./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 35987657 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 7bcd24ea8f621c8db79e853f5aaf064ffcae573e6c1e9f03eb1f84bb0c15fc3c --- Real Ultimate output --- This is Ultimate 0.2.2-?-3598765 [2022-07-21 05:02:34,572 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-21 05:02:34,574 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-21 05:02:34,606 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-21 05:02:34,606 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-21 05:02:34,608 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-21 05:02:34,610 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-21 05:02:34,612 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-21 05:02:34,614 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-21 05:02:34,617 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-21 05:02:34,618 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-21 05:02:34,621 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-21 05:02:34,621 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-21 05:02:34,622 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-21 05:02:34,623 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-21 05:02:34,625 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-21 05:02:34,626 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-21 05:02:34,627 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-21 05:02:34,628 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-21 05:02:34,632 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-21 05:02:34,633 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-21 05:02:34,644 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-21 05:02:34,645 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-21 05:02:34,646 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-21 05:02:34,647 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-21 05:02:34,651 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-21 05:02:34,651 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-21 05:02:34,652 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-21 05:02:34,652 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-21 05:02:34,652 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-21 05:02:34,653 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-21 05:02:34,653 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-21 05:02:34,654 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-21 05:02:34,655 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-21 05:02:34,656 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-21 05:02:34,656 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-21 05:02:34,657 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-21 05:02:34,657 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-21 05:02:34,657 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-21 05:02:34,658 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-21 05:02:34,658 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-21 05:02:34,659 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-21 05:02:34,663 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-21 05:02:34,686 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-21 05:02:34,687 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-21 05:02:34,687 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-21 05:02:34,687 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-21 05:02:34,688 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-21 05:02:34,688 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-21 05:02:34,689 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-21 05:02:34,689 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-21 05:02:34,689 INFO L138 SettingsManager]: * Use SBE=true [2022-07-21 05:02:34,689 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-21 05:02:34,690 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-21 05:02:34,690 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-21 05:02:34,695 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-21 05:02:34,696 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-21 05:02:34,696 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-21 05:02:34,696 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-21 05:02:34,696 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-21 05:02:34,696 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-21 05:02:34,697 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-21 05:02:34,697 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-21 05:02:34,697 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-21 05:02:34,697 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-21 05:02:34,697 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-21 05:02:34,697 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-21 05:02:34,697 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-21 05:02:34,698 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-21 05:02:34,698 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-21 05:02:34,698 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-21 05:02:34,698 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-21 05:02:34,698 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-21 05:02:34,699 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-21 05:02:34,699 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-21 05:02:34,699 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-21 05:02:34,699 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 7bcd24ea8f621c8db79e853f5aaf064ffcae573e6c1e9f03eb1f84bb0c15fc3c [2022-07-21 05:02:34,957 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-21 05:02:34,975 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-21 05:02:34,976 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-21 05:02:34,977 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-21 05:02:34,978 INFO L275 PluginConnector]: CDTParser initialized [2022-07-21 05:02:34,979 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c [2022-07-21 05:02:35,023 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f0edf2b4c/2850eab70b714220a244e370ae9c19da/FLAG81fb3b4ef [2022-07-21 05:02:35,400 INFO L306 CDTParser]: Found 1 translation units. [2022-07-21 05:02:35,401 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c [2022-07-21 05:02:35,409 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f0edf2b4c/2850eab70b714220a244e370ae9c19da/FLAG81fb3b4ef [2022-07-21 05:02:35,771 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f0edf2b4c/2850eab70b714220a244e370ae9c19da [2022-07-21 05:02:35,773 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-21 05:02:35,774 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-21 05:02:35,776 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-21 05:02:35,776 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-21 05:02:35,781 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-21 05:02:35,782 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.07 05:02:35" (1/1) ... [2022-07-21 05:02:35,782 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4cef314f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:02:35, skipping insertion in model container [2022-07-21 05:02:35,782 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.07 05:02:35" (1/1) ... [2022-07-21 05:02:35,787 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-21 05:02:35,827 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-21 05:02:36,017 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c[8146,8159] [2022-07-21 05:02:36,055 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-21 05:02:36,067 INFO L203 MainTranslator]: Completed pre-run [2022-07-21 05:02:36,109 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c[8146,8159] [2022-07-21 05:02:36,134 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-21 05:02:36,162 INFO L208 MainTranslator]: Completed translation [2022-07-21 05:02:36,163 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:02:36 WrapperNode [2022-07-21 05:02:36,164 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-21 05:02:36,165 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-21 05:02:36,165 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-21 05:02:36,165 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-21 05:02:36,170 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:02:36" (1/1) ... [2022-07-21 05:02:36,193 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:02:36" (1/1) ... [2022-07-21 05:02:36,235 INFO L137 Inliner]: procedures = 60, calls = 164, calls flagged for inlining = 27, calls inlined = 24, statements flattened = 294 [2022-07-21 05:02:36,235 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-21 05:02:36,237 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-21 05:02:36,237 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-21 05:02:36,237 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-21 05:02:36,243 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:02:36" (1/1) ... [2022-07-21 05:02:36,243 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:02:36" (1/1) ... [2022-07-21 05:02:36,254 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:02:36" (1/1) ... [2022-07-21 05:02:36,256 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:02:36" (1/1) ... [2022-07-21 05:02:36,260 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:02:36" (1/1) ... [2022-07-21 05:02:36,270 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:02:36" (1/1) ... [2022-07-21 05:02:36,273 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:02:36" (1/1) ... [2022-07-21 05:02:36,277 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-21 05:02:36,279 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-21 05:02:36,279 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-21 05:02:36,279 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-21 05:02:36,280 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:02:36" (1/1) ... [2022-07-21 05:02:36,284 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-21 05:02:36,298 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 05:02:36,307 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-21 05:02:36,309 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-21 05:02:36,336 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-21 05:02:36,336 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-21 05:02:36,336 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-21 05:02:36,336 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-21 05:02:36,337 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-21 05:02:36,337 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-21 05:02:36,337 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-21 05:02:36,337 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-21 05:02:36,337 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-21 05:02:36,337 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-21 05:02:36,337 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-21 05:02:36,337 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2022-07-21 05:02:36,338 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2022-07-21 05:02:36,338 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-07-21 05:02:36,338 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-07-21 05:02:36,338 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-07-21 05:02:36,338 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-07-21 05:02:36,338 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-21 05:02:36,338 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-21 05:02:36,338 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-21 05:02:36,339 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-21 05:02:36,339 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-21 05:02:36,392 INFO L234 CfgBuilder]: Building ICFG [2022-07-21 05:02:36,393 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-21 05:02:36,662 INFO L275 CfgBuilder]: Performing block encoding [2022-07-21 05:02:36,667 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-21 05:02:36,667 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-21 05:02:36,669 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 05:02:36 BoogieIcfgContainer [2022-07-21 05:02:36,669 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-21 05:02:36,670 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-21 05:02:36,670 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-21 05:02:36,672 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-21 05:02:36,672 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.07 05:02:35" (1/3) ... [2022-07-21 05:02:36,673 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@58250a2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.07 05:02:36, skipping insertion in model container [2022-07-21 05:02:36,673 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:02:36" (2/3) ... [2022-07-21 05:02:36,673 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@58250a2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.07 05:02:36, skipping insertion in model container [2022-07-21 05:02:36,673 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 05:02:36" (3/3) ... [2022-07-21 05:02:36,674 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product56.cil.c [2022-07-21 05:02:36,683 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-21 05:02:36,683 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-21 05:02:36,730 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-21 05:02:36,734 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@14ad96cc, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@7c613b42 [2022-07-21 05:02:36,735 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-21 05:02:36,739 INFO L276 IsEmpty]: Start isEmpty. Operand has 110 states, 82 states have (on average 1.3658536585365855) internal successors, (112), 93 states have internal predecessors, (112), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2022-07-21 05:02:36,745 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-07-21 05:02:36,746 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:02:36,746 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:02:36,747 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:02:36,751 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:02:36,752 INFO L85 PathProgramCache]: Analyzing trace with hash 2077500872, now seen corresponding path program 1 times [2022-07-21 05:02:36,757 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:02:36,758 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [807303771] [2022-07-21 05:02:36,758 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:02:36,759 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:02:36,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:36,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-21 05:02:36,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:36,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-21 05:02:36,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:36,969 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-21 05:02:36,969 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:02:36,969 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [807303771] [2022-07-21 05:02:36,970 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [807303771] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:02:36,970 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:02:36,970 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-21 05:02:36,971 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1659335165] [2022-07-21 05:02:36,972 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:02:36,975 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-21 05:02:36,976 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:02:37,000 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-21 05:02:37,001 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-21 05:02:37,004 INFO L87 Difference]: Start difference. First operand has 110 states, 82 states have (on average 1.3658536585365855) internal successors, (112), 93 states have internal predecessors, (112), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-21 05:02:37,047 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:02:37,047 INFO L93 Difference]: Finished difference Result 211 states and 286 transitions. [2022-07-21 05:02:37,048 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-21 05:02:37,049 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-07-21 05:02:37,049 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:02:37,060 INFO L225 Difference]: With dead ends: 211 [2022-07-21 05:02:37,060 INFO L226 Difference]: Without dead ends: 101 [2022-07-21 05:02:37,064 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-21 05:02:37,067 INFO L413 NwaCegarLoop]: 140 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 140 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 05:02:37,068 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 140 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 05:02:37,079 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 101 states. [2022-07-21 05:02:37,102 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 101 to 101. [2022-07-21 05:02:37,104 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 101 states, 75 states have (on average 1.3066666666666666) internal successors, (98), 85 states have internal predecessors, (98), 17 states have call successors, (17), 9 states have call predecessors, (17), 8 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-07-21 05:02:37,108 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 131 transitions. [2022-07-21 05:02:37,110 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 131 transitions. Word has length 32 [2022-07-21 05:02:37,110 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:02:37,110 INFO L495 AbstractCegarLoop]: Abstraction has 101 states and 131 transitions. [2022-07-21 05:02:37,111 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-21 05:02:37,111 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 131 transitions. [2022-07-21 05:02:37,117 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-07-21 05:02:37,117 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:02:37,118 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:02:37,118 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-21 05:02:37,119 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:02:37,120 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:02:37,120 INFO L85 PathProgramCache]: Analyzing trace with hash 604529845, now seen corresponding path program 1 times [2022-07-21 05:02:37,120 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:02:37,120 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [850093659] [2022-07-21 05:02:37,120 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:02:37,121 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:02:37,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:37,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-21 05:02:37,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:37,193 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-21 05:02:37,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:37,195 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-21 05:02:37,195 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:02:37,195 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [850093659] [2022-07-21 05:02:37,196 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [850093659] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:02:37,196 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:02:37,196 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-21 05:02:37,196 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1580559152] [2022-07-21 05:02:37,197 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:02:37,199 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-21 05:02:37,199 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:02:37,200 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-21 05:02:37,200 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-21 05:02:37,200 INFO L87 Difference]: Start difference. First operand 101 states and 131 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-21 05:02:37,235 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:02:37,235 INFO L93 Difference]: Finished difference Result 162 states and 210 transitions. [2022-07-21 05:02:37,236 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-21 05:02:37,236 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2022-07-21 05:02:37,236 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:02:37,237 INFO L225 Difference]: With dead ends: 162 [2022-07-21 05:02:37,237 INFO L226 Difference]: Without dead ends: 92 [2022-07-21 05:02:37,237 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-21 05:02:37,238 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 17 mSDsluCounter, 96 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 214 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 05:02:37,239 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 214 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 05:02:37,239 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92 states. [2022-07-21 05:02:37,245 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92 to 92. [2022-07-21 05:02:37,246 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 92 states, 69 states have (on average 1.318840579710145) internal successors, (91), 79 states have internal predecessors, (91), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2022-07-21 05:02:37,246 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 92 states to 92 states and 119 transitions. [2022-07-21 05:02:37,247 INFO L78 Accepts]: Start accepts. Automaton has 92 states and 119 transitions. Word has length 33 [2022-07-21 05:02:37,247 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:02:37,247 INFO L495 AbstractCegarLoop]: Abstraction has 92 states and 119 transitions. [2022-07-21 05:02:37,247 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-21 05:02:37,247 INFO L276 IsEmpty]: Start isEmpty. Operand 92 states and 119 transitions. [2022-07-21 05:02:37,248 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-07-21 05:02:37,248 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:02:37,248 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:02:37,249 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-21 05:02:37,249 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:02:37,249 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:02:37,249 INFO L85 PathProgramCache]: Analyzing trace with hash -1594505260, now seen corresponding path program 1 times [2022-07-21 05:02:37,249 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:02:37,250 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1909077148] [2022-07-21 05:02:37,250 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:02:37,250 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:02:37,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:37,302 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-21 05:02:37,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:37,306 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-07-21 05:02:37,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:37,309 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-21 05:02:37,310 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:02:37,310 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1909077148] [2022-07-21 05:02:37,310 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1909077148] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:02:37,311 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:02:37,311 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-21 05:02:37,311 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1873397784] [2022-07-21 05:02:37,311 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:02:37,311 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-21 05:02:37,312 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:02:37,312 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-21 05:02:37,312 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-21 05:02:37,312 INFO L87 Difference]: Start difference. First operand 92 states and 119 transitions. Second operand has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-21 05:02:37,331 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:02:37,332 INFO L93 Difference]: Finished difference Result 258 states and 340 transitions. [2022-07-21 05:02:37,332 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-21 05:02:37,332 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2022-07-21 05:02:37,332 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:02:37,334 INFO L225 Difference]: With dead ends: 258 [2022-07-21 05:02:37,334 INFO L226 Difference]: Without dead ends: 174 [2022-07-21 05:02:37,335 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-21 05:02:37,336 INFO L413 NwaCegarLoop]: 146 mSDtfsCounter, 107 mSDsluCounter, 106 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 107 SdHoareTripleChecker+Valid, 252 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 05:02:37,336 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [107 Valid, 252 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 05:02:37,337 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 174 states. [2022-07-21 05:02:37,348 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 174 to 171. [2022-07-21 05:02:37,349 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 171 states, 126 states have (on average 1.3412698412698412) internal successors, (169), 145 states have internal predecessors, (169), 28 states have call successors, (28), 16 states have call predecessors, (28), 16 states have return successors, (28), 17 states have call predecessors, (28), 28 states have call successors, (28) [2022-07-21 05:02:37,350 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 225 transitions. [2022-07-21 05:02:37,350 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 225 transitions. Word has length 38 [2022-07-21 05:02:37,351 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:02:37,351 INFO L495 AbstractCegarLoop]: Abstraction has 171 states and 225 transitions. [2022-07-21 05:02:37,351 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-21 05:02:37,351 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 225 transitions. [2022-07-21 05:02:37,352 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-07-21 05:02:37,352 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:02:37,352 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:02:37,352 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-21 05:02:37,353 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:02:37,353 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:02:37,353 INFO L85 PathProgramCache]: Analyzing trace with hash -969732780, now seen corresponding path program 1 times [2022-07-21 05:02:37,353 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:02:37,353 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [169267631] [2022-07-21 05:02:37,354 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:02:37,354 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:02:37,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:37,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-21 05:02:37,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:37,403 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-07-21 05:02:37,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:37,417 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-07-21 05:02:37,417 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:02:37,418 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [169267631] [2022-07-21 05:02:37,418 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [169267631] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:02:37,418 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:02:37,418 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-21 05:02:37,418 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [282971119] [2022-07-21 05:02:37,419 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:02:37,419 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-21 05:02:37,419 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:02:37,420 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-21 05:02:37,420 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-21 05:02:37,420 INFO L87 Difference]: Start difference. First operand 171 states and 225 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-21 05:02:37,545 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:02:37,545 INFO L93 Difference]: Finished difference Result 445 states and 602 transitions. [2022-07-21 05:02:37,545 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-21 05:02:37,545 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2022-07-21 05:02:37,546 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:02:37,550 INFO L225 Difference]: With dead ends: 445 [2022-07-21 05:02:37,550 INFO L226 Difference]: Without dead ends: 282 [2022-07-21 05:02:37,551 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-07-21 05:02:37,559 INFO L413 NwaCegarLoop]: 134 mSDtfsCounter, 57 mSDsluCounter, 438 mSDsCounter, 0 mSdLazyCounter, 78 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 572 SdHoareTripleChecker+Invalid, 91 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 78 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-21 05:02:37,560 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [58 Valid, 572 Invalid, 91 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 78 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-21 05:02:37,562 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 282 states. [2022-07-21 05:02:37,580 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 282 to 269. [2022-07-21 05:02:37,580 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 269 states, 200 states have (on average 1.29) internal successors, (258), 217 states have internal predecessors, (258), 38 states have call successors, (38), 30 states have call predecessors, (38), 30 states have return successors, (50), 33 states have call predecessors, (50), 38 states have call successors, (50) [2022-07-21 05:02:37,581 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 269 states to 269 states and 346 transitions. [2022-07-21 05:02:37,582 INFO L78 Accepts]: Start accepts. Automaton has 269 states and 346 transitions. Word has length 41 [2022-07-21 05:02:37,582 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:02:37,582 INFO L495 AbstractCegarLoop]: Abstraction has 269 states and 346 transitions. [2022-07-21 05:02:37,582 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-21 05:02:37,582 INFO L276 IsEmpty]: Start isEmpty. Operand 269 states and 346 transitions. [2022-07-21 05:02:37,583 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-07-21 05:02:37,583 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:02:37,583 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:02:37,583 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-21 05:02:37,583 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:02:37,584 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:02:37,584 INFO L85 PathProgramCache]: Analyzing trace with hash -1724941251, now seen corresponding path program 1 times [2022-07-21 05:02:37,584 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:02:37,584 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [553804437] [2022-07-21 05:02:37,584 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:02:37,584 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:02:37,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:37,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-21 05:02:37,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:37,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-21 05:02:37,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:37,644 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:02:37,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:37,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-07-21 05:02:37,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:37,661 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-21 05:02:37,661 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:02:37,661 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [553804437] [2022-07-21 05:02:37,661 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [553804437] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:02:37,662 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:02:37,662 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-21 05:02:37,662 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2027504869] [2022-07-21 05:02:37,662 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:02:37,662 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-21 05:02:37,663 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:02:37,663 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-21 05:02:37,663 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-21 05:02:37,663 INFO L87 Difference]: Start difference. First operand 269 states and 346 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-21 05:02:37,853 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:02:37,854 INFO L93 Difference]: Finished difference Result 853 states and 1148 transitions. [2022-07-21 05:02:37,854 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-21 05:02:37,854 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 57 [2022-07-21 05:02:37,854 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:02:37,857 INFO L225 Difference]: With dead ends: 853 [2022-07-21 05:02:37,857 INFO L226 Difference]: Without dead ends: 592 [2022-07-21 05:02:37,858 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=111, Unknown=0, NotChecked=0, Total=156 [2022-07-21 05:02:37,858 INFO L413 NwaCegarLoop]: 130 mSDtfsCounter, 193 mSDsluCounter, 343 mSDsCounter, 0 mSdLazyCounter, 190 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 199 SdHoareTripleChecker+Valid, 473 SdHoareTripleChecker+Invalid, 248 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 190 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-21 05:02:37,859 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [199 Valid, 473 Invalid, 248 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 190 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-21 05:02:37,860 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 592 states. [2022-07-21 05:02:37,893 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 592 to 529. [2022-07-21 05:02:37,894 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 529 states, 396 states have (on average 1.2575757575757576) internal successors, (498), 418 states have internal predecessors, (498), 69 states have call successors, (69), 53 states have call predecessors, (69), 63 states have return successors, (107), 72 states have call predecessors, (107), 69 states have call successors, (107) [2022-07-21 05:02:37,896 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 529 states to 529 states and 674 transitions. [2022-07-21 05:02:37,897 INFO L78 Accepts]: Start accepts. Automaton has 529 states and 674 transitions. Word has length 57 [2022-07-21 05:02:37,897 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:02:37,897 INFO L495 AbstractCegarLoop]: Abstraction has 529 states and 674 transitions. [2022-07-21 05:02:37,897 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-21 05:02:37,897 INFO L276 IsEmpty]: Start isEmpty. Operand 529 states and 674 transitions. [2022-07-21 05:02:37,898 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-07-21 05:02:37,898 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:02:37,899 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:02:37,899 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-21 05:02:37,899 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:02:37,899 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:02:37,900 INFO L85 PathProgramCache]: Analyzing trace with hash 80497083, now seen corresponding path program 1 times [2022-07-21 05:02:37,900 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:02:37,900 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [208564071] [2022-07-21 05:02:37,900 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:02:37,900 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:02:37,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:37,920 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-21 05:02:37,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:37,923 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-21 05:02:37,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:37,928 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:02:37,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:37,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-07-21 05:02:37,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:37,944 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-21 05:02:37,944 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:02:37,944 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [208564071] [2022-07-21 05:02:37,944 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [208564071] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:02:37,944 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:02:37,944 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-21 05:02:37,945 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1277004814] [2022-07-21 05:02:37,945 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:02:37,945 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-21 05:02:37,945 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:02:37,946 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-21 05:02:37,946 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-21 05:02:37,946 INFO L87 Difference]: Start difference. First operand 529 states and 674 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-21 05:02:38,071 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:02:38,071 INFO L93 Difference]: Finished difference Result 1076 states and 1397 transitions. [2022-07-21 05:02:38,072 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-21 05:02:38,072 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2022-07-21 05:02:38,073 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:02:38,075 INFO L225 Difference]: With dead ends: 1076 [2022-07-21 05:02:38,075 INFO L226 Difference]: Without dead ends: 555 [2022-07-21 05:02:38,077 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-07-21 05:02:38,078 INFO L413 NwaCegarLoop]: 112 mSDtfsCounter, 74 mSDsluCounter, 340 mSDsCounter, 0 mSdLazyCounter, 139 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 452 SdHoareTripleChecker+Invalid, 164 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 139 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-21 05:02:38,078 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [77 Valid, 452 Invalid, 164 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 139 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-21 05:02:38,079 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 555 states. [2022-07-21 05:02:38,109 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 555 to 541. [2022-07-21 05:02:38,112 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 541 states, 408 states have (on average 1.25) internal successors, (510), 430 states have internal predecessors, (510), 69 states have call successors, (69), 53 states have call predecessors, (69), 63 states have return successors, (107), 72 states have call predecessors, (107), 69 states have call successors, (107) [2022-07-21 05:02:38,114 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 541 states to 541 states and 686 transitions. [2022-07-21 05:02:38,115 INFO L78 Accepts]: Start accepts. Automaton has 541 states and 686 transitions. Word has length 57 [2022-07-21 05:02:38,115 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:02:38,116 INFO L495 AbstractCegarLoop]: Abstraction has 541 states and 686 transitions. [2022-07-21 05:02:38,116 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-21 05:02:38,116 INFO L276 IsEmpty]: Start isEmpty. Operand 541 states and 686 transitions. [2022-07-21 05:02:38,118 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-07-21 05:02:38,118 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:02:38,119 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:02:38,119 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-21 05:02:38,119 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:02:38,120 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:02:38,120 INFO L85 PathProgramCache]: Analyzing trace with hash 503198909, now seen corresponding path program 1 times [2022-07-21 05:02:38,120 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:02:38,120 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [193199936] [2022-07-21 05:02:38,120 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:02:38,121 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:02:38,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:38,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-21 05:02:38,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:38,177 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-21 05:02:38,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:38,188 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:02:38,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:38,205 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-07-21 05:02:38,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:38,207 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-21 05:02:38,208 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:02:38,208 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [193199936] [2022-07-21 05:02:38,208 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [193199936] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:02:38,208 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:02:38,208 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-21 05:02:38,208 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [299646071] [2022-07-21 05:02:38,209 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:02:38,209 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-21 05:02:38,209 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:02:38,209 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-21 05:02:38,210 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-21 05:02:38,210 INFO L87 Difference]: Start difference. First operand 541 states and 686 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-21 05:02:38,410 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:02:38,410 INFO L93 Difference]: Finished difference Result 996 states and 1286 transitions. [2022-07-21 05:02:38,410 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-21 05:02:38,410 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 57 [2022-07-21 05:02:38,411 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:02:38,412 INFO L225 Difference]: With dead ends: 996 [2022-07-21 05:02:38,413 INFO L226 Difference]: Without dead ends: 463 [2022-07-21 05:02:38,414 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2022-07-21 05:02:38,414 INFO L413 NwaCegarLoop]: 121 mSDtfsCounter, 250 mSDsluCounter, 336 mSDsCounter, 0 mSdLazyCounter, 188 mSolverCounterSat, 67 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 258 SdHoareTripleChecker+Valid, 457 SdHoareTripleChecker+Invalid, 255 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 67 IncrementalHoareTripleChecker+Valid, 188 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-21 05:02:38,414 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [258 Valid, 457 Invalid, 255 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [67 Valid, 188 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-21 05:02:38,415 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 463 states. [2022-07-21 05:02:38,425 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 463 to 447. [2022-07-21 05:02:38,426 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 447 states, 336 states have (on average 1.2291666666666667) internal successors, (413), 355 states have internal predecessors, (413), 58 states have call successors, (58), 44 states have call predecessors, (58), 52 states have return successors, (80), 59 states have call predecessors, (80), 58 states have call successors, (80) [2022-07-21 05:02:38,427 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 447 states to 447 states and 551 transitions. [2022-07-21 05:02:38,427 INFO L78 Accepts]: Start accepts. Automaton has 447 states and 551 transitions. Word has length 57 [2022-07-21 05:02:38,427 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:02:38,428 INFO L495 AbstractCegarLoop]: Abstraction has 447 states and 551 transitions. [2022-07-21 05:02:38,428 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-21 05:02:38,428 INFO L276 IsEmpty]: Start isEmpty. Operand 447 states and 551 transitions. [2022-07-21 05:02:38,429 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-07-21 05:02:38,429 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:02:38,429 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:02:38,429 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-21 05:02:38,429 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:02:38,430 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:02:38,430 INFO L85 PathProgramCache]: Analyzing trace with hash 924671973, now seen corresponding path program 1 times [2022-07-21 05:02:38,430 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:02:38,430 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [260123359] [2022-07-21 05:02:38,430 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:02:38,430 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:02:38,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:38,508 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-21 05:02:38,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:38,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-21 05:02:38,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:38,545 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-07-21 05:02:38,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:38,565 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:02:38,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:38,584 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 53 [2022-07-21 05:02:38,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:38,587 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-21 05:02:38,587 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:02:38,587 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [260123359] [2022-07-21 05:02:38,587 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [260123359] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:02:38,587 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:02:38,588 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-07-21 05:02:38,588 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [355000457] [2022-07-21 05:02:38,588 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:02:38,588 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-07-21 05:02:38,588 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:02:38,588 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-07-21 05:02:38,589 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-07-21 05:02:38,589 INFO L87 Difference]: Start difference. First operand 447 states and 551 transitions. Second operand has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-07-21 05:02:39,390 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:02:39,391 INFO L93 Difference]: Finished difference Result 1669 states and 2221 transitions. [2022-07-21 05:02:39,391 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-07-21 05:02:39,391 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 61 [2022-07-21 05:02:39,392 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:02:39,396 INFO L225 Difference]: With dead ends: 1669 [2022-07-21 05:02:39,396 INFO L226 Difference]: Without dead ends: 1344 [2022-07-21 05:02:39,398 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 13 SyntacticMatches, 1 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 297 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=221, Invalid=969, Unknown=0, NotChecked=0, Total=1190 [2022-07-21 05:02:39,398 INFO L413 NwaCegarLoop]: 191 mSDtfsCounter, 624 mSDsluCounter, 772 mSDsCounter, 0 mSdLazyCounter, 1027 mSolverCounterSat, 244 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 634 SdHoareTripleChecker+Valid, 963 SdHoareTripleChecker+Invalid, 1271 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 244 IncrementalHoareTripleChecker+Valid, 1027 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-07-21 05:02:39,399 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [634 Valid, 963 Invalid, 1271 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [244 Valid, 1027 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-07-21 05:02:39,400 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1344 states. [2022-07-21 05:02:39,438 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1344 to 1190. [2022-07-21 05:02:39,440 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1190 states, 887 states have (on average 1.2232243517474635) internal successors, (1085), 944 states have internal predecessors, (1085), 160 states have call successors, (160), 118 states have call predecessors, (160), 142 states have return successors, (260), 162 states have call predecessors, (260), 160 states have call successors, (260) [2022-07-21 05:02:39,444 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1190 states to 1190 states and 1505 transitions. [2022-07-21 05:02:39,444 INFO L78 Accepts]: Start accepts. Automaton has 1190 states and 1505 transitions. Word has length 61 [2022-07-21 05:02:39,444 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:02:39,444 INFO L495 AbstractCegarLoop]: Abstraction has 1190 states and 1505 transitions. [2022-07-21 05:02:39,444 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-07-21 05:02:39,445 INFO L276 IsEmpty]: Start isEmpty. Operand 1190 states and 1505 transitions. [2022-07-21 05:02:39,446 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 92 [2022-07-21 05:02:39,446 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:02:39,446 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:02:39,446 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-21 05:02:39,446 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:02:39,447 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:02:39,447 INFO L85 PathProgramCache]: Analyzing trace with hash 798113011, now seen corresponding path program 1 times [2022-07-21 05:02:39,447 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:02:39,447 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1265876240] [2022-07-21 05:02:39,447 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:02:39,447 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:02:39,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:39,469 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-21 05:02:39,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:39,475 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-21 05:02:39,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:39,488 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 05:02:39,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:39,493 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-21 05:02:39,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:39,496 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:02:39,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:39,498 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-07-21 05:02:39,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:39,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2022-07-21 05:02:39,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:39,500 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-07-21 05:02:39,500 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:02:39,500 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1265876240] [2022-07-21 05:02:39,501 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1265876240] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:02:39,501 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:02:39,501 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-21 05:02:39,501 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1240080585] [2022-07-21 05:02:39,501 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:02:39,502 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-21 05:02:39,502 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:02:39,502 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-21 05:02:39,502 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-07-21 05:02:39,502 INFO L87 Difference]: Start difference. First operand 1190 states and 1505 transitions. Second operand has 7 states, 7 states have (on average 10.285714285714286) internal successors, (72), 4 states have internal predecessors, (72), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2022-07-21 05:02:39,747 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:02:39,747 INFO L93 Difference]: Finished difference Result 2008 states and 2529 transitions. [2022-07-21 05:02:39,747 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-07-21 05:02:39,747 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 10.285714285714286) internal successors, (72), 4 states have internal predecessors, (72), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 91 [2022-07-21 05:02:39,747 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:02:39,750 INFO L225 Difference]: With dead ends: 2008 [2022-07-21 05:02:39,750 INFO L226 Difference]: Without dead ends: 826 [2022-07-21 05:02:39,753 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2022-07-21 05:02:39,753 INFO L413 NwaCegarLoop]: 153 mSDtfsCounter, 345 mSDsluCounter, 228 mSDsCounter, 0 mSdLazyCounter, 226 mSolverCounterSat, 135 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 354 SdHoareTripleChecker+Valid, 381 SdHoareTripleChecker+Invalid, 361 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 135 IncrementalHoareTripleChecker+Valid, 226 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-21 05:02:39,753 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [354 Valid, 381 Invalid, 361 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [135 Valid, 226 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-21 05:02:39,754 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 826 states. [2022-07-21 05:02:39,773 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 826 to 790. [2022-07-21 05:02:39,774 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 790 states, 594 states have (on average 1.2121212121212122) internal successors, (720), 633 states have internal predecessors, (720), 104 states have call successors, (104), 79 states have call predecessors, (104), 91 states have return successors, (155), 105 states have call predecessors, (155), 104 states have call successors, (155) [2022-07-21 05:02:39,776 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 790 states to 790 states and 979 transitions. [2022-07-21 05:02:39,776 INFO L78 Accepts]: Start accepts. Automaton has 790 states and 979 transitions. Word has length 91 [2022-07-21 05:02:39,776 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:02:39,776 INFO L495 AbstractCegarLoop]: Abstraction has 790 states and 979 transitions. [2022-07-21 05:02:39,777 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 10.285714285714286) internal successors, (72), 4 states have internal predecessors, (72), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2022-07-21 05:02:39,777 INFO L276 IsEmpty]: Start isEmpty. Operand 790 states and 979 transitions. [2022-07-21 05:02:39,777 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 112 [2022-07-21 05:02:39,778 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:02:39,778 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:02:39,778 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-21 05:02:39,778 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:02:39,778 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:02:39,778 INFO L85 PathProgramCache]: Analyzing trace with hash -726468575, now seen corresponding path program 1 times [2022-07-21 05:02:39,778 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:02:39,778 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1884968791] [2022-07-21 05:02:39,778 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:02:39,779 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:02:39,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:39,823 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-21 05:02:39,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:39,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-21 05:02:39,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:39,841 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 05:02:39,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:39,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-21 05:02:39,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:39,853 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:02:39,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:39,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-07-21 05:02:39,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:39,869 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2022-07-21 05:02:39,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:39,872 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-21 05:02:39,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:39,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:02:39,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:39,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2022-07-21 05:02:39,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:39,875 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 16 proven. 13 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-07-21 05:02:39,875 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:02:39,875 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1884968791] [2022-07-21 05:02:39,875 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1884968791] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-21 05:02:39,875 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1387796535] [2022-07-21 05:02:39,876 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:02:39,876 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 05:02:39,876 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 05:02:39,877 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-21 05:02:39,911 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-21 05:02:39,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:39,968 INFO L263 TraceCheckSpWp]: Trace formula consists of 512 conjuncts, 8 conjunts are in the unsatisfiable core [2022-07-21 05:02:39,973 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 05:02:40,106 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 27 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:02:40,106 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-21 05:02:40,271 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 19 proven. 10 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-07-21 05:02:40,272 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1387796535] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-21 05:02:40,272 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-21 05:02:40,272 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2022-07-21 05:02:40,272 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1039612078] [2022-07-21 05:02:40,272 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-21 05:02:40,273 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-07-21 05:02:40,273 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:02:40,273 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-07-21 05:02:40,273 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2022-07-21 05:02:40,273 INFO L87 Difference]: Start difference. First operand 790 states and 979 transitions. Second operand has 15 states, 15 states have (on average 9.133333333333333) internal successors, (137), 10 states have internal predecessors, (137), 6 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 6 states have call successors, (19) [2022-07-21 05:02:41,290 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:02:41,290 INFO L93 Difference]: Finished difference Result 1832 states and 2348 transitions. [2022-07-21 05:02:41,290 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2022-07-21 05:02:41,291 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 9.133333333333333) internal successors, (137), 10 states have internal predecessors, (137), 6 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 6 states have call successors, (19) Word has length 111 [2022-07-21 05:02:41,291 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:02:41,295 INFO L225 Difference]: With dead ends: 1832 [2022-07-21 05:02:41,295 INFO L226 Difference]: Without dead ends: 1139 [2022-07-21 05:02:41,298 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 310 GetRequests, 255 SyntacticMatches, 1 SemanticMatches, 54 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 904 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=621, Invalid=2459, Unknown=0, NotChecked=0, Total=3080 [2022-07-21 05:02:41,298 INFO L413 NwaCegarLoop]: 255 mSDtfsCounter, 590 mSDsluCounter, 883 mSDsCounter, 0 mSdLazyCounter, 958 mSolverCounterSat, 303 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 599 SdHoareTripleChecker+Valid, 1138 SdHoareTripleChecker+Invalid, 1261 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 303 IncrementalHoareTripleChecker+Valid, 958 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-07-21 05:02:41,299 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [599 Valid, 1138 Invalid, 1261 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [303 Valid, 958 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-07-21 05:02:41,299 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1139 states. [2022-07-21 05:02:41,334 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1139 to 887. [2022-07-21 05:02:41,335 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 887 states, 659 states have (on average 1.1881638846737481) internal successors, (783), 710 states have internal predecessors, (783), 121 states have call successors, (121), 100 states have call predecessors, (121), 106 states have return successors, (154), 111 states have call predecessors, (154), 121 states have call successors, (154) [2022-07-21 05:02:41,338 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 887 states to 887 states and 1058 transitions. [2022-07-21 05:02:41,338 INFO L78 Accepts]: Start accepts. Automaton has 887 states and 1058 transitions. Word has length 111 [2022-07-21 05:02:41,339 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:02:41,340 INFO L495 AbstractCegarLoop]: Abstraction has 887 states and 1058 transitions. [2022-07-21 05:02:41,340 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 9.133333333333333) internal successors, (137), 10 states have internal predecessors, (137), 6 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 6 states have call successors, (19) [2022-07-21 05:02:41,340 INFO L276 IsEmpty]: Start isEmpty. Operand 887 states and 1058 transitions. [2022-07-21 05:02:41,345 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 192 [2022-07-21 05:02:41,345 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:02:41,346 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:02:41,368 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-07-21 05:02:41,563 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-07-21 05:02:41,564 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:02:41,564 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:02:41,564 INFO L85 PathProgramCache]: Analyzing trace with hash 605285009, now seen corresponding path program 1 times [2022-07-21 05:02:41,565 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:02:41,565 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1924715750] [2022-07-21 05:02:41,565 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:02:41,565 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:02:41,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:41,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-21 05:02:41,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:41,603 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-21 05:02:41,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:41,607 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 05:02:41,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:41,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-21 05:02:41,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:41,612 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:02:41,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:41,614 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-07-21 05:02:41,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:41,619 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 05:02:41,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:41,620 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-21 05:02:41,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:41,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-21 05:02:41,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:41,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:02:41,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:41,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2022-07-21 05:02:41,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:41,645 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 05:02:41,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:41,646 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-21 05:02:41,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:41,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 153 [2022-07-21 05:02:41,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:41,650 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 162 [2022-07-21 05:02:41,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:41,652 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:02:41,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:41,657 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 183 [2022-07-21 05:02:41,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:41,659 INFO L134 CoverageAnalysis]: Checked inductivity of 203 backedges. 81 proven. 0 refuted. 0 times theorem prover too weak. 122 trivial. 0 not checked. [2022-07-21 05:02:41,659 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:02:41,659 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1924715750] [2022-07-21 05:02:41,659 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1924715750] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:02:41,659 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:02:41,659 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-07-21 05:02:41,660 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [979693468] [2022-07-21 05:02:41,660 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:02:41,660 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-07-21 05:02:41,660 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:02:41,660 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-07-21 05:02:41,661 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2022-07-21 05:02:41,661 INFO L87 Difference]: Start difference. First operand 887 states and 1058 transitions. Second operand has 10 states, 10 states have (on average 9.7) internal successors, (97), 7 states have internal predecessors, (97), 4 states have call successors, (13), 5 states have call predecessors, (13), 2 states have return successors, (13), 4 states have call predecessors, (13), 4 states have call successors, (13) [2022-07-21 05:02:42,276 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:02:42,276 INFO L93 Difference]: Finished difference Result 2536 states and 3071 transitions. [2022-07-21 05:02:42,277 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2022-07-21 05:02:42,277 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 9.7) internal successors, (97), 7 states have internal predecessors, (97), 4 states have call successors, (13), 5 states have call predecessors, (13), 2 states have return successors, (13), 4 states have call predecessors, (13), 4 states have call successors, (13) Word has length 191 [2022-07-21 05:02:42,277 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:02:42,283 INFO L225 Difference]: With dead ends: 2536 [2022-07-21 05:02:42,283 INFO L226 Difference]: Without dead ends: 1657 [2022-07-21 05:02:42,285 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 46 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 251 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=229, Invalid=893, Unknown=0, NotChecked=0, Total=1122 [2022-07-21 05:02:42,286 INFO L413 NwaCegarLoop]: 229 mSDtfsCounter, 434 mSDsluCounter, 674 mSDsCounter, 0 mSdLazyCounter, 857 mSolverCounterSat, 154 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 440 SdHoareTripleChecker+Valid, 903 SdHoareTripleChecker+Invalid, 1011 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 154 IncrementalHoareTripleChecker+Valid, 857 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-07-21 05:02:42,286 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [440 Valid, 903 Invalid, 1011 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [154 Valid, 857 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-07-21 05:02:42,288 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1657 states. [2022-07-21 05:02:42,350 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1657 to 1648. [2022-07-21 05:02:42,351 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1648 states, 1231 states have (on average 1.1551584077985377) internal successors, (1422), 1318 states have internal predecessors, (1422), 221 states have call successors, (221), 188 states have call predecessors, (221), 195 states have return successors, (277), 205 states have call predecessors, (277), 221 states have call successors, (277) [2022-07-21 05:02:42,356 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1648 states to 1648 states and 1920 transitions. [2022-07-21 05:02:42,356 INFO L78 Accepts]: Start accepts. Automaton has 1648 states and 1920 transitions. Word has length 191 [2022-07-21 05:02:42,356 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:02:42,356 INFO L495 AbstractCegarLoop]: Abstraction has 1648 states and 1920 transitions. [2022-07-21 05:02:42,357 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 9.7) internal successors, (97), 7 states have internal predecessors, (97), 4 states have call successors, (13), 5 states have call predecessors, (13), 2 states have return successors, (13), 4 states have call predecessors, (13), 4 states have call successors, (13) [2022-07-21 05:02:42,357 INFO L276 IsEmpty]: Start isEmpty. Operand 1648 states and 1920 transitions. [2022-07-21 05:02:42,360 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 196 [2022-07-21 05:02:42,360 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:02:42,360 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:02:42,360 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-07-21 05:02:42,361 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:02:42,361 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:02:42,361 INFO L85 PathProgramCache]: Analyzing trace with hash -1124053067, now seen corresponding path program 1 times [2022-07-21 05:02:42,361 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:02:42,361 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [88693680] [2022-07-21 05:02:42,361 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:02:42,362 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:02:42,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:42,408 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-21 05:02:42,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:42,414 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-21 05:02:42,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:42,433 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 05:02:42,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:42,438 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-21 05:02:42,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:42,440 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:02:42,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:42,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-07-21 05:02:42,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:42,476 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 05:02:42,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:42,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-21 05:02:42,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:42,481 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-21 05:02:42,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:42,483 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:02:42,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:42,490 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2022-07-21 05:02:42,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:42,494 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2022-07-21 05:02:42,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:42,497 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 05:02:42,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:42,498 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-21 05:02:42,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:42,500 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 157 [2022-07-21 05:02:42,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:42,500 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 166 [2022-07-21 05:02:42,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:42,502 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:02:42,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:42,504 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 187 [2022-07-21 05:02:42,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:42,507 INFO L134 CoverageAnalysis]: Checked inductivity of 203 backedges. 92 proven. 28 refuted. 0 times theorem prover too weak. 83 trivial. 0 not checked. [2022-07-21 05:02:42,507 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:02:42,507 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [88693680] [2022-07-21 05:02:42,508 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [88693680] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-21 05:02:42,508 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [996008730] [2022-07-21 05:02:42,508 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:02:42,508 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 05:02:42,508 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 05:02:42,525 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-21 05:02:42,527 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-21 05:02:42,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:42,629 INFO L263 TraceCheckSpWp]: Trace formula consists of 733 conjuncts, 13 conjunts are in the unsatisfiable core [2022-07-21 05:02:42,633 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 05:02:42,800 INFO L134 CoverageAnalysis]: Checked inductivity of 203 backedges. 147 proven. 4 refuted. 0 times theorem prover too weak. 52 trivial. 0 not checked. [2022-07-21 05:02:42,800 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-21 05:02:43,119 INFO L134 CoverageAnalysis]: Checked inductivity of 203 backedges. 81 proven. 39 refuted. 0 times theorem prover too weak. 83 trivial. 0 not checked. [2022-07-21 05:02:43,120 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [996008730] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-21 05:02:43,120 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-21 05:02:43,120 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 10, 11] total 26 [2022-07-21 05:02:43,120 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [337060859] [2022-07-21 05:02:43,120 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-21 05:02:43,120 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-07-21 05:02:43,120 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:02:43,121 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-07-21 05:02:43,121 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=125, Invalid=525, Unknown=0, NotChecked=0, Total=650 [2022-07-21 05:02:43,121 INFO L87 Difference]: Start difference. First operand 1648 states and 1920 transitions. Second operand has 26 states, 26 states have (on average 8.538461538461538) internal successors, (222), 22 states have internal predecessors, (222), 10 states have call successors, (39), 9 states have call predecessors, (39), 9 states have return successors, (34), 9 states have call predecessors, (34), 10 states have call successors, (34) [2022-07-21 05:02:44,145 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:02:44,145 INFO L93 Difference]: Finished difference Result 3749 states and 4489 transitions. [2022-07-21 05:02:44,146 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-07-21 05:02:44,146 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 8.538461538461538) internal successors, (222), 22 states have internal predecessors, (222), 10 states have call successors, (39), 9 states have call predecessors, (39), 9 states have return successors, (34), 9 states have call predecessors, (34), 10 states have call successors, (34) Word has length 195 [2022-07-21 05:02:44,146 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:02:44,153 INFO L225 Difference]: With dead ends: 3749 [2022-07-21 05:02:44,153 INFO L226 Difference]: Without dead ends: 2109 [2022-07-21 05:02:44,157 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 477 GetRequests, 424 SyntacticMatches, 4 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 525 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=553, Invalid=1997, Unknown=0, NotChecked=0, Total=2550 [2022-07-21 05:02:44,157 INFO L413 NwaCegarLoop]: 171 mSDtfsCounter, 1013 mSDsluCounter, 435 mSDsCounter, 0 mSdLazyCounter, 1553 mSolverCounterSat, 471 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1019 SdHoareTripleChecker+Valid, 606 SdHoareTripleChecker+Invalid, 2024 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 471 IncrementalHoareTripleChecker+Valid, 1553 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-07-21 05:02:44,158 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1019 Valid, 606 Invalid, 2024 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [471 Valid, 1553 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-07-21 05:02:44,159 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2109 states. [2022-07-21 05:02:44,241 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2109 to 1887. [2022-07-21 05:02:44,243 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1887 states, 1414 states have (on average 1.1386138613861385) internal successors, (1610), 1504 states have internal predecessors, (1610), 258 states have call successors, (258), 221 states have call predecessors, (258), 214 states have return successors, (310), 226 states have call predecessors, (310), 258 states have call successors, (310) [2022-07-21 05:02:44,249 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1887 states to 1887 states and 2178 transitions. [2022-07-21 05:02:44,249 INFO L78 Accepts]: Start accepts. Automaton has 1887 states and 2178 transitions. Word has length 195 [2022-07-21 05:02:44,250 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:02:44,250 INFO L495 AbstractCegarLoop]: Abstraction has 1887 states and 2178 transitions. [2022-07-21 05:02:44,250 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 8.538461538461538) internal successors, (222), 22 states have internal predecessors, (222), 10 states have call successors, (39), 9 states have call predecessors, (39), 9 states have return successors, (34), 9 states have call predecessors, (34), 10 states have call successors, (34) [2022-07-21 05:02:44,250 INFO L276 IsEmpty]: Start isEmpty. Operand 1887 states and 2178 transitions. [2022-07-21 05:02:44,254 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 212 [2022-07-21 05:02:44,254 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:02:44,254 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:02:44,274 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-21 05:02:44,472 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-07-21 05:02:44,472 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:02:44,472 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:02:44,473 INFO L85 PathProgramCache]: Analyzing trace with hash -1780867375, now seen corresponding path program 1 times [2022-07-21 05:02:44,473 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:02:44,473 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1555360492] [2022-07-21 05:02:44,473 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:02:44,473 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:02:44,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:44,503 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-21 05:02:44,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:44,509 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-21 05:02:44,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:44,517 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 05:02:44,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:44,521 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-21 05:02:44,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:44,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:02:44,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:44,531 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-07-21 05:02:44,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:44,548 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 05:02:44,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:44,555 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-21 05:02:44,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:44,564 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-21 05:02:44,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:44,566 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:02:44,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:44,567 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2022-07-21 05:02:44,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:44,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 118 [2022-07-21 05:02:44,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:44,583 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 125 [2022-07-21 05:02:44,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:44,587 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 05:02:44,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:44,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-21 05:02:44,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:44,591 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-21 05:02:44,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:44,592 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 162 [2022-07-21 05:02:44,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:44,593 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 173 [2022-07-21 05:02:44,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:44,594 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2022-07-21 05:02:44,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:44,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:02:44,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:44,597 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 203 [2022-07-21 05:02:44,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:44,598 INFO L134 CoverageAnalysis]: Checked inductivity of 249 backedges. 98 proven. 51 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2022-07-21 05:02:44,598 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:02:44,598 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1555360492] [2022-07-21 05:02:44,599 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1555360492] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-21 05:02:44,599 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1275778360] [2022-07-21 05:02:44,599 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:02:44,599 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 05:02:44,599 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 05:02:44,600 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-21 05:02:44,601 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-07-21 05:02:44,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:44,720 INFO L263 TraceCheckSpWp]: Trace formula consists of 772 conjuncts, 12 conjunts are in the unsatisfiable core [2022-07-21 05:02:44,723 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 05:02:44,835 INFO L134 CoverageAnalysis]: Checked inductivity of 249 backedges. 191 proven. 11 refuted. 0 times theorem prover too weak. 47 trivial. 0 not checked. [2022-07-21 05:02:44,835 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-21 05:02:45,199 INFO L134 CoverageAnalysis]: Checked inductivity of 249 backedges. 106 proven. 61 refuted. 0 times theorem prover too weak. 82 trivial. 0 not checked. [2022-07-21 05:02:45,200 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1275778360] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-21 05:02:45,200 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-21 05:02:45,200 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 8, 8] total 22 [2022-07-21 05:02:45,201 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [250615946] [2022-07-21 05:02:45,201 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-21 05:02:45,202 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-07-21 05:02:45,203 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:02:45,203 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-07-21 05:02:45,203 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=394, Unknown=0, NotChecked=0, Total=462 [2022-07-21 05:02:45,203 INFO L87 Difference]: Start difference. First operand 1887 states and 2178 transitions. Second operand has 22 states, 22 states have (on average 10.954545454545455) internal successors, (241), 15 states have internal predecessors, (241), 7 states have call successors, (47), 8 states have call predecessors, (47), 11 states have return successors, (40), 9 states have call predecessors, (40), 7 states have call successors, (40) [2022-07-21 05:02:46,555 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:02:46,555 INFO L93 Difference]: Finished difference Result 3744 states and 4346 transitions. [2022-07-21 05:02:46,556 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2022-07-21 05:02:46,556 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 10.954545454545455) internal successors, (241), 15 states have internal predecessors, (241), 7 states have call successors, (47), 8 states have call predecessors, (47), 11 states have return successors, (40), 9 states have call predecessors, (40), 7 states have call successors, (40) Word has length 211 [2022-07-21 05:02:46,556 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:02:46,562 INFO L225 Difference]: With dead ends: 3744 [2022-07-21 05:02:46,563 INFO L226 Difference]: Without dead ends: 2043 [2022-07-21 05:02:46,567 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 530 GetRequests, 471 SyntacticMatches, 3 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 750 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=654, Invalid=2652, Unknown=0, NotChecked=0, Total=3306 [2022-07-21 05:02:46,568 INFO L413 NwaCegarLoop]: 164 mSDtfsCounter, 720 mSDsluCounter, 415 mSDsCounter, 0 mSdLazyCounter, 1792 mSolverCounterSat, 352 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 727 SdHoareTripleChecker+Valid, 579 SdHoareTripleChecker+Invalid, 2144 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 352 IncrementalHoareTripleChecker+Valid, 1792 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-07-21 05:02:46,568 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [727 Valid, 579 Invalid, 2144 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [352 Valid, 1792 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-07-21 05:02:46,570 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2043 states. [2022-07-21 05:02:46,633 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2043 to 1833. [2022-07-21 05:02:46,635 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1833 states, 1380 states have (on average 1.1340579710144927) internal successors, (1565), 1460 states have internal predecessors, (1565), 232 states have call successors, (232), 215 states have call predecessors, (232), 220 states have return successors, (280), 220 states have call predecessors, (280), 232 states have call successors, (280) [2022-07-21 05:02:46,639 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1833 states to 1833 states and 2077 transitions. [2022-07-21 05:02:46,640 INFO L78 Accepts]: Start accepts. Automaton has 1833 states and 2077 transitions. Word has length 211 [2022-07-21 05:02:46,640 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:02:46,640 INFO L495 AbstractCegarLoop]: Abstraction has 1833 states and 2077 transitions. [2022-07-21 05:02:46,641 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 10.954545454545455) internal successors, (241), 15 states have internal predecessors, (241), 7 states have call successors, (47), 8 states have call predecessors, (47), 11 states have return successors, (40), 9 states have call predecessors, (40), 7 states have call successors, (40) [2022-07-21 05:02:46,641 INFO L276 IsEmpty]: Start isEmpty. Operand 1833 states and 2077 transitions. [2022-07-21 05:02:46,652 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 213 [2022-07-21 05:02:46,652 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:02:46,652 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:02:46,672 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-07-21 05:02:46,870 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 05:02:46,870 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:02:46,870 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:02:46,870 INFO L85 PathProgramCache]: Analyzing trace with hash -1730288948, now seen corresponding path program 1 times [2022-07-21 05:02:46,870 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:02:46,870 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1403556091] [2022-07-21 05:02:46,870 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:02:46,871 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:02:46,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:46,925 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-21 05:02:46,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:46,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-21 05:02:46,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:46,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 05:02:46,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:46,958 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-21 05:02:46,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:46,959 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:02:46,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:46,962 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-07-21 05:02:46,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:46,983 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 05:02:46,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:46,985 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-21 05:02:46,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:46,989 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-21 05:02:46,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:46,990 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:02:46,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:46,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2022-07-21 05:02:46,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:46,996 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2022-07-21 05:02:46,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:46,998 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 126 [2022-07-21 05:02:47,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:47,010 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 05:02:47,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:47,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-21 05:02:47,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:47,014 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-21 05:02:47,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:47,016 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 163 [2022-07-21 05:02:47,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:47,027 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 174 [2022-07-21 05:02:47,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:47,028 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 183 [2022-07-21 05:02:47,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:47,037 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:02:47,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:47,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 204 [2022-07-21 05:02:47,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:47,041 INFO L134 CoverageAnalysis]: Checked inductivity of 250 backedges. 93 proven. 45 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2022-07-21 05:02:47,041 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:02:47,042 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1403556091] [2022-07-21 05:02:47,042 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1403556091] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-21 05:02:47,042 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1375178010] [2022-07-21 05:02:47,042 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:02:47,042 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 05:02:47,042 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 05:02:47,043 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-21 05:02:47,044 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-07-21 05:02:47,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:47,143 INFO L263 TraceCheckSpWp]: Trace formula consists of 772 conjuncts, 18 conjunts are in the unsatisfiable core [2022-07-21 05:02:47,147 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 05:02:47,293 INFO L134 CoverageAnalysis]: Checked inductivity of 250 backedges. 135 proven. 26 refuted. 0 times theorem prover too weak. 89 trivial. 0 not checked. [2022-07-21 05:02:47,293 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-21 05:02:47,706 INFO L134 CoverageAnalysis]: Checked inductivity of 250 backedges. 103 proven. 45 refuted. 0 times theorem prover too weak. 102 trivial. 0 not checked. [2022-07-21 05:02:47,707 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1375178010] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-21 05:02:47,707 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-21 05:02:47,707 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 8, 13] total 23 [2022-07-21 05:02:47,707 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [691504979] [2022-07-21 05:02:47,707 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-21 05:02:47,709 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-07-21 05:02:47,709 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:02:47,709 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-07-21 05:02:47,709 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=111, Invalid=395, Unknown=0, NotChecked=0, Total=506 [2022-07-21 05:02:47,710 INFO L87 Difference]: Start difference. First operand 1833 states and 2077 transitions. Second operand has 23 states, 23 states have (on average 10.26086956521739) internal successors, (236), 19 states have internal predecessors, (236), 13 states have call successors, (47), 11 states have call predecessors, (47), 13 states have return successors, (41), 14 states have call predecessors, (41), 13 states have call successors, (41) [2022-07-21 05:02:49,131 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:02:49,131 INFO L93 Difference]: Finished difference Result 3556 states and 4099 transitions. [2022-07-21 05:02:49,131 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 44 states. [2022-07-21 05:02:49,132 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 10.26086956521739) internal successors, (236), 19 states have internal predecessors, (236), 13 states have call successors, (47), 11 states have call predecessors, (47), 13 states have return successors, (41), 14 states have call predecessors, (41), 13 states have call successors, (41) Word has length 212 [2022-07-21 05:02:49,132 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:02:49,143 INFO L225 Difference]: With dead ends: 3556 [2022-07-21 05:02:49,143 INFO L226 Difference]: Without dead ends: 2541 [2022-07-21 05:02:49,146 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 535 GetRequests, 474 SyntacticMatches, 2 SemanticMatches, 59 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 791 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=897, Invalid=2763, Unknown=0, NotChecked=0, Total=3660 [2022-07-21 05:02:49,147 INFO L413 NwaCegarLoop]: 252 mSDtfsCounter, 1039 mSDsluCounter, 422 mSDsCounter, 0 mSdLazyCounter, 1767 mSolverCounterSat, 544 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1046 SdHoareTripleChecker+Valid, 674 SdHoareTripleChecker+Invalid, 2311 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 544 IncrementalHoareTripleChecker+Valid, 1767 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-07-21 05:02:49,147 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1046 Valid, 674 Invalid, 2311 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [544 Valid, 1767 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-07-21 05:02:49,149 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2541 states. [2022-07-21 05:02:49,237 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2541 to 2255. [2022-07-21 05:02:49,240 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2255 states, 1696 states have (on average 1.1320754716981132) internal successors, (1920), 1791 states have internal predecessors, (1920), 289 states have call successors, (289), 267 states have call predecessors, (289), 269 states have return successors, (343), 271 states have call predecessors, (343), 289 states have call successors, (343) [2022-07-21 05:02:49,244 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2255 states to 2255 states and 2552 transitions. [2022-07-21 05:02:49,245 INFO L78 Accepts]: Start accepts. Automaton has 2255 states and 2552 transitions. Word has length 212 [2022-07-21 05:02:49,245 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:02:49,245 INFO L495 AbstractCegarLoop]: Abstraction has 2255 states and 2552 transitions. [2022-07-21 05:02:49,245 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 10.26086956521739) internal successors, (236), 19 states have internal predecessors, (236), 13 states have call successors, (47), 11 states have call predecessors, (47), 13 states have return successors, (41), 14 states have call predecessors, (41), 13 states have call successors, (41) [2022-07-21 05:02:49,245 INFO L276 IsEmpty]: Start isEmpty. Operand 2255 states and 2552 transitions. [2022-07-21 05:02:49,254 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 251 [2022-07-21 05:02:49,254 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:02:49,254 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:02:49,272 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-07-21 05:02:49,472 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13,5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 05:02:49,472 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:02:49,472 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:02:49,472 INFO L85 PathProgramCache]: Analyzing trace with hash 1988033271, now seen corresponding path program 1 times [2022-07-21 05:02:49,472 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:02:49,472 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [183633893] [2022-07-21 05:02:49,473 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:02:49,473 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:02:49,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:49,527 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-21 05:02:49,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:49,533 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-21 05:02:49,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:49,542 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 05:02:49,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:49,545 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-21 05:02:49,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:49,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:02:49,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:49,557 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-07-21 05:02:49,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:49,593 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 05:02:49,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:49,594 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-21 05:02:49,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:49,618 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-21 05:02:49,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:49,620 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:02:49,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:49,620 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2022-07-21 05:02:49,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:49,625 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2022-07-21 05:02:49,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:49,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 126 [2022-07-21 05:02:49,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:49,630 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 05:02:49,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:49,630 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-21 05:02:49,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:49,631 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-21 05:02:49,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:49,632 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 163 [2022-07-21 05:02:49,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:49,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 175 [2022-07-21 05:02:49,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:49,635 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 05:02:49,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:49,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-21 05:02:49,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:49,637 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 201 [2022-07-21 05:02:49,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:49,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 212 [2022-07-21 05:02:49,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:49,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 221 [2022-07-21 05:02:49,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:49,644 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:02:49,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:49,646 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 242 [2022-07-21 05:02:49,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:49,647 INFO L134 CoverageAnalysis]: Checked inductivity of 393 backedges. 129 proven. 71 refuted. 0 times theorem prover too weak. 193 trivial. 0 not checked. [2022-07-21 05:02:49,647 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:02:49,647 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [183633893] [2022-07-21 05:02:49,647 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [183633893] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-21 05:02:49,648 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1272890494] [2022-07-21 05:02:49,648 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:02:49,648 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 05:02:49,648 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 05:02:49,649 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-21 05:02:49,650 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-07-21 05:02:49,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:02:49,765 INFO L263 TraceCheckSpWp]: Trace formula consists of 872 conjuncts, 30 conjunts are in the unsatisfiable core [2022-07-21 05:02:49,768 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 05:02:50,033 INFO L134 CoverageAnalysis]: Checked inductivity of 393 backedges. 140 proven. 83 refuted. 0 times theorem prover too weak. 170 trivial. 0 not checked. [2022-07-21 05:02:50,033 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-21 05:02:50,527 INFO L134 CoverageAnalysis]: Checked inductivity of 393 backedges. 91 proven. 127 refuted. 0 times theorem prover too weak. 175 trivial. 0 not checked. [2022-07-21 05:02:50,528 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1272890494] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-21 05:02:50,528 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-21 05:02:50,528 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 11, 16] total 29 [2022-07-21 05:02:50,528 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [145544768] [2022-07-21 05:02:50,528 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-21 05:02:50,529 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-07-21 05:02:50,529 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:02:50,529 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-07-21 05:02:50,529 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=153, Invalid=659, Unknown=0, NotChecked=0, Total=812 [2022-07-21 05:02:50,530 INFO L87 Difference]: Start difference. First operand 2255 states and 2552 transitions. Second operand has 29 states, 29 states have (on average 10.931034482758621) internal successors, (317), 25 states have internal predecessors, (317), 16 states have call successors, (53), 12 states have call predecessors, (53), 17 states have return successors, (55), 17 states have call predecessors, (55), 16 states have call successors, (55) [2022-07-21 05:02:53,191 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:02:53,191 INFO L93 Difference]: Finished difference Result 6994 states and 8499 transitions. [2022-07-21 05:02:53,198 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 52 states. [2022-07-21 05:02:53,199 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 29 states have (on average 10.931034482758621) internal successors, (317), 25 states have internal predecessors, (317), 16 states have call successors, (53), 12 states have call predecessors, (53), 17 states have return successors, (55), 17 states have call predecessors, (55), 16 states have call successors, (55) Word has length 250 [2022-07-21 05:02:53,199 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:02:53,201 INFO L225 Difference]: With dead ends: 6994 [2022-07-21 05:02:53,201 INFO L226 Difference]: Without dead ends: 0 [2022-07-21 05:02:53,212 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 639 GetRequests, 564 SyntacticMatches, 4 SemanticMatches, 71 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1322 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=1208, Invalid=4048, Unknown=0, NotChecked=0, Total=5256 [2022-07-21 05:02:53,213 INFO L413 NwaCegarLoop]: 310 mSDtfsCounter, 1677 mSDsluCounter, 1634 mSDsCounter, 0 mSdLazyCounter, 3924 mSolverCounterSat, 1127 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1688 SdHoareTripleChecker+Valid, 1944 SdHoareTripleChecker+Invalid, 5051 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1127 IncrementalHoareTripleChecker+Valid, 3924 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2022-07-21 05:02:53,213 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1688 Valid, 1944 Invalid, 5051 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1127 Valid, 3924 Invalid, 0 Unknown, 0 Unchecked, 1.8s Time] [2022-07-21 05:02:53,214 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-21 05:02:53,214 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-21 05:02:53,214 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-21 05:02:53,214 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-21 05:02:53,215 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 250 [2022-07-21 05:02:53,215 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:02:53,215 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-21 05:02:53,216 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 29 states have (on average 10.931034482758621) internal successors, (317), 25 states have internal predecessors, (317), 16 states have call successors, (53), 12 states have call predecessors, (53), 17 states have return successors, (55), 17 states have call predecessors, (55), 16 states have call successors, (55) [2022-07-21 05:02:53,216 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-21 05:02:53,216 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-21 05:02:53,218 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-21 05:02:53,249 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-07-21 05:02:53,433 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2022-07-21 05:02:53,435 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-21 05:03:26,081 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 293 300) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 .cse2 (not (<= ~waterLevel~0 2)) (< ~waterLevel~0 2)))) [2022-07-21 05:03:26,082 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 293 300) no Hoare annotation was computed. [2022-07-21 05:03:26,082 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 293 300) no Hoare annotation was computed. [2022-07-21 05:03:26,084 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 200 206) no Hoare annotation was computed. [2022-07-21 05:03:26,085 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 200 206) the Hoare annotation is: true [2022-07-21 05:03:26,085 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 84 95) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~pumpRunning~0))) (.cse4 (not (= ~pumpRunning~0 0))) (.cse1 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or (not (= |old(~methaneLevelCritical~0)| 0)) .cse0 .cse1 .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse4 .cse0 .cse1 .cse3) (or .cse0 (not (= 2 ~waterLevel~0)) .cse1 .cse2) (or .cse4 .cse1 .cse3 (not (= 0 ~systemActive~0))))) [2022-07-21 05:03:26,085 INFO L899 garLoopResultBuilder]: For program point L88-1(lines 84 95) no Hoare annotation was computed. [2022-07-21 05:03:26,085 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 84 95) no Hoare annotation was computed. [2022-07-21 05:03:26,085 INFO L902 garLoopResultBuilder]: At program point L962-2(lines 962 976) the Hoare annotation is: true [2022-07-21 05:03:26,085 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 952 981) no Hoare annotation was computed. [2022-07-21 05:03:26,086 INFO L902 garLoopResultBuilder]: At program point L958(line 958) the Hoare annotation is: true [2022-07-21 05:03:26,086 INFO L899 garLoopResultBuilder]: For program point L958-1(line 958) no Hoare annotation was computed. [2022-07-21 05:03:26,086 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 952 981) the Hoare annotation is: true [2022-07-21 05:03:26,086 INFO L902 garLoopResultBuilder]: At program point L977(lines 952 981) the Hoare annotation is: true [2022-07-21 05:03:26,086 INFO L899 garLoopResultBuilder]: For program point L973(line 973) no Hoare annotation was computed. [2022-07-21 05:03:26,086 INFO L899 garLoopResultBuilder]: For program point L966(lines 966 970) no Hoare annotation was computed. [2022-07-21 05:03:26,087 INFO L902 garLoopResultBuilder]: At program point L966-1(lines 966 970) the Hoare annotation is: true [2022-07-21 05:03:26,087 INFO L899 garLoopResultBuilder]: For program point L963(line 963) no Hoare annotation was computed. [2022-07-21 05:03:26,087 INFO L899 garLoopResultBuilder]: For program point L64(lines 64 68) no Hoare annotation was computed. [2022-07-21 05:03:26,087 INFO L895 garLoopResultBuilder]: At program point L64-2(lines 60 71) the Hoare annotation is: (let ((.cse2 (not (<= |old(~waterLevel~0)| 1))) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse2 .cse3 (and (<= ~waterLevel~0 0) .cse4) .cse5 (= ~waterLevel~0 0) .cse6) (or .cse2 (and .cse7 .cse4 .cse8) .cse3 .cse5 (and .cse7 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse8) .cse6) (or .cse3 .cse5 (not (< 1 |old(~waterLevel~0)|)) (and .cse7 (= ~waterLevel~0 1) .cse8) .cse1) (or .cse0 .cse3 .cse1))) [2022-07-21 05:03:26,088 INFO L899 garLoopResultBuilder]: For program point L568(lines 568 574) no Hoare annotation was computed. [2022-07-21 05:03:26,088 INFO L895 garLoopResultBuilder]: At program point L279(line 279) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (<= |old(~waterLevel~0)| 1)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse3 .cse2 (not (= 0 ~systemActive~0))) (or .cse3 .cse4 .cse0 (not (= |old(~waterLevel~0)| 2))) (or .cse0 .cse1 .cse2 .cse5) (or (not .cse5) .cse3 .cse4 .cse0))) [2022-07-21 05:03:26,088 INFO L895 garLoopResultBuilder]: At program point L279-1(lines 260 284) the Hoare annotation is: (let ((.cse15 (<= |old(~waterLevel~0)| 1)) (.cse20 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse21 (= ~waterLevel~0 0)) (.cse11 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse12 (= |timeShift_processEnvironment_~tmp~2#1| ~methaneLevelCritical~0)) (.cse13 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse22 (<= ~waterLevel~0 0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (<= 1 ~switchedOnBeforeTS~0)) (.cse24 (= ~pumpRunning~0 0)) (.cse23 (= 1 ~systemActive~0)) (.cse10 (= ~waterLevel~0 1))) (let ((.cse5 (and .cse24 .cse23 .cse10)) (.cse8 (not (< 1 |old(~waterLevel~0)|))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse17 (and .cse11 .cse24 .cse12 .cse13 .cse22 .cse3 .cse14)) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse18 (and .cse11 .cse24 .cse12 .cse13 .cse23 .cse20 .cse14 .cse21)) (.cse19 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse16 (not .cse15)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse24 .cse3)) (.cse2 (not .cse23))) (and (or .cse0 .cse1 .cse2 (and (<= 1 ~pumpRunning~0) .cse3) .cse4) (or .cse0 .cse4 (not (= 0 ~systemActive~0))) (or .cse5 .cse6 .cse2 .cse7 .cse8 .cse4) (or .cse5 (and .cse9 .cse10) .cse2 .cse7 .cse8 .cse4) (or .cse2 .cse7 (and .cse11 .cse12 .cse13 .cse14) .cse4 .cse15) (or .cse16 .cse17 .cse6 .cse2 .cse7 .cse18 .cse19) (or (and .cse9 .cse11 .cse12 .cse13 .cse20 .cse14 .cse21) .cse16 .cse17 .cse2 .cse7 (and .cse9 .cse11 .cse12 .cse13 .cse22 .cse3 .cse14) .cse18 .cse19) (or .cse16 .cse0 .cse1 .cse2)))) [2022-07-21 05:03:26,088 INFO L899 garLoopResultBuilder]: For program point L180(lines 180 186) no Hoare annotation was computed. [2022-07-21 05:03:26,089 INFO L895 garLoopResultBuilder]: At program point L308(lines 301 311) the Hoare annotation is: (let ((.cse3 (<= |old(~waterLevel~0)| 1)) (.cse9 (= ~waterLevel~0 0)) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse6 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse10 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5 .cse6 .cse7)) (or .cse8 .cse2 (not (= 0 ~systemActive~0))) (or (and .cse4 .cse5 .cse6 .cse7 .cse9) (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse10) (or (not .cse3) (and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse9) .cse0 .cse1 (and .cse4 .cse5 .cse6 (= |old(~waterLevel~0)| ~waterLevel~0) .cse7) .cse10) (or .cse8 .cse0 .cse2) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) (= ~waterLevel~0 1) .cse2))) [2022-07-21 05:03:26,089 INFO L899 garLoopResultBuilder]: For program point L531(line 531) no Hoare annotation was computed. [2022-07-21 05:03:26,089 INFO L899 garLoopResultBuilder]: For program point L180-2(lines 176 198) no Hoare annotation was computed. [2022-07-21 05:03:26,089 INFO L895 garLoopResultBuilder]: At program point L552(lines 545 554) the Hoare annotation is: (let ((.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse6 (<= |old(~waterLevel~0)| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 0) .cse7)) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7 (<= 1 ~switchedOnBeforeTS~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (not (= |old(~waterLevel~0)| 2))) (or .cse0 .cse1 .cse3 (not (= 0 ~systemActive~0))) (or .cse4 .cse2 .cse5 .cse3 .cse6) (or (not .cse6) .cse0 .cse1 .cse2) (or .cse4 .cse2 .cse5 .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2022-07-21 05:03:26,090 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 173 199) no Hoare annotation was computed. [2022-07-21 05:03:26,090 INFO L895 garLoopResultBuilder]: At program point L565(line 565) the Hoare annotation is: (let ((.cse23 (<= ~waterLevel~0 0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse18 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse2 (= ~pumpRunning~0 0)) (.cse19 (= |timeShift_processEnvironment_~tmp~2#1| ~methaneLevelCritical~0)) (.cse3 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse20 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse14 (= 1 ~systemActive~0)) (.cse24 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse21 (<= 1 ~switchedOnBeforeTS~0)) (.cse25 (= ~waterLevel~0 0)) (.cse5 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~6#1| ~waterLevel~0)) (.cse22 (<= |old(~waterLevel~0)| 1))) (let ((.cse9 (= ~methaneLevelCritical~0 0)) (.cse6 (not (= 0 ~systemActive~0))) (.cse16 (not (< 1 |old(~waterLevel~0)|))) (.cse15 (= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not .cse22)) (.cse8 (and .cse18 .cse2 .cse19 .cse3 .cse20 .cse14 .cse24 .cse21 .cse25 .cse5)) (.cse10 (not .cse14)) (.cse11 (not (<= 1 |old(~pumpRunning~0)|))) (.cse17 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (and .cse18 .cse2 .cse19 .cse3 .cse20 .cse23 .cse4 .cse21 .cse5)) (.cse13 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5) .cse6) (or .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (or (and .cse2 .cse14 .cse15) .cse9 .cse10 .cse11 .cse16 .cse1) (or .cse0 .cse16 .cse1 .cse6) (or .cse10 .cse11 .cse16 (and .cse17 .cse18 .cse19 .cse3 .cse20 .cse15 .cse21 .cse5) .cse1 (and .cse18 .cse2 .cse19 .cse3 .cse20 .cse14 .cse15 .cse21 .cse5)) (or .cse0 .cse10 (and .cse2 .cse3 .cse4 .cse22 .cse5) .cse1) (or .cse7 .cse8 (and .cse17 .cse18 .cse19 .cse3 .cse20 .cse23 .cse4 .cse21 .cse5) .cse10 .cse11 (and .cse17 .cse18 .cse19 .cse3 .cse20 .cse24 .cse21 .cse25 .cse5) .cse12 .cse13)))) [2022-07-21 05:03:26,090 INFO L899 garLoopResultBuilder]: For program point L565-1(line 565) no Hoare annotation was computed. [2022-07-21 05:03:26,091 INFO L895 garLoopResultBuilder]: At program point L532(lines 527 534) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse3 .cse2 (not (= 0 ~systemActive~0))) (or .cse0 .cse1 .cse2 (<= |old(~waterLevel~0)| 1)) (or .cse3 .cse0 .cse2))) [2022-07-21 05:03:26,091 INFO L899 garLoopResultBuilder]: For program point L268(lines 268 276) no Hoare annotation was computed. [2022-07-21 05:03:26,091 INFO L899 garLoopResultBuilder]: For program point L264(lines 264 281) no Hoare annotation was computed. [2022-07-21 05:03:26,091 INFO L895 garLoopResultBuilder]: At program point L550(line 550) the Hoare annotation is: (let ((.cse6 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (and (= ~pumpRunning~0 0) .cse6 .cse7)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse2 .cse4 .cse3 (and .cse5 .cse6 .cse7) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse2 .cse4 (not (< 1 |old(~waterLevel~0)|)) (and .cse5 .cse6 (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse3) (or .cse0 .cse1 .cse3 (not (= 0 ~systemActive~0)))))) [2022-07-21 05:03:26,091 INFO L899 garLoopResultBuilder]: For program point L550-1(line 550) no Hoare annotation was computed. [2022-07-21 05:03:26,092 INFO L895 garLoopResultBuilder]: At program point L133(lines 128 136) the Hoare annotation is: (let ((.cse19 (= ~waterLevel~0 1)) (.cse13 (<= ~waterLevel~0 0)) (.cse14 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse20 (= ~pumpRunning~0 0)) (.cse3 (= |timeShift_processEnvironment_~tmp~2#1| ~methaneLevelCritical~0)) (.cse4 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse5 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse26 (= 1 ~systemActive~0)) (.cse6 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (= ~waterLevel~0 0))) (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (and .cse2 .cse20 .cse3 .cse4 .cse5 .cse26 .cse6 .cse7 .cse8)) (.cse12 (and .cse2 .cse20 .cse3 .cse4 .cse5 .cse13 .cse14 .cse7)) (.cse15 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse23 (= ~methaneLevelCritical~0 0)) (.cse11 (not (<= 1 |old(~pumpRunning~0)|))) (.cse16 (not (< 1 |old(~waterLevel~0)|))) (.cse17 (and .cse2 .cse20 .cse3 .cse4 .cse5 .cse26 .cse19 .cse7)) (.cse18 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (not .cse26)) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse22 (not (= |old(~pumpRunning~0)| 0))) (.cse24 (and .cse20 .cse4 .cse14)) (.cse25 (not (= 0 ~systemActive~0)))) (and (or .cse0 (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) .cse9 .cse10 .cse11 .cse12 (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse13 .cse14 .cse7) .cse15) (or .cse9 .cse11 .cse16 .cse17 .cse18 (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse19 .cse7)) (let ((.cse21 (= 2 |timeShift_getWaterLevel_#res#1|))) (or (and .cse20 .cse21 .cse14) .cse22 .cse9 .cse16 (and (<= 1 ~pumpRunning~0) .cse21 .cse14) .cse18)) (or .cse0 .cse23 .cse9 .cse10 .cse11 .cse12 .cse15) (or .cse23 .cse9 .cse11 .cse16 .cse17 .cse18) (or .cse0 .cse22 .cse9 .cse24) (or (and .cse20 (<= |timeShift_getWaterLevel_#res#1| 2) .cse14 (<= 2 |timeShift_getWaterLevel_#res#1|)) .cse22 (not (= |old(~waterLevel~0)| 2)) .cse25) (or .cse0 .cse22 .cse24 .cse25)))) [2022-07-21 05:03:26,092 INFO L899 garLoopResultBuilder]: For program point L187-1(lines 187 193) no Hoare annotation was computed. [2022-07-21 05:03:26,092 INFO L899 garLoopResultBuilder]: For program point L567(lines 567 577) no Hoare annotation was computed. [2022-07-21 05:03:26,092 INFO L899 garLoopResultBuilder]: For program point L563(lines 563 580) no Hoare annotation was computed. [2022-07-21 05:03:26,092 INFO L895 garLoopResultBuilder]: At program point L274(line 274) the Hoare annotation is: (let ((.cse4 (= ~methaneLevelCritical~0 0)) (.cse0 (<= |old(~waterLevel~0)| 1)) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse3 (= |timeShift_processEnvironment_~tmp~2#1| ~methaneLevelCritical~0)) (.cse5 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= 1 ~systemActive~0))) (.cse10 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not .cse0) (and .cse1 .cse2 .cse3 .cse4 .cse5 (<= ~waterLevel~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) .cse6) .cse7 (and .cse1 .cse2 .cse3 .cse4 .cse5 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse6 (= ~waterLevel~0 0)) .cse8 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse9 .cse10 (not (= 0 ~systemActive~0))) (or .cse4 .cse7 .cse8 .cse10 .cse0) (or .cse7 .cse8 (not (< 1 |old(~waterLevel~0)|)) (and .cse1 .cse2 .cse3 .cse5 (= ~waterLevel~0 1) .cse6) .cse10) (or .cse9 .cse7 .cse10))) [2022-07-21 05:03:26,092 INFO L895 garLoopResultBuilder]: At program point L563-1(lines 555 583) the Hoare annotation is: (let ((.cse27 (<= ~waterLevel~0 0)) (.cse26 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse19 (= ~pumpRunning~0 0)) (.cse10 (= |timeShift_processEnvironment_~tmp~2#1| ~methaneLevelCritical~0)) (.cse11 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse13 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse20 (= 1 ~systemActive~0)) (.cse28 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse15 (<= 1 ~switchedOnBeforeTS~0)) (.cse29 (= ~waterLevel~0 0)) (.cse16 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~6#1| ~waterLevel~0))) (let ((.cse14 (= ~waterLevel~0 1)) (.cse23 (= ~methaneLevelCritical~0 0)) (.cse17 (not (< 1 |old(~waterLevel~0)|))) (.cse22 (and .cse9 .cse19 .cse10 .cse11 .cse13 .cse20 .cse28 .cse15 .cse29 .cse16)) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse24 (and .cse9 .cse19 .cse10 .cse11 .cse13 .cse27 .cse26 .cse15 .cse16)) (.cse25 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse21 (not (<= |old(~waterLevel~0)| 1))) (.cse5 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not .cse20)) (.cse12 (<= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1|)) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (<= |timeShift_getWaterLevel_#res#1| 2)) (.cse2 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~6#1| 2)) (.cse3 (<= 2 |timeShift___utac_acc__Specification5_spec__3_~tmp~6#1|)) (.cse4 (<= 2 |timeShift_getWaterLevel_#res#1|)) (.cse18 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and .cse1 .cse2 .cse3 .cse4) (not (= |old(~waterLevel~0)| 2)) .cse5) (or .cse6 .cse7 (and .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16) .cse17 .cse18 (and .cse9 .cse19 .cse10 .cse11 .cse13 .cse20 .cse14 .cse15 .cse16)) (or .cse21 .cse22 .cse23 .cse6 .cse7 .cse24 .cse25) (or (and .cse19 .cse20 .cse14) .cse23 .cse6 .cse7 .cse17 .cse18) (or .cse0 (and .cse8 .cse19 .cse26) .cse18 .cse5) (or .cse21 .cse22 (and .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse27 .cse26 .cse15 .cse16) .cse6 .cse7 .cse24 (and .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse28 .cse15 .cse29 .cse16) .cse25) (or .cse21 .cse0 (and .cse11 .cse12 .cse16) .cse5) (or .cse0 (and (<= 1 ~pumpRunning~0) .cse1 .cse2 .cse3 .cse26 .cse4 (not (<= ~waterLevel~0 1))) .cse6 (and .cse8 .cse19 .cse11 .cse12 .cse26 .cse16) (and .cse8 .cse19 .cse1 (= 2 ~waterLevel~0) .cse2 .cse3 .cse26 .cse4) .cse18)))) [2022-07-21 05:03:26,093 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 173 199) the Hoare annotation is: (let ((.cse6 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (and (= ~pumpRunning~0 0) .cse6 .cse7)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse2 .cse4 .cse3 (and .cse5 .cse6 .cse7) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse2 .cse4 (not (< 1 |old(~waterLevel~0)|)) (and .cse5 .cse6 (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse3) (or .cse0 .cse1 .cse3 (not (= 0 ~systemActive~0)))))) [2022-07-21 05:03:26,093 INFO L895 garLoopResultBuilder]: At program point L270(line 270) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse4 (= |timeShift_processEnvironment_~tmp~2#1| ~methaneLevelCritical~0)) (.cse5 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse10 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) .cse8 (<= |old(~waterLevel~0)| 1)) (or .cse9 .cse8 (not (= 0 ~systemActive~0))) (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5 (= |old(~waterLevel~0)| ~waterLevel~0) .cse7) (not (<= |old(~waterLevel~0)| 0)) .cse10) (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5 .cse7 (= ~waterLevel~0 0)) .cse10) (or .cse9 .cse0 .cse8) (or .cse0 .cse1 .cse6 .cse8 .cse10) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) (= ~waterLevel~0 1) .cse8))) [2022-07-21 05:03:26,093 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 173 199) no Hoare annotation was computed. [2022-07-21 05:03:26,093 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 531) no Hoare annotation was computed. [2022-07-21 05:03:26,093 INFO L895 garLoopResultBuilder]: At program point L101(lines 96 104) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) (and .cse2 .cse3 (= ~waterLevel~0 1) .cse4) .cse5) (or .cse6 .cse5 (not (= 0 ~systemActive~0))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 (and .cse2 .cse3 (<= ~waterLevel~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) .cse4) (and .cse2 .cse3 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse4 (= ~waterLevel~0 0)) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse6 .cse0 .cse5))) [2022-07-21 05:03:26,093 INFO L895 garLoopResultBuilder]: At program point L415(lines 410 417) the Hoare annotation is: (let ((.cse4 (<= ~waterLevel~0 2)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1) .cse3) (and .cse0 (< 1 ~waterLevel~0) .cse1 .cse2 .cse4) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse4) (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 0) .cse3))) [2022-07-21 05:03:26,093 INFO L895 garLoopResultBuilder]: At program point L477(lines 430 479) the Hoare annotation is: (let ((.cse2 (= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 (<= ~waterLevel~0 2) (= 0 ~systemActive~0)) (and .cse0 .cse2 .cse3 .cse1) (and .cse4 .cse2 .cse3 .cse1) (and .cse0 (<= ~waterLevel~0 1) .cse3 .cse1) (and .cse4 .cse5 .cse3 .cse1 (<= ~waterLevel~0 0) .cse6) (and .cse4 .cse5 .cse3 .cse1 (= ~waterLevel~0 1) .cse6))) [2022-07-21 05:03:26,094 INFO L899 garLoopResultBuilder]: For program point L440(lines 440 446) no Hoare annotation was computed. [2022-07-21 05:03:26,094 INFO L899 garLoopResultBuilder]: For program point L440-1(lines 440 446) no Hoare annotation was computed. [2022-07-21 05:03:26,094 INFO L895 garLoopResultBuilder]: At program point L407(lines 395 409) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= 0 ~systemActive~0))) (or (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2) (and .cse0 (<= ~waterLevel~0 1) .cse1 .cse2))) [2022-07-21 05:03:26,094 INFO L902 garLoopResultBuilder]: At program point L1043(lines 1024 1046) the Hoare annotation is: true [2022-07-21 05:03:26,094 INFO L895 garLoopResultBuilder]: At program point L1010(lines 1006 1012) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-21 05:03:26,094 INFO L899 garLoopResultBuilder]: For program point L432(lines 432 436) no Hoare annotation was computed. [2022-07-21 05:03:26,094 INFO L899 garLoopResultBuilder]: For program point L399(lines 399 405) no Hoare annotation was computed. [2022-07-21 05:03:26,095 INFO L899 garLoopResultBuilder]: For program point L399-1(lines 399 405) no Hoare annotation was computed. [2022-07-21 05:03:26,095 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-21 05:03:26,095 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-21 05:03:26,095 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-21 05:03:26,095 INFO L895 garLoopResultBuilder]: At program point L507(lines 503 509) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-21 05:03:26,095 INFO L902 garLoopResultBuilder]: At program point L483(lines 420 487) the Hoare annotation is: true [2022-07-21 05:03:26,095 INFO L899 garLoopResultBuilder]: For program point L450(lines 450 456) no Hoare annotation was computed. [2022-07-21 05:03:26,095 INFO L899 garLoopResultBuilder]: For program point L450-1(lines 450 456) no Hoare annotation was computed. [2022-07-21 05:03:26,095 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-21 05:03:26,096 INFO L895 garLoopResultBuilder]: At program point L442(line 442) the Hoare annotation is: (let ((.cse2 (= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 (<= ~waterLevel~0 2) (= 0 ~systemActive~0)) (and .cse0 .cse2 .cse3 .cse1) (and .cse4 .cse2 .cse3 .cse1) (and .cse0 (<= ~waterLevel~0 1) .cse3 .cse1) (and .cse4 .cse5 .cse3 .cse1 (<= ~waterLevel~0 0) .cse6) (and .cse4 .cse5 .cse3 .cse1 (= ~waterLevel~0 1) .cse6))) [2022-07-21 05:03:26,096 INFO L895 garLoopResultBuilder]: At program point L401(line 401) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= ~waterLevel~0 1) .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 (< 1 ~waterLevel~0) .cse1 .cse2 (<= ~waterLevel~0 2)))) [2022-07-21 05:03:26,097 INFO L895 garLoopResultBuilder]: At program point L480(lines 429 481) the Hoare annotation is: false [2022-07-21 05:03:26,097 INFO L895 garLoopResultBuilder]: At program point L542(lines 537 544) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-21 05:03:26,097 INFO L902 garLoopResultBuilder]: At program point L1021(lines 1013 1023) the Hoare annotation is: true [2022-07-21 05:03:26,097 INFO L899 garLoopResultBuilder]: For program point L468(lines 468 474) no Hoare annotation was computed. [2022-07-21 05:03:26,097 INFO L895 garLoopResultBuilder]: At program point L468-2(lines 460 475) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse6 (<= ~waterLevel~0 2)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2) (and .cse3 .cse4 .cse1 (= ~waterLevel~0 1) .cse5) (and .cse3 (< 1 ~waterLevel~0) .cse4 .cse1 .cse6) (and .cse0 (<= ~waterLevel~0 1) .cse1 .cse2) (and .cse0 .cse4 .cse1 .cse6) (and .cse3 .cse4 .cse1 (<= ~waterLevel~0 0) .cse5))) [2022-07-21 05:03:26,098 INFO L899 garLoopResultBuilder]: For program point L431(lines 430 479) no Hoare annotation was computed. [2022-07-21 05:03:26,098 INFO L899 garLoopResultBuilder]: For program point L460(lines 460 475) no Hoare annotation was computed. [2022-07-21 05:03:26,098 INFO L895 garLoopResultBuilder]: At program point L522(lines 517 525) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-21 05:03:26,098 INFO L899 garLoopResultBuilder]: For program point L1034(lines 1034 1041) no Hoare annotation was computed. [2022-07-21 05:03:26,098 INFO L899 garLoopResultBuilder]: For program point L1034-2(lines 1034 1041) no Hoare annotation was computed. [2022-07-21 05:03:26,098 INFO L895 garLoopResultBuilder]: At program point L452(line 452) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 (< 1 ~waterLevel~0) .cse1 .cse2 .cse3) (and .cse4 .cse2 .cse3 (= 0 ~systemActive~0)) (and .cse4 .cse1 .cse2 .cse3) (and .cse0 .cse5 .cse1 .cse2 (<= ~waterLevel~0 0) .cse6) (and .cse0 .cse5 .cse1 .cse2 (= ~waterLevel~0 1) .cse6))) [2022-07-21 05:03:26,099 INFO L895 garLoopResultBuilder]: At program point L514(lines 510 516) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-21 05:03:26,099 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 208 232) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-07-21 05:03:26,099 INFO L895 garLoopResultBuilder]: At program point L372(lines 357 375) the Hoare annotation is: (let ((.cse2 (not (<= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (and (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1| 0))) .cse2) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 (= ~pumpRunning~0 0) .cse1 (not (<= ~waterLevel~0 2))))) [2022-07-21 05:03:26,099 INFO L899 garLoopResultBuilder]: For program point L366(lines 366 370) no Hoare annotation was computed. [2022-07-21 05:03:26,099 INFO L899 garLoopResultBuilder]: For program point L141(lines 141 147) no Hoare annotation was computed. [2022-07-21 05:03:26,099 INFO L899 garLoopResultBuilder]: For program point L366-2(lines 366 370) no Hoare annotation was computed. [2022-07-21 05:03:26,099 INFO L895 garLoopResultBuilder]: At program point L290(lines 285 292) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2))))) [2022-07-21 05:03:26,100 INFO L895 garLoopResultBuilder]: At program point L222(line 222) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)) (not (<= ~waterLevel~0 2))) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 (and (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1| 0)))) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-07-21 05:03:26,100 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 208 232) no Hoare annotation was computed. [2022-07-21 05:03:26,100 INFO L899 garLoopResultBuilder]: For program point L216(lines 216 224) no Hoare annotation was computed. [2022-07-21 05:03:26,100 INFO L899 garLoopResultBuilder]: For program point L212(lines 212 229) no Hoare annotation was computed. [2022-07-21 05:03:26,101 INFO L895 garLoopResultBuilder]: At program point L146(lines 137 150) the Hoare annotation is: (let ((.cse4 (not (<= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (and (or .cse0 .cse1 (and .cse2 (not .cse3)) .cse4) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse4 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (< 1 ~waterLevel~0)) .cse0 .cse1 (and .cse2 .cse3) (not (<= ~waterLevel~0 2))))) [2022-07-21 05:03:26,101 INFO L895 garLoopResultBuilder]: At program point L227(line 227) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-07-21 05:03:26,101 INFO L899 garLoopResultBuilder]: For program point L227-1(lines 208 232) no Hoare annotation was computed. [2022-07-21 05:03:26,102 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 72 83) no Hoare annotation was computed. [2022-07-21 05:03:26,102 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 72 83) no Hoare annotation was computed. [2022-07-21 05:03:26,102 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 72 83) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~pumpRunning~0))) (.cse3 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 2)) .cse2) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse3 .cse2 .cse4 (not (= 0 ~systemActive~0))) (or .cse3 .cse0 .cse2 .cse4))) [2022-07-21 05:03:26,102 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 234 258) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-07-21 05:03:26,102 INFO L895 garLoopResultBuilder]: At program point L248(line 248) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0)))) (and (or (let ((.cse0 (= ~waterLevel~0 0))) (and (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterLevel_~tmp~4#1| 0) .cse0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterSensorDry_#res#1| 0) .cse0))) .cse1 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse1 (not (<= ~waterLevel~0 2))))) [2022-07-21 05:03:26,102 INFO L895 garLoopResultBuilder]: At program point L244(line 244) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0)))) (and (or (let ((.cse0 (= ~waterLevel~0 0))) (and (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterLevel_~tmp~4#1| 0) .cse0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterSensorDry_#res#1| 0) .cse0))) .cse1 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse1 (not (<= ~waterLevel~0 2))))) [2022-07-21 05:03:26,102 INFO L899 garLoopResultBuilder]: For program point L242(lines 242 250) no Hoare annotation was computed. [2022-07-21 05:03:26,102 INFO L899 garLoopResultBuilder]: For program point L238(lines 238 255) no Hoare annotation was computed. [2022-07-21 05:03:26,103 INFO L895 garLoopResultBuilder]: At program point L391(lines 376 394) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0)))) (and (or (let ((.cse0 (= ~waterLevel~0 0))) (and (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterLevel_~tmp~4#1| 0) .cse0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterSensorDry_#res#1| 0) .cse0))) .cse1 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse1 (not (<= ~waterLevel~0 2))))) [2022-07-21 05:03:26,103 INFO L899 garLoopResultBuilder]: For program point L385(lines 385 389) no Hoare annotation was computed. [2022-07-21 05:03:26,103 INFO L899 garLoopResultBuilder]: For program point L385-2(lines 385 389) no Hoare annotation was computed. [2022-07-21 05:03:26,103 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 234 258) no Hoare annotation was computed. [2022-07-21 05:03:26,103 INFO L895 garLoopResultBuilder]: At program point L253(line 253) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))))) [2022-07-21 05:03:26,103 INFO L895 garLoopResultBuilder]: At program point L156(lines 151 159) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterSensorDry_#res#1| 0) (= ~waterLevel~0 0))) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2022-07-21 05:03:26,103 INFO L899 garLoopResultBuilder]: For program point L253-1(lines 234 258) no Hoare annotation was computed. [2022-07-21 05:03:26,103 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 312 320) no Hoare annotation was computed. [2022-07-21 05:03:26,103 INFO L902 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 312 320) the Hoare annotation is: true [2022-07-21 05:03:26,104 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 312 320) no Hoare annotation was computed. [2022-07-21 05:03:26,106 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:03:26,107 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-21 05:03:26,168 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.07 05:03:26 BoogieIcfgContainer [2022-07-21 05:03:26,183 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-21 05:03:26,184 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-21 05:03:26,184 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-21 05:03:26,184 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-21 05:03:26,184 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 05:02:36" (3/4) ... [2022-07-21 05:03:26,186 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-21 05:03:26,190 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-07-21 05:03:26,190 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-21 05:03:26,190 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-21 05:03:26,190 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-21 05:03:26,190 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-21 05:03:26,190 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-21 05:03:26,190 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-21 05:03:26,191 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2022-07-21 05:03:26,191 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-07-21 05:03:26,199 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 54 nodes and edges [2022-07-21 05:03:26,200 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-21 05:03:26,200 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-21 05:03:26,201 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-21 05:03:26,201 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-21 05:03:26,201 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-21 05:03:26,201 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-21 05:03:26,219 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || \old(waterLevel) <= 1)) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2022-07-21 05:03:26,219 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || (waterLevel <= 0 && \old(waterLevel) == waterLevel)) || !(1 <= \old(pumpRunning))) || waterLevel == 0) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-07-21 05:03:26,220 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || (((\result <= 2 && tmp <= 2) && 2 <= tmp) && 2 <= \result)) || !(\old(waterLevel) == 2)) || !(0 == systemActive)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && waterLevel == \result) && pumpRunning <= tmp___0) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp == waterLevel))) && ((((((!(\old(waterLevel) <= 1) || (((((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0) && tmp == waterLevel)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((((!(\old(waterLevel) <= 1) || (((((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0) && tmp == waterLevel)) || (((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && waterLevel == \result) && pumpRunning <= tmp___0) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || (((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && waterLevel == \result) && pumpRunning <= tmp___0) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0) && tmp == waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((waterLevel == \result && pumpRunning <= tmp___0) && tmp == waterLevel)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || ((((((1 <= pumpRunning && \result <= 2) && tmp <= 2) && 2 <= tmp) && \old(waterLevel) == waterLevel) && 2 <= \result) && !(waterLevel <= 1))) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && tmp == waterLevel)) || (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result <= 2) && 2 == waterLevel) && tmp <= 2) && 2 <= tmp) && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(\old(waterLevel) <= 2)) [2022-07-21 05:03:26,221 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((((((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1) || (pumpRunning == \old(pumpRunning) && waterLevel == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((methaneLevelCritical == \result && tmp == methaneLevelCritical) && \result == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || \old(waterLevel) <= 1)) && ((((((!(\old(waterLevel) <= 1) || ((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0) || !(\old(waterLevel) <= 1)) || ((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) [2022-07-21 05:03:26,221 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || \old(waterLevel) <= 1)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-07-21 05:03:26,221 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(\old(waterLevel) <= 1) || (((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || !(1 == systemActive)) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || !(1 <= \old(pumpRunning))) || (((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || !(1 <= \old(pumpRunning))) || (((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel))) && ((((((pumpRunning == 0 && \result <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 2)) || !(0 == systemActive))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) [2022-07-21 05:03:26,221 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-07-21 05:03:26,222 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || \old(waterLevel) <= 1) || (((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && waterLevel == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || (waterLevel + 1 <= \old(waterLevel) && waterLevel == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) [2022-07-21 05:03:26,222 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == \old(pumpRunning) && (\result == 0 || waterLevel == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2022-07-21 05:03:26,222 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(waterLevel <= 1)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && ((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) [2022-07-21 05:03:26,224 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((tmp == 0 || waterLevel == 0) && pumpRunning == \old(pumpRunning)) && (\result == 0 || waterLevel == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2022-07-21 05:03:26,225 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((!(\result == 0) && \result == 0) && tmp___0 == 0) && !(tmp == 0))) || !(waterLevel <= 1)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2022-07-21 05:03:26,225 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= pumpRunning && 2 == waterLevel)) || !(waterLevel <= 2)) [2022-07-21 05:03:26,250 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-21 05:03:26,250 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-21 05:03:26,250 INFO L158 Benchmark]: Toolchain (without parser) took 50476.24ms. Allocated memory was 54.5MB in the beginning and 486.5MB in the end (delta: 432.0MB). Free memory was 30.2MB in the beginning and 247.6MB in the end (delta: -217.4MB). Peak memory consumption was 215.6MB. Max. memory is 16.1GB. [2022-07-21 05:03:26,251 INFO L158 Benchmark]: CDTParser took 0.19ms. Allocated memory is still 54.5MB. Free memory was 35.8MB in the beginning and 35.8MB in the end (delta: 44.6kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-21 05:03:26,251 INFO L158 Benchmark]: CACSL2BoogieTranslator took 387.67ms. Allocated memory was 54.5MB in the beginning and 67.1MB in the end (delta: 12.6MB). Free memory was 30.0MB in the beginning and 41.3MB in the end (delta: -11.3MB). Peak memory consumption was 5.5MB. Max. memory is 16.1GB. [2022-07-21 05:03:26,251 INFO L158 Benchmark]: Boogie Procedure Inliner took 70.91ms. Allocated memory is still 67.1MB. Free memory was 41.3MB in the beginning and 38.7MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-21 05:03:26,252 INFO L158 Benchmark]: Boogie Preprocessor took 41.44ms. Allocated memory is still 67.1MB. Free memory was 38.7MB in the beginning and 36.9MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-21 05:03:26,252 INFO L158 Benchmark]: RCFGBuilder took 390.30ms. Allocated memory is still 67.1MB. Free memory was 36.9MB in the beginning and 45.0MB in the end (delta: -8.1MB). Peak memory consumption was 7.8MB. Max. memory is 16.1GB. [2022-07-21 05:03:26,253 INFO L158 Benchmark]: TraceAbstraction took 49513.21ms. Allocated memory was 67.1MB in the beginning and 486.5MB in the end (delta: 419.4MB). Free memory was 44.4MB in the beginning and 253.9MB in the end (delta: -209.5MB). Peak memory consumption was 315.1MB. Max. memory is 16.1GB. [2022-07-21 05:03:26,253 INFO L158 Benchmark]: Witness Printer took 66.37ms. Allocated memory is still 486.5MB. Free memory was 253.9MB in the beginning and 247.6MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-21 05:03:26,255 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.19ms. Allocated memory is still 54.5MB. Free memory was 35.8MB in the beginning and 35.8MB in the end (delta: 44.6kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 387.67ms. Allocated memory was 54.5MB in the beginning and 67.1MB in the end (delta: 12.6MB). Free memory was 30.0MB in the beginning and 41.3MB in the end (delta: -11.3MB). Peak memory consumption was 5.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 70.91ms. Allocated memory is still 67.1MB. Free memory was 41.3MB in the beginning and 38.7MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 41.44ms. Allocated memory is still 67.1MB. Free memory was 38.7MB in the beginning and 36.9MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 390.30ms. Allocated memory is still 67.1MB. Free memory was 36.9MB in the beginning and 45.0MB in the end (delta: -8.1MB). Peak memory consumption was 7.8MB. Max. memory is 16.1GB. * TraceAbstraction took 49513.21ms. Allocated memory was 67.1MB in the beginning and 486.5MB in the end (delta: 419.4MB). Free memory was 44.4MB in the beginning and 253.9MB in the end (delta: -209.5MB). Peak memory consumption was 315.1MB. Max. memory is 16.1GB. * Witness Printer took 66.37ms. Allocated memory is still 486.5MB. Free memory was 253.9MB in the beginning and 247.6MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 531]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 110 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 49.4s, OverallIterations: 15, TraceHistogramMax: 9, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 10.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 32.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 7227 SdHoareTripleChecker+Valid, 6.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 7140 mSDsluCounter, 9748 SdHoareTripleChecker+Invalid, 4.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 7122 mSDsCounter, 3494 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 12704 IncrementalHoareTripleChecker+Invalid, 16198 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 3494 mSolverCounterUnsat, 2626 mSDtfsCounter, 12704 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 2744 GetRequests, 2325 SyntacticMatches, 16 SemanticMatches, 403 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4896 ImplicationChecksByTransitivity, 3.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=2255occurred in iteration=14, InterpolantAutomatonStates: 332, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 15 MinimizatonAttempts, 1278 StatesRemovedByMinimization, 12 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 52 LocationsWithAnnotation, 9217 PreInvPairs, 11437 NumberOfFragments, 4134 HoareAnnotationTreeSize, 9217 FomulaSimplifications, 96904 FormulaSimplificationTreeSizeReduction, 7.9s HoareSimplificationTime, 52 FomulaSimplificationsInter, 275957 FormulaSimplificationTreeSizeReductionInter, 24.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 3.8s InterpolantComputationTime, 2616 NumberOfCodeBlocks, 2616 NumberOfCodeBlocksAsserted, 20 NumberOfCheckSat, 3570 ConstructedInterpolants, 0 QuantifiedInterpolants, 8463 SizeOfPredicates, 14 NumberOfNonLiveVariables, 3661 ConjunctsInSsa, 81 ConjunctsInUnsatCore, 25 InterpolantComputations, 10 PerfectInterpolantSequences, 3029/3654 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 420]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 128]: Loop Invariant Derived loop invariant: (((((((((((((!(\old(waterLevel) <= 1) || (((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || !(1 == systemActive)) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || !(1 <= \old(pumpRunning))) || (((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || !(1 <= \old(pumpRunning))) || (((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel))) && ((((((pumpRunning == 0 && \result <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 2)) || !(0 == systemActive))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) - InvariantResult [Line: 555]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || (((\result <= 2 && tmp <= 2) && 2 <= tmp) && 2 <= \result)) || !(\old(waterLevel) == 2)) || !(0 == systemActive)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && waterLevel == \result) && pumpRunning <= tmp___0) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp == waterLevel))) && ((((((!(\old(waterLevel) <= 1) || (((((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0) && tmp == waterLevel)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((((!(\old(waterLevel) <= 1) || (((((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0) && tmp == waterLevel)) || (((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && waterLevel == \result) && pumpRunning <= tmp___0) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || (((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && waterLevel == \result) && pumpRunning <= tmp___0) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0) && tmp == waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((waterLevel == \result && pumpRunning <= tmp___0) && tmp == waterLevel)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || ((((((1 <= pumpRunning && \result <= 2) && tmp <= 2) && 2 <= tmp) && \old(waterLevel) == waterLevel) && 2 <= \result) && !(waterLevel <= 1))) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && tmp == waterLevel)) || (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result <= 2) && 2 == waterLevel) && tmp <= 2) && 2 <= tmp) && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 376]: Loop Invariant Derived loop invariant: ((((((((tmp == 0 || waterLevel == 0) && pumpRunning == \old(pumpRunning)) && (\result == 0 || waterLevel == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 537]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 952]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 527]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || \old(waterLevel) <= 1)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: ((((((1 <= pumpRunning && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || ((((1 <= pumpRunning && 1 < waterLevel) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2)) || (((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2)) || ((((1 <= pumpRunning && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) - InvariantResult [Line: 301]: Loop Invariant Derived loop invariant: ((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || \old(waterLevel) <= 1) || (((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && waterLevel == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || (waterLevel + 1 <= \old(waterLevel) && waterLevel == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 510]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 395]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 2 == waterLevel) && splverifierCounter == 0) && 0 == systemActive) || (((pumpRunning == 0 && waterLevel <= 1) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 1024]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 429]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1006]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 1013]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 96]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 545]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || \old(waterLevel) <= 1)) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 503]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 260]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((((((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1) || (pumpRunning == \old(pumpRunning) && waterLevel == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((methaneLevelCritical == \result && tmp == methaneLevelCritical) && \result == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || \old(waterLevel) <= 1)) && ((((((!(\old(waterLevel) <= 1) || ((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0) || !(\old(waterLevel) <= 1)) || ((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) - InvariantResult [Line: 60]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || (waterLevel <= 0 && \old(waterLevel) == waterLevel)) || !(1 <= \old(pumpRunning))) || waterLevel == 0) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: ((((((pumpRunning == \old(pumpRunning) && (\result == 0 || waterLevel == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && splverifierCounter == 0) && waterLevel <= 2) && 0 == systemActive) || (((pumpRunning == 0 && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || (((1 <= pumpRunning && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || (((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0)) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) - InvariantResult [Line: 962]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 137]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(waterLevel <= 1)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && ((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) - InvariantResult [Line: 357]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((!(\result == 0) && \result == 0) && tmp___0 == 0) && !(tmp == 0))) || !(waterLevel <= 1)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 517]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 285]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= pumpRunning && 2 == waterLevel)) || !(waterLevel <= 2)) RESULT: Ultimate proved your program to be correct! [2022-07-21 05:03:26,305 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE