./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version ff03de63 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 73b8e020dd9d30fdd676c81009d4f1b850aa716d63ef29ce3d475a261546f853 --- Real Ultimate output --- This is Ultimate 0.2.2-dev-ff03de6 [2021-12-21 13:16:49,444 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-21 13:16:49,446 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-21 13:16:49,508 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-21 13:16:49,509 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-21 13:16:49,511 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-21 13:16:49,514 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-21 13:16:49,515 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-21 13:16:49,516 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-21 13:16:49,517 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-21 13:16:49,518 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-21 13:16:49,519 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-21 13:16:49,519 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-21 13:16:49,520 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-21 13:16:49,521 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-21 13:16:49,521 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-21 13:16:49,522 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-21 13:16:49,523 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-21 13:16:49,524 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-21 13:16:49,525 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-21 13:16:49,526 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-21 13:16:49,528 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-21 13:16:49,529 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-21 13:16:49,530 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-21 13:16:49,539 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-21 13:16:49,540 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-21 13:16:49,540 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-21 13:16:49,541 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-21 13:16:49,541 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-21 13:16:49,542 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-21 13:16:49,542 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-21 13:16:49,543 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-21 13:16:49,544 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-21 13:16:49,545 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-21 13:16:49,546 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-21 13:16:49,546 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-21 13:16:49,547 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-21 13:16:49,547 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-21 13:16:49,547 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-21 13:16:49,548 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-21 13:16:49,549 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-21 13:16:49,549 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-21 13:16:49,574 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-21 13:16:49,574 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-21 13:16:49,574 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-21 13:16:49,575 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-21 13:16:49,575 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-21 13:16:49,576 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-21 13:16:49,576 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-21 13:16:49,576 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-21 13:16:49,576 INFO L138 SettingsManager]: * Use SBE=true [2021-12-21 13:16:49,577 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-21 13:16:49,577 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-21 13:16:49,577 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-21 13:16:49,577 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-21 13:16:49,577 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-21 13:16:49,578 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-21 13:16:49,578 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-21 13:16:49,578 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-21 13:16:49,578 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-21 13:16:49,578 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-21 13:16:49,579 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-21 13:16:49,579 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-21 13:16:49,579 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-21 13:16:49,579 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-21 13:16:49,579 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-21 13:16:49,579 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 13:16:49,580 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-21 13:16:49,580 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-21 13:16:49,580 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-21 13:16:49,580 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-21 13:16:49,581 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-21 13:16:49,581 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-21 13:16:49,581 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-21 13:16:49,581 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-21 13:16:49,581 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-21 13:16:49,581 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 73b8e020dd9d30fdd676c81009d4f1b850aa716d63ef29ce3d475a261546f853 [2021-12-21 13:16:49,809 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-21 13:16:49,834 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-21 13:16:49,836 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-21 13:16:49,837 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-21 13:16:49,839 INFO L275 PluginConnector]: CDTParser initialized [2021-12-21 13:16:49,840 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c [2021-12-21 13:16:49,914 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/56a0c9852/73f8c364f82f483fb1e9f7be621f31a8/FLAG771e108ac [2021-12-21 13:16:50,330 INFO L306 CDTParser]: Found 1 translation units. [2021-12-21 13:16:50,333 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c [2021-12-21 13:16:50,347 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/56a0c9852/73f8c364f82f483fb1e9f7be621f31a8/FLAG771e108ac [2021-12-21 13:16:50,358 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/56a0c9852/73f8c364f82f483fb1e9f7be621f31a8 [2021-12-21 13:16:50,360 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-21 13:16:50,361 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-21 13:16:50,365 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-21 13:16:50,365 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-21 13:16:50,367 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-21 13:16:50,368 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 01:16:50" (1/1) ... [2021-12-21 13:16:50,369 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@689d4026 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:50, skipping insertion in model container [2021-12-21 13:16:50,369 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 01:16:50" (1/1) ... [2021-12-21 13:16:50,374 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-21 13:16:50,415 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-21 13:16:50,621 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c[15211,15224] [2021-12-21 13:16:50,637 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 13:16:50,644 INFO L203 MainTranslator]: Completed pre-run [2021-12-21 13:16:50,694 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c[15211,15224] [2021-12-21 13:16:50,708 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 13:16:50,730 INFO L208 MainTranslator]: Completed translation [2021-12-21 13:16:50,730 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:50 WrapperNode [2021-12-21 13:16:50,730 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-21 13:16:50,732 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-21 13:16:50,732 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-21 13:16:50,732 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-21 13:16:50,738 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:50" (1/1) ... [2021-12-21 13:16:50,761 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:50" (1/1) ... [2021-12-21 13:16:50,804 INFO L137 Inliner]: procedures = 57, calls = 159, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 267 [2021-12-21 13:16:50,804 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-21 13:16:50,805 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-21 13:16:50,805 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-21 13:16:50,805 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-21 13:16:50,812 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:50" (1/1) ... [2021-12-21 13:16:50,813 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:50" (1/1) ... [2021-12-21 13:16:50,818 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:50" (1/1) ... [2021-12-21 13:16:50,818 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:50" (1/1) ... [2021-12-21 13:16:50,823 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:50" (1/1) ... [2021-12-21 13:16:50,834 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:50" (1/1) ... [2021-12-21 13:16:50,835 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:50" (1/1) ... [2021-12-21 13:16:50,837 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-21 13:16:50,839 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-21 13:16:50,840 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-21 13:16:50,840 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-21 13:16:50,841 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:50" (1/1) ... [2021-12-21 13:16:50,848 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 13:16:50,858 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:16:50,876 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-21 13:16:50,887 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-21 13:16:50,925 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-21 13:16:50,925 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-21 13:16:50,925 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-21 13:16:50,926 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-21 13:16:50,926 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-21 13:16:50,926 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-21 13:16:50,926 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-21 13:16:50,926 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-21 13:16:50,926 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-21 13:16:50,926 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-12-21 13:16:50,927 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-12-21 13:16:50,927 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-12-21 13:16:50,927 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-12-21 13:16:50,927 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-12-21 13:16:50,927 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-12-21 13:16:50,927 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-21 13:16:50,928 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-21 13:16:50,928 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-21 13:16:50,928 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-21 13:16:50,928 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-21 13:16:51,008 INFO L234 CfgBuilder]: Building ICFG [2021-12-21 13:16:51,010 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-21 13:16:51,278 INFO L275 CfgBuilder]: Performing block encoding [2021-12-21 13:16:51,285 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-21 13:16:51,285 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-21 13:16:51,287 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:16:51 BoogieIcfgContainer [2021-12-21 13:16:51,287 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-21 13:16:51,288 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-21 13:16:51,288 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-21 13:16:51,293 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-21 13:16:51,293 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.12 01:16:50" (1/3) ... [2021-12-21 13:16:51,294 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6173a0c7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 01:16:51, skipping insertion in model container [2021-12-21 13:16:51,294 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:16:50" (2/3) ... [2021-12-21 13:16:51,294 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6173a0c7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 01:16:51, skipping insertion in model container [2021-12-21 13:16:51,295 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:16:51" (3/3) ... [2021-12-21 13:16:51,295 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product46.cil.c [2021-12-21 13:16:51,300 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-21 13:16:51,301 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-21 13:16:51,354 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-21 13:16:51,361 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-21 13:16:51,361 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-21 13:16:51,391 INFO L276 IsEmpty]: Start isEmpty. Operand has 99 states, 75 states have (on average 1.36) internal successors, (102), 83 states have internal predecessors, (102), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2021-12-21 13:16:51,400 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-12-21 13:16:51,400 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:51,401 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:51,402 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:51,406 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:51,406 INFO L85 PathProgramCache]: Analyzing trace with hash -1607314381, now seen corresponding path program 1 times [2021-12-21 13:16:51,413 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:51,413 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2107101065] [2021-12-21 13:16:51,413 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:51,414 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:51,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:51,643 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-21 13:16:51,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:51,663 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:16:51,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:51,670 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:16:51,670 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:51,670 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2107101065] [2021-12-21 13:16:51,671 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2107101065] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:51,671 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:51,671 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-21 13:16:51,673 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1025182879] [2021-12-21 13:16:51,673 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:51,677 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-21 13:16:51,677 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:51,705 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-21 13:16:51,706 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-21 13:16:51,709 INFO L87 Difference]: Start difference. First operand has 99 states, 75 states have (on average 1.36) internal successors, (102), 83 states have internal predecessors, (102), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-21 13:16:51,754 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:51,755 INFO L93 Difference]: Finished difference Result 189 states and 254 transitions. [2021-12-21 13:16:51,755 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-21 13:16:51,756 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-12-21 13:16:51,757 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:51,767 INFO L225 Difference]: With dead ends: 189 [2021-12-21 13:16:51,768 INFO L226 Difference]: Without dead ends: 90 [2021-12-21 13:16:51,771 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-21 13:16:51,775 INFO L933 BasicCegarLoop]: 124 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 124 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:51,775 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 124 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:16:51,789 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90 states. [2021-12-21 13:16:51,815 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90 to 90. [2021-12-21 13:16:51,816 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 68 states have (on average 1.2941176470588236) internal successors, (88), 75 states have internal predecessors, (88), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-21 13:16:51,822 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 115 transitions. [2021-12-21 13:16:51,824 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 115 transitions. Word has length 32 [2021-12-21 13:16:51,824 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:51,824 INFO L470 AbstractCegarLoop]: Abstraction has 90 states and 115 transitions. [2021-12-21 13:16:51,825 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-21 13:16:51,825 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 115 transitions. [2021-12-21 13:16:51,828 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-12-21 13:16:51,828 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:51,828 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:51,829 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-21 13:16:51,829 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:51,830 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:51,830 INFO L85 PathProgramCache]: Analyzing trace with hash -824221923, now seen corresponding path program 1 times [2021-12-21 13:16:51,830 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:51,831 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1674963752] [2021-12-21 13:16:51,831 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:51,831 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:51,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:51,917 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-21 13:16:51,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:51,923 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-21 13:16:51,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:51,933 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:16:51,933 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:51,933 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1674963752] [2021-12-21 13:16:51,933 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1674963752] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:51,934 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:51,934 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-21 13:16:51,934 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1207006680] [2021-12-21 13:16:51,934 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:51,935 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-21 13:16:51,935 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:51,936 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 13:16:51,936 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:16:51,937 INFO L87 Difference]: Start difference. First operand 90 states and 115 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-21 13:16:51,961 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:51,962 INFO L93 Difference]: Finished difference Result 144 states and 184 transitions. [2021-12-21 13:16:51,963 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 13:16:51,964 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2021-12-21 13:16:51,964 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:51,965 INFO L225 Difference]: With dead ends: 144 [2021-12-21 13:16:51,966 INFO L226 Difference]: Without dead ends: 81 [2021-12-21 13:16:51,967 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:16:51,969 INFO L933 BasicCegarLoop]: 102 mSDtfsCounter, 13 mSDsluCounter, 85 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 187 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:51,971 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [16 Valid, 187 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:16:51,972 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2021-12-21 13:16:51,979 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 81. [2021-12-21 13:16:51,983 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 69 states have internal predecessors, (81), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2021-12-21 13:16:51,984 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 103 transitions. [2021-12-21 13:16:51,984 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 103 transitions. Word has length 33 [2021-12-21 13:16:51,985 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:51,986 INFO L470 AbstractCegarLoop]: Abstraction has 81 states and 103 transitions. [2021-12-21 13:16:51,986 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-21 13:16:51,987 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 103 transitions. [2021-12-21 13:16:51,989 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-21 13:16:51,991 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:51,991 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:51,992 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-21 13:16:51,992 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:51,992 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:51,993 INFO L85 PathProgramCache]: Analyzing trace with hash 534456794, now seen corresponding path program 1 times [2021-12-21 13:16:51,993 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:51,994 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2028901037] [2021-12-21 13:16:51,994 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:51,995 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:52,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,069 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:16:52,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,074 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-12-21 13:16:52,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,077 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:16:52,077 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:52,077 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2028901037] [2021-12-21 13:16:52,078 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2028901037] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:52,078 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:52,078 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-21 13:16:52,078 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1010075478] [2021-12-21 13:16:52,078 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:52,079 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-21 13:16:52,079 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:52,079 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 13:16:52,080 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 13:16:52,080 INFO L87 Difference]: Start difference. First operand 81 states and 103 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-21 13:16:52,125 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:52,128 INFO L93 Difference]: Finished difference Result 154 states and 199 transitions. [2021-12-21 13:16:52,131 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-21 13:16:52,131 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2021-12-21 13:16:52,132 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:52,133 INFO L225 Difference]: With dead ends: 154 [2021-12-21 13:16:52,134 INFO L226 Difference]: Without dead ends: 81 [2021-12-21 13:16:52,135 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:16:52,137 INFO L933 BasicCegarLoop]: 96 mSDtfsCounter, 126 mSDsluCounter, 158 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 126 SdHoareTripleChecker+Valid, 254 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:52,138 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [126 Valid, 254 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:16:52,139 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2021-12-21 13:16:52,145 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 81. [2021-12-21 13:16:52,145 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 62 states have (on average 1.2903225806451613) internal successors, (80), 69 states have internal predecessors, (80), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2021-12-21 13:16:52,146 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 102 transitions. [2021-12-21 13:16:52,146 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 102 transitions. Word has length 38 [2021-12-21 13:16:52,147 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:52,147 INFO L470 AbstractCegarLoop]: Abstraction has 81 states and 102 transitions. [2021-12-21 13:16:52,148 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-21 13:16:52,148 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 102 transitions. [2021-12-21 13:16:52,149 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2021-12-21 13:16:52,149 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:52,149 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:52,149 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-21 13:16:52,149 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:52,150 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:52,150 INFO L85 PathProgramCache]: Analyzing trace with hash -216434858, now seen corresponding path program 1 times [2021-12-21 13:16:52,150 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:52,150 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [676153583] [2021-12-21 13:16:52,150 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:52,151 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:52,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,214 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:16:52,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,222 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-21 13:16:52,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,238 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:16:52,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,244 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-12-21 13:16:52,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,254 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:16:52,254 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:52,255 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [676153583] [2021-12-21 13:16:52,255 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [676153583] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:52,255 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:52,255 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-21 13:16:52,255 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [850305291] [2021-12-21 13:16:52,255 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:52,256 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-21 13:16:52,256 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:52,256 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 13:16:52,257 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 13:16:52,257 INFO L87 Difference]: Start difference. First operand 81 states and 102 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-21 13:16:52,413 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:52,413 INFO L93 Difference]: Finished difference Result 238 states and 300 transitions. [2021-12-21 13:16:52,414 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:16:52,414 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 48 [2021-12-21 13:16:52,414 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:52,416 INFO L225 Difference]: With dead ends: 238 [2021-12-21 13:16:52,416 INFO L226 Difference]: Without dead ends: 165 [2021-12-21 13:16:52,417 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2021-12-21 13:16:52,418 INFO L933 BasicCegarLoop]: 132 mSDtfsCounter, 187 mSDsluCounter, 178 mSDsCounter, 0 mSdLazyCounter, 101 mSolverCounterSat, 54 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 190 SdHoareTripleChecker+Valid, 310 SdHoareTripleChecker+Invalid, 155 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 54 IncrementalHoareTripleChecker+Valid, 101 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:52,418 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [190 Valid, 310 Invalid, 155 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [54 Valid, 101 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:16:52,419 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 165 states. [2021-12-21 13:16:52,432 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 165 to 159. [2021-12-21 13:16:52,432 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 159 states, 122 states have (on average 1.2540983606557377) internal successors, (153), 130 states have internal predecessors, (153), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2021-12-21 13:16:52,433 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 159 states to 159 states and 194 transitions. [2021-12-21 13:16:52,434 INFO L78 Accepts]: Start accepts. Automaton has 159 states and 194 transitions. Word has length 48 [2021-12-21 13:16:52,434 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:52,434 INFO L470 AbstractCegarLoop]: Abstraction has 159 states and 194 transitions. [2021-12-21 13:16:52,434 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-21 13:16:52,435 INFO L276 IsEmpty]: Start isEmpty. Operand 159 states and 194 transitions. [2021-12-21 13:16:52,435 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2021-12-21 13:16:52,436 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:52,436 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:52,436 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-21 13:16:52,436 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:52,437 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:52,437 INFO L85 PathProgramCache]: Analyzing trace with hash 1219044606, now seen corresponding path program 1 times [2021-12-21 13:16:52,437 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:52,437 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2091364023] [2021-12-21 13:16:52,437 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:52,438 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:52,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,488 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:16:52,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,496 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-21 13:16:52,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,504 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:16:52,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,507 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-12-21 13:16:52,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,515 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-21 13:16:52,516 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:52,516 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2091364023] [2021-12-21 13:16:52,516 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2091364023] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:52,516 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:52,516 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-21 13:16:52,516 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1262296906] [2021-12-21 13:16:52,517 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:52,517 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-21 13:16:52,517 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:52,518 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-21 13:16:52,518 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:16:52,518 INFO L87 Difference]: Start difference. First operand 159 states and 194 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-21 13:16:52,763 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:52,763 INFO L93 Difference]: Finished difference Result 322 states and 394 transitions. [2021-12-21 13:16:52,764 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-21 13:16:52,764 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) Word has length 54 [2021-12-21 13:16:52,766 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:52,770 INFO L225 Difference]: With dead ends: 322 [2021-12-21 13:16:52,770 INFO L226 Difference]: Without dead ends: 171 [2021-12-21 13:16:52,771 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2021-12-21 13:16:52,776 INFO L933 BasicCegarLoop]: 102 mSDtfsCounter, 120 mSDsluCounter, 353 mSDsCounter, 0 mSdLazyCounter, 205 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 127 SdHoareTripleChecker+Valid, 455 SdHoareTripleChecker+Invalid, 240 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 205 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:52,777 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [127 Valid, 455 Invalid, 240 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 205 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-21 13:16:52,778 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 171 states. [2021-12-21 13:16:52,789 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 171 to 157. [2021-12-21 13:16:52,789 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 120 states have (on average 1.225) internal successors, (147), 128 states have internal predecessors, (147), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2021-12-21 13:16:52,790 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 188 transitions. [2021-12-21 13:16:52,791 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 188 transitions. Word has length 54 [2021-12-21 13:16:52,791 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:52,791 INFO L470 AbstractCegarLoop]: Abstraction has 157 states and 188 transitions. [2021-12-21 13:16:52,791 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-21 13:16:52,791 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 188 transitions. [2021-12-21 13:16:52,792 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-12-21 13:16:52,793 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:52,793 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:52,793 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-21 13:16:52,793 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:52,794 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:52,794 INFO L85 PathProgramCache]: Analyzing trace with hash 175038302, now seen corresponding path program 1 times [2021-12-21 13:16:52,794 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:52,794 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1986045898] [2021-12-21 13:16:52,794 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:52,795 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:52,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:16:52,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,840 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-21 13:16:52,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:16:52,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-21 13:16:52,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:52,887 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:16:52,888 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:52,888 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1986045898] [2021-12-21 13:16:52,889 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1986045898] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:52,889 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:52,889 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-21 13:16:52,889 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1108776978] [2021-12-21 13:16:52,889 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:52,890 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-21 13:16:52,891 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:52,891 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-21 13:16:52,891 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-21 13:16:52,892 INFO L87 Difference]: Start difference. First operand 157 states and 188 transitions. Second operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-21 13:16:53,023 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:53,023 INFO L93 Difference]: Finished difference Result 316 states and 385 transitions. [2021-12-21 13:16:53,024 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:16:53,024 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 60 [2021-12-21 13:16:53,025 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:53,026 INFO L225 Difference]: With dead ends: 316 [2021-12-21 13:16:53,026 INFO L226 Difference]: Without dead ends: 167 [2021-12-21 13:16:53,027 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-21 13:16:53,030 INFO L933 BasicCegarLoop]: 91 mSDtfsCounter, 69 mSDsluCounter, 277 mSDsCounter, 0 mSdLazyCounter, 112 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 368 SdHoareTripleChecker+Invalid, 135 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 112 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:53,032 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [74 Valid, 368 Invalid, 135 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 112 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:16:53,033 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167 states. [2021-12-21 13:16:53,045 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167 to 160. [2021-12-21 13:16:53,045 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 160 states, 123 states have (on average 1.2195121951219512) internal successors, (150), 131 states have internal predecessors, (150), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2021-12-21 13:16:53,046 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 160 states to 160 states and 191 transitions. [2021-12-21 13:16:53,046 INFO L78 Accepts]: Start accepts. Automaton has 160 states and 191 transitions. Word has length 60 [2021-12-21 13:16:53,047 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:53,047 INFO L470 AbstractCegarLoop]: Abstraction has 160 states and 191 transitions. [2021-12-21 13:16:53,047 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-21 13:16:53,047 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 191 transitions. [2021-12-21 13:16:53,048 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-12-21 13:16:53,049 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:53,049 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:53,049 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-21 13:16:53,049 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:53,050 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:53,050 INFO L85 PathProgramCache]: Analyzing trace with hash 2098266336, now seen corresponding path program 1 times [2021-12-21 13:16:53,050 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:53,050 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [830668395] [2021-12-21 13:16:53,050 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:53,050 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:53,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,090 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:16:53,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,097 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-21 13:16:53,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,132 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:16:53,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,136 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-21 13:16:53,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,140 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:16:53,141 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:53,141 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [830668395] [2021-12-21 13:16:53,141 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [830668395] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:53,141 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:53,141 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-21 13:16:53,142 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [938884850] [2021-12-21 13:16:53,142 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:53,142 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-21 13:16:53,143 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:53,144 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-21 13:16:53,146 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:16:53,146 INFO L87 Difference]: Start difference. First operand 160 states and 191 transitions. Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-21 13:16:53,299 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:53,299 INFO L93 Difference]: Finished difference Result 325 states and 395 transitions. [2021-12-21 13:16:53,300 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-21 13:16:53,300 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 60 [2021-12-21 13:16:53,300 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:53,301 INFO L225 Difference]: With dead ends: 325 [2021-12-21 13:16:53,301 INFO L226 Difference]: Without dead ends: 173 [2021-12-21 13:16:53,302 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=30, Invalid=80, Unknown=0, NotChecked=0, Total=110 [2021-12-21 13:16:53,303 INFO L933 BasicCegarLoop]: 91 mSDtfsCounter, 112 mSDsluCounter, 312 mSDsCounter, 0 mSdLazyCounter, 158 mSolverCounterSat, 30 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 118 SdHoareTripleChecker+Valid, 403 SdHoareTripleChecker+Invalid, 188 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 158 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:53,303 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [118 Valid, 403 Invalid, 188 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 158 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:16:53,304 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 173 states. [2021-12-21 13:16:53,311 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 173 to 162. [2021-12-21 13:16:53,312 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 162 states, 125 states have (on average 1.216) internal successors, (152), 133 states have internal predecessors, (152), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2021-12-21 13:16:53,313 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 162 states to 162 states and 193 transitions. [2021-12-21 13:16:53,313 INFO L78 Accepts]: Start accepts. Automaton has 162 states and 193 transitions. Word has length 60 [2021-12-21 13:16:53,313 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:53,313 INFO L470 AbstractCegarLoop]: Abstraction has 162 states and 193 transitions. [2021-12-21 13:16:53,314 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-21 13:16:53,314 INFO L276 IsEmpty]: Start isEmpty. Operand 162 states and 193 transitions. [2021-12-21 13:16:53,314 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-12-21 13:16:53,315 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:53,315 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:53,315 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-21 13:16:53,315 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:53,315 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:53,316 INFO L85 PathProgramCache]: Analyzing trace with hash -810497566, now seen corresponding path program 1 times [2021-12-21 13:16:53,316 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:53,316 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [46438989] [2021-12-21 13:16:53,316 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:53,316 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:53,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,354 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:16:53,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,375 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-21 13:16:53,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,388 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:16:53,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,392 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-21 13:16:53,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,394 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:16:53,394 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:53,394 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [46438989] [2021-12-21 13:16:53,394 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [46438989] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:53,395 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:53,395 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-21 13:16:53,395 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [716545283] [2021-12-21 13:16:53,395 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:53,395 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-21 13:16:53,396 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:53,396 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 13:16:53,396 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 13:16:53,396 INFO L87 Difference]: Start difference. First operand 162 states and 193 transitions. Second operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-21 13:16:53,569 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:53,570 INFO L93 Difference]: Finished difference Result 448 states and 559 transitions. [2021-12-21 13:16:53,570 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:16:53,571 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 60 [2021-12-21 13:16:53,571 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:53,572 INFO L225 Difference]: With dead ends: 448 [2021-12-21 13:16:53,573 INFO L226 Difference]: Without dead ends: 294 [2021-12-21 13:16:53,573 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 11 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:16:53,574 INFO L933 BasicCegarLoop]: 142 mSDtfsCounter, 216 mSDsluCounter, 171 mSDsCounter, 0 mSdLazyCounter, 147 mSolverCounterSat, 68 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 224 SdHoareTripleChecker+Valid, 313 SdHoareTripleChecker+Invalid, 215 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 68 IncrementalHoareTripleChecker+Valid, 147 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:53,574 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [224 Valid, 313 Invalid, 215 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [68 Valid, 147 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:16:53,575 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2021-12-21 13:16:53,588 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 292. [2021-12-21 13:16:53,589 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 292 states, 223 states have (on average 1.201793721973094) internal successors, (268), 235 states have internal predecessors, (268), 36 states have call successors, (36), 31 states have call predecessors, (36), 32 states have return successors, (51), 36 states have call predecessors, (51), 36 states have call successors, (51) [2021-12-21 13:16:53,590 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 292 states to 292 states and 355 transitions. [2021-12-21 13:16:53,590 INFO L78 Accepts]: Start accepts. Automaton has 292 states and 355 transitions. Word has length 60 [2021-12-21 13:16:53,591 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:53,591 INFO L470 AbstractCegarLoop]: Abstraction has 292 states and 355 transitions. [2021-12-21 13:16:53,591 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-21 13:16:53,591 INFO L276 IsEmpty]: Start isEmpty. Operand 292 states and 355 transitions. [2021-12-21 13:16:53,592 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2021-12-21 13:16:53,592 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:53,592 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:53,592 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-21 13:16:53,593 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:53,593 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:53,593 INFO L85 PathProgramCache]: Analyzing trace with hash -1779897540, now seen corresponding path program 1 times [2021-12-21 13:16:53,593 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:53,594 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1659019361] [2021-12-21 13:16:53,594 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:53,594 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:53,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,659 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:16:53,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,678 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-21 13:16:53,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,687 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2021-12-21 13:16:53,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,706 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:16:53,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,710 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2021-12-21 13:16:53,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:53,713 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:16:53,713 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:53,714 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1659019361] [2021-12-21 13:16:53,714 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1659019361] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:16:53,714 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:16:53,714 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-21 13:16:53,714 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [842824174] [2021-12-21 13:16:53,714 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:16:53,715 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-21 13:16:53,715 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:53,715 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-21 13:16:53,715 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2021-12-21 13:16:53,716 INFO L87 Difference]: Start difference. First operand 292 states and 355 transitions. Second operand has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-21 13:16:54,408 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:54,408 INFO L93 Difference]: Finished difference Result 864 states and 1087 transitions. [2021-12-21 13:16:54,408 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-12-21 13:16:54,408 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 64 [2021-12-21 13:16:54,409 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:54,412 INFO L225 Difference]: With dead ends: 864 [2021-12-21 13:16:54,412 INFO L226 Difference]: Without dead ends: 631 [2021-12-21 13:16:54,413 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 206 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=187, Invalid=743, Unknown=0, NotChecked=0, Total=930 [2021-12-21 13:16:54,413 INFO L933 BasicCegarLoop]: 151 mSDtfsCounter, 605 mSDsluCounter, 571 mSDsCounter, 0 mSdLazyCounter, 678 mSolverCounterSat, 194 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 612 SdHoareTripleChecker+Valid, 722 SdHoareTripleChecker+Invalid, 872 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 194 IncrementalHoareTripleChecker+Valid, 678 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:54,414 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [612 Valid, 722 Invalid, 872 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [194 Valid, 678 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-12-21 13:16:54,414 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 631 states. [2021-12-21 13:16:54,439 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 631 to 542. [2021-12-21 13:16:54,440 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 542 states, 414 states have (on average 1.1956521739130435) internal successors, (495), 438 states have internal predecessors, (495), 66 states have call successors, (66), 55 states have call predecessors, (66), 61 states have return successors, (90), 66 states have call predecessors, (90), 66 states have call successors, (90) [2021-12-21 13:16:54,442 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 542 states to 542 states and 651 transitions. [2021-12-21 13:16:54,442 INFO L78 Accepts]: Start accepts. Automaton has 542 states and 651 transitions. Word has length 64 [2021-12-21 13:16:54,443 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:54,443 INFO L470 AbstractCegarLoop]: Abstraction has 542 states and 651 transitions. [2021-12-21 13:16:54,443 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-21 13:16:54,443 INFO L276 IsEmpty]: Start isEmpty. Operand 542 states and 651 transitions. [2021-12-21 13:16:54,444 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2021-12-21 13:16:54,444 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:54,444 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:54,444 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-21 13:16:54,445 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:54,445 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:54,445 INFO L85 PathProgramCache]: Analyzing trace with hash 2079059227, now seen corresponding path program 1 times [2021-12-21 13:16:54,445 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:54,445 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [486015253] [2021-12-21 13:16:54,445 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:54,445 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:54,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:54,505 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:16:54,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:54,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-21 13:16:54,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:54,539 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:16:54,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:54,547 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-21 13:16:54,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:54,557 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:16:54,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:54,559 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2021-12-21 13:16:54,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:54,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2021-12-21 13:16:54,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:54,571 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-21 13:16:54,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:54,573 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:16:54,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:54,575 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2021-12-21 13:16:54,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:54,577 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 18 proven. 9 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-12-21 13:16:54,577 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:54,577 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [486015253] [2021-12-21 13:16:54,577 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [486015253] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:16:54,578 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1752527331] [2021-12-21 13:16:54,578 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:54,578 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:16:54,578 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:16:54,583 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:16:54,608 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-21 13:16:54,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:54,695 INFO L263 TraceCheckSpWp]: Trace formula consists of 501 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-21 13:16:54,705 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:16:55,022 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 29 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:16:55,023 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-21 13:16:55,275 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 19 proven. 8 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-12-21 13:16:55,276 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1752527331] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-21 13:16:55,276 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-21 13:16:55,276 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 6, 6] total 16 [2021-12-21 13:16:55,276 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [406299836] [2021-12-21 13:16:55,276 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-21 13:16:55,277 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2021-12-21 13:16:55,277 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:55,278 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2021-12-21 13:16:55,278 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2021-12-21 13:16:55,278 INFO L87 Difference]: Start difference. First operand 542 states and 651 transitions. Second operand has 16 states, 16 states have (on average 7.875) internal successors, (126), 11 states have internal predecessors, (126), 5 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 5 states have call successors, (20) [2021-12-21 13:16:56,359 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:56,359 INFO L93 Difference]: Finished difference Result 1191 states and 1465 transitions. [2021-12-21 13:16:56,360 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2021-12-21 13:16:56,360 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 7.875) internal successors, (126), 11 states have internal predecessors, (126), 5 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 5 states have call successors, (20) Word has length 108 [2021-12-21 13:16:56,360 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:56,365 INFO L225 Difference]: With dead ends: 1191 [2021-12-21 13:16:56,365 INFO L226 Difference]: Without dead ends: 706 [2021-12-21 13:16:56,367 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 289 GetRequests, 245 SyntacticMatches, 1 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 457 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=349, Invalid=1631, Unknown=0, NotChecked=0, Total=1980 [2021-12-21 13:16:56,368 INFO L933 BasicCegarLoop]: 233 mSDtfsCounter, 492 mSDsluCounter, 1315 mSDsCounter, 0 mSdLazyCounter, 1222 mSolverCounterSat, 244 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 493 SdHoareTripleChecker+Valid, 1548 SdHoareTripleChecker+Invalid, 1466 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 244 IncrementalHoareTripleChecker+Valid, 1222 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:56,369 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [493 Valid, 1548 Invalid, 1466 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [244 Valid, 1222 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2021-12-21 13:16:56,370 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 706 states. [2021-12-21 13:16:56,410 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 706 to 614. [2021-12-21 13:16:56,411 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 614 states, 464 states have (on average 1.1939655172413792) internal successors, (554), 496 states have internal predecessors, (554), 77 states have call successors, (77), 66 states have call predecessors, (77), 72 states have return successors, (101), 74 states have call predecessors, (101), 77 states have call successors, (101) [2021-12-21 13:16:56,416 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 614 states to 614 states and 732 transitions. [2021-12-21 13:16:56,418 INFO L78 Accepts]: Start accepts. Automaton has 614 states and 732 transitions. Word has length 108 [2021-12-21 13:16:56,418 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:56,418 INFO L470 AbstractCegarLoop]: Abstraction has 614 states and 732 transitions. [2021-12-21 13:16:56,418 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 7.875) internal successors, (126), 11 states have internal predecessors, (126), 5 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 5 states have call successors, (20) [2021-12-21 13:16:56,419 INFO L276 IsEmpty]: Start isEmpty. Operand 614 states and 732 transitions. [2021-12-21 13:16:56,421 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 197 [2021-12-21 13:16:56,421 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:56,421 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:56,447 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2021-12-21 13:16:56,643 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-21 13:16:56,643 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:16:56,644 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:16:56,644 INFO L85 PathProgramCache]: Analyzing trace with hash 333181080, now seen corresponding path program 1 times [2021-12-21 13:16:56,644 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:16:56,644 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [517139679] [2021-12-21 13:16:56,644 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:56,644 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:16:56,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:56,693 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:16:56,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:56,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-21 13:16:56,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:56,712 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:16:56,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:56,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-21 13:16:56,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:56,724 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:16:56,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:56,727 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2021-12-21 13:16:56,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:56,735 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:16:56,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:56,737 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:16:56,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:56,741 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:16:56,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:56,744 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:16:56,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:56,745 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2021-12-21 13:16:56,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:56,769 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:16:56,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:56,772 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:16:56,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:56,788 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 144 [2021-12-21 13:16:56,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:56,790 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 155 [2021-12-21 13:16:56,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:56,793 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2021-12-21 13:16:56,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:56,814 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:16:56,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:56,816 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2021-12-21 13:16:56,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:56,818 INFO L134 CoverageAnalysis]: Checked inductivity of 222 backedges. 87 proven. 3 refuted. 0 times theorem prover too weak. 132 trivial. 0 not checked. [2021-12-21 13:16:56,818 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:16:56,819 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [517139679] [2021-12-21 13:16:56,819 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [517139679] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:16:56,819 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [646813532] [2021-12-21 13:16:56,819 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:16:56,819 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:16:56,820 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:16:56,824 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:16:56,849 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-21 13:16:56,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:16:56,962 INFO L263 TraceCheckSpWp]: Trace formula consists of 732 conjuncts, 13 conjunts are in the unsatisfiable core [2021-12-21 13:16:56,976 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:16:57,367 INFO L134 CoverageAnalysis]: Checked inductivity of 222 backedges. 162 proven. 4 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2021-12-21 13:16:57,367 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-21 13:16:58,010 INFO L134 CoverageAnalysis]: Checked inductivity of 222 backedges. 82 proven. 42 refuted. 0 times theorem prover too weak. 98 trivial. 0 not checked. [2021-12-21 13:16:58,010 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [646813532] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-21 13:16:58,010 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-21 13:16:58,010 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 10, 11] total 26 [2021-12-21 13:16:58,011 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1118216219] [2021-12-21 13:16:58,011 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-21 13:16:58,011 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2021-12-21 13:16:58,011 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:16:58,012 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2021-12-21 13:16:58,012 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=116, Invalid=534, Unknown=0, NotChecked=0, Total=650 [2021-12-21 13:16:58,012 INFO L87 Difference]: Start difference. First operand 614 states and 732 transitions. Second operand has 26 states, 26 states have (on average 7.884615384615385) internal successors, (205), 21 states have internal predecessors, (205), 9 states have call successors, (34), 8 states have call predecessors, (34), 10 states have return successors, (36), 9 states have call predecessors, (36), 9 states have call successors, (36) [2021-12-21 13:16:59,800 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:16:59,800 INFO L93 Difference]: Finished difference Result 1795 states and 2235 transitions. [2021-12-21 13:16:59,801 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2021-12-21 13:16:59,801 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 7.884615384615385) internal successors, (205), 21 states have internal predecessors, (205), 9 states have call successors, (34), 8 states have call predecessors, (34), 10 states have return successors, (36), 9 states have call predecessors, (36), 9 states have call successors, (36) Word has length 196 [2021-12-21 13:16:59,801 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:16:59,806 INFO L225 Difference]: With dead ends: 1795 [2021-12-21 13:16:59,806 INFO L226 Difference]: Without dead ends: 1189 [2021-12-21 13:16:59,810 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 496 GetRequests, 422 SyntacticMatches, 2 SemanticMatches, 72 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1310 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=976, Invalid=4426, Unknown=0, NotChecked=0, Total=5402 [2021-12-21 13:16:59,811 INFO L933 BasicCegarLoop]: 179 mSDtfsCounter, 1363 mSDsluCounter, 998 mSDsCounter, 0 mSdLazyCounter, 1848 mSolverCounterSat, 587 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1363 SdHoareTripleChecker+Valid, 1177 SdHoareTripleChecker+Invalid, 2435 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 587 IncrementalHoareTripleChecker+Valid, 1848 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:16:59,811 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1363 Valid, 1177 Invalid, 2435 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [587 Valid, 1848 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2021-12-21 13:16:59,812 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1189 states. [2021-12-21 13:16:59,884 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1189 to 1089. [2021-12-21 13:16:59,886 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1089 states, 829 states have (on average 1.1399276236429432) internal successors, (945), 874 states have internal predecessors, (945), 138 states have call successors, (138), 121 states have call predecessors, (138), 121 states have return successors, (160), 127 states have call predecessors, (160), 138 states have call successors, (160) [2021-12-21 13:16:59,891 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1089 states to 1089 states and 1243 transitions. [2021-12-21 13:16:59,891 INFO L78 Accepts]: Start accepts. Automaton has 1089 states and 1243 transitions. Word has length 196 [2021-12-21 13:16:59,892 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:16:59,892 INFO L470 AbstractCegarLoop]: Abstraction has 1089 states and 1243 transitions. [2021-12-21 13:16:59,893 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 7.884615384615385) internal successors, (205), 21 states have internal predecessors, (205), 9 states have call successors, (34), 8 states have call predecessors, (34), 10 states have return successors, (36), 9 states have call predecessors, (36), 9 states have call successors, (36) [2021-12-21 13:16:59,893 INFO L276 IsEmpty]: Start isEmpty. Operand 1089 states and 1243 transitions. [2021-12-21 13:16:59,900 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 213 [2021-12-21 13:16:59,900 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:16:59,901 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:16:59,930 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-21 13:17:00,125 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2021-12-21 13:17:00,126 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:00,127 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:00,127 INFO L85 PathProgramCache]: Analyzing trace with hash 940649722, now seen corresponding path program 1 times [2021-12-21 13:17:00,127 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:00,127 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2107072232] [2021-12-21 13:17:00,127 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:00,127 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:00,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,194 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:00,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-21 13:17:00,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:00,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,227 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-21 13:17:00,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,233 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:17:00,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,235 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2021-12-21 13:17:00,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,262 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:00,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,265 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:00,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,268 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:17:00,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,271 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:00,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,275 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-12-21 13:17:00,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,292 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2021-12-21 13:17:00,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,296 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2021-12-21 13:17:00,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,302 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:00,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,304 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:00,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,311 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:17:00,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,313 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 160 [2021-12-21 13:17:00,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,316 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 171 [2021-12-21 13:17:00,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,319 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 180 [2021-12-21 13:17:00,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:17:00,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,326 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 204 [2021-12-21 13:17:00,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,328 INFO L134 CoverageAnalysis]: Checked inductivity of 264 backedges. 100 proven. 44 refuted. 0 times theorem prover too weak. 120 trivial. 0 not checked. [2021-12-21 13:17:00,329 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:00,329 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2107072232] [2021-12-21 13:17:00,329 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2107072232] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:17:00,329 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1299789713] [2021-12-21 13:17:00,329 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:00,329 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:17:00,330 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:17:00,331 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:17:00,332 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-12-21 13:17:00,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:00,449 INFO L263 TraceCheckSpWp]: Trace formula consists of 774 conjuncts, 10 conjunts are in the unsatisfiable core [2021-12-21 13:17:00,453 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:17:00,819 INFO L134 CoverageAnalysis]: Checked inductivity of 264 backedges. 200 proven. 9 refuted. 0 times theorem prover too weak. 55 trivial. 0 not checked. [2021-12-21 13:17:00,819 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-21 13:17:01,413 INFO L134 CoverageAnalysis]: Checked inductivity of 264 backedges. 104 proven. 54 refuted. 0 times theorem prover too weak. 106 trivial. 0 not checked. [2021-12-21 13:17:01,413 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1299789713] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-21 13:17:01,413 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-21 13:17:01,413 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 8, 8] total 23 [2021-12-21 13:17:01,414 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2002785536] [2021-12-21 13:17:01,414 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-21 13:17:01,414 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2021-12-21 13:17:01,414 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:01,415 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2021-12-21 13:17:01,415 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=70, Invalid=436, Unknown=0, NotChecked=0, Total=506 [2021-12-21 13:17:01,415 INFO L87 Difference]: Start difference. First operand 1089 states and 1243 transitions. Second operand has 23 states, 23 states have (on average 9.391304347826088) internal successors, (216), 16 states have internal predecessors, (216), 6 states have call successors, (45), 8 states have call predecessors, (45), 11 states have return successors, (39), 9 states have call predecessors, (39), 6 states have call successors, (39) [2021-12-21 13:17:02,843 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:02,843 INFO L93 Difference]: Finished difference Result 2130 states and 2461 transitions. [2021-12-21 13:17:02,843 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2021-12-21 13:17:02,844 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 9.391304347826088) internal successors, (216), 16 states have internal predecessors, (216), 6 states have call successors, (45), 8 states have call predecessors, (45), 11 states have return successors, (39), 9 states have call predecessors, (39), 6 states have call successors, (39) Word has length 212 [2021-12-21 13:17:02,844 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:02,849 INFO L225 Difference]: With dead ends: 2130 [2021-12-21 13:17:02,849 INFO L226 Difference]: Without dead ends: 1147 [2021-12-21 13:17:02,858 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 519 GetRequests, 469 SyntacticMatches, 2 SemanticMatches, 48 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 459 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=405, Invalid=2045, Unknown=0, NotChecked=0, Total=2450 [2021-12-21 13:17:02,859 INFO L933 BasicCegarLoop]: 144 mSDtfsCounter, 484 mSDsluCounter, 577 mSDsCounter, 0 mSdLazyCounter, 2029 mSolverCounterSat, 203 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 484 SdHoareTripleChecker+Valid, 721 SdHoareTripleChecker+Invalid, 2232 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 203 IncrementalHoareTripleChecker+Valid, 2029 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:02,859 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [484 Valid, 721 Invalid, 2232 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [203 Valid, 2029 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2021-12-21 13:17:02,860 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1147 states. [2021-12-21 13:17:02,926 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1147 to 1085. [2021-12-21 13:17:02,927 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1085 states, 827 states have (on average 1.1293833131801694) internal successors, (934), 870 states have internal predecessors, (934), 132 states have call successors, (132), 123 states have call predecessors, (132), 125 states have return successors, (154), 125 states have call predecessors, (154), 132 states have call successors, (154) [2021-12-21 13:17:02,931 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1085 states to 1085 states and 1220 transitions. [2021-12-21 13:17:02,931 INFO L78 Accepts]: Start accepts. Automaton has 1085 states and 1220 transitions. Word has length 212 [2021-12-21 13:17:02,932 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:02,932 INFO L470 AbstractCegarLoop]: Abstraction has 1085 states and 1220 transitions. [2021-12-21 13:17:02,932 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 9.391304347826088) internal successors, (216), 16 states have internal predecessors, (216), 6 states have call successors, (45), 8 states have call predecessors, (45), 11 states have return successors, (39), 9 states have call predecessors, (39), 6 states have call successors, (39) [2021-12-21 13:17:02,932 INFO L276 IsEmpty]: Start isEmpty. Operand 1085 states and 1220 transitions. [2021-12-21 13:17:02,936 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 214 [2021-12-21 13:17:02,936 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:17:02,936 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:02,965 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-12-21 13:17:03,151 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:17:03,152 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:03,152 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:03,152 INFO L85 PathProgramCache]: Analyzing trace with hash 1948196260, now seen corresponding path program 1 times [2021-12-21 13:17:03,153 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:03,153 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [97656645] [2021-12-21 13:17:03,153 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:03,153 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:03,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:03,217 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:03,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:03,225 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-21 13:17:03,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:03,231 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:03,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:03,236 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-21 13:17:03,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:03,240 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:17:03,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:03,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2021-12-21 13:17:03,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:03,249 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:03,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:03,250 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:03,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:03,252 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:17:03,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:03,254 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:03,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:03,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-12-21 13:17:03,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:03,261 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-12-21 13:17:03,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:03,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 123 [2021-12-21 13:17:03,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:03,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:03,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:03,292 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:03,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:03,297 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:17:03,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:03,299 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2021-12-21 13:17:03,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:03,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 172 [2021-12-21 13:17:03,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:03,303 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2021-12-21 13:17:03,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:03,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:17:03,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:03,347 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 205 [2021-12-21 13:17:03,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:03,349 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 90 proven. 3 refuted. 0 times theorem prover too weak. 172 trivial. 0 not checked. [2021-12-21 13:17:03,349 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:03,350 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [97656645] [2021-12-21 13:17:03,350 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [97656645] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:17:03,350 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1522827752] [2021-12-21 13:17:03,350 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:03,350 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:17:03,350 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:17:03,351 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:17:03,375 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2021-12-21 13:17:03,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:03,484 INFO L263 TraceCheckSpWp]: Trace formula consists of 774 conjuncts, 18 conjunts are in the unsatisfiable core [2021-12-21 13:17:03,489 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:17:03,880 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 142 proven. 26 refuted. 0 times theorem prover too weak. 97 trivial. 0 not checked. [2021-12-21 13:17:03,880 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-21 13:17:04,621 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 103 proven. 45 refuted. 0 times theorem prover too weak. 117 trivial. 0 not checked. [2021-12-21 13:17:04,621 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1522827752] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-21 13:17:04,621 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-21 13:17:04,622 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 8, 13] total 29 [2021-12-21 13:17:04,624 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [22456871] [2021-12-21 13:17:04,624 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-21 13:17:04,627 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2021-12-21 13:17:04,627 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:04,628 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2021-12-21 13:17:04,628 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=118, Invalid=694, Unknown=0, NotChecked=0, Total=812 [2021-12-21 13:17:04,629 INFO L87 Difference]: Start difference. First operand 1085 states and 1220 transitions. Second operand has 29 states, 29 states have (on average 8.862068965517242) internal successors, (257), 23 states have internal predecessors, (257), 13 states have call successors, (47), 12 states have call predecessors, (47), 15 states have return successors, (48), 14 states have call predecessors, (48), 13 states have call successors, (48) [2021-12-21 13:17:07,702 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:07,703 INFO L93 Difference]: Finished difference Result 2414 states and 2767 transitions. [2021-12-21 13:17:07,703 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 65 states. [2021-12-21 13:17:07,704 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 29 states have (on average 8.862068965517242) internal successors, (257), 23 states have internal predecessors, (257), 13 states have call successors, (47), 12 states have call predecessors, (47), 15 states have return successors, (48), 14 states have call predecessors, (48), 13 states have call successors, (48) Word has length 213 [2021-12-21 13:17:07,704 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:07,711 INFO L225 Difference]: With dead ends: 2414 [2021-12-21 13:17:07,711 INFO L226 Difference]: Without dead ends: 1441 [2021-12-21 13:17:07,715 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 563 GetRequests, 472 SyntacticMatches, 1 SemanticMatches, 90 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2153 ImplicationChecksByTransitivity, 1.2s TimeCoverageRelationStatistics Valid=1427, Invalid=6945, Unknown=0, NotChecked=0, Total=8372 [2021-12-21 13:17:07,716 INFO L933 BasicCegarLoop]: 358 mSDtfsCounter, 2113 mSDsluCounter, 1185 mSDsCounter, 0 mSdLazyCounter, 4666 mSolverCounterSat, 1128 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2113 SdHoareTripleChecker+Valid, 1543 SdHoareTripleChecker+Invalid, 5794 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1128 IncrementalHoareTripleChecker+Valid, 4666 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:07,716 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2113 Valid, 1543 Invalid, 5794 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1128 Valid, 4666 Invalid, 0 Unknown, 0 Unchecked, 2.0s Time] [2021-12-21 13:17:07,718 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1441 states. [2021-12-21 13:17:07,805 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1441 to 1289. [2021-12-21 13:17:07,807 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1289 states, 984 states have (on average 1.125) internal successors, (1107), 1020 states have internal predecessors, (1107), 160 states have call successors, (160), 151 states have call predecessors, (160), 144 states have return successors, (176), 144 states have call predecessors, (176), 160 states have call successors, (176) [2021-12-21 13:17:07,813 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1289 states to 1289 states and 1443 transitions. [2021-12-21 13:17:07,813 INFO L78 Accepts]: Start accepts. Automaton has 1289 states and 1443 transitions. Word has length 213 [2021-12-21 13:17:07,813 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:07,814 INFO L470 AbstractCegarLoop]: Abstraction has 1289 states and 1443 transitions. [2021-12-21 13:17:07,814 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 29 states have (on average 8.862068965517242) internal successors, (257), 23 states have internal predecessors, (257), 13 states have call successors, (47), 12 states have call predecessors, (47), 15 states have return successors, (48), 14 states have call predecessors, (48), 13 states have call successors, (48) [2021-12-21 13:17:07,814 INFO L276 IsEmpty]: Start isEmpty. Operand 1289 states and 1443 transitions. [2021-12-21 13:17:07,819 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 269 [2021-12-21 13:17:07,819 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:17:07,820 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:07,850 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2021-12-21 13:17:08,039 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:17:08,040 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:08,040 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:08,040 INFO L85 PathProgramCache]: Analyzing trace with hash 648735380, now seen corresponding path program 1 times [2021-12-21 13:17:08,040 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:08,040 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1318773050] [2021-12-21 13:17:08,041 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:08,041 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:08,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,141 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:08,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,152 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-21 13:17:08,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,157 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:08,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-21 13:17:08,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,169 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:17:08,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,171 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2021-12-21 13:17:08,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,176 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:08,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,177 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:08,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,179 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:17:08,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:08,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-12-21 13:17:08,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,190 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-12-21 13:17:08,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 123 [2021-12-21 13:17:08,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,209 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:08,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,211 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:08,212 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,213 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:17:08,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,215 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2021-12-21 13:17:08,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,232 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 167 [2021-12-21 13:17:08,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,235 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 174 [2021-12-21 13:17:08,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,262 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:08,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,265 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-21 13:17:08,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,278 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:17:08,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,280 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-21 13:17:08,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,283 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 216 [2021-12-21 13:17:08,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,298 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 227 [2021-12-21 13:17:08,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2021-12-21 13:17:08,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,318 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:17:08,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 260 [2021-12-21 13:17:08,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,326 INFO L134 CoverageAnalysis]: Checked inductivity of 452 backedges. 201 proven. 36 refuted. 0 times theorem prover too weak. 215 trivial. 0 not checked. [2021-12-21 13:17:08,326 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:08,326 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1318773050] [2021-12-21 13:17:08,326 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1318773050] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:17:08,326 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1885664913] [2021-12-21 13:17:08,327 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:08,327 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:17:08,327 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:17:08,328 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:17:08,329 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2021-12-21 13:17:08,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:08,471 INFO L263 TraceCheckSpWp]: Trace formula consists of 914 conjuncts, 30 conjunts are in the unsatisfiable core [2021-12-21 13:17:08,475 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:17:09,020 INFO L134 CoverageAnalysis]: Checked inductivity of 452 backedges. 159 proven. 91 refuted. 0 times theorem prover too weak. 202 trivial. 0 not checked. [2021-12-21 13:17:09,021 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-21 13:17:09,839 INFO L134 CoverageAnalysis]: Checked inductivity of 452 backedges. 100 proven. 138 refuted. 0 times theorem prover too weak. 214 trivial. 0 not checked. [2021-12-21 13:17:09,840 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1885664913] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-21 13:17:09,840 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-21 13:17:09,840 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 11, 16] total 29 [2021-12-21 13:17:09,840 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [866406967] [2021-12-21 13:17:09,840 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-21 13:17:09,841 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2021-12-21 13:17:09,841 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:09,842 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2021-12-21 13:17:09,842 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=150, Invalid=662, Unknown=0, NotChecked=0, Total=812 [2021-12-21 13:17:09,842 INFO L87 Difference]: Start difference. First operand 1289 states and 1443 transitions. Second operand has 29 states, 29 states have (on average 10.793103448275861) internal successors, (313), 25 states have internal predecessors, (313), 18 states have call successors, (59), 13 states have call predecessors, (59), 19 states have return successors, (62), 18 states have call predecessors, (62), 18 states have call successors, (62) [2021-12-21 13:17:11,094 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:11,094 INFO L93 Difference]: Finished difference Result 2028 states and 2287 transitions. [2021-12-21 13:17:11,095 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2021-12-21 13:17:11,095 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 29 states have (on average 10.793103448275861) internal successors, (313), 25 states have internal predecessors, (313), 18 states have call successors, (59), 13 states have call predecessors, (59), 19 states have return successors, (62), 18 states have call predecessors, (62), 18 states have call successors, (62) Word has length 268 [2021-12-21 13:17:11,096 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:11,096 INFO L225 Difference]: With dead ends: 2028 [2021-12-21 13:17:11,096 INFO L226 Difference]: Without dead ends: 0 [2021-12-21 13:17:11,101 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 634 GetRequests, 580 SyntacticMatches, 5 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 551 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=579, Invalid=1971, Unknown=0, NotChecked=0, Total=2550 [2021-12-21 13:17:11,101 INFO L933 BasicCegarLoop]: 208 mSDtfsCounter, 1412 mSDsluCounter, 537 mSDsCounter, 0 mSdLazyCounter, 1778 mSolverCounterSat, 583 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1414 SdHoareTripleChecker+Valid, 745 SdHoareTripleChecker+Invalid, 2361 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 583 IncrementalHoareTripleChecker+Valid, 1778 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:11,102 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1414 Valid, 745 Invalid, 2361 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [583 Valid, 1778 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2021-12-21 13:17:11,102 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-21 13:17:11,102 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-21 13:17:11,102 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 13:17:11,103 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-21 13:17:11,103 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 268 [2021-12-21 13:17:11,103 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:11,103 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-21 13:17:11,104 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 29 states have (on average 10.793103448275861) internal successors, (313), 25 states have internal predecessors, (313), 18 states have call successors, (59), 13 states have call predecessors, (59), 19 states have return successors, (62), 18 states have call predecessors, (62), 18 states have call successors, (62) [2021-12-21 13:17:11,104 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-21 13:17:11,104 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-21 13:17:11,106 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-21 13:17:11,133 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2021-12-21 13:17:11,331 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2021-12-21 13:17:11,333 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-21 13:17:24,763 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 748 754) no Hoare annotation was computed. [2021-12-21 13:17:24,764 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 748 754) the Hoare annotation is: true [2021-12-21 13:17:24,764 INFO L858 garLoopResultBuilder]: For program point L607-1(lines 603 614) no Hoare annotation was computed. [2021-12-21 13:17:24,765 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 603 614) the Hoare annotation is: (let ((.cse6 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse4 (not (<= ~waterLevel~0 1))) (.cse2 (not (<= 0 ~waterLevel~0))) (.cse9 (not (<= 1 ~pumpRunning~0))) (.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (not (= ~pumpRunning~0 0))) (.cse3 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse8 (not (<= 2 ~waterLevel~0))) (.cse7 (not (<= ~waterLevel~0 2))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or (not (< 1 ~waterLevel~0)) .cse1 .cse3 .cse6 .cse7 .cse5) (or .cse0 .cse3 .cse8 .cse9 .cse7 .cse5) (or .cse1 .cse2 .cse3 .cse6 .cse4 .cse5) (or .cse0 .cse2 .cse3 .cse9 .cse7 .cse5 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 .cse3 .cse8 .cse7 .cse5))) [2021-12-21 13:17:24,765 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 603 614) no Hoare annotation was computed. [2021-12-21 13:17:24,766 INFO L858 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2021-12-21 13:17:24,766 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 721 747) no Hoare annotation was computed. [2021-12-21 13:17:24,766 INFO L854 garLoopResultBuilder]: At program point L69(lines 62 71) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse15 (<= 1 ~switchedOnBeforeTS~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse14 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse7 .cse14)) (.cse8 (and .cse13 .cse14 .cse15)) (.cse5 (not (<= 0 |old(~waterLevel~0)|))) (.cse10 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse12 (and .cse13 .cse14 .cse15 (not .cse3))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (not (< 1 |old(~waterLevel~0)|))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse5 .cse6 .cse3 (not (<= |old(~waterLevel~0)| 0))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse5 .cse2 .cse3) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse6 (and .cse7 (= ~waterLevel~0 1)) .cse3) (or .cse8 .cse9 .cse5 .cse6 .cse3 .cse4 .cse10) (or .cse0 .cse1 .cse11 .cse6 .cse3 .cse4) (or .cse8 .cse9 .cse5 .cse2 .cse3 .cse4 .cse10) (or .cse12 .cse9 .cse11 .cse2 .cse3 .cse4) (or .cse12 .cse9 .cse11 .cse6 .cse3 .cse4)))) [2021-12-21 13:17:24,766 INFO L854 garLoopResultBuilder]: At program point L837(lines 832 839) the Hoare annotation is: (let ((.cse1 (not (< 1 |old(~waterLevel~0)|))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (= ~pumpRunning~0 0)) (.cse10 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse11 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (not (<= |old(~waterLevel~0)| 0))) (.cse12 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse13 (not (<= |old(~waterLevel~0)| 1))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse3 .cse8) (or .cse0 .cse1 .cse7 .cse3 .cse4 (and .cse9 .cse10 (= ~waterLevel~0 1) .cse11)) (or .cse0 .cse6 .cse2 .cse3 .cse4 .cse12) (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse7 .cse3 (and .cse9 .cse10 (<= ~waterLevel~0 0) .cse11 (<= 0 ~waterLevel~0)) .cse12) (or .cse5 .cse1 .cse7 .cse3 .cse4) (or .cse13 .cse5 (not (<= 1 |old(~waterLevel~0)|)) .cse7 .cse3) (or .cse0 .cse6 .cse7 (and .cse9 .cse10 (= |old(~waterLevel~0)| ~waterLevel~0) .cse11) .cse3 .cse8 .cse12) (or .cse13 .cse5 .cse6 .cse2 .cse3))) [2021-12-21 13:17:24,766 INFO L854 garLoopResultBuilder]: At program point L796(line 796) the Hoare annotation is: (let ((.cse7 (not (<= |old(~waterLevel~0)| 0))) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse11 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (< 1 |old(~waterLevel~0)|))) (.cse12 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse13 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse2 .cse3 .cse7 .cse8 (and .cse9 .cse10 (= |old(~waterLevel~0)| ~waterLevel~0) .cse11)) (or .cse5 .cse2 .cse3 .cse4 (and .cse9 .cse10 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0) .cse11) (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse6 .cse12 .cse3 .cse4 .cse8) (or .cse0 .cse6 .cse12 .cse3 .cse7) (or .cse0 .cse1 .cse12 .cse3 .cse4) (or (not (= |old(~waterLevel~0)| 1)) .cse5 .cse2 (and .cse9 .cse10 (<= ~waterLevel~0 0) .cse11 (<= 0 ~waterLevel~0)) .cse3 .cse8) (or .cse13 .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse12 .cse3) (or .cse5 .cse1 .cse12 .cse3 .cse4) (or .cse13 .cse0 .cse6 .cse2 .cse3))) [2021-12-21 13:17:24,767 INFO L854 garLoopResultBuilder]: At program point L788(line 788) the Hoare annotation is: (let ((.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= 0 ~systemActive~0)) (.cse14 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse15 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse16 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse10 (and .cse15 (= ~waterLevel~0 1) .cse16)) (.cse1 (not (< 1 |old(~waterLevel~0)|))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse13 (and .cse15 (= |old(~waterLevel~0)| ~waterLevel~0) .cse16)) (.cse12 (not (<= |old(~waterLevel~0)| 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (not (<= 0 |old(~waterLevel~0)|))) (.cse5 (not (<= |old(~waterLevel~0)| 1))) (.cse6 (and (or .cse9 .cse3 (not (<= 2 |old(~waterLevel~0)|)) (= |old(~switchedOnBeforeTS~0)| 0)) (or (not (= |old(~waterLevel~0)| 1)) .cse9 .cse3 .cse14))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse8 (and .cse15 (<= ~waterLevel~0 0) .cse16 (<= 0 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse8) (or .cse9 .cse1 .cse7 .cse10 .cse3 .cse4) (or .cse0 .cse11 .cse7 .cse3 .cse12) (or .cse9 .cse1 .cse2 .cse10 .cse3 .cse4) (or .cse0 .cse1 .cse7 .cse3 .cse4) (or .cse13 .cse9 .cse11 .cse7 .cse3 .cse12 .cse14) (or .cse13 .cse9 .cse11 .cse2 .cse3 .cse12 .cse14) (or .cse5 .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse7 .cse3) (or .cse5 .cse0 .cse11 .cse2 .cse3) (or .cse5 .cse6 .cse2 .cse8)))) [2021-12-21 13:17:24,767 INFO L858 garLoopResultBuilder]: For program point L788-1(line 788) no Hoare annotation was computed. [2021-12-21 13:17:24,767 INFO L854 garLoopResultBuilder]: At program point L82(line 82) the Hoare annotation is: (let ((.cse21 (not (= |old(~waterLevel~0)| 1))) (.cse11 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= 0 ~systemActive~0)) (.cse14 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse23 (= ~pumpRunning~0 0)) (.cse6 (< |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)) (.cse7 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse25 (and .cse23 .cse6 .cse7 .cse9)) (.cse12 (not (<= 0 |old(~waterLevel~0)|))) (.cse13 (not (<= |old(~waterLevel~0)| 0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse24 (= ~waterLevel~0 1)) (.cse1 (not (< 1 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse15 (not (<= |old(~waterLevel~0)| 1))) (.cse16 (and (or .cse11 .cse3 (not (<= 2 |old(~waterLevel~0)|)) (= |old(~switchedOnBeforeTS~0)| 0)) (or .cse21 .cse11 .cse3 .cse14))) (.cse22 (not (<= 1 ~methaneLevelCritical~0))) (.cse17 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse8 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse18 (<= ~waterLevel~0 0)) (.cse19 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse10 (<= 1 ~switchedOnBeforeTS~0)) (.cse20 (<= 0 ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (and .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) .cse11 .cse12 .cse2 .cse3 .cse13 .cse14) (or .cse15 .cse16 (and .cse5 .cse17 .cse8 .cse18 .cse19 .cse10 .cse20) .cse2) (or .cse0 .cse21 .cse22 (and .cse23 .cse6 .cse7 .cse24) .cse3) (or .cse0 .cse1 .cse22 .cse3 .cse4) (or .cse11 .cse1 .cse22 .cse3 .cse4 (and .cse17 .cse23 .cse8 .cse19 .cse24 .cse10)) (or .cse0 .cse25 .cse12 .cse22 .cse3 .cse13) (or .cse15 .cse0 .cse25 .cse12 .cse2 .cse3) (or .cse11 .cse12 .cse22 .cse3 .cse13 (and .cse23 .cse6 .cse7 .cse8 .cse9 .cse10) .cse14) (or (and .cse5 .cse17 .cse8 .cse19 .cse24 .cse10) .cse11 .cse1 .cse2 .cse3 .cse4) (or .cse15 .cse16 .cse22 (and .cse17 .cse23 .cse8 .cse18 .cse19 .cse10 .cse20))))) [2021-12-21 13:17:24,767 INFO L858 garLoopResultBuilder]: For program point L82-1(line 82) no Hoare annotation was computed. [2021-12-21 13:17:24,767 INFO L854 garLoopResultBuilder]: At program point L652(lines 647 655) the Hoare annotation is: (let ((.cse25 (not (= |old(~waterLevel~0)| 1))) (.cse15 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (= 0 ~systemActive~0)) (.cse23 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse24 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse10 (= ~pumpRunning~0 0)) (.cse21 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse22 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse4 (and .cse10 .cse21 .cse22)) (.cse2 (not (<= 0 |old(~waterLevel~0)|))) (.cse7 (not (<= |old(~waterLevel~0)| 0))) (.cse20 (and .cse10 .cse24 .cse22)) (.cse16 (not (< 1 |old(~waterLevel~0)|))) (.cse17 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse8 (and (or .cse15 .cse5 (not (<= 2 |old(~waterLevel~0)|)) (= |old(~switchedOnBeforeTS~0)| 0)) (or .cse25 .cse15 .cse5 .cse23))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse18 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse11 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse12 (<= ~waterLevel~0 0)) (.cse13 (<= 1 ~switchedOnBeforeTS~0)) (.cse14 (<= 0 ~waterLevel~0)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse19 (= ~waterLevel~0 1)) (.cse6 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse2 .cse6 .cse4 .cse5 .cse7) (or .cse0 .cse8 .cse6 (and .cse9 .cse10 .cse11 .cse12 .cse13 .cse14)) (or .cse15 .cse16 .cse6 (and .cse9 .cse10 .cse11 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0) .cse13) .cse5 .cse17) (or .cse15 .cse16 .cse3 .cse5 .cse17 (and .cse18 .cse9 .cse11 .cse19 .cse13)) (or .cse20 .cse1 .cse16 .cse6 .cse5 .cse17) (or .cse15 .cse2 .cse6 .cse5 (and .cse10 .cse21 .cse11 .cse22 .cse13) .cse7 .cse23) (or .cse15 .cse2 .cse3 (and .cse18 .cse21 .cse11 .cse22 .cse13) .cse5 .cse7 .cse23) (or .cse20 .cse1 .cse16 .cse3 (and (<= 1 ~pumpRunning~0) .cse24 .cse22) .cse5 .cse17) (or .cse0 .cse8 .cse3 (and .cse18 .cse9 .cse11 .cse12 .cse13 .cse14)) (or .cse1 .cse25 (and .cse10 .cse21 .cse19) .cse6 .cse5)))) [2021-12-21 13:17:24,767 INFO L858 garLoopResultBuilder]: For program point L710(line 710) no Hoare annotation was computed. [2021-12-21 13:17:24,768 INFO L854 garLoopResultBuilder]: At program point L801(line 801) the Hoare annotation is: (let ((.cse10 (= ~pumpRunning~0 0))) (let ((.cse1 (and .cse10 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse11 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (not (< 1 |old(~waterLevel~0)|))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse6 .cse7 .cse3 (not (<= |old(~waterLevel~0)| 0))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse6 .cse2 .cse3) (or .cse8 .cse9 .cse2 .cse3 .cse4) (or .cse0 .cse7 .cse3 .cse4 (and .cse10 (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse5) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse7 (and .cse10 (= ~waterLevel~0 1)) .cse3) (or .cse8 .cse6 .cse7 .cse3 .cse4 .cse11) (or .cse8 .cse6 .cse2 .cse3 .cse4 .cse11) (or .cse8 .cse9 .cse7 .cse3 .cse4)))) [2021-12-21 13:17:24,768 INFO L854 garLoopResultBuilder]: At program point L801-1(lines 782 806) the Hoare annotation is: (let ((.cse20 (= ~pumpRunning~0 0)) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse18 (not (<= 2 |old(~waterLevel~0)|))) (.cse19 (not (= |old(~waterLevel~0)| 1))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse21 (= ~waterLevel~0 1)) (.cse22 (not (< 1 |old(~waterLevel~0)|))) (.cse6 (not (<= |old(~waterLevel~0)| 1))) (.cse14 (and (or .cse8 .cse4 .cse18 (= |old(~switchedOnBeforeTS~0)| 0)) (or .cse19 .cse8 .cse4 .cse9))) (.cse15 (<= ~waterLevel~0 0)) (.cse16 (<= 0 ~waterLevel~0)) (.cse2 (not (<= 0 |old(~waterLevel~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse11 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse13 (<= 1 ~switchedOnBeforeTS~0)) (.cse5 (not (<= |old(~waterLevel~0)| 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse20 .cse12)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse17 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse0 .cse1 .cse2 .cse7 .cse4) (or .cse8 .cse2 .cse7 .cse4 .cse5 .cse9 (and .cse10 .cse11 .cse12 .cse13)) (or .cse6 .cse14 .cse7 (and .cse10 .cse11 .cse15 .cse13 .cse16)) (or .cse8 .cse7 .cse4 .cse17 (and .cse10 .cse11 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0) .cse13) .cse18) (or .cse0 .cse19 .cse3 (and .cse20 .cse21) .cse4) (or .cse8 .cse22 .cse3 .cse4 .cse17 (and .cse20 .cse11 .cse21 .cse13)) (or .cse0 .cse1 .cse22 .cse3 .cse4 .cse17) (or .cse6 .cse14 .cse3 (and .cse20 .cse11 .cse15 .cse13 .cse16)) (or .cse8 .cse2 .cse3 (and .cse20 .cse11 .cse12 .cse13) .cse4 .cse5 .cse9) (or .cse0 .cse1 .cse7 (and (<= 1 ~pumpRunning~0) .cse12) .cse4 .cse17 .cse18)))) [2021-12-21 13:17:24,768 INFO L858 garLoopResultBuilder]: For program point L735-1(lines 735 741) no Hoare annotation was computed. [2021-12-21 13:17:24,768 INFO L858 garLoopResultBuilder]: For program point L583(lines 583 587) no Hoare annotation was computed. [2021-12-21 13:17:24,768 INFO L854 garLoopResultBuilder]: At program point L711(lines 706 713) the Hoare annotation is: (let ((.cse8 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (< 1 |old(~waterLevel~0)|))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (not (<= |old(~waterLevel~0)| 1))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 0 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse6 .cse7 .cse3 .cse4 .cse8) (or .cse5 .cse6 .cse7 .cse3 (not (<= |old(~waterLevel~0)| 0))) (or .cse0 .cse6 .cse2 .cse3 .cse4 .cse8) (or .cse5 .cse1 .cse7 .cse3 .cse4) (or .cse9 .cse5 (not (<= 1 |old(~waterLevel~0)|)) .cse7 .cse3) (or .cse0 .cse1 .cse7 .cse3 .cse4) (or .cse9 .cse5 .cse6 .cse2 .cse3))) [2021-12-21 13:17:24,768 INFO L854 garLoopResultBuilder]: At program point L583-2(lines 579 590) the Hoare annotation is: (let ((.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= 0 ~systemActive~0)) (.cse14 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse15 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse16 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse10 (and .cse15 (= ~waterLevel~0 1) .cse16)) (.cse1 (not (< 1 |old(~waterLevel~0)|))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse13 (and .cse15 (= |old(~waterLevel~0)| ~waterLevel~0) .cse16)) (.cse12 (not (<= |old(~waterLevel~0)| 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (not (<= 0 |old(~waterLevel~0)|))) (.cse5 (not (<= |old(~waterLevel~0)| 1))) (.cse6 (and (or .cse9 .cse3 (not (<= 2 |old(~waterLevel~0)|)) (= |old(~switchedOnBeforeTS~0)| 0)) (or (not (= |old(~waterLevel~0)| 1)) .cse9 .cse3 .cse14))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse8 (and .cse15 (<= ~waterLevel~0 0) .cse16 (<= 0 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse8) (or .cse9 .cse1 .cse7 .cse10 .cse3 .cse4) (or .cse0 .cse11 .cse7 .cse3 .cse12) (or .cse9 .cse1 .cse2 .cse10 .cse3 .cse4) (or .cse0 .cse1 .cse7 .cse3 .cse4) (or .cse13 .cse9 .cse11 .cse7 .cse3 .cse12 .cse14) (or .cse13 .cse9 .cse11 .cse2 .cse3 .cse12 .cse14) (or .cse5 .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse7 .cse3) (or .cse5 .cse0 .cse11 .cse2 .cse3) (or .cse5 .cse6 .cse2 .cse8)))) [2021-12-21 13:17:24,768 INFO L854 garLoopResultBuilder]: At program point L67(line 67) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0)) (.cse9 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (<= 0 |old(~waterLevel~0)|))) (.cse11 (and .cse8 .cse9 .cse13)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse12 (not (< 1 |old(~waterLevel~0)|))) (.cse10 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse9 .cse13))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse7 .cse2 (and .cse8 .cse9 (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse10 .cse3 .cse4 .cse5 .cse6) (or .cse11 .cse7 .cse1 .cse2 .cse3 (not (<= |old(~waterLevel~0)| 0))) (or .cse0 .cse12 .cse2 .cse3 .cse4 .cse5) (or (and .cse8 .cse9 (= ~waterLevel~0 1)) .cse7 (not (= |old(~waterLevel~0)| 1)) .cse2 .cse3) (or .cse11 (not (<= |old(~waterLevel~0)| 1)) .cse7 .cse1 .cse10 .cse3) (or .cse11 .cse7 .cse12 .cse10 .cse3 .cse4) (or .cse0 .cse12 .cse10 .cse3 .cse4 .cse5)))) [2021-12-21 13:17:24,768 INFO L858 garLoopResultBuilder]: For program point L67-1(line 67) no Hoare annotation was computed. [2021-12-21 13:17:24,769 INFO L858 garLoopResultBuilder]: For program point L728(lines 728 734) no Hoare annotation was computed. [2021-12-21 13:17:24,769 INFO L858 garLoopResultBuilder]: For program point L728-2(lines 724 746) no Hoare annotation was computed. [2021-12-21 13:17:24,769 INFO L858 garLoopResultBuilder]: For program point L790(lines 790 798) no Hoare annotation was computed. [2021-12-21 13:17:24,769 INFO L858 garLoopResultBuilder]: For program point L84(lines 84 94) no Hoare annotation was computed. [2021-12-21 13:17:24,769 INFO L858 garLoopResultBuilder]: For program point L786(lines 786 803) no Hoare annotation was computed. [2021-12-21 13:17:24,769 INFO L858 garLoopResultBuilder]: For program point L80(lines 80 97) no Hoare annotation was computed. [2021-12-21 13:17:24,769 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 721 747) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0)) (.cse9 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (<= 0 |old(~waterLevel~0)|))) (.cse11 (and .cse8 .cse9 .cse13)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse12 (not (< 1 |old(~waterLevel~0)|))) (.cse10 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse9 .cse13))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse7 .cse2 (and .cse8 .cse9 (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse10 .cse3 .cse4 .cse5 .cse6) (or .cse11 .cse7 .cse1 .cse2 .cse3 (not (<= |old(~waterLevel~0)| 0))) (or .cse0 .cse12 .cse2 .cse3 .cse4 .cse5) (or (and .cse8 .cse9 (= ~waterLevel~0 1)) .cse7 (not (= |old(~waterLevel~0)| 1)) .cse2 .cse3) (or .cse11 (not (<= |old(~waterLevel~0)| 1)) .cse7 .cse1 .cse10 .cse3) (or .cse11 .cse7 .cse12 .cse10 .cse3 .cse4) (or .cse0 .cse12 .cse10 .cse3 .cse4 .cse5)))) [2021-12-21 13:17:24,769 INFO L854 garLoopResultBuilder]: At program point L80-1(lines 72 100) the Hoare annotation is: (let ((.cse12 (= 0 ~systemActive~0))) (let ((.cse2 (< |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)) (.cse3 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse5 (<= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|)) (.cse28 (not (<= 2 |old(~waterLevel~0)|))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse14 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse29 (= ~pumpRunning~0 0)) (.cse17 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (not .cse12)) (.cse18 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2))) (let ((.cse16 (and .cse0 .cse29 .cse17 (<= 2 ~waterLevel~0) .cse6 .cse8 .cse18)) (.cse13 (not (<= |old(~waterLevel~0)| 0))) (.cse27 (and (or .cse9 .cse12 .cse28 (= |old(~switchedOnBeforeTS~0)| 0)) (or (not (= |old(~waterLevel~0)| 1)) .cse9 .cse12 .cse14))) (.cse25 (<= ~waterLevel~0 0)) (.cse26 (<= 0 ~waterLevel~0)) (.cse10 (not (<= 0 |old(~waterLevel~0)|))) (.cse11 (not (= ~methaneLevelCritical~0 0))) (.cse24 (not (<= |old(~waterLevel~0)| 1))) (.cse22 (and .cse0 .cse29 .cse2 .cse3 .cse5 .cse6 .cse8)) (.cse15 (not (< 1 |old(~waterLevel~0)|))) (.cse20 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= |timeShift_processEnvironment_~tmp~6#1| ~methaneLevelCritical~0)) (.cse21 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse23 (not (<= 1 ~methaneLevelCritical~0))) (.cse19 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) .cse9 .cse10 .cse11 .cse12 .cse13 .cse14) (or .cse1 .cse15 .cse16 .cse11 (and (<= 1 ~pumpRunning~0) .cse17 .cse6 .cse18) .cse12 .cse19) (or .cse9 .cse15 (and .cse0 .cse20 .cse1 .cse4 .cse5 .cse21 (= ~waterLevel~0 1) .cse7 .cse8) .cse11 .cse12 .cse19) (or .cse1 .cse10 .cse22 .cse23 .cse12 .cse13) (or .cse24 (and .cse0 .cse20 .cse1 .cse4 .cse5 .cse25 .cse21 .cse7 .cse8 .cse26) .cse27 .cse11) (or .cse1 .cse16 .cse23 .cse12 .cse19 .cse28) (or .cse9 .cse10 (and .cse1 .cse29 .cse2 .cse3 .cse4 .cse6 .cse7 .cse8) .cse23 .cse12 .cse13 .cse14) (or .cse24 .cse27 (and .cse20 .cse1 .cse29 .cse4 .cse25 .cse21 .cse7 .cse8 .cse26) .cse23) (or .cse24 .cse1 .cse10 .cse22 .cse11 .cse12) (or .cse24 .cse1 .cse22 (not (<= 1 |old(~waterLevel~0)|)) .cse23 .cse12) (or .cse9 .cse15 (and .cse20 .cse1 .cse29 .cse4 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= 1 ~waterLevel~0) .cse21 .cse7 .cse8) .cse23 .cse12 .cse19))))) [2021-12-21 13:17:24,769 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 721 747) no Hoare annotation was computed. [2021-12-21 13:17:24,770 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 710) no Hoare annotation was computed. [2021-12-21 13:17:24,770 INFO L861 garLoopResultBuilder]: At program point L129(lines 104 133) the Hoare annotation is: true [2021-12-21 13:17:24,770 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 104 133) no Hoare annotation was computed. [2021-12-21 13:17:24,770 INFO L858 garLoopResultBuilder]: For program point L125(line 125) no Hoare annotation was computed. [2021-12-21 13:17:24,770 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 104 133) the Hoare annotation is: true [2021-12-21 13:17:24,770 INFO L858 garLoopResultBuilder]: For program point L118(lines 118 122) no Hoare annotation was computed. [2021-12-21 13:17:24,770 INFO L861 garLoopResultBuilder]: At program point L118-1(lines 118 122) the Hoare annotation is: true [2021-12-21 13:17:24,770 INFO L858 garLoopResultBuilder]: For program point L115(line 115) no Hoare annotation was computed. [2021-12-21 13:17:24,770 INFO L861 garLoopResultBuilder]: At program point L114-2(lines 114 128) the Hoare annotation is: true [2021-12-21 13:17:24,770 INFO L861 garLoopResultBuilder]: At program point L110(line 110) the Hoare annotation is: true [2021-12-21 13:17:24,770 INFO L858 garLoopResultBuilder]: For program point L110-1(line 110) no Hoare annotation was computed. [2021-12-21 13:17:24,771 INFO L854 garLoopResultBuilder]: At program point L956(line 956) the Hoare annotation is: (let ((.cse6 (<= 0 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse10 (< 1 ~waterLevel~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse9 (<= ~waterLevel~0 2)) (.cse4 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 1) .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse3 .cse9 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5 .cse6) (and .cse0 .cse8 .cse2 .cse3 (<= ~waterLevel~0 0) .cse4 .cse5 .cse6) (and .cse0 .cse8 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse5) (and .cse0 .cse8 .cse2 .cse10 .cse3 .cse9 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse10 .cse3 .cse9 .cse4 .cse5) (and .cse7 .cse8 .cse2 .cse10 .cse3 .cse9 .cse4 .cse5))) [2021-12-21 13:17:24,771 INFO L861 garLoopResultBuilder]: At program point L985(lines 924 989) the Hoare annotation is: true [2021-12-21 13:17:24,771 INFO L858 garLoopResultBuilder]: For program point L944(lines 944 950) no Hoare annotation was computed. [2021-12-21 13:17:24,771 INFO L858 garLoopResultBuilder]: For program point L944-1(lines 944 950) no Hoare annotation was computed. [2021-12-21 13:17:24,771 INFO L858 garLoopResultBuilder]: For program point L936(lines 936 940) no Hoare annotation was computed. [2021-12-21 13:17:24,771 INFO L858 garLoopResultBuilder]: For program point L193(lines 193 200) no Hoare annotation was computed. [2021-12-21 13:17:24,771 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-21 13:17:24,771 INFO L858 garLoopResultBuilder]: For program point L193-2(lines 193 200) no Hoare annotation was computed. [2021-12-21 13:17:24,771 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-21 13:17:24,771 INFO L854 garLoopResultBuilder]: At program point L701(lines 696 704) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-21 13:17:24,771 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-21 13:17:24,772 INFO L854 garLoopResultBuilder]: At program point L920(lines 915 922) the Hoare annotation is: (let ((.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse11 (<= 2 ~waterLevel~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse12 (< 1 ~waterLevel~0)) (.cse4 (<= ~waterLevel~0 2)) (.cse10 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse7 (not (= 0 ~systemActive~0))) (.cse8 (<= 0 ~waterLevel~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse9 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse10 .cse1 .cse2 .cse3 .cse5 (= ~waterLevel~0 1) .cse7) (and .cse10 .cse9 .cse2 (<= ~waterLevel~0 1) .cse3 .cse5 .cse7 .cse8) (and .cse0 .cse1 .cse2 .cse11 .cse3 .cse4 .cse5 .cse7) (and .cse10 .cse1 .cse2 .cse12 .cse3 .cse4 .cse5 .cse7) (and .cse10 .cse9 .cse2 .cse11 .cse3 .cse4 .cse5 .cse7) (and .cse0 .cse9 .cse2 .cse12 .cse3 .cse4 .cse5 .cse7) (and .cse10 .cse1 .cse2 .cse3 (<= ~waterLevel~0 0) .cse5 .cse7 .cse8))) [2021-12-21 13:17:24,772 INFO L854 garLoopResultBuilder]: At program point L982(lines 933 983) the Hoare annotation is: false [2021-12-21 13:17:24,772 INFO L854 garLoopResultBuilder]: At program point L693(lines 689 695) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-21 13:17:24,772 INFO L861 garLoopResultBuilder]: At program point L177(lines 169 179) the Hoare annotation is: true [2021-12-21 13:17:24,772 INFO L861 garLoopResultBuilder]: At program point L202(lines 183 205) the Hoare annotation is: true [2021-12-21 13:17:24,772 INFO L854 garLoopResultBuilder]: At program point L165(lines 161 167) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~1#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-21 13:17:24,772 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-21 13:17:24,772 INFO L858 garLoopResultBuilder]: For program point L954(lines 954 960) no Hoare annotation was computed. [2021-12-21 13:17:24,772 INFO L858 garLoopResultBuilder]: For program point L954-1(lines 954 960) no Hoare annotation was computed. [2021-12-21 13:17:24,772 INFO L854 garLoopResultBuilder]: At program point L979(lines 934 981) the Hoare annotation is: (let ((.cse3 (<= 2 ~waterLevel~0)) (.cse5 (<= ~waterLevel~0 2)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse10 (<= ~waterLevel~0 0)) (.cse12 (<= 0 ~waterLevel~0)) (.cse8 (<= 1 ~pumpRunning~0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse13 (<= ~waterLevel~0 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse14 (<= 1 ~waterLevel~0)) (.cse6 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse11 (<= 1 ~switchedOnBeforeTS~0)) (.cse7 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse8 .cse9 .cse2 .cse4 .cse10 .cse6 .cse11 .cse7 .cse12) (and .cse0 .cse9 .cse2 .cse4 .cse10 .cse6 .cse7 .cse12) (and .cse8 .cse9 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse9 .cse2 .cse4 .cse6 (= ~waterLevel~0 1) .cse7) (and .cse0 .cse1 .cse2 .cse13 .cse4 .cse14 .cse6 .cse7) (and .cse0 .cse9 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse1 .cse2 .cse4 .cse10 .cse6 .cse7 .cse12) (and .cse8 .cse9 .cse2 .cse13 .cse4 .cse14 .cse6 .cse11 .cse7))) [2021-12-21 13:17:24,772 INFO L854 garLoopResultBuilder]: At program point L946(line 946) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse12 (<= ~waterLevel~0 0)) (.cse7 (<= 0 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse8 (<= 2 ~waterLevel~0)) (.cse9 (<= ~waterLevel~0 2)) (.cse10 (<= 1 ~pumpRunning~0)) (.cse11 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (<= ~waterLevel~0 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse13 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse1 .cse2 .cse8 .cse4 .cse9 .cse5 .cse6) (and .cse10 .cse11 .cse2 .cse4 .cse12 .cse5 .cse13 .cse6 .cse7) (and .cse0 .cse11 .cse2 .cse4 .cse12 .cse5 .cse6 .cse7) (and .cse10 .cse11 .cse2 .cse8 .cse4 .cse9 .cse5 .cse6) (and .cse0 .cse11 .cse2 .cse4 .cse5 (= ~waterLevel~0 1) .cse6) (and .cse0 .cse11 .cse2 .cse8 .cse4 .cse9 .cse5 .cse6) (and .cse10 .cse11 .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0) .cse5 .cse13 .cse6))) [2021-12-21 13:17:24,773 INFO L854 garLoopResultBuilder]: At program point L686(lines 682 688) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-21 13:17:24,773 INFO L854 garLoopResultBuilder]: At program point L59(lines 54 61) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~1#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-21 13:17:24,773 INFO L858 garLoopResultBuilder]: For program point L972(lines 972 976) no Hoare annotation was computed. [2021-12-21 13:17:24,773 INFO L854 garLoopResultBuilder]: At program point L972-2(lines 964 977) the Hoare annotation is: (let ((.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse11 (<= 2 ~waterLevel~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse12 (< 1 ~waterLevel~0)) (.cse4 (<= ~waterLevel~0 2)) (.cse10 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse7 (not (= 0 ~systemActive~0))) (.cse8 (<= 0 ~waterLevel~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse9 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse10 .cse1 .cse2 .cse3 .cse5 (= ~waterLevel~0 1) .cse7) (and .cse10 .cse9 .cse2 (<= ~waterLevel~0 1) .cse3 .cse5 .cse7 .cse8) (and .cse0 .cse1 .cse2 .cse11 .cse3 .cse4 .cse5 .cse7) (and .cse10 .cse1 .cse2 .cse12 .cse3 .cse4 .cse5 .cse7) (and .cse10 .cse9 .cse2 .cse11 .cse3 .cse4 .cse5 .cse7) (and .cse0 .cse9 .cse2 .cse12 .cse3 .cse4 .cse5 .cse7) (and .cse10 .cse1 .cse2 .cse3 (<= ~waterLevel~0 0) .cse5 .cse7 .cse8))) [2021-12-21 13:17:24,773 INFO L858 garLoopResultBuilder]: For program point L935(lines 934 981) no Hoare annotation was computed. [2021-12-21 13:17:24,773 INFO L858 garLoopResultBuilder]: For program point L964(lines 964 977) no Hoare annotation was computed. [2021-12-21 13:17:24,773 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 591 602) no Hoare annotation was computed. [2021-12-21 13:17:24,773 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 591 602) the Hoare annotation is: (let ((.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse10 (not (<= 0 |old(~waterLevel~0)|))) (.cse9 (not (<= 1 ~pumpRunning~0))) (.cse12 (not (<= |old(~waterLevel~0)| 0))) (.cse11 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (= ~pumpRunning~0 0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (= 0 ~systemActive~0)) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse6 .cse4 .cse5 .cse7 .cse8) (or .cse3 .cse9 .cse4 .cse5 .cse7 .cse8) (or .cse0 .cse1 .cse10 .cse6 .cse4 .cse5) (or .cse0 .cse2 .cse3 .cse9 .cse4 .cse5 .cse11) (or .cse1 .cse10 .cse3 .cse4 .cse5 .cse12) (or .cse10 .cse3 .cse9 .cse4 .cse5 .cse12 .cse11) (or .cse1 .cse3 .cse4 .cse5 .cse7 .cse8))) [2021-12-21 13:17:24,774 INFO L858 garLoopResultBuilder]: For program point L595-1(lines 591 602) no Hoare annotation was computed. [2021-12-21 13:17:24,774 INFO L858 garLoopResultBuilder]: For program point L764(lines 764 772) no Hoare annotation was computed. [2021-12-21 13:17:24,774 INFO L854 garLoopResultBuilder]: At program point L665(lines 656 669) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0))) (let ((.cse3 (not (<= ~waterLevel~0 2))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (<= 1 ~waterLevel~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (<= ~waterLevel~0 0))) (.cse8 (and .cse1 (not (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0)))) (.cse10 (not (<= 0 ~waterLevel~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= ~waterLevel~0 1))) (.cse4 (= 0 ~systemActive~0))) (and (or (not (< 1 ~waterLevel~0)) .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse5 .cse3 .cse4) (or .cse0 .cse6 .cse2 .cse7 .cse4 .cse8) (or .cse0 .cse9 .cse10 .cse2 .cse4 .cse8) (or .cse0 .cse6 .cse5 .cse7 .cse4 .cse8) (or .cse0 .cse9 .cse10 .cse5 .cse4 .cse8) (or .cse10 (not (<= 1 |old(~pumpRunning~0)|)) .cse5 .cse7 .cse4 (not (<= 1 ~switchedOnBeforeTS~0)))))) [2021-12-21 13:17:24,774 INFO L858 garLoopResultBuilder]: For program point L760(lines 760 777) no Hoare annotation was computed. [2021-12-21 13:17:24,774 INFO L858 garLoopResultBuilder]: For program point L822(lines 822 828) no Hoare annotation was computed. [2021-12-21 13:17:24,774 INFO L854 garLoopResultBuilder]: At program point L820(line 820) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse3 (not (<= ~waterLevel~0 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (<= 0 ~waterLevel~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= ~waterLevel~0 1))) (.cse4 (= 0 ~systemActive~0))) (and (or (not (< 1 ~waterLevel~0)) .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse5 .cse3 .cse4) (or .cse0 .cse6 .cse5 .cse7 .cse4) (or .cse0 .cse6 .cse2 .cse7 .cse4) (or .cse6 (not (<= 1 |old(~pumpRunning~0)|)) .cse5 .cse7 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-21 13:17:24,775 INFO L854 garLoopResultBuilder]: At program point L822-2(lines 815 831) the Hoare annotation is: (let ((.cse0 (not (< 1 ~waterLevel~0))) (.cse3 (not (<= ~waterLevel~0 2))) (.cse4 (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~7#1| ~methaneLevelCritical~0)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (<= 0 ~waterLevel~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (<= ~waterLevel~0 1))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 (and (= ~pumpRunning~0 0) .cse4) .cse5) (or .cse0 .cse1 .cse6 .cse3 (and (<= 1 ~pumpRunning~0) .cse4) .cse5) (or .cse1 .cse7 .cse6 .cse8 .cse5) (or .cse1 .cse7 .cse2 .cse8 .cse5) (or .cse7 (not (<= 1 |old(~pumpRunning~0)|)) .cse6 .cse8 .cse5 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-21 13:17:24,775 INFO L858 garLoopResultBuilder]: For program point L820-1(line 820) no Hoare annotation was computed. [2021-12-21 13:17:24,775 INFO L854 garLoopResultBuilder]: At program point L911(lines 896 914) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse4 (= 0 ~systemActive~0))) (let ((.cse5 (and (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (not (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~8#1| 0)) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0) (not .cse4))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (<= 0 ~waterLevel~0))) (.cse8 (not (<= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2 .cse3 .cse4) (or .cse0 .cse5 (not (<= ~waterLevel~0 0)) .cse6 .cse2 .cse4) (or .cse0 .cse5 .cse6 .cse7 .cse8 .cse4) (or .cse0 .cse5 (not (<= 1 ~waterLevel~0)) .cse2 .cse8 .cse4) (or .cse6 (not (<= 1 |old(~pumpRunning~0)|)) .cse7 .cse8 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (< 1 ~waterLevel~0)) .cse0 .cse1 .cse7 .cse3 .cse4)))) [2021-12-21 13:17:24,775 INFO L854 garLoopResultBuilder]: At program point L812(lines 807 814) the Hoare annotation is: (let ((.cse0 (not (< 1 ~waterLevel~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (<= ~waterLevel~0 2))) (.cse5 (not (<= 0 ~waterLevel~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (<= ~waterLevel~0 1))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 (and (<= 1 ~pumpRunning~0) (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~7#1| ~methaneLevelCritical~0)) .cse4) (or .cse1 .cse5 .cse2 .cse6 .cse4) (or .cse1 .cse5 .cse7 .cse6 .cse4) (or .cse0 .cse1 .cse7 .cse3 .cse4) (or .cse5 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse6 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-21 13:17:24,775 INFO L858 garLoopResultBuilder]: For program point L905(lines 905 909) no Hoare annotation was computed. [2021-12-21 13:17:24,775 INFO L858 garLoopResultBuilder]: For program point L905-2(lines 905 909) no Hoare annotation was computed. [2021-12-21 13:17:24,775 INFO L854 garLoopResultBuilder]: At program point L775(line 775) the Hoare annotation is: (let ((.cse3 (not (<= ~waterLevel~0 1))) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 0 ~waterLevel~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse9 (not (< 1 ~waterLevel~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (not (<= ~waterLevel~0 2))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse3 .cse4) (or .cse6 .cse7 (not (<= 1 ~waterLevel~0)) .cse2 .cse3 .cse4 .cse8) (or .cse9 .cse0 .cse2 .cse10 .cse4) (or .cse6 (not (<= ~waterLevel~0 0)) .cse1 .cse7 .cse2 .cse4 .cse8) (or .cse9 .cse0 .cse5 .cse10 .cse4))) [2021-12-21 13:17:24,776 INFO L858 garLoopResultBuilder]: For program point L775-1(lines 756 780) no Hoare annotation was computed. [2021-12-21 13:17:24,776 INFO L858 garLoopResultBuilder]: For program point L660(lines 660 666) no Hoare annotation was computed. [2021-12-21 13:17:24,776 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 756 780) the Hoare annotation is: (let ((.cse2 (not (<= 2 ~waterLevel~0))) (.cse4 (not (<= ~waterLevel~0 2))) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse12 (not (<= ~waterLevel~0 0))) (.cse13 (not (<= 0 ~waterLevel~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse9 (not (<= 1 ~waterLevel~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (not (<= ~waterLevel~0 1))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse6 .cse4 .cse5) (or .cse7 .cse8 .cse9 .cse6 .cse10 .cse5 .cse11) (or .cse0 .cse1 .cse12 .cse13 .cse3 .cse5) (or .cse7 .cse12 .cse13 .cse8 .cse6 .cse5 .cse11) (or .cse0 .cse1 .cse12 .cse13 .cse6 .cse5) (or .cse0 .cse1 .cse9 .cse6 .cse10 .cse5) (or .cse0 .cse1 .cse9 .cse3 .cse10 .cse5))) [2021-12-21 13:17:24,776 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 756 780) no Hoare annotation was computed. [2021-12-21 13:17:24,776 INFO L854 garLoopResultBuilder]: At program point L770(line 770) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0))) (let ((.cse1 (not (<= ~waterLevel~0 0))) (.cse6 (not (<= 1 ~waterLevel~0))) (.cse2 (not (<= 0 ~waterLevel~0))) (.cse7 (not (<= ~waterLevel~0 1))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (< 1 ~waterLevel~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse10 (not (<= ~waterLevel~0 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__methaneQuery_~tmp~5#1| 0) (not .cse4)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse6 .cse3 .cse7 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse8 .cse4 .cse5) (or .cse0 .cse6 .cse8 .cse7 .cse4 .cse5) (or .cse2 (not (<= 1 |old(~pumpRunning~0)|)) .cse3 .cse7 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse9 .cse0 .cse8 .cse10 .cse4 .cse5) (or .cse9 .cse0 .cse3 .cse10 .cse4 .cse5)))) [2021-12-21 13:17:24,776 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 851 859) no Hoare annotation was computed. [2021-12-21 13:17:24,776 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 851 859) the Hoare annotation is: true [2021-12-21 13:17:24,777 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 851 859) no Hoare annotation was computed. [2021-12-21 13:17:24,777 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 840 850) the Hoare annotation is: true [2021-12-21 13:17:24,777 INFO L854 garLoopResultBuilder]: At program point L620(lines 615 623) the Hoare annotation is: (let ((.cse7 (not (<= 1 ~waterLevel~0))) (.cse9 (not (<= ~waterLevel~0 1))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (<= ~waterLevel~0 0))) (.cse1 (not (<= 0 ~waterLevel~0))) (.cse3 (not (<= 1 ~pumpRunning~0))) (.cse6 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse10 (not (= ~pumpRunning~0 0))) (.cse11 (not (<= 2 ~waterLevel~0))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse12 (not (<= ~waterLevel~0 2))) (.cse4 (= 0 ~systemActive~0)) (.cse5 (= |isMethaneAlarm_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse7 .cse8 .cse3 .cse9 .cse4 .cse5 .cse6) (or .cse7 .cse2 .cse3 .cse9 .cse4 .cse5 .cse6) (or .cse10 .cse11 .cse2 .cse12 .cse4 .cse5) (or .cse0 .cse1 .cse8 .cse3 .cse4 .cse5 .cse6) (or .cse10 .cse11 .cse8 .cse12 .cse4 .cse5))) [2021-12-21 13:17:24,777 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 840 850) no Hoare annotation was computed. [2021-12-21 13:17:24,777 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 840 850) no Hoare annotation was computed. [2021-12-21 13:17:24,780 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:24,781 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-21 13:17:24,832 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.12 01:17:24 BoogieIcfgContainer [2021-12-21 13:17:24,832 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-21 13:17:24,833 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-21 13:17:24,833 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-21 13:17:24,833 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-21 13:17:24,834 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:16:51" (3/4) ... [2021-12-21 13:17:24,836 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-21 13:17:24,841 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-21 13:17:24,841 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-21 13:17:24,841 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-21 13:17:24,841 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-21 13:17:24,842 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-21 13:17:24,842 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-12-21 13:17:24,842 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-12-21 13:17:24,842 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-12-21 13:17:24,848 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 51 nodes and edges [2021-12-21 13:17:24,849 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-21 13:17:24,849 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-21 13:17:24,849 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-21 13:17:24,850 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-21 13:17:24,850 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-21 13:17:24,851 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-21 13:17:24,868 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2021-12-21 13:17:24,868 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2021-12-21 13:17:24,868 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2021-12-21 13:17:24,868 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive)) || ((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel)) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && waterLevel == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && waterLevel <= 1) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && waterLevel <= 1) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) [2021-12-21 13:17:24,869 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2021-12-21 13:17:24,869 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) [2021-12-21 13:17:24,870 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel) || ((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && waterLevel == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel <= 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel)) || (((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && 1 < waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && 1 < waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel) [2021-12-21 13:17:24,870 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && tmp < 2) && \result < 2) && tmp == methaneLevelCritical) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) && ((((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) && tmp == 2)) || !(methaneLevelCritical == 0)) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || ((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && tmp == methaneLevelCritical) && pumpRunning <= tmp___0) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp < 2) && \result < 2) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((!(\old(waterLevel) <= 1) || (((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && tmp == methaneLevelCritical) && pumpRunning <= tmp___0) && waterLevel <= 0) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) && tmp == 2)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && tmp < 2) && \result < 2) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || ((((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel <= 0) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || !(1 <= methaneLevelCritical))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp < 2) && \result < 2) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp < 2) && \result < 2) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || ((((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2021-12-21 13:17:24,870 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS))) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2021-12-21 13:17:24,871 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-21 13:17:24,871 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \result < 2) && \old(waterLevel) == waterLevel)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result < 2) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(1 <= methaneLevelCritical)) || (((((\result <= waterLevel && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((\result <= waterLevel && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((((pumpRunning == 0 && \result < 2) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && \result < 2) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((pumpRunning == 0 && \result < 2) && waterLevel == 1)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) [2021-12-21 13:17:24,871 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-21 13:17:24,871 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(waterLevel <= 0) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS)) && ((((((!(1 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && ((((((!(1 <= waterLevel) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(pumpRunning == 0) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive) || \result == methaneLevelCritical)) && ((((((!(waterLevel <= 0) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(pumpRunning == 0) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) || \result == methaneLevelCritical) [2021-12-21 13:17:24,872 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2021-12-21 13:17:24,872 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || (pumpRunning == 0 && tmp == methaneLevelCritical)) || 0 == systemActive) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && tmp == methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2021-12-21 13:17:24,872 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && tmp == methaneLevelCritical)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2021-12-21 13:17:24,872 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && !(tmp == 0)) && \result == 0) && !(0 == systemActive))) || !(waterLevel <= 0)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && !(tmp == 0)) && \result == 0) && !(0 == systemActive))) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && !(tmp == 0)) && \result == 0) && !(0 == systemActive))) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS))) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive) [2021-12-21 13:17:24,890 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-21 13:17:24,890 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-21 13:17:24,891 INFO L158 Benchmark]: Toolchain (without parser) took 34529.78ms. Allocated memory was 96.5MB in the beginning and 270.5MB in the end (delta: 174.1MB). Free memory was 63.7MB in the beginning and 104.5MB in the end (delta: -40.8MB). Peak memory consumption was 132.5MB. Max. memory is 16.1GB. [2021-12-21 13:17:24,891 INFO L158 Benchmark]: CDTParser took 0.11ms. Allocated memory is still 96.5MB. Free memory is still 53.3MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-21 13:17:24,891 INFO L158 Benchmark]: CACSL2BoogieTranslator took 366.16ms. Allocated memory was 96.5MB in the beginning and 127.9MB in the end (delta: 31.5MB). Free memory was 63.7MB in the beginning and 95.6MB in the end (delta: -31.9MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-12-21 13:17:24,892 INFO L158 Benchmark]: Boogie Procedure Inliner took 72.40ms. Allocated memory is still 127.9MB. Free memory was 95.6MB in the beginning and 92.9MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-21 13:17:24,892 INFO L158 Benchmark]: Boogie Preprocessor took 32.11ms. Allocated memory is still 127.9MB. Free memory was 92.9MB in the beginning and 91.3MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-21 13:17:24,892 INFO L158 Benchmark]: RCFGBuilder took 447.93ms. Allocated memory is still 127.9MB. Free memory was 91.3MB in the beginning and 74.0MB in the end (delta: 17.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-21 13:17:24,892 INFO L158 Benchmark]: TraceAbstraction took 33544.16ms. Allocated memory was 127.9MB in the beginning and 270.5MB in the end (delta: 142.6MB). Free memory was 74.0MB in the beginning and 111.8MB in the end (delta: -37.8MB). Peak memory consumption was 137.5MB. Max. memory is 16.1GB. [2021-12-21 13:17:24,893 INFO L158 Benchmark]: Witness Printer took 57.33ms. Allocated memory is still 270.5MB. Free memory was 111.8MB in the beginning and 104.5MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-21 13:17:24,894 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.11ms. Allocated memory is still 96.5MB. Free memory is still 53.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 366.16ms. Allocated memory was 96.5MB in the beginning and 127.9MB in the end (delta: 31.5MB). Free memory was 63.7MB in the beginning and 95.6MB in the end (delta: -31.9MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 72.40ms. Allocated memory is still 127.9MB. Free memory was 95.6MB in the beginning and 92.9MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 32.11ms. Allocated memory is still 127.9MB. Free memory was 92.9MB in the beginning and 91.3MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 447.93ms. Allocated memory is still 127.9MB. Free memory was 91.3MB in the beginning and 74.0MB in the end (delta: 17.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 33544.16ms. Allocated memory was 127.9MB in the beginning and 270.5MB in the end (delta: 142.6MB). Free memory was 74.0MB in the beginning and 111.8MB in the end (delta: -37.8MB). Peak memory consumption was 137.5MB. Max. memory is 16.1GB. * Witness Printer took 57.33ms. Allocated memory is still 270.5MB. Free memory was 111.8MB in the beginning and 104.5MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 710]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 99 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 33.4s, OverallIterations: 14, TraceHistogramMax: 9, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 10.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 13.4s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 7354 SdHoareTripleChecker+Valid, 6.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 7312 mSDsluCounter, 8870 SdHoareTripleChecker+Invalid, 5.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 6717 mSDsCounter, 3158 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 12954 IncrementalHoareTripleChecker+Invalid, 16112 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 3158 mSolverCounterUnsat, 2153 mSDtfsCounter, 12954 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 2666 GetRequests, 2275 SyntacticMatches, 13 SemanticMatches, 378 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5173 ImplicationChecksByTransitivity, 4.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1289occurred in iteration=13, InterpolantAutomatonStates: 287, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 14 MinimizatonAttempts, 535 StatesRemovedByMinimization, 10 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 46 LocationsWithAnnotation, 3046 PreInvPairs, 3396 NumberOfFragments, 7229 HoareAnnotationTreeSize, 3046 FomulaSimplifications, 7179 FormulaSimplificationTreeSizeReduction, 1.2s HoareSimplificationTime, 46 FomulaSimplificationsInter, 67084 FormulaSimplificationTreeSizeReductionInter, 12.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 6.7s InterpolantComputationTime, 2443 NumberOfCodeBlocks, 2443 NumberOfCodeBlocksAsserted, 19 NumberOfCheckSat, 3416 ConstructedInterpolants, 0 QuantifiedInterpolants, 8023 SizeOfPredicates, 13 NumberOfNonLiveVariables, 3695 ConjunctsInSsa, 79 ConjunctsInUnsatCore, 24 InterpolantComputations, 9 PerfectInterpolantSequences, 3229/3750 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 933]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 832]: Loop Invariant Derived loop invariant: ((((((((((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 114]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 815]: Loop Invariant Derived loop invariant: ((((((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || (pumpRunning == 0 && tmp == methaneLevelCritical)) || 0 == systemActive) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && tmp == methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 579]: Loop Invariant Derived loop invariant: (((((((((((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel)) - InvariantResult [Line: 706]: Loop Invariant Derived loop invariant: (((((((((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 104]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 934]: Loop Invariant Derived loop invariant: ((((((((((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive)) || ((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel)) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && waterLevel == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && waterLevel <= 1) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && waterLevel <= 1) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) - InvariantResult [Line: 183]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: ((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 647]: Loop Invariant Derived loop invariant: ((((((((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \result < 2) && \old(waterLevel) == waterLevel)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result < 2) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(1 <= methaneLevelCritical)) || (((((\result <= waterLevel && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((((\result <= waterLevel && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((((pumpRunning == 0 && \result < 2) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && \result < 2) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((pumpRunning == 0 && \result < 2) && waterLevel == 1)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 169]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 689]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 915]: Loop Invariant Derived loop invariant: (((((((((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel) || ((((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && waterLevel == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel <= 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel)) || (((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && 1 < waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && 1 < waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && waterLevel <= 0) && tmp == 1) && !(0 == systemActive)) && 0 <= waterLevel) - InvariantResult [Line: 696]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 72]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && tmp < 2) && \result < 2) && tmp == methaneLevelCritical) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) && ((((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) && tmp == 2)) || !(methaneLevelCritical == 0)) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || ((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && tmp == methaneLevelCritical) && pumpRunning <= tmp___0) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(\old(pumpRunning) == 0) || !(0 <= \old(waterLevel))) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp < 2) && \result < 2) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0))) && (((!(\old(waterLevel) <= 1) || (((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && !(\old(pumpRunning) == 0)) && tmp == methaneLevelCritical) && pumpRunning <= tmp___0) && waterLevel <= 0) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == \result) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) && tmp == 2)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || (((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && tmp < 2) && \result < 2) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || ((((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel <= 0) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && 0 <= waterLevel)) || !(1 <= methaneLevelCritical))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= \old(waterLevel))) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp < 2) && \result < 2) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp < 2) && \result < 2) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || ((((((((\result <= waterLevel && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 807]: Loop Invariant Derived loop invariant: ((((((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && tmp == methaneLevelCritical)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && ((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: ((((((((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(\old(pumpRunning) == 0) || !(waterLevel <= 0)) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (pumpRunning == 0 && !(\result == 0)))) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: ((((((((((!(waterLevel <= 0) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS)) && ((((((!(1 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && ((((((!(1 <= waterLevel) || !(methaneLevelCritical == 0)) || !(1 <= pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(pumpRunning == 0) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive) || \result == methaneLevelCritical)) && ((((((!(waterLevel <= 0) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(1 <= pumpRunning)) || 0 == systemActive) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && (((((!(pumpRunning == 0) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) || \result == methaneLevelCritical) - InvariantResult [Line: 896]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && !(tmp == 0)) && \result == 0) && !(0 == systemActive))) || !(waterLevel <= 0)) || !(0 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && !(tmp == 0)) && \result == 0) && !(0 == systemActive))) || !(0 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && !(tmp == 0)) && \result == 0) && !(0 == systemActive))) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive)) && (((((!(0 <= waterLevel) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS))) && (((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || 0 == systemActive) - InvariantResult [Line: 924]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 682]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 782]: Loop Invariant Derived loop invariant: ((((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS))) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= waterLevel) && 1 <= switchedOnBeforeTS)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) && 0 <= waterLevel))) && ((((((!(1 <= \old(pumpRunning)) || !(0 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) RESULT: Ultimate proved your program to be correct! [2021-12-21 13:17:24,947 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE