/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerCInline.xml -s ../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_Bitvector.epf -i ../../../trunk/examples/svcomp/product-lines/minepump_spec5_product44.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-a10ec3b [2022-01-10 06:35:33,961 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-01-10 06:35:33,962 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-01-10 06:35:34,016 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-01-10 06:35:34,017 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-01-10 06:35:34,023 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-01-10 06:35:34,025 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-01-10 06:35:34,029 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-01-10 06:35:34,031 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-01-10 06:35:34,035 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-01-10 06:35:34,035 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-01-10 06:35:34,036 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-01-10 06:35:34,036 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-01-10 06:35:34,038 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-01-10 06:35:34,039 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-01-10 06:35:34,040 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-01-10 06:35:34,040 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-01-10 06:35:34,041 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-01-10 06:35:34,043 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-01-10 06:35:34,046 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-01-10 06:35:34,047 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-01-10 06:35:34,047 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-01-10 06:35:34,048 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-01-10 06:35:34,049 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-01-10 06:35:34,054 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-01-10 06:35:34,055 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-01-10 06:35:34,055 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-01-10 06:35:34,056 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-01-10 06:35:34,056 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-01-10 06:35:34,057 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-01-10 06:35:34,057 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-01-10 06:35:34,057 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-01-10 06:35:34,059 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-01-10 06:35:34,059 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-01-10 06:35:34,060 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-01-10 06:35:34,060 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-01-10 06:35:34,060 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-01-10 06:35:34,060 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-01-10 06:35:34,061 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-01-10 06:35:34,061 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-01-10 06:35:34,061 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-01-10 06:35:34,062 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_Bitvector.epf [2022-01-10 06:35:34,085 INFO L113 SettingsManager]: Loading preferences was successful [2022-01-10 06:35:34,085 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-01-10 06:35:34,086 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-01-10 06:35:34,086 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-01-10 06:35:34,087 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-01-10 06:35:34,087 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-01-10 06:35:34,087 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-01-10 06:35:34,087 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-01-10 06:35:34,087 INFO L138 SettingsManager]: * Use SBE=true [2022-01-10 06:35:34,087 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-01-10 06:35:34,088 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-01-10 06:35:34,088 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-01-10 06:35:34,088 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-01-10 06:35:34,088 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-01-10 06:35:34,088 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-01-10 06:35:34,088 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-01-10 06:35:34,088 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-01-10 06:35:34,089 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-01-10 06:35:34,089 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-01-10 06:35:34,089 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-01-10 06:35:34,089 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-01-10 06:35:34,089 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-01-10 06:35:34,089 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-01-10 06:35:34,089 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 06:35:34,090 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-01-10 06:35:34,090 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-01-10 06:35:34,090 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-01-10 06:35:34,090 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2022-01-10 06:35:34,090 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2022-01-10 06:35:34,090 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-01-10 06:35:34,090 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-01-10 06:35:34,091 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-01-10 06:35:34,091 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-01-10 06:35:34,091 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-01-10 06:35:34,292 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-01-10 06:35:34,307 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-01-10 06:35:34,309 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-01-10 06:35:34,310 INFO L271 PluginConnector]: Initializing CDTParser... [2022-01-10 06:35:34,310 INFO L275 PluginConnector]: CDTParser initialized [2022-01-10 06:35:34,311 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/product-lines/minepump_spec5_product44.cil.c [2022-01-10 06:35:34,354 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9a376f959/959fc26774724f74bc05aa0caf3faf27/FLAG4bde19e02 [2022-01-10 06:35:34,717 INFO L306 CDTParser]: Found 1 translation units. [2022-01-10 06:35:34,717 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product44.cil.c [2022-01-10 06:35:34,727 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9a376f959/959fc26774724f74bc05aa0caf3faf27/FLAG4bde19e02 [2022-01-10 06:35:35,104 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9a376f959/959fc26774724f74bc05aa0caf3faf27 [2022-01-10 06:35:35,106 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-01-10 06:35:35,107 INFO L131 ToolchainWalker]: Walking toolchain with 5 elements. [2022-01-10 06:35:35,108 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-01-10 06:35:35,108 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-01-10 06:35:35,110 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-01-10 06:35:35,110 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 06:35:35" (1/1) ... [2022-01-10 06:35:35,111 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@e9dd8b7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:35:35, skipping insertion in model container [2022-01-10 06:35:35,111 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 06:35:35" (1/1) ... [2022-01-10 06:35:35,115 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-01-10 06:35:35,135 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 06:35:35,399 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product44.cil.c[18005,18018] [2022-01-10 06:35:35,402 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 06:35:35,409 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-01-10 06:35:35,414 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 06:35:35,445 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product44.cil.c[18005,18018] [2022-01-10 06:35:35,446 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 06:35:35,449 INFO L203 MainTranslator]: Completed pre-run [2022-01-10 06:35:35,505 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product44.cil.c[18005,18018] [2022-01-10 06:35:35,506 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 06:35:35,523 INFO L208 MainTranslator]: Completed translation [2022-01-10 06:35:35,523 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:35:35 WrapperNode [2022-01-10 06:35:35,524 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-01-10 06:35:35,524 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-01-10 06:35:35,524 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-01-10 06:35:35,525 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-01-10 06:35:35,529 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:35:35" (1/1) ... [2022-01-10 06:35:35,548 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:35:35" (1/1) ... [2022-01-10 06:35:35,572 INFO L137 Inliner]: procedures = 59, calls = 157, calls flagged for inlining = 27, calls inlined = 24, statements flattened = 249 [2022-01-10 06:35:35,572 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-01-10 06:35:35,573 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-01-10 06:35:35,573 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-01-10 06:35:35,573 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-01-10 06:35:35,579 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:35:35" (1/1) ... [2022-01-10 06:35:35,579 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:35:35" (1/1) ... [2022-01-10 06:35:35,583 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:35:35" (1/1) ... [2022-01-10 06:35:35,584 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:35:35" (1/1) ... [2022-01-10 06:35:35,592 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:35:35" (1/1) ... [2022-01-10 06:35:35,596 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:35:35" (1/1) ... [2022-01-10 06:35:35,599 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:35:35" (1/1) ... [2022-01-10 06:35:35,601 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-01-10 06:35:35,601 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-01-10 06:35:35,601 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-01-10 06:35:35,601 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-01-10 06:35:35,608 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:35:35" (1/1) ... [2022-01-10 06:35:35,612 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 06:35:35,621 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 06:35:35,629 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-01-10 06:35:35,644 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-01-10 06:35:35,669 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-01-10 06:35:35,670 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-01-10 06:35:35,670 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-01-10 06:35:35,671 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-01-10 06:35:35,671 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-01-10 06:35:35,672 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-01-10 06:35:35,672 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-01-10 06:35:35,672 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-01-10 06:35:35,672 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-01-10 06:35:35,672 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-01-10 06:35:35,672 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-01-10 06:35:35,672 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-01-10 06:35:35,672 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-01-10 06:35:35,672 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-01-10 06:35:35,672 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-01-10 06:35:35,672 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-01-10 06:35:35,745 INFO L234 CfgBuilder]: Building ICFG [2022-01-10 06:35:35,746 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-01-10 06:35:35,993 INFO L275 CfgBuilder]: Performing block encoding [2022-01-10 06:35:35,998 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-01-10 06:35:35,998 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-01-10 06:35:36,000 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 06:35:36 BoogieIcfgContainer [2022-01-10 06:35:36,000 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-01-10 06:35:36,001 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-01-10 06:35:36,001 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-01-10 06:35:36,003 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-01-10 06:35:36,003 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 10.01 06:35:35" (1/3) ... [2022-01-10 06:35:36,004 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@27a9278a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 06:35:36, skipping insertion in model container [2022-01-10 06:35:36,004 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:35:35" (2/3) ... [2022-01-10 06:35:36,004 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@27a9278a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 06:35:36, skipping insertion in model container [2022-01-10 06:35:36,004 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 06:35:36" (3/3) ... [2022-01-10 06:35:36,005 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product44.cil.c [2022-01-10 06:35:36,008 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-01-10 06:35:36,008 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-01-10 06:35:36,053 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-01-10 06:35:36,059 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-01-10 06:35:36,060 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-01-10 06:35:36,082 INFO L276 IsEmpty]: Start isEmpty. Operand has 89 states, 71 states have (on average 1.3661971830985915) internal successors, (97), 77 states have internal predecessors, (97), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) [2022-01-10 06:35:36,088 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-01-10 06:35:36,088 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 06:35:36,089 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 06:35:36,089 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 06:35:36,095 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 06:35:36,096 INFO L85 PathProgramCache]: Analyzing trace with hash -1684151890, now seen corresponding path program 1 times [2022-01-10 06:35:36,105 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-01-10 06:35:36,106 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [489168044] [2022-01-10 06:35:36,106 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 06:35:36,106 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-01-10 06:35:36,107 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-01-10 06:35:36,112 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-01-10 06:35:36,113 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2022-01-10 06:35:36,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 06:35:36,190 INFO L263 TraceCheckSpWp]: Trace formula consists of 166 conjuncts, 1 conjunts are in the unsatisfiable core [2022-01-10 06:35:36,194 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-10 06:35:36,277 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-01-10 06:35:36,278 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-01-10 06:35:36,278 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-01-10 06:35:36,279 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [489168044] [2022-01-10 06:35:36,280 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [489168044] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 06:35:36,280 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 06:35:36,280 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 06:35:36,281 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1001168727] [2022-01-10 06:35:36,282 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 06:35:36,286 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-01-10 06:35:36,287 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-01-10 06:35:36,311 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-01-10 06:35:36,312 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 06:35:36,314 INFO L87 Difference]: Start difference. First operand has 89 states, 71 states have (on average 1.3661971830985915) internal successors, (97), 77 states have internal predecessors, (97), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-01-10 06:35:36,356 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 06:35:36,357 INFO L93 Difference]: Finished difference Result 169 states and 228 transitions. [2022-01-10 06:35:36,357 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-01-10 06:35:36,358 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-01-10 06:35:36,359 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 06:35:36,365 INFO L225 Difference]: With dead ends: 169 [2022-01-10 06:35:36,365 INFO L226 Difference]: Without dead ends: 80 [2022-01-10 06:35:36,368 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 31 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 06:35:36,373 INFO L933 BasicCegarLoop]: 111 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 111 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 06:35:36,375 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 111 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 06:35:36,386 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2022-01-10 06:35:36,408 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 80. [2022-01-10 06:35:36,409 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 80 states, 64 states have (on average 1.296875) internal successors, (83), 69 states have internal predecessors, (83), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 8 states have call predecessors, (9), 9 states have call successors, (9) [2022-01-10 06:35:36,412 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 102 transitions. [2022-01-10 06:35:36,413 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 102 transitions. Word has length 32 [2022-01-10 06:35:36,414 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 06:35:36,414 INFO L470 AbstractCegarLoop]: Abstraction has 80 states and 102 transitions. [2022-01-10 06:35:36,414 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-01-10 06:35:36,414 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 102 transitions. [2022-01-10 06:35:36,417 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-01-10 06:35:36,417 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 06:35:36,418 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 06:35:36,441 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Ended with exit code 0 [2022-01-10 06:35:36,641 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-01-10 06:35:36,642 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 06:35:36,642 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 06:35:36,643 INFO L85 PathProgramCache]: Analyzing trace with hash 1709273223, now seen corresponding path program 1 times [2022-01-10 06:35:36,643 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-01-10 06:35:36,643 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1232116439] [2022-01-10 06:35:36,643 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 06:35:36,643 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-01-10 06:35:36,644 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-01-10 06:35:36,645 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-01-10 06:35:36,663 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2022-01-10 06:35:36,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 06:35:36,735 INFO L263 TraceCheckSpWp]: Trace formula consists of 167 conjuncts, 2 conjunts are in the unsatisfiable core [2022-01-10 06:35:36,736 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-10 06:35:36,825 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-01-10 06:35:36,825 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-01-10 06:35:36,825 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-01-10 06:35:36,825 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1232116439] [2022-01-10 06:35:36,826 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1232116439] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 06:35:36,826 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 06:35:36,826 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 06:35:36,827 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [167523485] [2022-01-10 06:35:36,827 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 06:35:36,828 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 06:35:36,828 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-01-10 06:35:36,828 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 06:35:36,828 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 06:35:36,829 INFO L87 Difference]: Start difference. First operand 80 states and 102 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-01-10 06:35:36,843 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 06:35:36,843 INFO L93 Difference]: Finished difference Result 120 states and 153 transitions. [2022-01-10 06:35:36,844 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 06:35:36,849 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2022-01-10 06:35:36,849 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 06:35:36,850 INFO L225 Difference]: With dead ends: 120 [2022-01-10 06:35:36,850 INFO L226 Difference]: Without dead ends: 71 [2022-01-10 06:35:36,853 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 31 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 06:35:36,854 INFO L933 BasicCegarLoop]: 89 mSDtfsCounter, 18 mSDsluCounter, 67 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 156 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 06:35:36,855 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [21 Valid, 156 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 06:35:36,857 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 71 states. [2022-01-10 06:35:36,864 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 71 to 71. [2022-01-10 06:35:36,865 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 71 states, 58 states have (on average 1.3103448275862069) internal successors, (76), 63 states have internal predecessors, (76), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2022-01-10 06:35:36,865 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 90 transitions. [2022-01-10 06:35:36,865 INFO L78 Accepts]: Start accepts. Automaton has 71 states and 90 transitions. Word has length 33 [2022-01-10 06:35:36,866 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 06:35:36,866 INFO L470 AbstractCegarLoop]: Abstraction has 71 states and 90 transitions. [2022-01-10 06:35:36,866 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-01-10 06:35:36,866 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 90 transitions. [2022-01-10 06:35:36,867 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-01-10 06:35:36,867 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 06:35:36,867 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 06:35:36,876 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Ended with exit code 0 [2022-01-10 06:35:37,078 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-01-10 06:35:37,079 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 06:35:37,079 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 06:35:37,080 INFO L85 PathProgramCache]: Analyzing trace with hash 1502879027, now seen corresponding path program 1 times [2022-01-10 06:35:37,080 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-01-10 06:35:37,080 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [866334014] [2022-01-10 06:35:37,080 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 06:35:37,080 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-01-10 06:35:37,081 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-01-10 06:35:37,082 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-01-10 06:35:37,085 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2022-01-10 06:35:37,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 06:35:37,134 INFO L263 TraceCheckSpWp]: Trace formula consists of 167 conjuncts, 2 conjunts are in the unsatisfiable core [2022-01-10 06:35:37,136 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-10 06:35:37,198 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 06:35:37,198 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-01-10 06:35:37,198 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-01-10 06:35:37,198 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [866334014] [2022-01-10 06:35:37,199 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [866334014] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 06:35:37,199 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 06:35:37,199 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 06:35:37,199 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [408304552] [2022-01-10 06:35:37,199 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 06:35:37,199 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 06:35:37,199 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-01-10 06:35:37,200 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 06:35:37,200 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 06:35:37,200 INFO L87 Difference]: Start difference. First operand 71 states and 90 transitions. Second operand has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-01-10 06:35:37,234 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 06:35:37,234 INFO L93 Difference]: Finished difference Result 195 states and 253 transitions. [2022-01-10 06:35:37,234 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 06:35:37,235 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2022-01-10 06:35:37,235 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 06:35:37,236 INFO L225 Difference]: With dead ends: 195 [2022-01-10 06:35:37,236 INFO L226 Difference]: Without dead ends: 132 [2022-01-10 06:35:37,236 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 06:35:37,237 INFO L933 BasicCegarLoop]: 109 mSDtfsCounter, 75 mSDsluCounter, 77 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 75 SdHoareTripleChecker+Valid, 186 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 06:35:37,237 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [75 Valid, 186 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 06:35:37,238 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 132 states. [2022-01-10 06:35:37,247 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 132 to 127. [2022-01-10 06:35:37,247 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 127 states, 102 states have (on average 1.3333333333333333) internal successors, (136), 111 states have internal predecessors, (136), 14 states have call successors, (14), 10 states have call predecessors, (14), 10 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2022-01-10 06:35:37,248 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 127 states to 127 states and 164 transitions. [2022-01-10 06:35:37,248 INFO L78 Accepts]: Start accepts. Automaton has 127 states and 164 transitions. Word has length 38 [2022-01-10 06:35:37,248 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 06:35:37,249 INFO L470 AbstractCegarLoop]: Abstraction has 127 states and 164 transitions. [2022-01-10 06:35:37,249 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-01-10 06:35:37,249 INFO L276 IsEmpty]: Start isEmpty. Operand 127 states and 164 transitions. [2022-01-10 06:35:37,250 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-01-10 06:35:37,250 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 06:35:37,250 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 06:35:37,266 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2022-01-10 06:35:37,453 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-01-10 06:35:37,453 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 06:35:37,454 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 06:35:37,454 INFO L85 PathProgramCache]: Analyzing trace with hash -793445015, now seen corresponding path program 1 times [2022-01-10 06:35:37,455 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-01-10 06:35:37,455 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1085901051] [2022-01-10 06:35:37,455 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 06:35:37,455 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-01-10 06:35:37,455 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-01-10 06:35:37,456 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-01-10 06:35:37,457 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2022-01-10 06:35:37,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 06:35:37,507 INFO L263 TraceCheckSpWp]: Trace formula consists of 170 conjuncts, 8 conjunts are in the unsatisfiable core [2022-01-10 06:35:37,509 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-10 06:35:37,603 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-01-10 06:35:37,603 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-01-10 06:35:37,603 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-01-10 06:35:37,604 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1085901051] [2022-01-10 06:35:37,604 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1085901051] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 06:35:37,604 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 06:35:37,604 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-01-10 06:35:37,604 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [673733569] [2022-01-10 06:35:37,604 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 06:35:37,604 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-01-10 06:35:37,606 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-01-10 06:35:37,607 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-01-10 06:35:37,607 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-01-10 06:35:37,607 INFO L87 Difference]: Start difference. First operand 127 states and 164 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-01-10 06:35:37,698 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 06:35:37,698 INFO L93 Difference]: Finished difference Result 342 states and 450 transitions. [2022-01-10 06:35:37,699 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-01-10 06:35:37,699 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2022-01-10 06:35:37,699 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 06:35:37,702 INFO L225 Difference]: With dead ends: 342 [2022-01-10 06:35:37,702 INFO L226 Difference]: Without dead ends: 223 [2022-01-10 06:35:37,705 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=38, Unknown=0, NotChecked=0, Total=56 [2022-01-10 06:35:37,709 INFO L933 BasicCegarLoop]: 100 mSDtfsCounter, 59 mSDsluCounter, 331 mSDsCounter, 0 mSdLazyCounter, 51 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 431 SdHoareTripleChecker+Invalid, 60 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 51 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 06:35:37,710 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [60 Valid, 431 Invalid, 60 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 51 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 06:35:37,712 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 223 states. [2022-01-10 06:35:37,738 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 223 to 211. [2022-01-10 06:35:37,740 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 211 states, 166 states have (on average 1.2951807228915662) internal successors, (215), 179 states have internal predecessors, (215), 24 states have call successors, (24), 20 states have call predecessors, (24), 20 states have return successors, (28), 24 states have call predecessors, (28), 24 states have call successors, (28) [2022-01-10 06:35:37,741 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 211 states to 211 states and 267 transitions. [2022-01-10 06:35:37,741 INFO L78 Accepts]: Start accepts. Automaton has 211 states and 267 transitions. Word has length 41 [2022-01-10 06:35:37,742 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 06:35:37,742 INFO L470 AbstractCegarLoop]: Abstraction has 211 states and 267 transitions. [2022-01-10 06:35:37,742 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-01-10 06:35:37,742 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 267 transitions. [2022-01-10 06:35:37,748 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-01-10 06:35:37,748 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 06:35:37,748 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 06:35:37,769 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2022-01-10 06:35:37,948 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-01-10 06:35:37,949 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 06:35:37,949 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 06:35:37,949 INFO L85 PathProgramCache]: Analyzing trace with hash 855988844, now seen corresponding path program 1 times [2022-01-10 06:35:37,950 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-01-10 06:35:37,950 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [224050758] [2022-01-10 06:35:37,950 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 06:35:37,950 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-01-10 06:35:37,950 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-01-10 06:35:37,951 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-01-10 06:35:37,952 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2022-01-10 06:35:38,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 06:35:38,002 INFO L263 TraceCheckSpWp]: Trace formula consists of 188 conjuncts, 5 conjunts are in the unsatisfiable core [2022-01-10 06:35:38,004 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-10 06:35:38,085 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 06:35:38,085 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-01-10 06:35:38,085 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-01-10 06:35:38,085 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [224050758] [2022-01-10 06:35:38,086 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [224050758] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 06:35:38,086 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 06:35:38,086 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 06:35:38,086 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [679982105] [2022-01-10 06:35:38,086 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 06:35:38,086 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 06:35:38,086 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-01-10 06:35:38,087 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 06:35:38,087 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 06:35:38,087 INFO L87 Difference]: Start difference. First operand 211 states and 267 transitions. Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-01-10 06:35:38,146 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 06:35:38,147 INFO L93 Difference]: Finished difference Result 462 states and 598 transitions. [2022-01-10 06:35:38,147 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-10 06:35:38,147 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 51 [2022-01-10 06:35:38,148 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 06:35:38,152 INFO L225 Difference]: With dead ends: 462 [2022-01-10 06:35:38,152 INFO L226 Difference]: Without dead ends: 259 [2022-01-10 06:35:38,153 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 52 GetRequests, 47 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-10 06:35:38,153 INFO L933 BasicCegarLoop]: 109 mSDtfsCounter, 35 mSDsluCounter, 287 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 396 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 06:35:38,154 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [37 Valid, 396 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 06:35:38,155 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 259 states. [2022-01-10 06:35:38,172 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 259 to 217. [2022-01-10 06:35:38,173 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 217 states, 172 states have (on average 1.2848837209302326) internal successors, (221), 185 states have internal predecessors, (221), 24 states have call successors, (24), 20 states have call predecessors, (24), 20 states have return successors, (28), 24 states have call predecessors, (28), 24 states have call successors, (28) [2022-01-10 06:35:38,174 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 217 states to 217 states and 273 transitions. [2022-01-10 06:35:38,175 INFO L78 Accepts]: Start accepts. Automaton has 217 states and 273 transitions. Word has length 51 [2022-01-10 06:35:38,175 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 06:35:38,175 INFO L470 AbstractCegarLoop]: Abstraction has 217 states and 273 transitions. [2022-01-10 06:35:38,175 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-01-10 06:35:38,175 INFO L276 IsEmpty]: Start isEmpty. Operand 217 states and 273 transitions. [2022-01-10 06:35:38,178 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-01-10 06:35:38,178 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 06:35:38,178 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 06:35:38,187 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2022-01-10 06:35:38,385 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-01-10 06:35:38,386 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 06:35:38,386 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 06:35:38,386 INFO L85 PathProgramCache]: Analyzing trace with hash 1278690670, now seen corresponding path program 1 times [2022-01-10 06:35:38,386 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-01-10 06:35:38,386 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2047820816] [2022-01-10 06:35:38,387 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 06:35:38,387 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-01-10 06:35:38,387 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-01-10 06:35:38,388 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-01-10 06:35:38,389 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2022-01-10 06:35:38,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 06:35:38,445 INFO L263 TraceCheckSpWp]: Trace formula consists of 188 conjuncts, 4 conjunts are in the unsatisfiable core [2022-01-10 06:35:38,447 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-10 06:35:38,523 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 06:35:38,523 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-01-10 06:35:38,523 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-01-10 06:35:38,524 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2047820816] [2022-01-10 06:35:38,524 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2047820816] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 06:35:38,525 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 06:35:38,525 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 06:35:38,525 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1643205356] [2022-01-10 06:35:38,525 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 06:35:38,525 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-10 06:35:38,525 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-01-10 06:35:38,526 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-10 06:35:38,526 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-10 06:35:38,526 INFO L87 Difference]: Start difference. First operand 217 states and 273 transitions. Second operand has 4 states, 4 states have (on average 11.5) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-01-10 06:35:38,554 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 06:35:38,554 INFO L93 Difference]: Finished difference Result 458 states and 588 transitions. [2022-01-10 06:35:38,555 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-01-10 06:35:38,555 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.5) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 51 [2022-01-10 06:35:38,555 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 06:35:38,556 INFO L225 Difference]: With dead ends: 458 [2022-01-10 06:35:38,556 INFO L226 Difference]: Without dead ends: 249 [2022-01-10 06:35:38,557 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 51 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-10 06:35:38,557 INFO L933 BasicCegarLoop]: 100 mSDtfsCounter, 27 mSDsluCounter, 176 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 276 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 06:35:38,557 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [27 Valid, 276 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 06:35:38,558 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 249 states. [2022-01-10 06:35:38,566 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 249 to 221. [2022-01-10 06:35:38,567 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 221 states, 176 states have (on average 1.2784090909090908) internal successors, (225), 189 states have internal predecessors, (225), 24 states have call successors, (24), 20 states have call predecessors, (24), 20 states have return successors, (28), 24 states have call predecessors, (28), 24 states have call successors, (28) [2022-01-10 06:35:38,567 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 221 states to 221 states and 277 transitions. [2022-01-10 06:35:38,568 INFO L78 Accepts]: Start accepts. Automaton has 221 states and 277 transitions. Word has length 51 [2022-01-10 06:35:38,568 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 06:35:38,568 INFO L470 AbstractCegarLoop]: Abstraction has 221 states and 277 transitions. [2022-01-10 06:35:38,568 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 11.5) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-01-10 06:35:38,568 INFO L276 IsEmpty]: Start isEmpty. Operand 221 states and 277 transitions. [2022-01-10 06:35:38,569 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-01-10 06:35:38,569 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 06:35:38,569 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 06:35:38,577 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Forceful destruction successful, exit code 0 [2022-01-10 06:35:38,775 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-01-10 06:35:38,776 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 06:35:38,776 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 06:35:38,777 INFO L85 PathProgramCache]: Analyzing trace with hash -526747664, now seen corresponding path program 1 times [2022-01-10 06:35:38,777 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-01-10 06:35:38,777 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1788773323] [2022-01-10 06:35:38,777 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 06:35:38,777 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-01-10 06:35:38,778 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-01-10 06:35:38,786 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-01-10 06:35:38,788 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2022-01-10 06:35:38,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 06:35:38,832 INFO L263 TraceCheckSpWp]: Trace formula consists of 188 conjuncts, 4 conjunts are in the unsatisfiable core [2022-01-10 06:35:38,836 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-10 06:35:38,906 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 06:35:38,906 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-01-10 06:35:38,906 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-01-10 06:35:38,906 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1788773323] [2022-01-10 06:35:38,906 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1788773323] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 06:35:38,906 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 06:35:38,906 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 06:35:38,906 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [528616996] [2022-01-10 06:35:38,907 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 06:35:38,907 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 06:35:38,907 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-01-10 06:35:38,908 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 06:35:38,908 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 06:35:38,908 INFO L87 Difference]: Start difference. First operand 221 states and 277 transitions. Second operand has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 2 states have internal predecessors, (46), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-01-10 06:35:38,931 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 06:35:38,931 INFO L93 Difference]: Finished difference Result 528 states and 667 transitions. [2022-01-10 06:35:38,933 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 06:35:38,936 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 2 states have internal predecessors, (46), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 51 [2022-01-10 06:35:38,936 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 06:35:38,938 INFO L225 Difference]: With dead ends: 528 [2022-01-10 06:35:38,938 INFO L226 Difference]: Without dead ends: 315 [2022-01-10 06:35:38,938 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 49 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 06:35:38,939 INFO L933 BasicCegarLoop]: 95 mSDtfsCounter, 36 mSDsluCounter, 76 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 171 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 06:35:38,939 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [36 Valid, 171 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 06:35:38,940 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 315 states. [2022-01-10 06:35:38,950 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 315 to 315. [2022-01-10 06:35:38,951 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 315 states, 250 states have (on average 1.248) internal successors, (312), 265 states have internal predecessors, (312), 36 states have call successors, (36), 30 states have call predecessors, (36), 28 states have return successors, (40), 34 states have call predecessors, (40), 36 states have call successors, (40) [2022-01-10 06:35:38,952 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 315 states to 315 states and 388 transitions. [2022-01-10 06:35:38,952 INFO L78 Accepts]: Start accepts. Automaton has 315 states and 388 transitions. Word has length 51 [2022-01-10 06:35:38,953 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 06:35:38,953 INFO L470 AbstractCegarLoop]: Abstraction has 315 states and 388 transitions. [2022-01-10 06:35:38,953 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 2 states have internal predecessors, (46), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-01-10 06:35:38,953 INFO L276 IsEmpty]: Start isEmpty. Operand 315 states and 388 transitions. [2022-01-10 06:35:38,954 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-01-10 06:35:38,954 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 06:35:38,954 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 06:35:38,971 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Forceful destruction successful, exit code 0 [2022-01-10 06:35:39,171 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-01-10 06:35:39,171 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 06:35:39,172 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 06:35:39,172 INFO L85 PathProgramCache]: Analyzing trace with hash -1427287338, now seen corresponding path program 1 times [2022-01-10 06:35:39,172 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-01-10 06:35:39,172 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [881862401] [2022-01-10 06:35:39,172 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 06:35:39,173 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-01-10 06:35:39,173 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-01-10 06:35:39,174 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-01-10 06:35:39,176 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2022-01-10 06:35:39,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 06:35:39,222 INFO L263 TraceCheckSpWp]: Trace formula consists of 195 conjuncts, 10 conjunts are in the unsatisfiable core [2022-01-10 06:35:39,224 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-10 06:35:39,356 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 06:35:39,357 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-01-10 06:35:39,357 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-01-10 06:35:39,357 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [881862401] [2022-01-10 06:35:39,357 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [881862401] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 06:35:39,357 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 06:35:39,357 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-01-10 06:35:39,357 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [21847760] [2022-01-10 06:35:39,357 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 06:35:39,357 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-01-10 06:35:39,358 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-01-10 06:35:39,358 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-01-10 06:35:39,358 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-01-10 06:35:39,358 INFO L87 Difference]: Start difference. First operand 315 states and 388 transitions. Second operand has 8 states, 8 states have (on average 6.0) internal successors, (48), 6 states have internal predecessors, (48), 3 states have call successors, (4), 3 states have call predecessors, (4), 3 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-01-10 06:35:39,659 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 06:35:39,660 INFO L93 Difference]: Finished difference Result 1078 states and 1373 transitions. [2022-01-10 06:35:39,660 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-01-10 06:35:39,660 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.0) internal successors, (48), 6 states have internal predecessors, (48), 3 states have call successors, (4), 3 states have call predecessors, (4), 3 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 55 [2022-01-10 06:35:39,660 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 06:35:39,664 INFO L225 Difference]: With dead ends: 1078 [2022-01-10 06:35:39,664 INFO L226 Difference]: Without dead ends: 865 [2022-01-10 06:35:39,665 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 62 GetRequests, 47 SyntacticMatches, 1 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=56, Invalid=184, Unknown=0, NotChecked=0, Total=240 [2022-01-10 06:35:39,665 INFO L933 BasicCegarLoop]: 140 mSDtfsCounter, 237 mSDsluCounter, 568 mSDsCounter, 0 mSdLazyCounter, 287 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 246 SdHoareTripleChecker+Valid, 708 SdHoareTripleChecker+Invalid, 336 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 287 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-01-10 06:35:39,666 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [246 Valid, 708 Invalid, 336 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 287 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-01-10 06:35:39,666 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 865 states. [2022-01-10 06:35:39,698 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 865 to 801. [2022-01-10 06:35:39,699 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 801 states, 640 states have (on average 1.23125) internal successors, (788), 683 states have internal predecessors, (788), 88 states have call successors, (88), 66 states have call predecessors, (88), 72 states have return successors, (108), 84 states have call predecessors, (108), 88 states have call successors, (108) [2022-01-10 06:35:39,702 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 801 states to 801 states and 984 transitions. [2022-01-10 06:35:39,702 INFO L78 Accepts]: Start accepts. Automaton has 801 states and 984 transitions. Word has length 55 [2022-01-10 06:35:39,702 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 06:35:39,702 INFO L470 AbstractCegarLoop]: Abstraction has 801 states and 984 transitions. [2022-01-10 06:35:39,703 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.0) internal successors, (48), 6 states have internal predecessors, (48), 3 states have call successors, (4), 3 states have call predecessors, (4), 3 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-01-10 06:35:39,703 INFO L276 IsEmpty]: Start isEmpty. Operand 801 states and 984 transitions. [2022-01-10 06:35:39,704 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2022-01-10 06:35:39,704 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 06:35:39,704 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 06:35:39,712 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Forceful destruction successful, exit code 0 [2022-01-10 06:35:39,909 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-01-10 06:35:39,910 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 06:35:39,910 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 06:35:39,910 INFO L85 PathProgramCache]: Analyzing trace with hash -616604212, now seen corresponding path program 1 times [2022-01-10 06:35:39,910 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-01-10 06:35:39,910 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [845254936] [2022-01-10 06:35:39,910 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 06:35:39,911 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-01-10 06:35:39,911 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-01-10 06:35:39,912 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-01-10 06:35:39,914 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2022-01-10 06:35:39,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 06:35:39,968 INFO L263 TraceCheckSpWp]: Trace formula consists of 237 conjuncts, 2 conjunts are in the unsatisfiable core [2022-01-10 06:35:39,969 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-10 06:35:40,073 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-01-10 06:35:40,073 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-01-10 06:35:40,073 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-01-10 06:35:40,074 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [845254936] [2022-01-10 06:35:40,074 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [845254936] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 06:35:40,074 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 06:35:40,074 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 06:35:40,074 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [946175327] [2022-01-10 06:35:40,074 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 06:35:40,074 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 06:35:40,074 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-01-10 06:35:40,074 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 06:35:40,075 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 06:35:40,075 INFO L87 Difference]: Start difference. First operand 801 states and 984 transitions. Second operand has 3 states, 3 states have (on average 23.333333333333332) internal successors, (70), 3 states have internal predecessors, (70), 3 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-01-10 06:35:40,112 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 06:35:40,113 INFO L93 Difference]: Finished difference Result 1356 states and 1665 transitions. [2022-01-10 06:35:40,113 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 06:35:40,113 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 23.333333333333332) internal successors, (70), 3 states have internal predecessors, (70), 3 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 85 [2022-01-10 06:35:40,114 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 06:35:40,116 INFO L225 Difference]: With dead ends: 1356 [2022-01-10 06:35:40,116 INFO L226 Difference]: Without dead ends: 563 [2022-01-10 06:35:40,117 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 84 GetRequests, 83 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 06:35:40,118 INFO L933 BasicCegarLoop]: 126 mSDtfsCounter, 35 mSDsluCounter, 84 mSDsCounter, 0 mSdLazyCounter, 5 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 35 SdHoareTripleChecker+Valid, 210 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 5 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 06:35:40,119 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [35 Valid, 210 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 5 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 06:35:40,119 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 563 states. [2022-01-10 06:35:40,140 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 563 to 555. [2022-01-10 06:35:40,141 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 555 states, 441 states have (on average 1.217687074829932) internal successors, (537), 470 states have internal predecessors, (537), 62 states have call successors, (62), 48 states have call predecessors, (62), 51 states have return successors, (72), 59 states have call predecessors, (72), 62 states have call successors, (72) [2022-01-10 06:35:40,142 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 555 states to 555 states and 671 transitions. [2022-01-10 06:35:40,143 INFO L78 Accepts]: Start accepts. Automaton has 555 states and 671 transitions. Word has length 85 [2022-01-10 06:35:40,143 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 06:35:40,143 INFO L470 AbstractCegarLoop]: Abstraction has 555 states and 671 transitions. [2022-01-10 06:35:40,143 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 23.333333333333332) internal successors, (70), 3 states have internal predecessors, (70), 3 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-01-10 06:35:40,144 INFO L276 IsEmpty]: Start isEmpty. Operand 555 states and 671 transitions. [2022-01-10 06:35:40,144 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2022-01-10 06:35:40,144 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 06:35:40,144 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 06:35:40,153 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (10)] Forceful destruction successful, exit code 0 [2022-01-10 06:35:40,351 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-01-10 06:35:40,351 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 06:35:40,352 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 06:35:40,352 INFO L85 PathProgramCache]: Analyzing trace with hash 1396479385, now seen corresponding path program 1 times [2022-01-10 06:35:40,352 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-01-10 06:35:40,352 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [859532789] [2022-01-10 06:35:40,352 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 06:35:40,352 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-01-10 06:35:40,352 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-01-10 06:35:40,353 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-01-10 06:35:40,383 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2022-01-10 06:35:40,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 06:35:40,413 INFO L263 TraceCheckSpWp]: Trace formula consists of 241 conjuncts, 8 conjunts are in the unsatisfiable core [2022-01-10 06:35:40,414 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-10 06:35:40,561 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 23 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 06:35:40,561 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-01-10 06:35:40,733 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 19 proven. 6 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-01-10 06:35:40,733 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-01-10 06:35:40,733 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [859532789] [2022-01-10 06:35:40,733 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [859532789] provided 0 perfect and 2 imperfect interpolant sequences [2022-01-10 06:35:40,734 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2022-01-10 06:35:40,734 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6] total 10 [2022-01-10 06:35:40,734 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [678815948] [2022-01-10 06:35:40,734 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2022-01-10 06:35:40,734 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-01-10 06:35:40,734 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-01-10 06:35:40,735 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-01-10 06:35:40,735 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=67, Unknown=0, NotChecked=0, Total=90 [2022-01-10 06:35:40,735 INFO L87 Difference]: Start difference. First operand 555 states and 671 transitions. Second operand has 10 states, 10 states have (on average 11.0) internal successors, (110), 8 states have internal predecessors, (110), 5 states have call successors, (11), 4 states have call predecessors, (11), 6 states have return successors, (10), 7 states have call predecessors, (10), 5 states have call successors, (10) [2022-01-10 06:35:40,965 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 06:35:40,965 INFO L93 Difference]: Finished difference Result 1128 states and 1400 transitions. [2022-01-10 06:35:40,966 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-01-10 06:35:40,966 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 11.0) internal successors, (110), 8 states have internal predecessors, (110), 5 states have call successors, (11), 4 states have call predecessors, (11), 6 states have return successors, (10), 7 states have call predecessors, (10), 5 states have call successors, (10) Word has length 87 [2022-01-10 06:35:40,966 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 06:35:40,968 INFO L225 Difference]: With dead ends: 1128 [2022-01-10 06:35:40,968 INFO L226 Difference]: Without dead ends: 660 [2022-01-10 06:35:40,970 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 185 GetRequests, 168 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 46 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=94, Invalid=248, Unknown=0, NotChecked=0, Total=342 [2022-01-10 06:35:40,970 INFO L933 BasicCegarLoop]: 183 mSDtfsCounter, 158 mSDsluCounter, 918 mSDsCounter, 0 mSdLazyCounter, 209 mSolverCounterSat, 44 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 166 SdHoareTripleChecker+Valid, 1101 SdHoareTripleChecker+Invalid, 253 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 44 IncrementalHoareTripleChecker+Valid, 209 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 06:35:40,970 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [166 Valid, 1101 Invalid, 253 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [44 Valid, 209 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 06:35:40,971 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 660 states. [2022-01-10 06:35:40,988 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 660 to 590. [2022-01-10 06:35:40,989 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 590 states, 459 states have (on average 1.2026143790849673) internal successors, (552), 491 states have internal predecessors, (552), 71 states have call successors, (71), 60 states have call predecessors, (71), 59 states have return successors, (77), 62 states have call predecessors, (77), 71 states have call successors, (77) [2022-01-10 06:35:40,991 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 590 states to 590 states and 700 transitions. [2022-01-10 06:35:40,991 INFO L78 Accepts]: Start accepts. Automaton has 590 states and 700 transitions. Word has length 87 [2022-01-10 06:35:40,991 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 06:35:40,991 INFO L470 AbstractCegarLoop]: Abstraction has 590 states and 700 transitions. [2022-01-10 06:35:40,991 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 11.0) internal successors, (110), 8 states have internal predecessors, (110), 5 states have call successors, (11), 4 states have call predecessors, (11), 6 states have return successors, (10), 7 states have call predecessors, (10), 5 states have call successors, (10) [2022-01-10 06:35:40,991 INFO L276 IsEmpty]: Start isEmpty. Operand 590 states and 700 transitions. [2022-01-10 06:35:40,993 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 187 [2022-01-10 06:35:40,993 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 06:35:40,993 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 06:35:41,015 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (11)] Forceful destruction successful, exit code 0 [2022-01-10 06:35:41,200 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-01-10 06:35:41,200 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 06:35:41,200 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 06:35:41,200 INFO L85 PathProgramCache]: Analyzing trace with hash -104600478, now seen corresponding path program 1 times [2022-01-10 06:35:41,201 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-01-10 06:35:41,201 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [880564149] [2022-01-10 06:35:41,201 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 06:35:41,201 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-01-10 06:35:41,201 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-01-10 06:35:41,202 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-01-10 06:35:41,203 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2022-01-10 06:35:41,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 06:35:41,286 INFO L263 TraceCheckSpWp]: Trace formula consists of 385 conjuncts, 13 conjunts are in the unsatisfiable core [2022-01-10 06:35:41,288 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-10 06:35:41,616 INFO L134 CoverageAnalysis]: Checked inductivity of 277 backedges. 172 proven. 13 refuted. 0 times theorem prover too weak. 92 trivial. 0 not checked. [2022-01-10 06:35:41,617 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-01-10 06:35:42,163 INFO L134 CoverageAnalysis]: Checked inductivity of 277 backedges. 114 proven. 65 refuted. 0 times theorem prover too weak. 98 trivial. 0 not checked. [2022-01-10 06:35:42,163 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-01-10 06:35:42,164 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [880564149] [2022-01-10 06:35:42,164 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [880564149] provided 0 perfect and 2 imperfect interpolant sequences [2022-01-10 06:35:42,164 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2022-01-10 06:35:42,164 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 11] total 19 [2022-01-10 06:35:42,164 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [857127961] [2022-01-10 06:35:42,164 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2022-01-10 06:35:42,164 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 19 states [2022-01-10 06:35:42,164 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-01-10 06:35:42,165 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2022-01-10 06:35:42,165 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=71, Invalid=271, Unknown=0, NotChecked=0, Total=342 [2022-01-10 06:35:42,165 INFO L87 Difference]: Start difference. First operand 590 states and 700 transitions. Second operand has 19 states, 19 states have (on average 9.68421052631579) internal successors, (184), 18 states have internal predecessors, (184), 10 states have call successors, (17), 5 states have call predecessors, (17), 8 states have return successors, (19), 8 states have call predecessors, (19), 10 states have call successors, (19) [2022-01-10 06:35:43,118 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 06:35:43,118 INFO L93 Difference]: Finished difference Result 1973 states and 2432 transitions. [2022-01-10 06:35:43,118 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2022-01-10 06:35:43,119 INFO L78 Accepts]: Start accepts. Automaton has has 19 states, 19 states have (on average 9.68421052631579) internal successors, (184), 18 states have internal predecessors, (184), 10 states have call successors, (17), 5 states have call predecessors, (17), 8 states have return successors, (19), 8 states have call predecessors, (19), 10 states have call successors, (19) Word has length 186 [2022-01-10 06:35:43,119 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 06:35:43,123 INFO L225 Difference]: With dead ends: 1973 [2022-01-10 06:35:43,123 INFO L226 Difference]: Without dead ends: 1391 [2022-01-10 06:35:43,125 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 411 GetRequests, 365 SyntacticMatches, 1 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 515 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=424, Invalid=1738, Unknown=0, NotChecked=0, Total=2162 [2022-01-10 06:35:43,126 INFO L933 BasicCegarLoop]: 161 mSDtfsCounter, 1043 mSDsluCounter, 995 mSDsCounter, 0 mSdLazyCounter, 774 mSolverCounterSat, 292 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1047 SdHoareTripleChecker+Valid, 1156 SdHoareTripleChecker+Invalid, 1066 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 292 IncrementalHoareTripleChecker+Valid, 774 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-01-10 06:35:43,126 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1047 Valid, 1156 Invalid, 1066 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [292 Valid, 774 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-01-10 06:35:43,127 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1391 states. [2022-01-10 06:35:43,166 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1391 to 1303. [2022-01-10 06:35:43,167 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1303 states, 1002 states have (on average 1.2015968063872255) internal successors, (1204), 1084 states have internal predecessors, (1204), 161 states have call successors, (161), 137 states have call predecessors, (161), 139 states have return successors, (196), 137 states have call predecessors, (196), 161 states have call successors, (196) [2022-01-10 06:35:43,171 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1303 states to 1303 states and 1561 transitions. [2022-01-10 06:35:43,171 INFO L78 Accepts]: Start accepts. Automaton has 1303 states and 1561 transitions. Word has length 186 [2022-01-10 06:35:43,171 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 06:35:43,171 INFO L470 AbstractCegarLoop]: Abstraction has 1303 states and 1561 transitions. [2022-01-10 06:35:43,172 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 19 states, 19 states have (on average 9.68421052631579) internal successors, (184), 18 states have internal predecessors, (184), 10 states have call successors, (17), 5 states have call predecessors, (17), 8 states have return successors, (19), 8 states have call predecessors, (19), 10 states have call successors, (19) [2022-01-10 06:35:43,172 INFO L276 IsEmpty]: Start isEmpty. Operand 1303 states and 1561 transitions. [2022-01-10 06:35:43,174 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 203 [2022-01-10 06:35:43,174 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 06:35:43,174 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 06:35:43,183 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (12)] Forceful destruction successful, exit code 0 [2022-01-10 06:35:43,383 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-01-10 06:35:43,384 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 06:35:43,384 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 06:35:43,384 INFO L85 PathProgramCache]: Analyzing trace with hash -552481338, now seen corresponding path program 1 times [2022-01-10 06:35:43,384 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-01-10 06:35:43,385 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [765922978] [2022-01-10 06:35:43,385 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 06:35:43,385 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-01-10 06:35:43,385 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-01-10 06:35:43,386 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-01-10 06:35:43,386 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (13)] Waiting until timeout for monitored process [2022-01-10 06:35:43,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 06:35:43,470 INFO L263 TraceCheckSpWp]: Trace formula consists of 410 conjuncts, 8 conjunts are in the unsatisfiable core [2022-01-10 06:35:43,472 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-10 06:35:43,750 INFO L134 CoverageAnalysis]: Checked inductivity of 329 backedges. 224 proven. 7 refuted. 0 times theorem prover too weak. 98 trivial. 0 not checked. [2022-01-10 06:35:43,750 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-01-10 06:35:44,185 INFO L134 CoverageAnalysis]: Checked inductivity of 329 backedges. 139 proven. 62 refuted. 0 times theorem prover too weak. 128 trivial. 0 not checked. [2022-01-10 06:35:44,185 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-01-10 06:35:44,185 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [765922978] [2022-01-10 06:35:44,185 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [765922978] provided 0 perfect and 2 imperfect interpolant sequences [2022-01-10 06:35:44,185 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2022-01-10 06:35:44,185 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8] total 14 [2022-01-10 06:35:44,185 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1593672324] [2022-01-10 06:35:44,186 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2022-01-10 06:35:44,186 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-01-10 06:35:44,186 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-01-10 06:35:44,186 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-01-10 06:35:44,186 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=45, Invalid=137, Unknown=0, NotChecked=0, Total=182 [2022-01-10 06:35:44,187 INFO L87 Difference]: Start difference. First operand 1303 states and 1561 transitions. Second operand has 14 states, 14 states have (on average 12.642857142857142) internal successors, (177), 12 states have internal predecessors, (177), 6 states have call successors, (22), 4 states have call predecessors, (22), 8 states have return successors, (23), 8 states have call predecessors, (23), 6 states have call successors, (23) [2022-01-10 06:35:44,503 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 06:35:44,503 INFO L93 Difference]: Finished difference Result 2579 states and 3091 transitions. [2022-01-10 06:35:44,503 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-01-10 06:35:44,503 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 12.642857142857142) internal successors, (177), 12 states have internal predecessors, (177), 6 states have call successors, (22), 4 states have call predecessors, (22), 8 states have return successors, (23), 8 states have call predecessors, (23), 6 states have call successors, (23) Word has length 202 [2022-01-10 06:35:44,504 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 06:35:44,508 INFO L225 Difference]: With dead ends: 2579 [2022-01-10 06:35:44,508 INFO L226 Difference]: Without dead ends: 1363 [2022-01-10 06:35:44,510 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 414 GetRequests, 393 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 63 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=124, Invalid=382, Unknown=0, NotChecked=0, Total=506 [2022-01-10 06:35:44,511 INFO L933 BasicCegarLoop]: 127 mSDtfsCounter, 244 mSDsluCounter, 555 mSDsCounter, 0 mSdLazyCounter, 371 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 250 SdHoareTripleChecker+Valid, 682 SdHoareTripleChecker+Invalid, 420 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 371 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-01-10 06:35:44,511 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [250 Valid, 682 Invalid, 420 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 371 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-01-10 06:35:44,512 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1363 states. [2022-01-10 06:35:44,550 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1363 to 1204. [2022-01-10 06:35:44,551 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1204 states, 925 states have (on average 1.202162162162162) internal successors, (1112), 999 states have internal predecessors, (1112), 140 states have call successors, (140), 130 states have call predecessors, (140), 138 states have return successors, (175), 128 states have call predecessors, (175), 140 states have call successors, (175) [2022-01-10 06:35:44,554 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1204 states to 1204 states and 1427 transitions. [2022-01-10 06:35:44,555 INFO L78 Accepts]: Start accepts. Automaton has 1204 states and 1427 transitions. Word has length 202 [2022-01-10 06:35:44,555 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 06:35:44,555 INFO L470 AbstractCegarLoop]: Abstraction has 1204 states and 1427 transitions. [2022-01-10 06:35:44,555 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 12.642857142857142) internal successors, (177), 12 states have internal predecessors, (177), 6 states have call successors, (22), 4 states have call predecessors, (22), 8 states have return successors, (23), 8 states have call predecessors, (23), 6 states have call successors, (23) [2022-01-10 06:35:44,555 INFO L276 IsEmpty]: Start isEmpty. Operand 1204 states and 1427 transitions. [2022-01-10 06:35:44,557 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 205 [2022-01-10 06:35:44,558 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 06:35:44,558 INFO L514 BasicCegarLoop]: trace histogram [8, 8, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 06:35:44,565 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (13)] Forceful destruction successful, exit code 0 [2022-01-10 06:35:44,765 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-01-10 06:35:44,765 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 06:35:44,765 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 06:35:44,765 INFO L85 PathProgramCache]: Analyzing trace with hash 1281863042, now seen corresponding path program 1 times [2022-01-10 06:35:44,766 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-01-10 06:35:44,766 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [142455820] [2022-01-10 06:35:44,766 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 06:35:44,766 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-01-10 06:35:44,766 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-01-10 06:35:44,767 INFO L229 MonitoredProcess]: Starting monitored process 14 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-01-10 06:35:44,767 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (14)] Waiting until timeout for monitored process [2022-01-10 06:35:44,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 06:35:44,858 INFO L263 TraceCheckSpWp]: Trace formula consists of 412 conjuncts, 21 conjunts are in the unsatisfiable core [2022-01-10 06:35:44,861 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-10 06:35:45,289 INFO L134 CoverageAnalysis]: Checked inductivity of 332 backedges. 141 proven. 75 refuted. 0 times theorem prover too weak. 116 trivial. 0 not checked. [2022-01-10 06:35:45,289 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-01-10 06:35:46,168 INFO L134 CoverageAnalysis]: Checked inductivity of 332 backedges. 103 proven. 118 refuted. 0 times theorem prover too weak. 111 trivial. 0 not checked. [2022-01-10 06:35:46,168 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-01-10 06:35:46,168 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [142455820] [2022-01-10 06:35:46,168 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [142455820] provided 0 perfect and 2 imperfect interpolant sequences [2022-01-10 06:35:46,168 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2022-01-10 06:35:46,168 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 15] total 24 [2022-01-10 06:35:46,168 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1237054908] [2022-01-10 06:35:46,168 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2022-01-10 06:35:46,169 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2022-01-10 06:35:46,169 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-01-10 06:35:46,169 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2022-01-10 06:35:46,169 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=109, Invalid=443, Unknown=0, NotChecked=0, Total=552 [2022-01-10 06:35:46,170 INFO L87 Difference]: Start difference. First operand 1204 states and 1427 transitions. Second operand has 24 states, 24 states have (on average 9.291666666666666) internal successors, (223), 23 states have internal predecessors, (223), 13 states have call successors, (22), 6 states have call predecessors, (22), 12 states have return successors, (25), 13 states have call predecessors, (25), 13 states have call successors, (25) [2022-01-10 06:35:46,704 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 06:35:46,704 INFO L93 Difference]: Finished difference Result 1891 states and 2283 transitions. [2022-01-10 06:35:46,705 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-01-10 06:35:46,705 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 24 states have (on average 9.291666666666666) internal successors, (223), 23 states have internal predecessors, (223), 13 states have call successors, (22), 6 states have call predecessors, (22), 12 states have return successors, (25), 13 states have call predecessors, (25), 13 states have call successors, (25) Word has length 204 [2022-01-10 06:35:46,705 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 06:35:46,706 INFO L225 Difference]: With dead ends: 1891 [2022-01-10 06:35:46,706 INFO L226 Difference]: Without dead ends: 0 [2022-01-10 06:35:46,709 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 422 GetRequests, 380 SyntacticMatches, 6 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 248 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=324, Invalid=1082, Unknown=0, NotChecked=0, Total=1406 [2022-01-10 06:35:46,709 INFO L933 BasicCegarLoop]: 192 mSDtfsCounter, 718 mSDsluCounter, 1051 mSDsCounter, 0 mSdLazyCounter, 642 mSolverCounterSat, 169 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 723 SdHoareTripleChecker+Valid, 1243 SdHoareTripleChecker+Invalid, 811 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 169 IncrementalHoareTripleChecker+Valid, 642 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-01-10 06:35:46,709 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [723 Valid, 1243 Invalid, 811 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [169 Valid, 642 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-01-10 06:35:46,710 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-01-10 06:35:46,710 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-01-10 06:35:46,710 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 06:35:46,710 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-01-10 06:35:46,710 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 204 [2022-01-10 06:35:46,710 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 06:35:46,710 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-01-10 06:35:46,710 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 24 states have (on average 9.291666666666666) internal successors, (223), 23 states have internal predecessors, (223), 13 states have call successors, (22), 6 states have call predecessors, (22), 12 states have return successors, (25), 13 states have call predecessors, (25), 13 states have call successors, (25) [2022-01-10 06:35:46,710 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-01-10 06:35:46,710 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-01-10 06:35:46,712 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-01-10 06:35:46,722 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (14)] Ended with exit code 0 [2022-01-10 06:35:46,919 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-01-10 06:35:46,921 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-01-10 06:35:55,040 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 556 562) no Hoare annotation was computed. [2022-01-10 06:35:55,040 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 556 562) the Hoare annotation is: true [2022-01-10 06:35:55,040 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 83 94) the Hoare annotation is: true [2022-01-10 06:35:55,040 INFO L858 garLoopResultBuilder]: For program point L87-1(lines 83 94) no Hoare annotation was computed. [2022-01-10 06:35:55,040 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2022-01-10 06:35:55,040 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 831 860) no Hoare annotation was computed. [2022-01-10 06:35:55,040 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 831 860) the Hoare annotation is: true [2022-01-10 06:35:55,040 INFO L861 garLoopResultBuilder]: At program point L856(lines 831 860) the Hoare annotation is: true [2022-01-10 06:35:55,040 INFO L858 garLoopResultBuilder]: For program point L852(line 852) no Hoare annotation was computed. [2022-01-10 06:35:55,040 INFO L858 garLoopResultBuilder]: For program point L845(lines 845 849) no Hoare annotation was computed. [2022-01-10 06:35:55,040 INFO L861 garLoopResultBuilder]: At program point L845-1(lines 845 849) the Hoare annotation is: true [2022-01-10 06:35:55,040 INFO L858 garLoopResultBuilder]: For program point L842(line 842) no Hoare annotation was computed. [2022-01-10 06:35:55,040 INFO L861 garLoopResultBuilder]: At program point L841-2(lines 841 855) the Hoare annotation is: true [2022-01-10 06:35:55,041 INFO L861 garLoopResultBuilder]: At program point L837(line 837) the Hoare annotation is: true [2022-01-10 06:35:55,041 INFO L858 garLoopResultBuilder]: For program point L837-1(line 837) no Hoare annotation was computed. [2022-01-10 06:35:55,041 INFO L858 garLoopResultBuilder]: For program point L543-1(lines 543 549) no Hoare annotation was computed. [2022-01-10 06:35:55,041 INFO L858 garLoopResultBuilder]: For program point L605(lines 605 611) no Hoare annotation was computed. [2022-01-10 06:35:55,041 INFO L858 garLoopResultBuilder]: For program point L572(lines 572 580) no Hoare annotation was computed. [2022-01-10 06:35:55,041 INFO L854 garLoopResultBuilder]: At program point L605-2(lines 598 614) the Hoare annotation is: (let ((.cse6 (not (= |old(~pumpRunning~0)| (_ bv1 32)))) (.cse7 (not (= (_ bv1 32) |old(~waterLevel~0)|))) (.cse3 (not (= (_ bv2 32) |old(~waterLevel~0)|))) (.cse8 (= (_ bv3 32) |old(~waterLevel~0)|)) (.cse2 (not (= ~systemActive~0 (_ bv0 32)))) (.cse0 (not (= (_ bv0 32) |old(~waterLevel~0)|))) (.cse4 (not (= ~systemActive~0 (_ bv1 32)))) (.cse1 (not (= |old(~pumpRunning~0)| (_ bv0 32))))) (and (or .cse0 .cse1 .cse2) (let ((.cse5 (= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse3 .cse4 .cse1 (and (= (_ bv1 32) ~pumpRunning~0) .cse5) (and (= (_ bv0 32) ~pumpRunning~0) .cse5))) (or .cse0 .cse4 .cse6 (not (= |old(~switchedOnBeforeTS~0)| (_ bv1 32)))) (or .cse4 .cse1 .cse7) (or .cse4 (= |old(~switchedOnBeforeTS~0)| (_ bv0 32)) .cse7 .cse6) (or .cse3 .cse4 .cse6) (or .cse8 .cse1 .cse7 .cse2) (or .cse3 .cse8 .cse1 .cse2) (or .cse0 .cse4 .cse1))) [2022-01-10 06:35:55,041 INFO L858 garLoopResultBuilder]: For program point L568(lines 568 585) no Hoare annotation was computed. [2022-01-10 06:35:55,041 INFO L854 garLoopResultBuilder]: At program point L630(lines 623 633) the Hoare annotation is: (let ((.cse5 (not (= |old(~pumpRunning~0)| (_ bv1 32)))) (.cse6 (not (= (_ bv1 32) |old(~waterLevel~0)|))) (.cse0 (not (= (_ bv2 32) |old(~waterLevel~0)|))) (.cse7 (= (_ bv3 32) |old(~waterLevel~0)|)) (.cse4 (not (= ~systemActive~0 (_ bv0 32)))) (.cse3 (not (= (_ bv0 32) |old(~waterLevel~0)|))) (.cse1 (not (= ~systemActive~0 (_ bv1 32)))) (.cse2 (not (= |old(~pumpRunning~0)| (_ bv0 32))))) (and (or .cse0 .cse1 .cse2 (and (= (_ bv0 32) ~pumpRunning~0) (= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse3 .cse2 .cse4) (or .cse3 .cse1 .cse5 (not (= |old(~switchedOnBeforeTS~0)| (_ bv1 32)))) (or .cse1 .cse2 .cse6) (or .cse1 (= |old(~switchedOnBeforeTS~0)| (_ bv0 32)) .cse6 .cse5) (or .cse0 .cse1 .cse5) (or .cse7 .cse2 .cse6 .cse4) (or .cse0 .cse7 .cse2 .cse4) (or .cse3 .cse1 .cse2))) [2022-01-10 06:35:55,041 INFO L858 garLoopResultBuilder]: For program point L688(lines 688 692) no Hoare annotation was computed. [2022-01-10 06:35:55,041 INFO L858 garLoopResultBuilder]: For program point L688-2(lines 688 692) no Hoare annotation was computed. [2022-01-10 06:35:55,041 INFO L858 garLoopResultBuilder]: For program point L969(lines 969 975) no Hoare annotation was computed. [2022-01-10 06:35:55,041 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 529 555) no Hoare annotation was computed. [2022-01-10 06:35:55,041 INFO L858 garLoopResultBuilder]: For program point L932(line 932) no Hoare annotation was computed. [2022-01-10 06:35:55,041 INFO L854 garLoopResultBuilder]: At program point L953(lines 946 955) the Hoare annotation is: (let ((.cse10 (= ~switchedOnBeforeTS~0 (_ bv1 32))) (.cse11 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse6 (= (_ bv2 32) |old(~waterLevel~0)|))) (let ((.cse0 (not .cse6)) (.cse5 (not (= ~systemActive~0 (_ bv0 32)))) (.cse2 (not (= |old(~pumpRunning~0)| (_ bv0 32)))) (.cse3 (and (= (_ bv0 32) ~pumpRunning~0) .cse11)) (.cse4 (not (= (_ bv1 32) |old(~waterLevel~0)|))) (.cse9 (not (= (_ bv0 32) |old(~waterLevel~0)|))) (.cse1 (not (= ~systemActive~0 (_ bv1 32)))) (.cse7 (and (= |old(~pumpRunning~0)| ~pumpRunning~0) .cse10 .cse11)) (.cse8 (not (= |old(~pumpRunning~0)| (_ bv1 32))))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse3) (or .cse0 .cse2 .cse5 .cse3) (or .cse2 .cse6 .cse4 .cse5 .cse3) (or .cse0 .cse1 .cse7 .cse8) (or .cse9 .cse2 .cse6 .cse5 .cse3) (or .cse9 .cse1 .cse2 .cse3) (or .cse1 (= |old(~switchedOnBeforeTS~0)| (_ bv0 32)) (and (= (_ bv1 32) ~pumpRunning~0) .cse10 .cse11) .cse4 .cse8) (or .cse9 .cse1 .cse7 .cse8 (not (= |old(~switchedOnBeforeTS~0)| (_ bv1 32))))))) [2022-01-10 06:35:55,041 INFO L858 garLoopResultBuilder]: For program point L536(lines 536 542) no Hoare annotation was computed. [2022-01-10 06:35:55,041 INFO L858 garLoopResultBuilder]: For program point L536-2(lines 532 554) no Hoare annotation was computed. [2022-01-10 06:35:55,042 INFO L854 garLoopResultBuilder]: At program point L594(lines 589 596) the Hoare annotation is: (let ((.cse5 (not (= |old(~pumpRunning~0)| (_ bv1 32)))) (.cse6 (not (= (_ bv1 32) |old(~waterLevel~0)|))) (.cse0 (not (= (_ bv2 32) |old(~waterLevel~0)|))) (.cse7 (= (_ bv3 32) |old(~waterLevel~0)|)) (.cse4 (not (= ~systemActive~0 (_ bv0 32)))) (.cse3 (not (= (_ bv0 32) |old(~waterLevel~0)|))) (.cse1 (not (= ~systemActive~0 (_ bv1 32)))) (.cse2 (not (= |old(~pumpRunning~0)| (_ bv0 32))))) (and (or .cse0 .cse1 .cse2 (and (= (_ bv1 32) ~pumpRunning~0) (= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse3 .cse2 .cse4) (or .cse3 .cse1 .cse5 (not (= |old(~switchedOnBeforeTS~0)| (_ bv1 32)))) (or .cse1 .cse2 .cse6) (or .cse1 (= |old(~switchedOnBeforeTS~0)| (_ bv0 32)) .cse6 .cse5) (or .cse0 .cse1 .cse5) (or .cse7 .cse2 .cse6 .cse4) (or .cse0 .cse7 .cse2 .cse4) (or .cse3 .cse1 .cse2))) [2022-01-10 06:35:55,042 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 146) no Hoare annotation was computed. [2022-01-10 06:35:55,042 INFO L854 garLoopResultBuilder]: At program point L966(line 966) the Hoare annotation is: (let ((.cse4 (= |old(~pumpRunning~0)| ~pumpRunning~0)) (.cse15 (= ~systemActive~0 (_ bv1 32))) (.cse6 (= ~waterLevel~0 |timeShift___utac_acc__Specification5_spec__3_~tmp~8#1|)) (.cse16 (= (_ bv0 32) ~pumpRunning~0)) (.cse7 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse8 (= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse10 (not (= (_ bv2 32) |old(~waterLevel~0)|))) (.cse5 (= ~switchedOnBeforeTS~0 (_ bv1 32))) (.cse9 (not (= |old(~pumpRunning~0)| (_ bv1 32)))) (.cse11 (= (_ bv3 32) |old(~waterLevel~0)|)) (.cse0 (not (= (_ bv0 32) |old(~waterLevel~0)|))) (.cse14 (and .cse6 .cse16 .cse7 .cse8)) (.cse12 (not (= ~systemActive~0 (_ bv0 32)))) (.cse1 (not .cse15)) (.cse2 (and .cse4 .cse15 .cse6 .cse16 .cse7 .cse8)) (.cse3 (not (= |old(~pumpRunning~0)| (_ bv0 32)))) (.cse13 (not (= (_ bv1 32) |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (and .cse4 .cse5 .cse6 .cse7 .cse8) .cse9 (not (= |old(~switchedOnBeforeTS~0)| (_ bv1 32)))) (or .cse10 .cse1 .cse3) (or .cse10 .cse1 .cse9 (and .cse4 .cse5 .cse6 (= ~waterLevel~0 (_ bv1 32)) .cse7)) (or .cse10 .cse11 .cse3 .cse12) (or .cse3 .cse13 .cse14 .cse12) (or .cse1 (= |old(~switchedOnBeforeTS~0)| (_ bv0 32)) .cse13 (and .cse4 .cse5 .cse6 (= ~waterLevel~0 (_ bv0 32)) .cse7) .cse9) (or .cse11 .cse0 .cse3 .cse14 .cse12) (or .cse1 .cse2 .cse3 .cse13)))) [2022-01-10 06:35:55,042 INFO L858 garLoopResultBuilder]: For program point L966-1(line 966) no Hoare annotation was computed. [2022-01-10 06:35:55,042 INFO L854 garLoopResultBuilder]: At program point L933(lines 928 935) the Hoare annotation is: (let ((.cse4 (not (= |old(~pumpRunning~0)| (_ bv1 32)))) (.cse5 (not (= (_ bv1 32) |old(~waterLevel~0)|))) (.cse6 (not (= (_ bv2 32) |old(~waterLevel~0)|))) (.cse7 (= (_ bv3 32) |old(~waterLevel~0)|)) (.cse2 (not (= ~systemActive~0 (_ bv0 32)))) (.cse0 (not (= (_ bv0 32) |old(~waterLevel~0)|))) (.cse3 (not (= ~systemActive~0 (_ bv1 32)))) (.cse1 (not (= |old(~pumpRunning~0)| (_ bv0 32))))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 (not (= |old(~switchedOnBeforeTS~0)| (_ bv1 32)))) (or .cse3 .cse1 .cse5) (or .cse3 (= |old(~switchedOnBeforeTS~0)| (_ bv0 32)) .cse5 .cse4) (or .cse6 .cse3 .cse4) (or .cse6 .cse3 .cse1) (or .cse7 .cse1 .cse5 .cse2) (or .cse6 .cse7 .cse1 .cse2) (or .cse0 .cse3 .cse1))) [2022-01-10 06:35:55,042 INFO L854 garLoopResultBuilder]: At program point L132(lines 127 135) the Hoare annotation is: (let ((.cse4 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse5 (= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse0 (not (= (_ bv0 32) |old(~waterLevel~0)|))) (.cse6 (not (= |old(~pumpRunning~0)| (_ bv1 32)))) (.cse2 (= |old(~pumpRunning~0)| ~pumpRunning~0)) (.cse3 (= ~switchedOnBeforeTS~0 (_ bv1 32))) (.cse11 (not (= (_ bv1 32) |old(~waterLevel~0)|))) (.cse1 (not (= ~systemActive~0 (_ bv1 32)))) (.cse10 (not (= (_ bv2 32) |old(~waterLevel~0)|))) (.cse7 (not (= |old(~pumpRunning~0)| (_ bv0 32)))) (.cse8 (and (= (_ bv0 32) ~pumpRunning~0) .cse4 .cse5)) (.cse9 (not (= ~systemActive~0 (_ bv0 32))))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5) .cse6 (not (= |old(~switchedOnBeforeTS~0)| (_ bv1 32)))) (or .cse0 .cse7 .cse8 .cse9) (or .cse10 .cse1 (and .cse2 .cse3 (= ~waterLevel~0 (_ bv1 32)) .cse4) .cse6) (or .cse0 .cse1 .cse7 .cse8) (or .cse7 .cse11 .cse8 .cse9) (or .cse1 (= |old(~switchedOnBeforeTS~0)| (_ bv0 32)) .cse11 .cse6 (and .cse2 .cse3 (= ~waterLevel~0 (_ bv0 32)) .cse4)) (or .cse1 .cse7 .cse11 .cse8) (or .cse10 (and (= (_ bv1 32) ~pumpRunning~0) .cse4 .cse5) .cse1 .cse7 .cse8) (or .cse10 .cse7 .cse8 .cse9)))) [2022-01-10 06:35:55,042 INFO L854 garLoopResultBuilder]: At program point L578(line 578) the Hoare annotation is: (let ((.cse9 (= ~systemActive~0 (_ bv1 32)))) (let ((.cse0 (not (= (_ bv0 32) |old(~waterLevel~0)|))) (.cse3 (and (= |timeShift_processEnvironment_~tmp~3#1| (_ bv0 32)) .cse9 (= (_ bv0 32) ~pumpRunning~0) (= ~waterLevel~0 |old(~waterLevel~0)|))) (.cse1 (not .cse9)) (.cse6 (not (= |old(~pumpRunning~0)| (_ bv1 32)))) (.cse7 (not (= (_ bv1 32) |old(~waterLevel~0)|))) (.cse5 (not (= (_ bv2 32) |old(~waterLevel~0)|))) (.cse8 (= (_ bv3 32) |old(~waterLevel~0)|)) (.cse2 (not (= |old(~pumpRunning~0)| (_ bv0 32)))) (.cse4 (not (= ~systemActive~0 (_ bv0 32))))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse2 .cse4) (or .cse5 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse6 (not (= |old(~switchedOnBeforeTS~0)| (_ bv1 32)))) (or .cse1 .cse2 .cse7 .cse3) (or .cse1 (= |old(~switchedOnBeforeTS~0)| (_ bv0 32)) .cse7 .cse6) (or .cse5 .cse1 .cse6) (or .cse8 .cse2 .cse7 .cse4) (or .cse5 .cse8 .cse2 .cse4)))) [2022-01-10 06:35:55,042 INFO L854 garLoopResultBuilder]: At program point L694(lines 679 697) the Hoare annotation is: (let ((.cse3 (= (_ bv0 32) ~pumpRunning~0)) (.cse4 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse11 (= ~systemActive~0 (_ bv1 32)))) (let ((.cse7 (not (= |old(~pumpRunning~0)| (_ bv1 32)))) (.cse5 (not (= (_ bv0 32) |old(~waterLevel~0)|))) (.cse0 (not (= (_ bv2 32) |old(~waterLevel~0)|))) (.cse10 (= (_ bv3 32) |old(~waterLevel~0)|)) (.cse6 (not (= ~systemActive~0 (_ bv0 32)))) (.cse1 (not .cse11)) (.cse2 (not (= |old(~pumpRunning~0)| (_ bv0 32)))) (.cse9 (and (= |timeShift_isHighWaterLevel_#res#1| (_ bv0 32)) .cse11 (= (_ bv0 32) |timeShift_isHighWaterLevel_~tmp___0~0#1|) .cse3 .cse4)) (.cse8 (not (= (_ bv1 32) |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4)) (or .cse5 .cse2 .cse6) (or .cse5 .cse1 .cse7 (not (= |old(~switchedOnBeforeTS~0)| (_ bv1 32)))) (or .cse1 (= |old(~switchedOnBeforeTS~0)| (_ bv0 32)) .cse8 .cse7) (or .cse0 .cse1 .cse7) (or .cse5 .cse1 .cse2 .cse9) (or .cse10 .cse2 .cse8 .cse6) (or .cse0 .cse10 .cse2 .cse6) (or .cse1 .cse2 .cse9 .cse8)))) [2022-01-10 06:35:55,042 INFO L854 garLoopResultBuilder]: At program point L145(lines 136 149) the Hoare annotation is: (let ((.cse3 (= (_ bv0 32) ~pumpRunning~0)) (.cse4 (= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse7 (not (= |old(~pumpRunning~0)| (_ bv1 32)))) (.cse8 (not (= (_ bv1 32) |old(~waterLevel~0)|))) (.cse0 (not (= (_ bv2 32) |old(~waterLevel~0)|))) (.cse9 (= (_ bv3 32) |old(~waterLevel~0)|)) (.cse6 (not (= ~systemActive~0 (_ bv0 32)))) (.cse5 (not (= (_ bv0 32) |old(~waterLevel~0)|))) (.cse1 (not (= ~systemActive~0 (_ bv1 32)))) (.cse2 (not (= |old(~pumpRunning~0)| (_ bv0 32)))) (.cse10 (and (= (_ bv1 32) |timeShift_isHighWaterSensorDry_#res#1|) .cse3 .cse4))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4)) (or .cse5 .cse2 .cse6) (or .cse5 .cse1 .cse7 (not (= |old(~switchedOnBeforeTS~0)| (_ bv1 32)))) (or .cse1 (= |old(~switchedOnBeforeTS~0)| (_ bv0 32)) .cse8 .cse7) (or .cse0 .cse1 .cse7) (or .cse9 .cse2 .cse8 .cse6) (or .cse1 .cse2 .cse10 .cse8) (or .cse0 .cse9 .cse2 .cse6) (or .cse5 .cse1 .cse2 .cse10)))) [2022-01-10 06:35:55,042 INFO L854 garLoopResultBuilder]: At program point L583(line 583) the Hoare annotation is: (let ((.cse4 (not (= (_ bv1 32) |old(~waterLevel~0)|))) (.cse8 (not (= (_ bv2 32) |old(~waterLevel~0)|))) (.cse9 (= (_ bv3 32) |old(~waterLevel~0)|)) (.cse2 (not (= ~systemActive~0 (_ bv0 32)))) (.cse1 (not (= |old(~pumpRunning~0)| (_ bv0 32)))) (.cse0 (not (= (_ bv0 32) |old(~waterLevel~0)|))) (.cse3 (not (= ~systemActive~0 (_ bv1 32)))) (.cse5 (= |old(~pumpRunning~0)| ~pumpRunning~0)) (.cse6 (= ~switchedOnBeforeTS~0 (_ bv1 32))) (.cse7 (not (= |old(~pumpRunning~0)| (_ bv1 32))))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse1 .cse4) (or (and .cse5 .cse6 (= ~waterLevel~0 (_ bv0 32))) .cse3 (= |old(~switchedOnBeforeTS~0)| (_ bv0 32)) .cse4 .cse7) (or .cse8 .cse3 .cse1) (or .cse9 .cse1 .cse4 .cse2) (or .cse8 .cse3 (and .cse5 .cse6 (= ~waterLevel~0 (_ bv1 32))) .cse7) (or .cse8 .cse9 .cse1 .cse2) (or .cse0 .cse3 .cse1) (or .cse0 .cse3 (and .cse5 .cse6 (= ~waterLevel~0 |old(~waterLevel~0)|)) .cse7 (not (= |old(~switchedOnBeforeTS~0)| (_ bv1 32)))))) [2022-01-10 06:35:55,042 INFO L854 garLoopResultBuilder]: At program point L583-1(lines 564 588) the Hoare annotation is: (let ((.cse7 (= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse2 (not (= (_ bv1 32) |old(~waterLevel~0)|))) (.cse6 (not (= (_ bv2 32) |old(~waterLevel~0)|))) (.cse11 (= (_ bv3 32) |old(~waterLevel~0)|)) (.cse5 (not (= ~systemActive~0 (_ bv0 32)))) (.cse1 (not (= |old(~pumpRunning~0)| (_ bv0 32)))) (.cse3 (and (= (_ bv0 32) ~pumpRunning~0) .cse7)) (.cse4 (not (= (_ bv0 32) |old(~waterLevel~0)|))) (.cse0 (not (= ~systemActive~0 (_ bv1 32)))) (.cse8 (= |old(~pumpRunning~0)| ~pumpRunning~0)) (.cse9 (= ~switchedOnBeforeTS~0 (_ bv1 32))) (.cse10 (not (= |old(~pumpRunning~0)| (_ bv1 32))))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse5) (or .cse6 .cse0 .cse1 (and (= (_ bv1 32) ~pumpRunning~0) .cse7) .cse3) (or (and .cse8 .cse9 (= ~waterLevel~0 (_ bv0 32))) .cse0 (= |old(~switchedOnBeforeTS~0)| (_ bv0 32)) .cse2 .cse10) (or .cse11 .cse1 .cse2 .cse5) (or .cse6 .cse0 (and .cse8 .cse9 (= ~waterLevel~0 (_ bv1 32))) .cse10) (or .cse6 .cse11 .cse1 .cse5) (or .cse4 .cse0 .cse1 .cse3) (or .cse4 .cse0 (and .cse8 .cse9 .cse7) .cse10 (not (= |old(~switchedOnBeforeTS~0)| (_ bv1 32))))))) [2022-01-10 06:35:55,042 INFO L854 garLoopResultBuilder]: At program point L100(lines 95 103) the Hoare annotation is: (let ((.cse5 (not (= |old(~pumpRunning~0)| (_ bv1 32)))) (.cse6 (not (= (_ bv1 32) |old(~waterLevel~0)|))) (.cse0 (not (= (_ bv2 32) |old(~waterLevel~0)|))) (.cse7 (= (_ bv3 32) |old(~waterLevel~0)|)) (.cse4 (not (= ~systemActive~0 (_ bv0 32)))) (.cse3 (not (= (_ bv0 32) |old(~waterLevel~0)|))) (.cse1 (not (= ~systemActive~0 (_ bv1 32)))) (.cse2 (not (= |old(~pumpRunning~0)| (_ bv0 32))))) (and (or .cse0 .cse1 .cse2 (and (= (_ bv0 32) ~pumpRunning~0) (= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse3 .cse2 .cse4) (or .cse3 .cse1 .cse5 (not (= |old(~switchedOnBeforeTS~0)| (_ bv1 32)))) (or .cse1 .cse2 .cse6) (or .cse1 (= |old(~switchedOnBeforeTS~0)| (_ bv0 32)) .cse6 .cse5) (or .cse0 .cse1 .cse5) (or .cse7 .cse2 .cse6 .cse4) (or .cse0 .cse7 .cse2 .cse4) (or .cse3 .cse1 .cse2))) [2022-01-10 06:35:55,043 INFO L858 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2022-01-10 06:35:55,043 INFO L854 garLoopResultBuilder]: At program point L63-2(lines 59 70) the Hoare annotation is: (let ((.cse4 (not (= (_ bv1 32) |old(~waterLevel~0)|))) (.cse8 (not (= (_ bv2 32) |old(~waterLevel~0)|))) (.cse9 (= (_ bv3 32) |old(~waterLevel~0)|)) (.cse2 (not (= ~systemActive~0 (_ bv0 32)))) (.cse1 (not (= |old(~pumpRunning~0)| (_ bv0 32)))) (.cse0 (not (= (_ bv0 32) |old(~waterLevel~0)|))) (.cse3 (not (= ~systemActive~0 (_ bv1 32)))) (.cse5 (= |old(~pumpRunning~0)| ~pumpRunning~0)) (.cse6 (= ~switchedOnBeforeTS~0 (_ bv1 32))) (.cse7 (not (= |old(~pumpRunning~0)| (_ bv1 32))))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse1 .cse4) (or (and .cse5 .cse6 (= ~waterLevel~0 (_ bv0 32))) .cse3 (= |old(~switchedOnBeforeTS~0)| (_ bv0 32)) .cse4 .cse7) (or .cse8 .cse3 .cse1) (or .cse9 .cse1 .cse4 .cse2) (or .cse8 .cse3 (and .cse5 .cse6 (= ~waterLevel~0 (_ bv1 32))) .cse7) (or .cse8 .cse9 .cse1 .cse2) (or .cse0 .cse3 .cse1) (or .cse0 .cse3 (and .cse5 .cse6 (= ~waterLevel~0 |old(~waterLevel~0)|)) .cse7 (not (= |old(~switchedOnBeforeTS~0)| (_ bv1 32)))))) [2022-01-10 06:35:55,043 INFO L854 garLoopResultBuilder]: At program point L951(line 951) the Hoare annotation is: (let ((.cse11 (= ~systemActive~0 (_ bv1 32))) (.cse17 (= (_ bv2 32) |old(~waterLevel~0)|)) (.cse21 (= ~systemActive~0 (_ bv0 32))) (.cse19 (= |old(~pumpRunning~0)| ~pumpRunning~0)) (.cse13 (not (= ~waterLevel~0 (_ bv3 32)))) (.cse20 (= (_ bv0 32) ~pumpRunning~0)) (.cse14 (= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse4 (not (= (_ bv1 32) |old(~waterLevel~0)|))) (.cse18 (and .cse21 (not (= ~waterLevel~0 (_ bv2 32))) .cse19 .cse13 .cse20 .cse14)) (.cse5 (not .cse21)) (.cse0 (not .cse17)) (.cse9 (= (_ bv3 32) |old(~waterLevel~0)|)) (.cse10 (= (_ bv1 32) ~pumpRunning~0)) (.cse12 (not (= ~switchedOnBeforeTS~0 (_ bv0 32)))) (.cse15 (= |old(~switchedOnBeforeTS~0)| (_ bv0 32))) (.cse2 (not (= |old(~pumpRunning~0)| (_ bv0 32)))) (.cse3 (and .cse20 .cse14)) (.cse16 (not (= (_ bv0 32) |old(~waterLevel~0)|))) (.cse1 (not .cse11)) (.cse6 (not (= |old(~pumpRunning~0)| (_ bv1 32)))) (.cse7 (not (= |old(~switchedOnBeforeTS~0)| (_ bv1 32)))) (.cse8 (and .cse19 .cse11 (= ~switchedOnBeforeTS~0 (_ bv1 32)) .cse14))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse3) (or .cse0 .cse2 .cse5 .cse3) (or .cse1 .cse4 .cse6 .cse7 .cse8) (or .cse9 .cse1 (and .cse10 .cse11 .cse12 .cse13 .cse14) .cse15 .cse4 .cse6) (or .cse9 .cse16 .cse2 .cse17 .cse18 .cse5) (or .cse0 .cse1 (and .cse10 .cse14) .cse6) (or .cse9 .cse2 .cse17 .cse4 .cse18 .cse5) (or .cse0 .cse9 .cse1 (and .cse10 .cse11 .cse12 .cse13) .cse15 .cse6) (or .cse16 .cse1 .cse2 .cse3) (or .cse16 .cse1 .cse6 .cse7 .cse8)))) [2022-01-10 06:35:55,043 INFO L858 garLoopResultBuilder]: For program point L951-1(line 951) no Hoare annotation was computed. [2022-01-10 06:35:55,043 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 529 555) the Hoare annotation is: (let ((.cse11 (= ~systemActive~0 (_ bv1 32))) (.cse17 (= (_ bv2 32) |old(~waterLevel~0)|)) (.cse21 (= ~systemActive~0 (_ bv0 32))) (.cse19 (= |old(~pumpRunning~0)| ~pumpRunning~0)) (.cse13 (not (= ~waterLevel~0 (_ bv3 32)))) (.cse20 (= (_ bv0 32) ~pumpRunning~0)) (.cse14 (= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse4 (not (= (_ bv1 32) |old(~waterLevel~0)|))) (.cse18 (and .cse21 (not (= ~waterLevel~0 (_ bv2 32))) .cse19 .cse13 .cse20 .cse14)) (.cse5 (not .cse21)) (.cse0 (not .cse17)) (.cse9 (= (_ bv3 32) |old(~waterLevel~0)|)) (.cse10 (= (_ bv1 32) ~pumpRunning~0)) (.cse12 (not (= ~switchedOnBeforeTS~0 (_ bv0 32)))) (.cse15 (= |old(~switchedOnBeforeTS~0)| (_ bv0 32))) (.cse2 (not (= |old(~pumpRunning~0)| (_ bv0 32)))) (.cse3 (and .cse20 .cse14)) (.cse16 (not (= (_ bv0 32) |old(~waterLevel~0)|))) (.cse1 (not .cse11)) (.cse6 (not (= |old(~pumpRunning~0)| (_ bv1 32)))) (.cse7 (not (= |old(~switchedOnBeforeTS~0)| (_ bv1 32)))) (.cse8 (and .cse19 .cse11 (= ~switchedOnBeforeTS~0 (_ bv1 32)) .cse14))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse3) (or .cse0 .cse2 .cse5 .cse3) (or .cse1 .cse4 .cse6 .cse7 .cse8) (or .cse9 .cse1 (and .cse10 .cse11 .cse12 .cse13 .cse14) .cse15 .cse4 .cse6) (or .cse9 .cse16 .cse2 .cse17 .cse18 .cse5) (or .cse0 .cse1 (and .cse10 .cse14) .cse6) (or .cse9 .cse2 .cse17 .cse4 .cse18 .cse5) (or .cse0 .cse9 .cse1 (and .cse10 .cse11 .cse12 .cse13) .cse15 .cse6) (or .cse16 .cse1 .cse2 .cse3) (or .cse16 .cse1 .cse6 .cse7 .cse8)))) [2022-01-10 06:35:55,043 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 529 555) no Hoare annotation was computed. [2022-01-10 06:35:55,043 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 932) no Hoare annotation was computed. [2022-01-10 06:35:55,043 INFO L858 garLoopResultBuilder]: For program point L968(lines 968 978) no Hoare annotation was computed. [2022-01-10 06:35:55,043 INFO L858 garLoopResultBuilder]: For program point L964(lines 964 981) no Hoare annotation was computed. [2022-01-10 06:35:55,043 INFO L854 garLoopResultBuilder]: At program point L964-1(lines 956 984) the Hoare annotation is: (let ((.cse1 (= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1| ~pumpRunning~0)) (.cse11 (= (_ bv2 32) |old(~waterLevel~0)|)) (.cse4 (= ~waterLevel~0 |timeShift___utac_acc__Specification5_spec__3_~tmp~8#1|)) (.cse17 (= (_ bv0 32) ~pumpRunning~0)) (.cse5 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse15 (= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse8 (= (_ bv3 32) |old(~waterLevel~0)|)) (.cse16 (and .cse4 .cse17 .cse5 .cse15)) (.cse13 (not (= ~systemActive~0 (_ bv0 32)))) (.cse14 (not .cse11)) (.cse2 (= |old(~pumpRunning~0)| ~pumpRunning~0)) (.cse3 (= ~switchedOnBeforeTS~0 (_ bv1 32))) (.cse7 (not (= |old(~pumpRunning~0)| (_ bv1 32)))) (.cse9 (not (= (_ bv0 32) |old(~waterLevel~0)|))) (.cse0 (not (= ~systemActive~0 (_ bv1 32)))) (.cse10 (not (= |old(~pumpRunning~0)| (_ bv0 32)))) (.cse6 (not (= (_ bv1 32) |old(~waterLevel~0)|))) (.cse12 (and .cse1 .cse4 .cse17 .cse5 .cse15))) (and (or .cse0 (and .cse1 .cse2 .cse3 .cse4 (= ~waterLevel~0 (_ bv0 32)) .cse5) (= |old(~switchedOnBeforeTS~0)| (_ bv0 32)) .cse6 .cse7) (or .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (or .cse14 .cse0 (and (= (_ bv1 32) ~pumpRunning~0) .cse4 .cse5 .cse15) .cse10 .cse16) (or .cse8 .cse10 .cse11 .cse6 .cse12 .cse13) (or .cse14 .cse10 .cse16 .cse13) (or .cse14 .cse0 (and .cse1 .cse2 .cse3 .cse4 (= ~waterLevel~0 (_ bv1 32)) .cse5) .cse7) (or .cse9 .cse0 (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse15) .cse7 (not (= |old(~switchedOnBeforeTS~0)| (_ bv1 32)))) (or .cse9 .cse0 .cse10 .cse12) (or .cse0 .cse10 .cse6 .cse12)))) [2022-01-10 06:35:55,043 INFO L861 garLoopResultBuilder]: At program point L923(lines 904 926) the Hoare annotation is: true [2022-01-10 06:35:55,043 INFO L854 garLoopResultBuilder]: At program point L783(lines 732 784) the Hoare annotation is: false [2022-01-10 06:35:55,043 INFO L858 garLoopResultBuilder]: For program point L771(lines 771 777) no Hoare annotation was computed. [2022-01-10 06:35:55,043 INFO L854 garLoopResultBuilder]: At program point L771-2(lines 763 778) the Hoare annotation is: (let ((.cse5 (= ~waterLevel~0 (_ bv1 32))) (.cse6 (= (_ bv1 32) ~pumpRunning~0)) (.cse0 (= ~systemActive~0 (_ bv1 32))) (.cse1 (= ~waterLevel~0 (_ bv0 32))) (.cse7 (= ~waterLevel~0 (_ bv2 32))) (.cse4 (= ~systemActive~0 (_ bv0 32))) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| (_ bv0 32))) (.cse3 (= (_ bv0 32) ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse5 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse0 .cse5 (not (= ~switchedOnBeforeTS~0 (_ bv0 32))) .cse2) (and .cse0 .cse5 .cse2 .cse3) (and .cse6 .cse7 .cse0 .cse2) (and .cse7 .cse0 .cse2 .cse3) (and .cse6 .cse0 (= ~switchedOnBeforeTS~0 (_ bv1 32)) .cse1 .cse2) (and .cse7 .cse4 .cse2 .cse3))) [2022-01-10 06:35:55,044 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-01-10 06:35:55,044 INFO L858 garLoopResultBuilder]: For program point L734(lines 733 782) no Hoare annotation was computed. [2022-01-10 06:35:55,044 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-01-10 06:35:55,044 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-01-10 06:35:55,044 INFO L858 garLoopResultBuilder]: For program point L763(lines 763 778) no Hoare annotation was computed. [2022-01-10 06:35:55,044 INFO L854 garLoopResultBuilder]: At program point L825(lines 820 828) the Hoare annotation is: (and (= ~systemActive~0 (_ bv1 32)) (= ~waterLevel~0 (_ bv1 32)) (= (_ bv0 32) ~pumpRunning~0)) [2022-01-10 06:35:55,044 INFO L854 garLoopResultBuilder]: At program point L755(line 755) the Hoare annotation is: (let ((.cse5 (= ~waterLevel~0 (_ bv1 32))) (.cse6 (= (_ bv1 32) ~pumpRunning~0)) (.cse0 (= ~systemActive~0 (_ bv1 32))) (.cse1 (= ~waterLevel~0 (_ bv0 32))) (.cse7 (= ~waterLevel~0 (_ bv2 32))) (.cse4 (= ~systemActive~0 (_ bv0 32))) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| (_ bv0 32))) (.cse3 (= (_ bv0 32) ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse5 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse0 .cse5 (not (= ~switchedOnBeforeTS~0 (_ bv0 32))) .cse2) (and .cse0 .cse5 .cse2 .cse3) (and .cse6 .cse7 .cse0 .cse2) (and .cse7 .cse0 .cse2 .cse3) (and .cse6 .cse0 (= ~switchedOnBeforeTS~0 (_ bv1 32)) .cse1 .cse2) (and .cse7 .cse4 .cse2 .cse3))) [2022-01-10 06:35:55,044 INFO L854 garLoopResultBuilder]: At program point L817(lines 813 819) the Hoare annotation is: (and (= ~systemActive~0 (_ bv1 32)) (= ~waterLevel~0 (_ bv1 32)) (= (_ bv0 32) ~pumpRunning~0)) [2022-01-10 06:35:55,044 INFO L854 garLoopResultBuilder]: At program point L718(lines 713 720) the Hoare annotation is: (let ((.cse5 (= ~waterLevel~0 (_ bv1 32))) (.cse6 (= ~waterLevel~0 (_ bv2 32))) (.cse3 (= (_ bv0 32) ~pumpRunning~0)) (.cse4 (= (_ bv1 32) ~pumpRunning~0)) (.cse0 (= ~systemActive~0 (_ bv1 32))) (.cse1 (= ~waterLevel~0 (_ bv0 32))) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse0 .cse5 (not (= ~switchedOnBeforeTS~0 (_ bv0 32))) .cse2) (and .cse0 .cse5 .cse2 .cse3) (and .cse4 .cse6 .cse0 .cse2) (and .cse6 .cse0 .cse2 .cse3) (and .cse4 .cse0 (= ~switchedOnBeforeTS~0 (_ bv1 32)) .cse1 .cse2))) [2022-01-10 06:35:55,044 INFO L854 garLoopResultBuilder]: At program point L780(lines 733 782) the Hoare annotation is: (let ((.cse3 (= ~waterLevel~0 (_ bv1 32))) (.cse0 (= (_ bv1 32) ~pumpRunning~0)) (.cse1 (= ~systemActive~0 (_ bv1 32))) (.cse2 (= ~switchedOnBeforeTS~0 (_ bv1 32))) (.cse5 (= ~waterLevel~0 (_ bv0 32))) (.cse8 (= ~waterLevel~0 (_ bv2 32))) (.cse7 (= ~systemActive~0 (_ bv0 32))) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| (_ bv0 32))) (.cse6 (= (_ bv0 32) ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse5 .cse4 .cse6) (and .cse7 .cse3 .cse4 .cse6) (and .cse7 .cse5 .cse4 .cse6) (and .cse1 .cse3 .cse4 .cse6) (and .cse0 .cse8 .cse1 .cse4) (and .cse8 .cse1 .cse4 .cse6) (and .cse0 .cse1 .cse2 .cse5 .cse4) (and .cse8 .cse7 .cse4 .cse6))) [2022-01-10 06:35:55,044 INFO L858 garLoopResultBuilder]: For program point L743(lines 743 749) no Hoare annotation was computed. [2022-01-10 06:35:55,044 INFO L858 garLoopResultBuilder]: For program point L743-1(lines 743 749) no Hoare annotation was computed. [2022-01-10 06:35:55,044 INFO L854 garLoopResultBuilder]: At program point L710(lines 698 712) the Hoare annotation is: (let ((.cse0 (= ~systemActive~0 (_ bv0 32))) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| (_ bv0 32))) (.cse2 (= (_ bv0 32) ~pumpRunning~0))) (or (and .cse0 (= ~waterLevel~0 (_ bv1 32)) .cse1 .cse2) (and .cse0 (= ~waterLevel~0 (_ bv0 32)) .cse1 .cse2) (and (= ~waterLevel~0 (_ bv2 32)) .cse0 .cse1 .cse2))) [2022-01-10 06:35:55,044 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-01-10 06:35:55,044 INFO L858 garLoopResultBuilder]: For program point L735(lines 735 739) no Hoare annotation was computed. [2022-01-10 06:35:55,044 INFO L858 garLoopResultBuilder]: For program point L702(lines 702 708) no Hoare annotation was computed. [2022-01-10 06:35:55,044 INFO L858 garLoopResultBuilder]: For program point L702-2(lines 702 708) no Hoare annotation was computed. [2022-01-10 06:35:55,044 INFO L854 garLoopResultBuilder]: At program point L620(lines 615 622) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| (_ bv0 32))) (.cse1 (= (_ bv0 32) ~pumpRunning~0))) (or (and (= ~waterLevel~0 (_ bv2 32)) .cse0 .cse1) (and (= ~waterLevel~0 (_ bv0 32)) .cse0 .cse1) (and (= ~waterLevel~0 (_ bv1 32)) .cse0 .cse1))) [2022-01-10 06:35:55,044 INFO L854 garLoopResultBuilder]: At program point L810(lines 806 812) the Hoare annotation is: (and (= ~systemActive~0 (_ bv1 32)) (= ~waterLevel~0 (_ bv1 32)) (= (_ bv0 32) ~pumpRunning~0)) [2022-01-10 06:35:55,044 INFO L861 garLoopResultBuilder]: At program point L901(lines 893 903) the Hoare annotation is: true [2022-01-10 06:35:55,045 INFO L854 garLoopResultBuilder]: At program point L889(lines 885 891) the Hoare annotation is: (and (= ~systemActive~0 (_ bv1 32)) (= ~waterLevel~0 (_ bv1 32)) (= (_ bv0 32) ~pumpRunning~0)) [2022-01-10 06:35:55,045 INFO L858 garLoopResultBuilder]: For program point L914(lines 914 921) no Hoare annotation was computed. [2022-01-10 06:35:55,045 INFO L861 garLoopResultBuilder]: At program point L786(lines 723 790) the Hoare annotation is: true [2022-01-10 06:35:55,045 INFO L858 garLoopResultBuilder]: For program point L753(lines 753 759) no Hoare annotation was computed. [2022-01-10 06:35:55,045 INFO L858 garLoopResultBuilder]: For program point L753-1(lines 753 759) no Hoare annotation was computed. [2022-01-10 06:35:55,045 INFO L858 garLoopResultBuilder]: For program point L914-2(lines 914 921) no Hoare annotation was computed. [2022-01-10 06:35:55,045 INFO L854 garLoopResultBuilder]: At program point L943(lines 938 945) the Hoare annotation is: (and (= ~systemActive~0 (_ bv1 32)) (= ~waterLevel~0 (_ bv1 32)) (= (_ bv0 32) ~pumpRunning~0)) [2022-01-10 06:35:55,045 INFO L854 garLoopResultBuilder]: At program point L745(line 745) the Hoare annotation is: (let ((.cse3 (= ~waterLevel~0 (_ bv1 32))) (.cse0 (= (_ bv1 32) ~pumpRunning~0)) (.cse1 (= ~systemActive~0 (_ bv1 32))) (.cse2 (= ~switchedOnBeforeTS~0 (_ bv1 32))) (.cse5 (= ~waterLevel~0 (_ bv0 32))) (.cse8 (= ~waterLevel~0 (_ bv2 32))) (.cse7 (= ~systemActive~0 (_ bv0 32))) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| (_ bv0 32))) (.cse6 (= (_ bv0 32) ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse5 .cse4 .cse6) (and .cse7 .cse3 .cse4 .cse6) (and .cse7 .cse5 .cse4 .cse6) (and .cse1 .cse3 .cse4 .cse6) (and .cse0 .cse8 .cse1 .cse4) (and .cse8 .cse1 .cse4 .cse6) (and .cse0 .cse1 .cse2 .cse5 .cse4) (and .cse8 .cse7 .cse4 .cse6))) [2022-01-10 06:35:55,045 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2022-01-10 06:35:55,045 INFO L858 garLoopResultBuilder]: For program point L75-1(lines 71 82) no Hoare annotation was computed. [2022-01-10 06:35:55,045 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 71 82) the Hoare annotation is: (let ((.cse7 (not (= ~systemActive~0 (_ bv0 32)))) (.cse0 (not (= (_ bv2 32) |old(~waterLevel~0)|))) (.cse4 (not (= (_ bv0 32) ~pumpRunning~0))) (.cse6 (not (= (_ bv0 32) |old(~waterLevel~0)|))) (.cse1 (not (= ~systemActive~0 (_ bv1 32)))) (.cse5 (not (= (_ bv1 32) |old(~waterLevel~0)|))) (.cse8 (not (= ~switchedOnBeforeTS~0 (_ bv1 32)))) (.cse2 (not (= (_ bv1 32) ~pumpRunning~0))) (.cse3 (= ~waterLevel~0 |old(~waterLevel~0)|))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse5 .cse3) (or .cse4 .cse6 .cse7 .cse3) (or .cse4 .cse5 .cse7 .cse3) (or .cse0 .cse4 .cse7 .cse3) (or .cse0 .cse4 .cse1 .cse3) (or .cse4 .cse6 .cse1 .cse3) (or .cse6 .cse1 .cse8 .cse2 .cse3) (or .cse1 .cse5 .cse8 .cse2 .cse3))) [2022-01-10 06:35:55,045 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 634 642) no Hoare annotation was computed. [2022-01-10 06:35:55,045 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 634 642) the Hoare annotation is: true [2022-01-10 06:35:55,045 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 634 642) no Hoare annotation was computed. [2022-01-10 06:35:55,047 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 06:35:55,048 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2022-01-10 06:35:55,089 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 06:35:55 BoogieIcfgContainer [2022-01-10 06:35:55,089 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-01-10 06:35:55,089 INFO L158 Benchmark]: Toolchain (without parser) took 19982.56ms. Allocated memory was 238.0MB in the beginning and 407.9MB in the end (delta: 169.9MB). Free memory was 186.8MB in the beginning and 309.2MB in the end (delta: -122.5MB). Peak memory consumption was 212.7MB. Max. memory is 8.0GB. [2022-01-10 06:35:55,090 INFO L158 Benchmark]: CDTParser took 0.09ms. Allocated memory is still 238.0MB. Free memory was 203.8MB in the beginning and 203.7MB in the end (delta: 72.4kB). There was no memory consumed. Max. memory is 8.0GB. [2022-01-10 06:35:55,090 INFO L158 Benchmark]: CACSL2BoogieTranslator took 415.93ms. Allocated memory is still 238.0MB. Free memory was 186.6MB in the beginning and 199.0MB in the end (delta: -12.5MB). Peak memory consumption was 12.6MB. Max. memory is 8.0GB. [2022-01-10 06:35:55,090 INFO L158 Benchmark]: Boogie Procedure Inliner took 47.79ms. Allocated memory is still 238.0MB. Free memory was 199.0MB in the beginning and 196.4MB in the end (delta: 2.6MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-01-10 06:35:55,090 INFO L158 Benchmark]: Boogie Preprocessor took 27.49ms. Allocated memory is still 238.0MB. Free memory was 196.4MB in the beginning and 194.8MB in the end (delta: 1.6MB). Peak memory consumption was 1.0MB. Max. memory is 8.0GB. [2022-01-10 06:35:55,090 INFO L158 Benchmark]: RCFGBuilder took 398.70ms. Allocated memory is still 238.0MB. Free memory was 194.8MB in the beginning and 177.5MB in the end (delta: 17.3MB). Peak memory consumption was 17.8MB. Max. memory is 8.0GB. [2022-01-10 06:35:55,091 INFO L158 Benchmark]: TraceAbstraction took 19088.21ms. Allocated memory was 238.0MB in the beginning and 407.9MB in the end (delta: 169.9MB). Free memory was 177.5MB in the beginning and 309.2MB in the end (delta: -131.7MB). Peak memory consumption was 204.3MB. Max. memory is 8.0GB. [2022-01-10 06:35:55,092 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.09ms. Allocated memory is still 238.0MB. Free memory was 203.8MB in the beginning and 203.7MB in the end (delta: 72.4kB). There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 415.93ms. Allocated memory is still 238.0MB. Free memory was 186.6MB in the beginning and 199.0MB in the end (delta: -12.5MB). Peak memory consumption was 12.6MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 47.79ms. Allocated memory is still 238.0MB. Free memory was 199.0MB in the beginning and 196.4MB in the end (delta: 2.6MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * Boogie Preprocessor took 27.49ms. Allocated memory is still 238.0MB. Free memory was 196.4MB in the beginning and 194.8MB in the end (delta: 1.6MB). Peak memory consumption was 1.0MB. Max. memory is 8.0GB. * RCFGBuilder took 398.70ms. Allocated memory is still 238.0MB. Free memory was 194.8MB in the beginning and 177.5MB in the end (delta: 17.3MB). Peak memory consumption was 17.8MB. Max. memory is 8.0GB. * TraceAbstraction took 19088.21ms. Allocated memory was 238.0MB in the beginning and 407.9MB in the end (delta: 169.9MB). Free memory was 177.5MB in the beginning and 309.2MB in the end (delta: -131.7MB). Peak memory consumption was 204.3MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 932]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 89 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 19.0s, OverallIterations: 13, TraceHistogramMax: 8, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 8.1s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2723 SdHoareTripleChecker+Valid, 1.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2685 mSDsluCounter, 6827 SdHoareTripleChecker+Invalid, 1.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5185 mSDsCounter, 625 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2376 IncrementalHoareTripleChecker+Invalid, 3001 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 625 mSolverCounterUnsat, 1642 mSDtfsCounter, 2376 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1873 GetRequests, 1714 SyntacticMatches, 8 SemanticMatches, 151 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 899 ImplicationChecksByTransitivity, 1.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1303occurred in iteration=11, InterpolantAutomatonStates: 134, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 13 MinimizatonAttempts, 476 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 42 LocationsWithAnnotation, 2954 PreInvPairs, 3215 NumberOfFragments, 4170 HoareAnnotationTreeSize, 2954 FomulaSimplifications, 10034 FormulaSimplificationTreeSizeReduction, 0.6s HoareSimplificationTime, 42 FomulaSimplificationsInter, 27544 FormulaSimplificationTreeSizeReductionInter, 7.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 4.1s InterpolantComputationTime, 1116 NumberOfCodeBlocks, 1116 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1778 ConstructedInterpolants, 0 QuantifiedInterpolants, 4574 SizeOfPredicates, 26 NumberOfNonLiveVariables, 3114 ConjunctsInSsa, 88 ConjunctsInUnsatCore, 17 InterpolantComputations, 9 PerfectInterpolantSequences, 1635/1988 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 698]: Loop Invariant Derived loop invariant: ((((systemActive == 0bv32 && waterLevel == 1bv32) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) || (((systemActive == 0bv32 && waterLevel == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || (((waterLevel == 2bv32 && systemActive == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: ((((((((((!(2bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 0bv32)) || (0bv32 == pumpRunning && waterLevel == \old(waterLevel))) && ((!(0bv32 == \old(waterLevel)) || !(\old(pumpRunning) == 0bv32)) || !(systemActive == 0bv32))) && (((!(0bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 1bv32)) || !(\old(switchedOnBeforeTS) == 1bv32))) && (((!(systemActive == 1bv32) || \old(switchedOnBeforeTS) == 0bv32) || !(1bv32 == \old(waterLevel))) || !(\old(pumpRunning) == 1bv32))) && ((!(2bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 1bv32))) && (((3bv32 == \old(waterLevel) || !(\old(pumpRunning) == 0bv32)) || !(1bv32 == \old(waterLevel))) || !(systemActive == 0bv32))) && (((!(systemActive == 1bv32) || !(\old(pumpRunning) == 0bv32)) || ((1bv32 == \result && 0bv32 == pumpRunning) && waterLevel == \old(waterLevel))) || !(1bv32 == \old(waterLevel)))) && (((!(2bv32 == \old(waterLevel)) || 3bv32 == \old(waterLevel)) || !(\old(pumpRunning) == 0bv32)) || !(systemActive == 0bv32))) && (((!(0bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 0bv32)) || ((1bv32 == \result && 0bv32 == pumpRunning) && waterLevel == \old(waterLevel))) - InvariantResult [Line: 806]: Loop Invariant Derived loop invariant: (systemActive == 1bv32 && waterLevel == 1bv32) && 0bv32 == pumpRunning - InvariantResult [Line: 733]: Loop Invariant Derived loop invariant: (((((((((((1bv32 == pumpRunning && systemActive == 1bv32) && switchedOnBeforeTS == 1bv32) && waterLevel == 1bv32) && splverifierCounter == 0bv32) || (((systemActive == 1bv32 && waterLevel == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || (((systemActive == 0bv32 && waterLevel == 1bv32) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || (((systemActive == 0bv32 && waterLevel == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || (((systemActive == 1bv32 && waterLevel == 1bv32) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || (((1bv32 == pumpRunning && waterLevel == 2bv32) && systemActive == 1bv32) && splverifierCounter == 0bv32)) || (((waterLevel == 2bv32 && systemActive == 1bv32) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || ((((1bv32 == pumpRunning && systemActive == 1bv32) && switchedOnBeforeTS == 1bv32) && waterLevel == 0bv32) && splverifierCounter == 0bv32)) || (((waterLevel == 2bv32 && systemActive == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 904]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 831]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 938]: Loop Invariant Derived loop invariant: (systemActive == 1bv32 && waterLevel == 1bv32) && 0bv32 == pumpRunning - InvariantResult [Line: 564]: Loop Invariant Derived loop invariant: ((((((((((!(systemActive == 1bv32) || !(\old(pumpRunning) == 0bv32)) || !(1bv32 == \old(waterLevel))) || (0bv32 == pumpRunning && waterLevel == \old(waterLevel))) && ((!(0bv32 == \old(waterLevel)) || !(\old(pumpRunning) == 0bv32)) || !(systemActive == 0bv32))) && ((((!(2bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 0bv32)) || (1bv32 == pumpRunning && waterLevel == \old(waterLevel))) || (0bv32 == pumpRunning && waterLevel == \old(waterLevel)))) && ((((((\old(pumpRunning) == pumpRunning && switchedOnBeforeTS == 1bv32) && waterLevel == 0bv32) || !(systemActive == 1bv32)) || \old(switchedOnBeforeTS) == 0bv32) || !(1bv32 == \old(waterLevel))) || !(\old(pumpRunning) == 1bv32))) && (((3bv32 == \old(waterLevel) || !(\old(pumpRunning) == 0bv32)) || !(1bv32 == \old(waterLevel))) || !(systemActive == 0bv32))) && (((!(2bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || ((\old(pumpRunning) == pumpRunning && switchedOnBeforeTS == 1bv32) && waterLevel == 1bv32)) || !(\old(pumpRunning) == 1bv32))) && (((!(2bv32 == \old(waterLevel)) || 3bv32 == \old(waterLevel)) || !(\old(pumpRunning) == 0bv32)) || !(systemActive == 0bv32))) && (((!(0bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 0bv32)) || (0bv32 == pumpRunning && waterLevel == \old(waterLevel)))) && ((((!(0bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || ((\old(pumpRunning) == pumpRunning && switchedOnBeforeTS == 1bv32) && waterLevel == \old(waterLevel))) || !(\old(pumpRunning) == 1bv32)) || !(\old(switchedOnBeforeTS) == 1bv32)) - InvariantResult [Line: 928]: Loop Invariant Derived loop invariant: (((((((((!(0bv32 == \old(waterLevel)) || !(\old(pumpRunning) == 0bv32)) || !(systemActive == 0bv32)) && (((!(0bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 1bv32)) || !(\old(switchedOnBeforeTS) == 1bv32))) && ((!(systemActive == 1bv32) || !(\old(pumpRunning) == 0bv32)) || !(1bv32 == \old(waterLevel)))) && (((!(systemActive == 1bv32) || \old(switchedOnBeforeTS) == 0bv32) || !(1bv32 == \old(waterLevel))) || !(\old(pumpRunning) == 1bv32))) && ((!(2bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 1bv32))) && ((!(2bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 0bv32))) && (((3bv32 == \old(waterLevel) || !(\old(pumpRunning) == 0bv32)) || !(1bv32 == \old(waterLevel))) || !(systemActive == 0bv32))) && (((!(2bv32 == \old(waterLevel)) || 3bv32 == \old(waterLevel)) || !(\old(pumpRunning) == 0bv32)) || !(systemActive == 0bv32))) && ((!(0bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 0bv32)) - InvariantResult [Line: 885]: Loop Invariant Derived loop invariant: (systemActive == 1bv32 && waterLevel == 1bv32) && 0bv32 == pumpRunning - InvariantResult [Line: 732]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 956]: Loop Invariant Derived loop invariant: (((((((((((!(systemActive == 1bv32) || (((((tmp___0 == pumpRunning && \old(pumpRunning) == pumpRunning) && switchedOnBeforeTS == 1bv32) && waterLevel == tmp) && waterLevel == 0bv32) && waterLevel == \result)) || \old(switchedOnBeforeTS) == 0bv32) || !(1bv32 == \old(waterLevel))) || !(\old(pumpRunning) == 1bv32)) && (((((3bv32 == \old(waterLevel) || !(0bv32 == \old(waterLevel))) || !(\old(pumpRunning) == 0bv32)) || 2bv32 == \old(waterLevel)) || ((((tmp___0 == pumpRunning && waterLevel == tmp) && 0bv32 == pumpRunning) && waterLevel == \result) && waterLevel == \old(waterLevel))) || !(systemActive == 0bv32))) && ((((!(2bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || (((1bv32 == pumpRunning && waterLevel == tmp) && waterLevel == \result) && waterLevel == \old(waterLevel))) || !(\old(pumpRunning) == 0bv32)) || (((waterLevel == tmp && 0bv32 == pumpRunning) && waterLevel == \result) && waterLevel == \old(waterLevel)))) && (((((3bv32 == \old(waterLevel) || !(\old(pumpRunning) == 0bv32)) || 2bv32 == \old(waterLevel)) || !(1bv32 == \old(waterLevel))) || ((((tmp___0 == pumpRunning && waterLevel == tmp) && 0bv32 == pumpRunning) && waterLevel == \result) && waterLevel == \old(waterLevel))) || !(systemActive == 0bv32))) && (((!(2bv32 == \old(waterLevel)) || !(\old(pumpRunning) == 0bv32)) || (((waterLevel == tmp && 0bv32 == pumpRunning) && waterLevel == \result) && waterLevel == \old(waterLevel))) || !(systemActive == 0bv32))) && (((!(2bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || (((((tmp___0 == pumpRunning && \old(pumpRunning) == pumpRunning) && switchedOnBeforeTS == 1bv32) && waterLevel == tmp) && waterLevel == 1bv32) && waterLevel == \result)) || !(\old(pumpRunning) == 1bv32))) && ((((!(0bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || (((((tmp___0 == pumpRunning && \old(pumpRunning) == pumpRunning) && switchedOnBeforeTS == 1bv32) && waterLevel == tmp) && waterLevel == \result) && waterLevel == \old(waterLevel))) || !(\old(pumpRunning) == 1bv32)) || !(\old(switchedOnBeforeTS) == 1bv32))) && (((!(0bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 0bv32)) || ((((tmp___0 == pumpRunning && waterLevel == tmp) && 0bv32 == pumpRunning) && waterLevel == \result) && waterLevel == \old(waterLevel)))) && (((!(systemActive == 1bv32) || !(\old(pumpRunning) == 0bv32)) || !(1bv32 == \old(waterLevel))) || ((((tmp___0 == pumpRunning && waterLevel == tmp) && 0bv32 == pumpRunning) && waterLevel == \result) && waterLevel == \old(waterLevel))) - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: (((((((((!(0bv32 == \old(waterLevel)) || !(\old(pumpRunning) == 0bv32)) || !(systemActive == 0bv32)) && ((!(systemActive == 1bv32) || !(\old(pumpRunning) == 0bv32)) || !(1bv32 == \old(waterLevel)))) && ((((((\old(pumpRunning) == pumpRunning && switchedOnBeforeTS == 1bv32) && waterLevel == 0bv32) || !(systemActive == 1bv32)) || \old(switchedOnBeforeTS) == 0bv32) || !(1bv32 == \old(waterLevel))) || !(\old(pumpRunning) == 1bv32))) && ((!(2bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 0bv32))) && (((3bv32 == \old(waterLevel) || !(\old(pumpRunning) == 0bv32)) || !(1bv32 == \old(waterLevel))) || !(systemActive == 0bv32))) && (((!(2bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || ((\old(pumpRunning) == pumpRunning && switchedOnBeforeTS == 1bv32) && waterLevel == 1bv32)) || !(\old(pumpRunning) == 1bv32))) && (((!(2bv32 == \old(waterLevel)) || 3bv32 == \old(waterLevel)) || !(\old(pumpRunning) == 0bv32)) || !(systemActive == 0bv32))) && ((!(0bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 0bv32))) && ((((!(0bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || ((\old(pumpRunning) == pumpRunning && switchedOnBeforeTS == 1bv32) && waterLevel == \old(waterLevel))) || !(\old(pumpRunning) == 1bv32)) || !(\old(switchedOnBeforeTS) == 1bv32)) - InvariantResult [Line: 723]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 598]: Loop Invariant Derived loop invariant: (((((((((!(0bv32 == \old(waterLevel)) || !(\old(pumpRunning) == 0bv32)) || !(systemActive == 0bv32)) && ((((!(2bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 0bv32)) || (1bv32 == pumpRunning && waterLevel == \old(waterLevel))) || (0bv32 == pumpRunning && waterLevel == \old(waterLevel)))) && (((!(0bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 1bv32)) || !(\old(switchedOnBeforeTS) == 1bv32))) && ((!(systemActive == 1bv32) || !(\old(pumpRunning) == 0bv32)) || !(1bv32 == \old(waterLevel)))) && (((!(systemActive == 1bv32) || \old(switchedOnBeforeTS) == 0bv32) || !(1bv32 == \old(waterLevel))) || !(\old(pumpRunning) == 1bv32))) && ((!(2bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 1bv32))) && (((3bv32 == \old(waterLevel) || !(\old(pumpRunning) == 0bv32)) || !(1bv32 == \old(waterLevel))) || !(systemActive == 0bv32))) && (((!(2bv32 == \old(waterLevel)) || 3bv32 == \old(waterLevel)) || !(\old(pumpRunning) == 0bv32)) || !(systemActive == 0bv32))) && ((!(0bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 0bv32)) - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: ((((((((((!(2bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 0bv32)) || (0bv32 == pumpRunning && waterLevel == \old(waterLevel))) && ((!(0bv32 == \old(waterLevel)) || !(\old(pumpRunning) == 0bv32)) || !(systemActive == 0bv32))) && (((!(0bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 1bv32)) || !(\old(switchedOnBeforeTS) == 1bv32))) && ((!(systemActive == 1bv32) || !(\old(pumpRunning) == 0bv32)) || !(1bv32 == \old(waterLevel)))) && (((!(systemActive == 1bv32) || \old(switchedOnBeforeTS) == 0bv32) || !(1bv32 == \old(waterLevel))) || !(\old(pumpRunning) == 1bv32))) && ((!(2bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 1bv32))) && (((3bv32 == \old(waterLevel) || !(\old(pumpRunning) == 0bv32)) || !(1bv32 == \old(waterLevel))) || !(systemActive == 0bv32))) && (((!(2bv32 == \old(waterLevel)) || 3bv32 == \old(waterLevel)) || !(\old(pumpRunning) == 0bv32)) || !(systemActive == 0bv32))) && ((!(0bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 0bv32)) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((waterLevel == 2bv32 && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) || ((waterLevel == 0bv32 && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || ((waterLevel == 1bv32 && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 713]: Loop Invariant Derived loop invariant: (((((((systemActive == 1bv32 && waterLevel == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) || ((((1bv32 == pumpRunning && systemActive == 1bv32) && waterLevel == 1bv32) && !(switchedOnBeforeTS == 0bv32)) && splverifierCounter == 0bv32)) || (((systemActive == 1bv32 && waterLevel == 1bv32) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || (((1bv32 == pumpRunning && waterLevel == 2bv32) && systemActive == 1bv32) && splverifierCounter == 0bv32)) || (((waterLevel == 2bv32 && systemActive == 1bv32) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || ((((1bv32 == pumpRunning && systemActive == 1bv32) && switchedOnBeforeTS == 1bv32) && waterLevel == 0bv32) && splverifierCounter == 0bv32) - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: (systemActive == 1bv32 && waterLevel == 1bv32) && 0bv32 == pumpRunning - InvariantResult [Line: 623]: Loop Invariant Derived loop invariant: ((((((((((!(2bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 0bv32)) || (0bv32 == pumpRunning && waterLevel == \old(waterLevel))) && ((!(0bv32 == \old(waterLevel)) || !(\old(pumpRunning) == 0bv32)) || !(systemActive == 0bv32))) && (((!(0bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 1bv32)) || !(\old(switchedOnBeforeTS) == 1bv32))) && ((!(systemActive == 1bv32) || !(\old(pumpRunning) == 0bv32)) || !(1bv32 == \old(waterLevel)))) && (((!(systemActive == 1bv32) || \old(switchedOnBeforeTS) == 0bv32) || !(1bv32 == \old(waterLevel))) || !(\old(pumpRunning) == 1bv32))) && ((!(2bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 1bv32))) && (((3bv32 == \old(waterLevel) || !(\old(pumpRunning) == 0bv32)) || !(1bv32 == \old(waterLevel))) || !(systemActive == 0bv32))) && (((!(2bv32 == \old(waterLevel)) || 3bv32 == \old(waterLevel)) || !(\old(pumpRunning) == 0bv32)) || !(systemActive == 0bv32))) && ((!(0bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 0bv32)) - InvariantResult [Line: 813]: Loop Invariant Derived loop invariant: (systemActive == 1bv32 && waterLevel == 1bv32) && 0bv32 == pumpRunning - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: (((((((((((!(0bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || (((\old(pumpRunning) == pumpRunning && switchedOnBeforeTS == 1bv32) && waterLevel == \result) && waterLevel == \old(waterLevel))) || !(\old(pumpRunning) == 1bv32)) || !(\old(switchedOnBeforeTS) == 1bv32)) && (((!(0bv32 == \old(waterLevel)) || !(\old(pumpRunning) == 0bv32)) || ((0bv32 == pumpRunning && waterLevel == \result) && waterLevel == \old(waterLevel))) || !(systemActive == 0bv32))) && (((!(2bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || (((\old(pumpRunning) == pumpRunning && switchedOnBeforeTS == 1bv32) && waterLevel == 1bv32) && waterLevel == \result)) || !(\old(pumpRunning) == 1bv32))) && (((!(0bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 0bv32)) || ((0bv32 == pumpRunning && waterLevel == \result) && waterLevel == \old(waterLevel)))) && (((!(\old(pumpRunning) == 0bv32) || !(1bv32 == \old(waterLevel))) || ((0bv32 == pumpRunning && waterLevel == \result) && waterLevel == \old(waterLevel))) || !(systemActive == 0bv32))) && ((((!(systemActive == 1bv32) || \old(switchedOnBeforeTS) == 0bv32) || !(1bv32 == \old(waterLevel))) || !(\old(pumpRunning) == 1bv32)) || (((\old(pumpRunning) == pumpRunning && switchedOnBeforeTS == 1bv32) && waterLevel == 0bv32) && waterLevel == \result))) && (((!(systemActive == 1bv32) || !(\old(pumpRunning) == 0bv32)) || !(1bv32 == \old(waterLevel))) || ((0bv32 == pumpRunning && waterLevel == \result) && waterLevel == \old(waterLevel)))) && ((((!(2bv32 == \old(waterLevel)) || ((1bv32 == pumpRunning && waterLevel == \result) && waterLevel == \old(waterLevel))) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 0bv32)) || ((0bv32 == pumpRunning && waterLevel == \result) && waterLevel == \old(waterLevel)))) && (((!(2bv32 == \old(waterLevel)) || !(\old(pumpRunning) == 0bv32)) || ((0bv32 == pumpRunning && waterLevel == \result) && waterLevel == \old(waterLevel))) || !(systemActive == 0bv32)) - InvariantResult [Line: 679]: Loop Invariant Derived loop invariant: ((((((((((!(2bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 0bv32)) || (0bv32 == pumpRunning && waterLevel == \old(waterLevel))) && ((!(0bv32 == \old(waterLevel)) || !(\old(pumpRunning) == 0bv32)) || !(systemActive == 0bv32))) && (((!(0bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 1bv32)) || !(\old(switchedOnBeforeTS) == 1bv32))) && (((!(systemActive == 1bv32) || \old(switchedOnBeforeTS) == 0bv32) || !(1bv32 == \old(waterLevel))) || !(\old(pumpRunning) == 1bv32))) && ((!(2bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 1bv32))) && (((!(0bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 0bv32)) || ((((\result == 0bv32 && systemActive == 1bv32) && 0bv32 == tmp___0) && 0bv32 == pumpRunning) && waterLevel == \old(waterLevel)))) && (((3bv32 == \old(waterLevel) || !(\old(pumpRunning) == 0bv32)) || !(1bv32 == \old(waterLevel))) || !(systemActive == 0bv32))) && (((!(2bv32 == \old(waterLevel)) || 3bv32 == \old(waterLevel)) || !(\old(pumpRunning) == 0bv32)) || !(systemActive == 0bv32))) && (((!(systemActive == 1bv32) || !(\old(pumpRunning) == 0bv32)) || ((((\result == 0bv32 && systemActive == 1bv32) && 0bv32 == tmp___0) && 0bv32 == pumpRunning) && waterLevel == \old(waterLevel))) || !(1bv32 == \old(waterLevel))) - InvariantResult [Line: 893]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 589]: Loop Invariant Derived loop invariant: ((((((((((!(2bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 0bv32)) || (1bv32 == pumpRunning && waterLevel == \old(waterLevel))) && ((!(0bv32 == \old(waterLevel)) || !(\old(pumpRunning) == 0bv32)) || !(systemActive == 0bv32))) && (((!(0bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 1bv32)) || !(\old(switchedOnBeforeTS) == 1bv32))) && ((!(systemActive == 1bv32) || !(\old(pumpRunning) == 0bv32)) || !(1bv32 == \old(waterLevel)))) && (((!(systemActive == 1bv32) || \old(switchedOnBeforeTS) == 0bv32) || !(1bv32 == \old(waterLevel))) || !(\old(pumpRunning) == 1bv32))) && ((!(2bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 1bv32))) && (((3bv32 == \old(waterLevel) || !(\old(pumpRunning) == 0bv32)) || !(1bv32 == \old(waterLevel))) || !(systemActive == 0bv32))) && (((!(2bv32 == \old(waterLevel)) || 3bv32 == \old(waterLevel)) || !(\old(pumpRunning) == 0bv32)) || !(systemActive == 0bv32))) && ((!(0bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 0bv32)) - InvariantResult [Line: 946]: Loop Invariant Derived loop invariant: ((((((((((!(2bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 0bv32)) || (0bv32 == pumpRunning && waterLevel == \old(waterLevel))) && (((!(systemActive == 1bv32) || !(\old(pumpRunning) == 0bv32)) || !(1bv32 == \old(waterLevel))) || (0bv32 == pumpRunning && waterLevel == \old(waterLevel)))) && (((!(2bv32 == \old(waterLevel)) || !(\old(pumpRunning) == 0bv32)) || !(systemActive == 0bv32)) || (0bv32 == pumpRunning && waterLevel == \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0bv32) || 2bv32 == \old(waterLevel)) || !(1bv32 == \old(waterLevel))) || !(systemActive == 0bv32)) || (0bv32 == pumpRunning && waterLevel == \old(waterLevel)))) && (((!(2bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || ((\old(pumpRunning) == pumpRunning && switchedOnBeforeTS == 1bv32) && waterLevel == \old(waterLevel))) || !(\old(pumpRunning) == 1bv32))) && ((((!(0bv32 == \old(waterLevel)) || !(\old(pumpRunning) == 0bv32)) || 2bv32 == \old(waterLevel)) || !(systemActive == 0bv32)) || (0bv32 == pumpRunning && waterLevel == \old(waterLevel)))) && (((!(0bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || !(\old(pumpRunning) == 0bv32)) || (0bv32 == pumpRunning && waterLevel == \old(waterLevel)))) && ((((!(systemActive == 1bv32) || \old(switchedOnBeforeTS) == 0bv32) || ((1bv32 == pumpRunning && switchedOnBeforeTS == 1bv32) && waterLevel == \old(waterLevel))) || !(1bv32 == \old(waterLevel))) || !(\old(pumpRunning) == 1bv32))) && ((((!(0bv32 == \old(waterLevel)) || !(systemActive == 1bv32)) || ((\old(pumpRunning) == pumpRunning && switchedOnBeforeTS == 1bv32) && waterLevel == \old(waterLevel))) || !(\old(pumpRunning) == 1bv32)) || !(\old(switchedOnBeforeTS) == 1bv32)) - InvariantResult [Line: 841]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-01-10 06:35:55,140 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...