))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~waterLevel~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (<= ~waterLevel~0 1)))) (and (or .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse4 .cse0 .cse5 .cse6 .cse7) (or .cse4 .cse0 .cse5 .cse2 .cse7 (and (<= 1 ~pumpRunning~0) (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~6#1| ~methaneLevelCritical~0))) (or .cse4 .cse0 .cse1 .cse6 .cse3) (or .cse4 .cse0 .cse1 .cse2 .cse3))) [2021-12-21 13:17:20,177 INFO L858 garLoopResultBuilder]: For program point L767(lines 767 771) no Hoare annotation was computed. [2021-12-21 13:17:20,177 INFO L858 garLoopResultBuilder]: For program point L767-2(lines 767 771) no Hoare annotation was computed. [2021-12-21 13:17:20,177 INFO L854 garLoopResultBuilder]: At program point L637(line 637) the Hoare annotation is: (let ((.cse2 (not (<= 2 ~waterLevel~0))) (.cse4 (not (<= ~waterLevel~0 2))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (<= ~waterLevel~0 1))) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse10 (not (<= 0 ~waterLevel~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse9 (not (<= 1 ~switchedOnBeforeTS~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse6 .cse1 .cse7 (not (<= 1 ~waterLevel~0)) .cse3 .cse8 .cse9) (or .cse0 .cse1 .cse10 .cse5 .cse8) (or .cse0 .cse1 .cse10 .cse3 .cse8) (or .cse6 (not (<= ~waterLevel~0 0)) .cse1 .cse10 .cse7 .cse3 .cse9))) [2021-12-21 13:17:20,177 INFO L858 garLoopResultBuilder]: For program point L637-1(lines 618 642) no Hoare annotation was computed. [2021-12-21 13:17:20,177 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 618 642) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~waterLevel~0))) (.cse5 (not (<= ~waterLevel~0 1))) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (not (<= ~waterLevel~0 0))) (.cse11 (not (<= 0 ~waterLevel~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse9 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse12 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse2 .cse7 .cse3 .cse8 .cse5 .cse9) (or .cse0 .cse1 .cse10 .cse2 .cse11 .cse8) (or (not (< 1 ~waterLevel~0)) .cse0 .cse1 .cse2 .cse8 .cse12) (or .cse0 .cse1 .cse2 .cse3 .cse8 .cse5) (or .cse0 .cse1 .cse10 .cse2 .cse11 .cse4) (or .cse6 .cse10 .cse2 .cse11 .cse7 .cse8 .cse9) (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse4 .cse12))) [2021-12-21 13:17:20,178 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 146) no Hoare annotation was computed. [2021-12-21 13:17:20,178 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 618 642) no Hoare annotation was computed. [2021-12-21 13:17:20,178 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 713 721) no Hoare annotation was computed. [2021-12-21 13:17:20,178 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 713 721) the Hoare annotation is: true [2021-12-21 13:17:20,178 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 713 721) no Hoare annotation was computed. [2021-12-21 13:17:20,178 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 702 712) the Hoare annotation is: true [2021-12-21 13:17:20,179 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 702 712) no Hoare annotation was computed. [2021-12-21 13:17:20,179 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 702 712) no Hoare annotation was computed. [2021-12-21 13:17:20,179 INFO L854 garLoopResultBuilder]: At program point L100(lines 95 103) the Hoare annotation is: (let ((.cse7 (not (<= ~waterLevel~0 0))) (.cse8 (not (<= 0 ~waterLevel~0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse3 (not (<= 1 ~pumpRunning~0))) (.cse4 (not (<= ~waterLevel~0 1))) (.cse6 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse9 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse11 (not (<= 2 ~waterLevel~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse12 (not (<= ~waterLevel~0 2))) (.cse5 (= |isMethaneAlarm_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse7 .cse0 .cse8 .cse9 .cse3 .cse5 .cse6) (or .cse7 .cse0 .cse8 .cse2 .cse3 .cse5 .cse6) (or .cse0 .cse1 .cse9 .cse3 .cse4 .cse5 .cse6) (or .cse10 .cse0 .cse11 .cse9 .cse12 .cse5) (or .cse10 .cse0 .cse11 .cse2 .cse12 .cse5))) [2021-12-21 13:17:20,182 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:20,182 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-21 13:17:20,230 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.12 01:17:20 BoogieIcfgContainer [2021-12-21 13:17:20,230 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-21 13:17:20,230 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-21 13:17:20,230 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-21 13:17:20,230 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-21 13:17:20,231 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:16:50" (3/4) ... [2021-12-21 13:17:20,233 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-21 13:17:20,243 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-21 13:17:20,243 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-21 13:17:20,243 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-21 13:17:20,243 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-21 13:17:20,243 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-21 13:17:20,243 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-12-21 13:17:20,244 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-12-21 13:17:20,244 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-12-21 13:17:20,248 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 50 nodes and edges [2021-12-21 13:17:20,250 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-21 13:17:20,251 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-21 13:17:20,251 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-21 13:17:20,251 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-21 13:17:20,252 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-21 13:17:20,252 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-21 13:17:20,268 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) && (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2021-12-21 13:17:20,269 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((!(2 <= \old(waterLevel)) || \old(switchedOnBeforeTS) == 0) && (!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((!(2 <= \old(waterLevel)) || \old(switchedOnBeforeTS) == 0) && (!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) [2021-12-21 13:17:20,269 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp == 2) && 2 == \result) && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || (((1 <= pumpRunning && tmp == 2) && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && ((((((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && tmp <= waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result < 2) && pumpRunning <= tmp___0) && tmp < 2) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && \result < 2) && pumpRunning <= tmp___0) && tmp < 2) && 1 == systemActive) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result < 2) && pumpRunning <= tmp___0) && tmp < 2) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 0))) && ((((((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && \result < 2) && tmp < 2) && 1 == systemActive) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && tmp <= waterLevel) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && pumpRunning <= tmp___0) && tmp <= waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && pumpRunning <= tmp___0) && tmp <= waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result < 2) && pumpRunning <= tmp___0) && tmp < 2) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && ((((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp == 2) && 2 == \result) && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) [2021-12-21 13:17:20,270 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) && (((((((((pumpRunning == 0 && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1))) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || ((!(2 <= \old(waterLevel)) || \old(switchedOnBeforeTS) == 0) && (!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS)))))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((!(2 <= \old(waterLevel)) || \old(switchedOnBeforeTS) == 0) && (!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))))) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) [2021-12-21 13:17:20,270 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2021-12-21 13:17:20,270 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && \result < 2) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) && (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && \result < 2) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result < 2) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 0))) && ((((((((((\result <= waterLevel && pumpRunning == 0) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result < 2) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \result < 2) && \old(waterLevel) == waterLevel))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((\result <= waterLevel && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2021-12-21 13:17:20,270 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((((((((pumpRunning == 0 && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2021-12-21 13:17:20,270 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(1 == systemActive) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || !(waterLevel <= 1)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS)) && ((((((!(waterLevel <= 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && ((((((!(waterLevel <= 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && ((((((!(1 == systemActive) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || !(waterLevel <= 1)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || \result == methaneLevelCritical)) && (((((!(pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || \result == methaneLevelCritical) [2021-12-21 13:17:20,271 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) && (((((!(1 == systemActive) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) [2021-12-21 13:17:20,271 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 == systemActive) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || (pumpRunning == 0 && tmp == methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && tmp == methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) [2021-12-21 13:17:20,271 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 == systemActive) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && tmp == methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) [2021-12-21 13:17:20,271 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(waterLevel <= 2)) && (((((!(1 == systemActive) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || (((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || (((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && \result == 0)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && \result == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) [2021-12-21 13:17:20,299 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-21 13:17:20,299 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-21 13:17:20,300 INFO L158 Benchmark]: Toolchain (without parser) took 30261.61ms. Allocated memory was 100.7MB in the beginning and 255.9MB in the end (delta: 155.2MB). Free memory was 71.3MB in the beginning and 90.9MB in the end (delta: -19.6MB). Peak memory consumption was 137.7MB. Max. memory is 16.1GB. [2021-12-21 13:17:20,300 INFO L158 Benchmark]: CDTParser took 0.16ms. Allocated memory is still 100.7MB. Free memory is still 72.8MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-21 13:17:20,301 INFO L158 Benchmark]: CACSL2BoogieTranslator took 322.36ms. Allocated memory is still 100.7MB. Free memory was 71.2MB in the beginning and 52.3MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2021-12-21 13:17:20,301 INFO L158 Benchmark]: Boogie Procedure Inliner took 57.87ms. Allocated memory is still 100.7MB. Free memory was 52.3MB in the beginning and 49.8MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-21 13:17:20,301 INFO L158 Benchmark]: Boogie Preprocessor took 37.38ms. Allocated memory was 100.7MB in the beginning and 121.6MB in the end (delta: 21.0MB). Free memory was 49.8MB in the beginning and 96.7MB in the end (delta: -46.9MB). Peak memory consumption was 6.1MB. Max. memory is 16.1GB. [2021-12-21 13:17:20,302 INFO L158 Benchmark]: RCFGBuilder took 417.36ms. Allocated memory is still 121.6MB. Free memory was 96.6MB in the beginning and 83.1MB in the end (delta: 13.5MB). Peak memory consumption was 15.7MB. Max. memory is 16.1GB. [2021-12-21 13:17:20,302 INFO L158 Benchmark]: TraceAbstraction took 29352.65ms. Allocated memory was 121.6MB in the beginning and 255.9MB in the end (delta: 134.2MB). Free memory was 82.6MB in the beginning and 98.3MB in the end (delta: -15.7MB). Peak memory consumption was 145.5MB. Max. memory is 16.1GB. [2021-12-21 13:17:20,302 INFO L158 Benchmark]: Witness Printer took 69.30ms. Allocated memory is still 255.9MB. Free memory was 98.3MB in the beginning and 90.9MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-21 13:17:20,305 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16ms. Allocated memory is still 100.7MB. Free memory is still 72.8MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 322.36ms. Allocated memory is still 100.7MB. Free memory was 71.2MB in the beginning and 52.3MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 57.87ms. Allocated memory is still 100.7MB. Free memory was 52.3MB in the beginning and 49.8MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 37.38ms. Allocated memory was 100.7MB in the beginning and 121.6MB in the end (delta: 21.0MB). Free memory was 49.8MB in the beginning and 96.7MB in the end (delta: -46.9MB). Peak memory consumption was 6.1MB. Max. memory is 16.1GB. * RCFGBuilder took 417.36ms. Allocated memory is still 121.6MB. Free memory was 96.6MB in the beginning and 83.1MB in the end (delta: 13.5MB). Peak memory consumption was 15.7MB. Max. memory is 16.1GB. * TraceAbstraction took 29352.65ms. Allocated memory was 121.6MB in the beginning and 255.9MB in the end (delta: 134.2MB). Free memory was 82.6MB in the beginning and 98.3MB in the end (delta: -15.7MB). Peak memory consumption was 145.5MB. Max. memory is 16.1GB. * Witness Printer took 69.30ms. Allocated memory is still 255.9MB. Free memory was 98.3MB in the beginning and 90.9MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 155]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 98 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 29.3s, OverallIterations: 14, TraceHistogramMax: 9, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 8.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 12.1s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 8200 SdHoareTripleChecker+Valid, 5.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 8154 mSDsluCounter, 7998 SdHoareTripleChecker+Invalid, 4.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5886 mSDsCounter, 3552 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 11655 IncrementalHoareTripleChecker+Invalid, 15207 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 3552 mSolverCounterUnsat, 2112 mSDtfsCounter, 11655 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 2598 GetRequests, 2218 SyntacticMatches, 13 SemanticMatches, 367 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4974 ImplicationChecksByTransitivity, 3.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1259occurred in iteration=13, InterpolantAutomatonStates: 278, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 14 MinimizatonAttempts, 514 StatesRemovedByMinimization, 10 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 45 LocationsWithAnnotation, 3045 PreInvPairs, 3366 NumberOfFragments, 6799 HoareAnnotationTreeSize, 3045 FomulaSimplifications, 6811 FormulaSimplificationTreeSizeReduction, 0.7s HoareSimplificationTime, 45 FomulaSimplificationsInter, 64978 FormulaSimplificationTreeSizeReductionInter, 11.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 5.8s InterpolantComputationTime, 2384 NumberOfCodeBlocks, 2384 NumberOfCodeBlocksAsserted, 19 NumberOfCheckSat, 3334 ConstructedInterpolants, 0 QuantifiedInterpolants, 7993 SizeOfPredicates, 13 NumberOfNonLiveVariables, 3631 ConjunctsInSsa, 79 ConjunctsInUnsatCore, 24 InterpolantComputations, 9 PerfectInterpolantSequences, 3091/3651 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 865]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 872]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) && (((((!(1 == systemActive) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) - InvariantResult [Line: 789]: Loop Invariant Derived loop invariant: ((((((((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2)) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2)) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 0) && 0 <= waterLevel)) || (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) && 1 <= waterLevel)) || (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 0) && 0 <= waterLevel)) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) && 1 <= waterLevel)) || ((((((1 <= pumpRunning && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) - InvariantResult [Line: 536]: Loop Invariant Derived loop invariant: ((((((((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) && (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 644]: Loop Invariant Derived loop invariant: ((((((((((((((((((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) && (((((((((pumpRunning == 0 && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1))) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || ((!(2 <= \old(waterLevel)) || \old(switchedOnBeforeTS) == 0) && (!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS)))))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((!(2 <= \old(waterLevel)) || \old(switchedOnBeforeTS) == 0) && (!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))))) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: ((((((((((!(1 == systemActive) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || !(waterLevel <= 1)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS)) && ((((((!(waterLevel <= 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && ((((((!(waterLevel <= 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && ((((((!(1 == systemActive) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || !(waterLevel <= 1)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || \result == methaneLevelCritical)) && (((((!(pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || \result == methaneLevelCritical) - InvariantResult [Line: 937]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 546]: Loop Invariant Derived loop invariant: (((((((((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp == 2) && 2 == \result) && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || (((1 <= pumpRunning && tmp == 2) && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && ((((((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && tmp <= waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result < 2) && pumpRunning <= tmp___0) && tmp < 2) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && \result < 2) && pumpRunning <= tmp___0) && tmp < 2) && 1 == systemActive) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result < 2) && pumpRunning <= tmp___0) && tmp < 2) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 0))) && ((((((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && \result < 2) && tmp < 2) && 1 == systemActive) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && tmp <= waterLevel) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && pumpRunning <= tmp___0) && tmp <= waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && pumpRunning <= tmp___0) && tmp <= waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result < 2) && pumpRunning <= tmp___0) && tmp < 2) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && ((((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp == 2) && 2 == \result) && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 788]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 758]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(waterLevel <= 2)) && (((((!(1 == systemActive) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || (((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(1 == systemActive)) || !(0 <= waterLevel)) || (((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && \result == 0)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && \result == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) - InvariantResult [Line: 528]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 694]: Loop Invariant Derived loop invariant: (((((((((((((((((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((((((((pumpRunning == 0 && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 669]: Loop Invariant Derived loop invariant: ((((((((!(1 == systemActive) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && tmp == methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: (((((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && \result < 2) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) && (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && \result < 2) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result < 2) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 0))) && ((((((((((\result <= waterLevel && pumpRunning == 0) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result < 2) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \result < 2) && \old(waterLevel) == waterLevel))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((\result <= waterLevel && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 858]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 955]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: ((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 883]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: ((((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((!(2 <= \old(waterLevel)) || \old(switchedOnBeforeTS) == 0) && (!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((!(2 <= \old(waterLevel)) || \old(switchedOnBeforeTS) == 0) && (!(\old(waterLevel) == 1) || !(1 <= \old(switchedOnBeforeTS))))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 677]: Loop Invariant Derived loop invariant: ((((((((!(1 == systemActive) || !(0 <= waterLevel)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || (pumpRunning == 0 && tmp == methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && tmp == methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) - InvariantResult [Line: 779]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 893]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2021-12-21 13:17:20,365 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE