./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version eb692b52 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 7bcd24ea8f621c8db79e853f5aaf064ffcae573e6c1e9f03eb1f84bb0c15fc3c --- Real Ultimate output --- This is Ultimate 0.2.2-?-eb692b5 [2022-07-19 17:26:13,352 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-19 17:26:13,354 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-19 17:26:13,416 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-19 17:26:13,423 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-19 17:26:13,424 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-19 17:26:13,430 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-19 17:26:13,434 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-19 17:26:13,438 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-19 17:26:13,440 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-19 17:26:13,441 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-19 17:26:13,442 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-19 17:26:13,443 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-19 17:26:13,445 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-19 17:26:13,446 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-19 17:26:13,464 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-19 17:26:13,464 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-19 17:26:13,465 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-19 17:26:13,466 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-19 17:26:13,467 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-19 17:26:13,468 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-19 17:26:13,469 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-19 17:26:13,470 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-19 17:26:13,470 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-19 17:26:13,471 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-19 17:26:13,473 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-19 17:26:13,473 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-19 17:26:13,473 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-19 17:26:13,474 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-19 17:26:13,474 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-19 17:26:13,475 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-19 17:26:13,475 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-19 17:26:13,476 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-19 17:26:13,476 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-19 17:26:13,477 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-19 17:26:13,483 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-19 17:26:13,483 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-19 17:26:13,484 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-19 17:26:13,484 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-19 17:26:13,484 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-19 17:26:13,485 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-19 17:26:13,486 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-19 17:26:13,487 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-19 17:26:13,517 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-19 17:26:13,518 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-19 17:26:13,518 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-19 17:26:13,518 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-19 17:26:13,519 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-19 17:26:13,519 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-19 17:26:13,521 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-19 17:26:13,521 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-19 17:26:13,521 INFO L138 SettingsManager]: * Use SBE=true [2022-07-19 17:26:13,522 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-19 17:26:13,522 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-19 17:26:13,522 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-19 17:26:13,522 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-19 17:26:13,522 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-19 17:26:13,523 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-19 17:26:13,523 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-19 17:26:13,523 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-19 17:26:13,523 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-19 17:26:13,523 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-19 17:26:13,523 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-19 17:26:13,524 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-19 17:26:13,524 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-19 17:26:13,524 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-19 17:26:13,524 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-19 17:26:13,524 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-19 17:26:13,524 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-19 17:26:13,525 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-19 17:26:13,525 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-19 17:26:13,525 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-19 17:26:13,525 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-19 17:26:13,525 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-19 17:26:13,526 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-19 17:26:13,526 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-19 17:26:13,526 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 7bcd24ea8f621c8db79e853f5aaf064ffcae573e6c1e9f03eb1f84bb0c15fc3c [2022-07-19 17:26:13,739 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-19 17:26:13,752 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-19 17:26:13,753 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-19 17:26:13,754 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-19 17:26:13,755 INFO L275 PluginConnector]: CDTParser initialized [2022-07-19 17:26:13,755 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c [2022-07-19 17:26:13,807 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/32d17ccba/1c0901ab05cd489e86a62f2ccd7ff918/FLAGd05a35507 [2022-07-19 17:26:14,210 INFO L306 CDTParser]: Found 1 translation units. [2022-07-19 17:26:14,210 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c [2022-07-19 17:26:14,218 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/32d17ccba/1c0901ab05cd489e86a62f2ccd7ff918/FLAGd05a35507 [2022-07-19 17:26:14,228 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/32d17ccba/1c0901ab05cd489e86a62f2ccd7ff918 [2022-07-19 17:26:14,230 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-19 17:26:14,231 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-19 17:26:14,232 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-19 17:26:14,233 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-19 17:26:14,235 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-19 17:26:14,236 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.07 05:26:14" (1/1) ... [2022-07-19 17:26:14,237 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@eafa4a6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:26:14, skipping insertion in model container [2022-07-19 17:26:14,237 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.07 05:26:14" (1/1) ... [2022-07-19 17:26:14,242 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-19 17:26:14,268 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-19 17:26:14,537 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c[8146,8159] [2022-07-19 17:26:14,597 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-19 17:26:14,616 INFO L203 MainTranslator]: Completed pre-run [2022-07-19 17:26:14,645 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c[8146,8159] [2022-07-19 17:26:14,673 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-19 17:26:14,685 INFO L208 MainTranslator]: Completed translation [2022-07-19 17:26:14,687 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:26:14 WrapperNode [2022-07-19 17:26:14,687 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-19 17:26:14,688 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-19 17:26:14,688 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-19 17:26:14,688 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-19 17:26:14,694 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:26:14" (1/1) ... [2022-07-19 17:26:14,707 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:26:14" (1/1) ... [2022-07-19 17:26:14,726 INFO L137 Inliner]: procedures = 60, calls = 164, calls flagged for inlining = 27, calls inlined = 24, statements flattened = 294 [2022-07-19 17:26:14,726 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-19 17:26:14,727 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-19 17:26:14,727 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-19 17:26:14,727 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-19 17:26:14,733 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:26:14" (1/1) ... [2022-07-19 17:26:14,734 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:26:14" (1/1) ... [2022-07-19 17:26:14,742 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:26:14" (1/1) ... [2022-07-19 17:26:14,743 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:26:14" (1/1) ... [2022-07-19 17:26:14,747 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:26:14" (1/1) ... [2022-07-19 17:26:14,754 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:26:14" (1/1) ... [2022-07-19 17:26:14,755 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:26:14" (1/1) ... [2022-07-19 17:26:14,757 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-19 17:26:14,758 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-19 17:26:14,758 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-19 17:26:14,758 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-19 17:26:14,761 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:26:14" (1/1) ... [2022-07-19 17:26:14,781 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-19 17:26:14,792 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:26:14,801 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-19 17:26:14,808 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-19 17:26:14,828 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-19 17:26:14,828 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-19 17:26:14,828 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-19 17:26:14,828 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-19 17:26:14,828 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-19 17:26:14,829 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-19 17:26:14,829 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-19 17:26:14,829 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-19 17:26:14,829 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-19 17:26:14,829 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-19 17:26:14,829 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-19 17:26:14,829 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2022-07-19 17:26:14,829 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2022-07-19 17:26:14,829 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-07-19 17:26:14,830 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-07-19 17:26:14,830 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-07-19 17:26:14,830 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-07-19 17:26:14,830 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-19 17:26:14,830 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-19 17:26:14,830 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-19 17:26:14,830 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-19 17:26:14,830 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-19 17:26:14,901 INFO L234 CfgBuilder]: Building ICFG [2022-07-19 17:26:14,903 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-19 17:26:15,261 INFO L275 CfgBuilder]: Performing block encoding [2022-07-19 17:26:15,284 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-19 17:26:15,285 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-19 17:26:15,286 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.07 05:26:15 BoogieIcfgContainer [2022-07-19 17:26:15,286 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-19 17:26:15,289 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-19 17:26:15,289 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-19 17:26:15,291 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-19 17:26:15,291 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.07 05:26:14" (1/3) ... [2022-07-19 17:26:15,292 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6ead278d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.07 05:26:15, skipping insertion in model container [2022-07-19 17:26:15,292 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:26:14" (2/3) ... [2022-07-19 17:26:15,292 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6ead278d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.07 05:26:15, skipping insertion in model container [2022-07-19 17:26:15,292 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.07 05:26:15" (3/3) ... [2022-07-19 17:26:15,293 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product56.cil.c [2022-07-19 17:26:15,302 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-19 17:26:15,302 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-19 17:26:15,337 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-19 17:26:15,341 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@50acd17c, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@715ce043 [2022-07-19 17:26:15,341 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-19 17:26:15,344 INFO L276 IsEmpty]: Start isEmpty. Operand has 110 states, 82 states have (on average 1.3658536585365855) internal successors, (112), 93 states have internal predecessors, (112), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2022-07-19 17:26:15,352 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-07-19 17:26:15,352 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:15,353 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:15,354 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:15,357 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:15,358 INFO L85 PathProgramCache]: Analyzing trace with hash 2077500872, now seen corresponding path program 1 times [2022-07-19 17:26:15,363 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:15,364 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1324653289] [2022-07-19 17:26:15,364 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:15,365 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:15,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:15,510 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-19 17:26:15,519 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:15,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-19 17:26:15,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:15,535 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-19 17:26:15,536 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:15,536 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1324653289] [2022-07-19 17:26:15,537 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1324653289] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:26:15,537 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:26:15,537 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-19 17:26:15,538 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [641309848] [2022-07-19 17:26:15,539 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:26:15,541 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-19 17:26:15,541 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:15,561 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-19 17:26:15,562 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-19 17:26:15,565 INFO L87 Difference]: Start difference. First operand has 110 states, 82 states have (on average 1.3658536585365855) internal successors, (112), 93 states have internal predecessors, (112), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-19 17:26:15,604 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:15,605 INFO L93 Difference]: Finished difference Result 211 states and 286 transitions. [2022-07-19 17:26:15,605 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-19 17:26:15,606 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-07-19 17:26:15,606 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:15,616 INFO L225 Difference]: With dead ends: 211 [2022-07-19 17:26:15,616 INFO L226 Difference]: Without dead ends: 101 [2022-07-19 17:26:15,620 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-19 17:26:15,623 INFO L413 NwaCegarLoop]: 140 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 140 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:15,623 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 140 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-19 17:26:15,633 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 101 states. [2022-07-19 17:26:15,656 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 101 to 101. [2022-07-19 17:26:15,657 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 101 states, 75 states have (on average 1.3066666666666666) internal successors, (98), 85 states have internal predecessors, (98), 17 states have call successors, (17), 9 states have call predecessors, (17), 8 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-07-19 17:26:15,662 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 131 transitions. [2022-07-19 17:26:15,663 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 131 transitions. Word has length 32 [2022-07-19 17:26:15,663 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:15,663 INFO L495 AbstractCegarLoop]: Abstraction has 101 states and 131 transitions. [2022-07-19 17:26:15,664 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-19 17:26:15,664 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 131 transitions. [2022-07-19 17:26:15,669 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-07-19 17:26:15,669 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:15,670 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:15,670 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-19 17:26:15,670 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:15,671 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:15,671 INFO L85 PathProgramCache]: Analyzing trace with hash 604529845, now seen corresponding path program 1 times [2022-07-19 17:26:15,671 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:15,671 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [355573693] [2022-07-19 17:26:15,671 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:15,671 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:15,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:15,752 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-19 17:26:15,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:15,758 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-19 17:26:15,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:15,766 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-19 17:26:15,766 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:15,767 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [355573693] [2022-07-19 17:26:15,767 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [355573693] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:26:15,767 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:26:15,767 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-19 17:26:15,767 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2098507102] [2022-07-19 17:26:15,768 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:26:15,770 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-19 17:26:15,772 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:15,772 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-19 17:26:15,773 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-19 17:26:15,773 INFO L87 Difference]: Start difference. First operand 101 states and 131 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-19 17:26:15,788 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:15,789 INFO L93 Difference]: Finished difference Result 162 states and 210 transitions. [2022-07-19 17:26:15,790 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-19 17:26:15,790 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2022-07-19 17:26:15,791 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:15,793 INFO L225 Difference]: With dead ends: 162 [2022-07-19 17:26:15,794 INFO L226 Difference]: Without dead ends: 92 [2022-07-19 17:26:15,795 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-19 17:26:15,796 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 17 mSDsluCounter, 96 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 214 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:15,798 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 214 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-19 17:26:15,798 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92 states. [2022-07-19 17:26:15,804 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92 to 92. [2022-07-19 17:26:15,807 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 92 states, 69 states have (on average 1.318840579710145) internal successors, (91), 79 states have internal predecessors, (91), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2022-07-19 17:26:15,808 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 92 states to 92 states and 119 transitions. [2022-07-19 17:26:15,808 INFO L78 Accepts]: Start accepts. Automaton has 92 states and 119 transitions. Word has length 33 [2022-07-19 17:26:15,808 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:15,809 INFO L495 AbstractCegarLoop]: Abstraction has 92 states and 119 transitions. [2022-07-19 17:26:15,809 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-19 17:26:15,809 INFO L276 IsEmpty]: Start isEmpty. Operand 92 states and 119 transitions. [2022-07-19 17:26:15,827 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-07-19 17:26:15,827 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:15,827 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:15,827 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-19 17:26:15,828 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:15,828 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:15,828 INFO L85 PathProgramCache]: Analyzing trace with hash -1594505260, now seen corresponding path program 1 times [2022-07-19 17:26:15,829 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:15,829 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1022436983] [2022-07-19 17:26:15,829 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:15,829 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:15,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:15,889 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-19 17:26:15,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:15,892 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-07-19 17:26:15,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:15,895 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-19 17:26:15,895 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:15,896 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1022436983] [2022-07-19 17:26:15,896 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1022436983] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:26:15,896 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:26:15,896 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-19 17:26:15,897 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [476066273] [2022-07-19 17:26:15,897 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:26:15,897 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-19 17:26:15,897 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:15,898 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-19 17:26:15,898 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-19 17:26:15,898 INFO L87 Difference]: Start difference. First operand 92 states and 119 transitions. Second operand has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-19 17:26:15,940 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:15,941 INFO L93 Difference]: Finished difference Result 258 states and 340 transitions. [2022-07-19 17:26:15,941 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-19 17:26:15,941 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2022-07-19 17:26:15,942 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:15,945 INFO L225 Difference]: With dead ends: 258 [2022-07-19 17:26:15,945 INFO L226 Difference]: Without dead ends: 174 [2022-07-19 17:26:15,948 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-19 17:26:15,949 INFO L413 NwaCegarLoop]: 146 mSDtfsCounter, 107 mSDsluCounter, 106 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 107 SdHoareTripleChecker+Valid, 252 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:15,950 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [107 Valid, 252 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-19 17:26:15,951 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 174 states. [2022-07-19 17:26:15,964 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 174 to 171. [2022-07-19 17:26:15,969 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 171 states, 126 states have (on average 1.3412698412698412) internal successors, (169), 145 states have internal predecessors, (169), 28 states have call successors, (28), 16 states have call predecessors, (28), 16 states have return successors, (28), 17 states have call predecessors, (28), 28 states have call successors, (28) [2022-07-19 17:26:15,970 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 225 transitions. [2022-07-19 17:26:15,970 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 225 transitions. Word has length 38 [2022-07-19 17:26:15,970 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:15,970 INFO L495 AbstractCegarLoop]: Abstraction has 171 states and 225 transitions. [2022-07-19 17:26:15,971 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-19 17:26:15,971 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 225 transitions. [2022-07-19 17:26:15,973 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-07-19 17:26:15,973 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:15,974 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:15,974 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-19 17:26:15,974 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:15,974 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:15,975 INFO L85 PathProgramCache]: Analyzing trace with hash -969732780, now seen corresponding path program 1 times [2022-07-19 17:26:15,975 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:15,975 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2091473269] [2022-07-19 17:26:15,975 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:15,975 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:15,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:16,042 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-19 17:26:16,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:16,044 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-07-19 17:26:16,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:16,056 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-07-19 17:26:16,057 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:16,057 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2091473269] [2022-07-19 17:26:16,057 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2091473269] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:26:16,057 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:26:16,057 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-19 17:26:16,058 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1967303164] [2022-07-19 17:26:16,058 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:26:16,058 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-19 17:26:16,058 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:16,059 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-19 17:26:16,059 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-19 17:26:16,059 INFO L87 Difference]: Start difference. First operand 171 states and 225 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-19 17:26:16,164 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:16,165 INFO L93 Difference]: Finished difference Result 445 states and 602 transitions. [2022-07-19 17:26:16,165 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-19 17:26:16,165 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2022-07-19 17:26:16,166 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:16,169 INFO L225 Difference]: With dead ends: 445 [2022-07-19 17:26:16,169 INFO L226 Difference]: Without dead ends: 282 [2022-07-19 17:26:16,170 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-07-19 17:26:16,176 INFO L413 NwaCegarLoop]: 133 mSDtfsCounter, 57 mSDsluCounter, 435 mSDsCounter, 0 mSdLazyCounter, 78 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 568 SdHoareTripleChecker+Invalid, 91 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 78 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:16,177 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [58 Valid, 568 Invalid, 91 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 78 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-19 17:26:16,179 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 282 states. [2022-07-19 17:26:16,202 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 282 to 269. [2022-07-19 17:26:16,202 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 269 states, 200 states have (on average 1.29) internal successors, (258), 217 states have internal predecessors, (258), 38 states have call successors, (38), 30 states have call predecessors, (38), 30 states have return successors, (50), 33 states have call predecessors, (50), 38 states have call successors, (50) [2022-07-19 17:26:16,204 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 269 states to 269 states and 346 transitions. [2022-07-19 17:26:16,205 INFO L78 Accepts]: Start accepts. Automaton has 269 states and 346 transitions. Word has length 41 [2022-07-19 17:26:16,205 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:16,205 INFO L495 AbstractCegarLoop]: Abstraction has 269 states and 346 transitions. [2022-07-19 17:26:16,205 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-19 17:26:16,206 INFO L276 IsEmpty]: Start isEmpty. Operand 269 states and 346 transitions. [2022-07-19 17:26:16,207 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-07-19 17:26:16,207 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:16,207 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:16,207 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-19 17:26:16,208 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:16,208 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:16,208 INFO L85 PathProgramCache]: Analyzing trace with hash -1724941251, now seen corresponding path program 1 times [2022-07-19 17:26:16,209 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:16,211 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [116686007] [2022-07-19 17:26:16,211 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:16,211 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:16,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:16,271 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-19 17:26:16,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:16,275 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-19 17:26:16,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:16,283 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:26:16,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:16,303 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-07-19 17:26:16,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:16,309 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-19 17:26:16,309 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:16,309 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [116686007] [2022-07-19 17:26:16,309 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [116686007] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:26:16,309 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:26:16,309 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-19 17:26:16,309 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2039751505] [2022-07-19 17:26:16,310 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:26:16,310 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-19 17:26:16,310 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:16,310 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-19 17:26:16,310 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-19 17:26:16,311 INFO L87 Difference]: Start difference. First operand 269 states and 346 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-19 17:26:16,552 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:16,552 INFO L93 Difference]: Finished difference Result 853 states and 1148 transitions. [2022-07-19 17:26:16,553 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-19 17:26:16,553 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 57 [2022-07-19 17:26:16,553 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:16,556 INFO L225 Difference]: With dead ends: 853 [2022-07-19 17:26:16,556 INFO L226 Difference]: Without dead ends: 592 [2022-07-19 17:26:16,557 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=111, Unknown=0, NotChecked=0, Total=156 [2022-07-19 17:26:16,557 INFO L413 NwaCegarLoop]: 130 mSDtfsCounter, 193 mSDsluCounter, 343 mSDsCounter, 0 mSdLazyCounter, 190 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 199 SdHoareTripleChecker+Valid, 473 SdHoareTripleChecker+Invalid, 248 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 190 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:16,558 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [199 Valid, 473 Invalid, 248 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 190 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-19 17:26:16,558 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 592 states. [2022-07-19 17:26:16,604 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 592 to 529. [2022-07-19 17:26:16,605 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 529 states, 396 states have (on average 1.2575757575757576) internal successors, (498), 418 states have internal predecessors, (498), 69 states have call successors, (69), 53 states have call predecessors, (69), 63 states have return successors, (107), 72 states have call predecessors, (107), 69 states have call successors, (107) [2022-07-19 17:26:16,607 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 529 states to 529 states and 674 transitions. [2022-07-19 17:26:16,607 INFO L78 Accepts]: Start accepts. Automaton has 529 states and 674 transitions. Word has length 57 [2022-07-19 17:26:16,607 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:16,607 INFO L495 AbstractCegarLoop]: Abstraction has 529 states and 674 transitions. [2022-07-19 17:26:16,607 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-19 17:26:16,608 INFO L276 IsEmpty]: Start isEmpty. Operand 529 states and 674 transitions. [2022-07-19 17:26:16,608 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-07-19 17:26:16,609 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:16,609 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:16,609 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-19 17:26:16,609 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:16,609 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:16,610 INFO L85 PathProgramCache]: Analyzing trace with hash 80497083, now seen corresponding path program 1 times [2022-07-19 17:26:16,610 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:16,610 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2053753494] [2022-07-19 17:26:16,610 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:16,610 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:16,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:16,663 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-19 17:26:16,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:16,667 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-19 17:26:16,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:16,671 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:26:16,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:16,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-07-19 17:26:16,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:16,703 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-19 17:26:16,703 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:16,703 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2053753494] [2022-07-19 17:26:16,704 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2053753494] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:26:16,704 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:26:16,704 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-19 17:26:16,704 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1166611231] [2022-07-19 17:26:16,704 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:26:16,704 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-19 17:26:16,705 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:16,705 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-19 17:26:16,705 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-19 17:26:16,705 INFO L87 Difference]: Start difference. First operand 529 states and 674 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-19 17:26:16,865 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:16,865 INFO L93 Difference]: Finished difference Result 1076 states and 1397 transitions. [2022-07-19 17:26:16,865 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-19 17:26:16,865 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2022-07-19 17:26:16,866 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:16,868 INFO L225 Difference]: With dead ends: 1076 [2022-07-19 17:26:16,868 INFO L226 Difference]: Without dead ends: 555 [2022-07-19 17:26:16,869 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-07-19 17:26:16,870 INFO L413 NwaCegarLoop]: 112 mSDtfsCounter, 74 mSDsluCounter, 340 mSDsCounter, 0 mSdLazyCounter, 139 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 452 SdHoareTripleChecker+Invalid, 164 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 139 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:16,870 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [77 Valid, 452 Invalid, 164 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 139 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-19 17:26:16,870 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 555 states. [2022-07-19 17:26:16,907 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 555 to 541. [2022-07-19 17:26:16,908 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 541 states, 408 states have (on average 1.25) internal successors, (510), 430 states have internal predecessors, (510), 69 states have call successors, (69), 53 states have call predecessors, (69), 63 states have return successors, (107), 72 states have call predecessors, (107), 69 states have call successors, (107) [2022-07-19 17:26:16,925 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 541 states to 541 states and 686 transitions. [2022-07-19 17:26:16,925 INFO L78 Accepts]: Start accepts. Automaton has 541 states and 686 transitions. Word has length 57 [2022-07-19 17:26:16,925 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:16,926 INFO L495 AbstractCegarLoop]: Abstraction has 541 states and 686 transitions. [2022-07-19 17:26:16,926 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-19 17:26:16,926 INFO L276 IsEmpty]: Start isEmpty. Operand 541 states and 686 transitions. [2022-07-19 17:26:16,927 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-07-19 17:26:16,927 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:16,927 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:16,927 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-19 17:26:16,927 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:16,928 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:16,928 INFO L85 PathProgramCache]: Analyzing trace with hash 503198909, now seen corresponding path program 1 times [2022-07-19 17:26:16,928 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:16,928 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [319948439] [2022-07-19 17:26:16,928 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:16,928 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:16,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:16,959 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-19 17:26:16,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:16,963 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-19 17:26:16,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:16,979 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:26:16,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:16,992 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-07-19 17:26:16,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:16,993 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-19 17:26:16,993 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:16,993 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [319948439] [2022-07-19 17:26:16,993 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [319948439] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:26:16,994 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:26:16,994 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-19 17:26:16,994 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [238785859] [2022-07-19 17:26:16,994 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:26:16,994 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-19 17:26:16,994 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:16,995 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-19 17:26:16,995 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-19 17:26:16,995 INFO L87 Difference]: Start difference. First operand 541 states and 686 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-19 17:26:17,167 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:17,167 INFO L93 Difference]: Finished difference Result 996 states and 1286 transitions. [2022-07-19 17:26:17,167 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-19 17:26:17,168 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 57 [2022-07-19 17:26:17,168 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:17,169 INFO L225 Difference]: With dead ends: 996 [2022-07-19 17:26:17,170 INFO L226 Difference]: Without dead ends: 463 [2022-07-19 17:26:17,171 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2022-07-19 17:26:17,172 INFO L413 NwaCegarLoop]: 121 mSDtfsCounter, 250 mSDsluCounter, 336 mSDsCounter, 0 mSdLazyCounter, 188 mSolverCounterSat, 67 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 258 SdHoareTripleChecker+Valid, 457 SdHoareTripleChecker+Invalid, 255 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 67 IncrementalHoareTripleChecker+Valid, 188 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:17,172 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [258 Valid, 457 Invalid, 255 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [67 Valid, 188 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-19 17:26:17,173 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 463 states. [2022-07-19 17:26:17,189 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 463 to 447. [2022-07-19 17:26:17,189 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 447 states, 336 states have (on average 1.2291666666666667) internal successors, (413), 355 states have internal predecessors, (413), 58 states have call successors, (58), 44 states have call predecessors, (58), 52 states have return successors, (80), 59 states have call predecessors, (80), 58 states have call successors, (80) [2022-07-19 17:26:17,191 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 447 states to 447 states and 551 transitions. [2022-07-19 17:26:17,192 INFO L78 Accepts]: Start accepts. Automaton has 447 states and 551 transitions. Word has length 57 [2022-07-19 17:26:17,192 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:17,192 INFO L495 AbstractCegarLoop]: Abstraction has 447 states and 551 transitions. [2022-07-19 17:26:17,192 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-19 17:26:17,192 INFO L276 IsEmpty]: Start isEmpty. Operand 447 states and 551 transitions. [2022-07-19 17:26:17,193 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-07-19 17:26:17,193 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:17,193 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:17,194 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-19 17:26:17,194 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:17,194 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:17,194 INFO L85 PathProgramCache]: Analyzing trace with hash 924671973, now seen corresponding path program 1 times [2022-07-19 17:26:17,194 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:17,194 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [573843769] [2022-07-19 17:26:17,195 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:17,195 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:17,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:17,264 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-19 17:26:17,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:17,282 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-19 17:26:17,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:17,304 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-07-19 17:26:17,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:17,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:26:17,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:17,319 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 53 [2022-07-19 17:26:17,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:17,321 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-19 17:26:17,321 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:17,321 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [573843769] [2022-07-19 17:26:17,321 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [573843769] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:26:17,321 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:26:17,321 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-07-19 17:26:17,322 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2079918690] [2022-07-19 17:26:17,322 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:26:17,322 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-07-19 17:26:17,322 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:17,322 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-07-19 17:26:17,323 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-07-19 17:26:17,323 INFO L87 Difference]: Start difference. First operand 447 states and 551 transitions. Second operand has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-07-19 17:26:18,004 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:18,005 INFO L93 Difference]: Finished difference Result 1669 states and 2221 transitions. [2022-07-19 17:26:18,005 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-07-19 17:26:18,005 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 61 [2022-07-19 17:26:18,005 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:18,010 INFO L225 Difference]: With dead ends: 1669 [2022-07-19 17:26:18,010 INFO L226 Difference]: Without dead ends: 1344 [2022-07-19 17:26:18,011 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 13 SyntacticMatches, 1 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 297 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=221, Invalid=969, Unknown=0, NotChecked=0, Total=1190 [2022-07-19 17:26:18,012 INFO L413 NwaCegarLoop]: 191 mSDtfsCounter, 624 mSDsluCounter, 772 mSDsCounter, 0 mSdLazyCounter, 1033 mSolverCounterSat, 242 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 634 SdHoareTripleChecker+Valid, 963 SdHoareTripleChecker+Invalid, 1275 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 242 IncrementalHoareTripleChecker+Valid, 1033 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:18,012 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [634 Valid, 963 Invalid, 1275 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [242 Valid, 1033 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-07-19 17:26:18,013 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1344 states. [2022-07-19 17:26:18,060 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1344 to 1190. [2022-07-19 17:26:18,061 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1190 states, 887 states have (on average 1.2232243517474635) internal successors, (1085), 944 states have internal predecessors, (1085), 160 states have call successors, (160), 118 states have call predecessors, (160), 142 states have return successors, (260), 162 states have call predecessors, (260), 160 states have call successors, (260) [2022-07-19 17:26:18,064 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1190 states to 1190 states and 1505 transitions. [2022-07-19 17:26:18,065 INFO L78 Accepts]: Start accepts. Automaton has 1190 states and 1505 transitions. Word has length 61 [2022-07-19 17:26:18,065 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:18,065 INFO L495 AbstractCegarLoop]: Abstraction has 1190 states and 1505 transitions. [2022-07-19 17:26:18,065 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-07-19 17:26:18,065 INFO L276 IsEmpty]: Start isEmpty. Operand 1190 states and 1505 transitions. [2022-07-19 17:26:18,066 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 92 [2022-07-19 17:26:18,066 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:18,067 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:18,067 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-19 17:26:18,067 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:18,067 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:18,067 INFO L85 PathProgramCache]: Analyzing trace with hash 798113011, now seen corresponding path program 1 times [2022-07-19 17:26:18,067 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:18,068 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1459514697] [2022-07-19 17:26:18,068 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:18,068 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:18,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:18,088 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-19 17:26:18,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:18,093 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-19 17:26:18,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:18,108 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:18,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:18,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-19 17:26:18,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:18,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:26:18,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:18,126 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-07-19 17:26:18,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:18,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2022-07-19 17:26:18,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:18,128 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-07-19 17:26:18,129 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:18,129 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1459514697] [2022-07-19 17:26:18,129 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1459514697] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:26:18,129 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:26:18,129 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-19 17:26:18,129 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1613009044] [2022-07-19 17:26:18,129 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:26:18,130 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-19 17:26:18,130 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:18,130 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-19 17:26:18,130 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-07-19 17:26:18,130 INFO L87 Difference]: Start difference. First operand 1190 states and 1505 transitions. Second operand has 7 states, 7 states have (on average 10.285714285714286) internal successors, (72), 4 states have internal predecessors, (72), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2022-07-19 17:26:18,485 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:18,485 INFO L93 Difference]: Finished difference Result 2008 states and 2529 transitions. [2022-07-19 17:26:18,486 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-07-19 17:26:18,486 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 10.285714285714286) internal successors, (72), 4 states have internal predecessors, (72), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 91 [2022-07-19 17:26:18,486 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:18,489 INFO L225 Difference]: With dead ends: 2008 [2022-07-19 17:26:18,489 INFO L226 Difference]: Without dead ends: 826 [2022-07-19 17:26:18,491 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2022-07-19 17:26:18,492 INFO L413 NwaCegarLoop]: 153 mSDtfsCounter, 345 mSDsluCounter, 228 mSDsCounter, 0 mSdLazyCounter, 226 mSolverCounterSat, 135 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 354 SdHoareTripleChecker+Valid, 381 SdHoareTripleChecker+Invalid, 361 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 135 IncrementalHoareTripleChecker+Valid, 226 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:18,492 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [354 Valid, 381 Invalid, 361 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [135 Valid, 226 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-19 17:26:18,493 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 826 states. [2022-07-19 17:26:18,533 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 826 to 790. [2022-07-19 17:26:18,534 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 790 states, 594 states have (on average 1.2121212121212122) internal successors, (720), 633 states have internal predecessors, (720), 104 states have call successors, (104), 79 states have call predecessors, (104), 91 states have return successors, (155), 105 states have call predecessors, (155), 104 states have call successors, (155) [2022-07-19 17:26:18,536 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 790 states to 790 states and 979 transitions. [2022-07-19 17:26:18,537 INFO L78 Accepts]: Start accepts. Automaton has 790 states and 979 transitions. Word has length 91 [2022-07-19 17:26:18,537 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:18,537 INFO L495 AbstractCegarLoop]: Abstraction has 790 states and 979 transitions. [2022-07-19 17:26:18,537 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 10.285714285714286) internal successors, (72), 4 states have internal predecessors, (72), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2022-07-19 17:26:18,537 INFO L276 IsEmpty]: Start isEmpty. Operand 790 states and 979 transitions. [2022-07-19 17:26:18,552 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 112 [2022-07-19 17:26:18,552 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:18,552 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:18,552 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-19 17:26:18,553 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:18,553 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:18,553 INFO L85 PathProgramCache]: Analyzing trace with hash -726468575, now seen corresponding path program 1 times [2022-07-19 17:26:18,553 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:18,553 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [937205820] [2022-07-19 17:26:18,553 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:18,554 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:18,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:18,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-19 17:26:18,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:18,632 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-19 17:26:18,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:18,652 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:18,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:18,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-19 17:26:18,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:18,674 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:26:18,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:18,684 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-07-19 17:26:18,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:18,695 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2022-07-19 17:26:18,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:18,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-19 17:26:18,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:18,700 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:26:18,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:18,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2022-07-19 17:26:18,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:18,702 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 16 proven. 13 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-07-19 17:26:18,702 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:18,702 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [937205820] [2022-07-19 17:26:18,703 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [937205820] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-19 17:26:18,703 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1844928827] [2022-07-19 17:26:18,703 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:18,703 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:26:18,703 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:26:18,720 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-19 17:26:18,726 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-19 17:26:18,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:18,840 INFO L263 TraceCheckSpWp]: Trace formula consists of 512 conjuncts, 8 conjunts are in the unsatisfiable core [2022-07-19 17:26:18,846 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-19 17:26:18,957 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 27 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:26:18,957 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-19 17:26:19,097 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 19 proven. 10 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-07-19 17:26:19,098 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1844928827] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-19 17:26:19,098 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-19 17:26:19,098 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2022-07-19 17:26:19,098 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [367563096] [2022-07-19 17:26:19,098 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-19 17:26:19,098 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-07-19 17:26:19,099 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:19,099 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-07-19 17:26:19,099 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2022-07-19 17:26:19,099 INFO L87 Difference]: Start difference. First operand 790 states and 979 transitions. Second operand has 15 states, 15 states have (on average 9.133333333333333) internal successors, (137), 10 states have internal predecessors, (137), 6 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 6 states have call successors, (19) [2022-07-19 17:26:20,039 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:20,039 INFO L93 Difference]: Finished difference Result 1832 states and 2348 transitions. [2022-07-19 17:26:20,039 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2022-07-19 17:26:20,040 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 9.133333333333333) internal successors, (137), 10 states have internal predecessors, (137), 6 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 6 states have call successors, (19) Word has length 111 [2022-07-19 17:26:20,040 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:20,044 INFO L225 Difference]: With dead ends: 1832 [2022-07-19 17:26:20,044 INFO L226 Difference]: Without dead ends: 1139 [2022-07-19 17:26:20,047 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 310 GetRequests, 255 SyntacticMatches, 1 SemanticMatches, 54 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 904 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=621, Invalid=2459, Unknown=0, NotChecked=0, Total=3080 [2022-07-19 17:26:20,047 INFO L413 NwaCegarLoop]: 255 mSDtfsCounter, 590 mSDsluCounter, 883 mSDsCounter, 0 mSdLazyCounter, 958 mSolverCounterSat, 303 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 599 SdHoareTripleChecker+Valid, 1138 SdHoareTripleChecker+Invalid, 1261 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 303 IncrementalHoareTripleChecker+Valid, 958 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:20,048 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [599 Valid, 1138 Invalid, 1261 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [303 Valid, 958 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-07-19 17:26:20,049 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1139 states. [2022-07-19 17:26:20,085 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1139 to 887. [2022-07-19 17:26:20,087 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 887 states, 659 states have (on average 1.1881638846737481) internal successors, (783), 710 states have internal predecessors, (783), 121 states have call successors, (121), 100 states have call predecessors, (121), 106 states have return successors, (154), 111 states have call predecessors, (154), 121 states have call successors, (154) [2022-07-19 17:26:20,089 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 887 states to 887 states and 1058 transitions. [2022-07-19 17:26:20,089 INFO L78 Accepts]: Start accepts. Automaton has 887 states and 1058 transitions. Word has length 111 [2022-07-19 17:26:20,090 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:20,090 INFO L495 AbstractCegarLoop]: Abstraction has 887 states and 1058 transitions. [2022-07-19 17:26:20,091 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 9.133333333333333) internal successors, (137), 10 states have internal predecessors, (137), 6 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 6 states have call successors, (19) [2022-07-19 17:26:20,091 INFO L276 IsEmpty]: Start isEmpty. Operand 887 states and 1058 transitions. [2022-07-19 17:26:20,095 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 192 [2022-07-19 17:26:20,095 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:20,095 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:20,130 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-19 17:26:20,308 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-07-19 17:26:20,309 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:20,309 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:20,310 INFO L85 PathProgramCache]: Analyzing trace with hash 605285009, now seen corresponding path program 1 times [2022-07-19 17:26:20,310 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:20,310 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [17115266] [2022-07-19 17:26:20,310 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:20,310 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:20,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:20,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-19 17:26:20,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:20,357 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-19 17:26:20,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:20,365 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:20,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:20,369 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-19 17:26:20,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:20,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:26:20,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:20,375 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-07-19 17:26:20,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:20,382 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:20,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:20,383 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-19 17:26:20,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:20,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-19 17:26:20,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:20,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:26:20,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:20,387 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2022-07-19 17:26:20,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:20,409 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:20,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:20,411 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-19 17:26:20,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:20,414 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 153 [2022-07-19 17:26:20,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:20,416 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 162 [2022-07-19 17:26:20,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:20,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:26:20,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:20,421 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 183 [2022-07-19 17:26:20,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:20,424 INFO L134 CoverageAnalysis]: Checked inductivity of 203 backedges. 81 proven. 0 refuted. 0 times theorem prover too weak. 122 trivial. 0 not checked. [2022-07-19 17:26:20,424 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:20,424 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [17115266] [2022-07-19 17:26:20,424 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [17115266] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:26:20,424 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:26:20,424 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-07-19 17:26:20,424 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [644030772] [2022-07-19 17:26:20,424 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:26:20,424 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-07-19 17:26:20,424 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:20,425 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-07-19 17:26:20,425 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2022-07-19 17:26:20,425 INFO L87 Difference]: Start difference. First operand 887 states and 1058 transitions. Second operand has 10 states, 10 states have (on average 9.7) internal successors, (97), 7 states have internal predecessors, (97), 4 states have call successors, (13), 5 states have call predecessors, (13), 2 states have return successors, (13), 4 states have call predecessors, (13), 4 states have call successors, (13) [2022-07-19 17:26:21,000 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:21,000 INFO L93 Difference]: Finished difference Result 2536 states and 3071 transitions. [2022-07-19 17:26:21,000 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2022-07-19 17:26:21,000 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 9.7) internal successors, (97), 7 states have internal predecessors, (97), 4 states have call successors, (13), 5 states have call predecessors, (13), 2 states have return successors, (13), 4 states have call predecessors, (13), 4 states have call successors, (13) Word has length 191 [2022-07-19 17:26:21,001 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:21,007 INFO L225 Difference]: With dead ends: 2536 [2022-07-19 17:26:21,007 INFO L226 Difference]: Without dead ends: 1657 [2022-07-19 17:26:21,010 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 46 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 251 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=229, Invalid=893, Unknown=0, NotChecked=0, Total=1122 [2022-07-19 17:26:21,012 INFO L413 NwaCegarLoop]: 229 mSDtfsCounter, 434 mSDsluCounter, 674 mSDsCounter, 0 mSdLazyCounter, 857 mSolverCounterSat, 154 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 440 SdHoareTripleChecker+Valid, 903 SdHoareTripleChecker+Invalid, 1011 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 154 IncrementalHoareTripleChecker+Valid, 857 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:21,012 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [440 Valid, 903 Invalid, 1011 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [154 Valid, 857 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-19 17:26:21,013 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1657 states. [2022-07-19 17:26:21,078 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1657 to 1648. [2022-07-19 17:26:21,080 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1648 states, 1231 states have (on average 1.1551584077985377) internal successors, (1422), 1318 states have internal predecessors, (1422), 221 states have call successors, (221), 188 states have call predecessors, (221), 195 states have return successors, (277), 205 states have call predecessors, (277), 221 states have call successors, (277) [2022-07-19 17:26:21,086 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1648 states to 1648 states and 1920 transitions. [2022-07-19 17:26:21,087 INFO L78 Accepts]: Start accepts. Automaton has 1648 states and 1920 transitions. Word has length 191 [2022-07-19 17:26:21,087 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:21,087 INFO L495 AbstractCegarLoop]: Abstraction has 1648 states and 1920 transitions. [2022-07-19 17:26:21,087 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 9.7) internal successors, (97), 7 states have internal predecessors, (97), 4 states have call successors, (13), 5 states have call predecessors, (13), 2 states have return successors, (13), 4 states have call predecessors, (13), 4 states have call successors, (13) [2022-07-19 17:26:21,087 INFO L276 IsEmpty]: Start isEmpty. Operand 1648 states and 1920 transitions. [2022-07-19 17:26:21,091 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 196 [2022-07-19 17:26:21,091 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:21,092 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:21,092 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-07-19 17:26:21,092 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:21,092 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:21,092 INFO L85 PathProgramCache]: Analyzing trace with hash -1124053067, now seen corresponding path program 1 times [2022-07-19 17:26:21,092 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:21,092 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [294193500] [2022-07-19 17:26:21,093 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:21,093 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:21,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:21,151 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-19 17:26:21,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:21,161 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-19 17:26:21,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:21,193 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:21,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:21,197 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-19 17:26:21,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:21,199 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:26:21,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:21,201 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-07-19 17:26:21,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:21,253 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:21,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:21,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-19 17:26:21,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:21,257 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-19 17:26:21,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:21,258 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:26:21,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:21,279 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2022-07-19 17:26:21,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:21,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2022-07-19 17:26:21,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:21,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:21,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:21,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-19 17:26:21,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:21,286 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 157 [2022-07-19 17:26:21,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:21,287 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 166 [2022-07-19 17:26:21,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:21,289 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:26:21,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:21,303 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 187 [2022-07-19 17:26:21,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:21,305 INFO L134 CoverageAnalysis]: Checked inductivity of 203 backedges. 92 proven. 28 refuted. 0 times theorem prover too weak. 83 trivial. 0 not checked. [2022-07-19 17:26:21,305 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:21,305 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [294193500] [2022-07-19 17:26:21,305 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [294193500] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-19 17:26:21,305 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1265123415] [2022-07-19 17:26:21,305 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:21,306 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:26:21,306 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:26:21,307 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-19 17:26:21,370 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-19 17:26:21,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:21,452 INFO L263 TraceCheckSpWp]: Trace formula consists of 733 conjuncts, 13 conjunts are in the unsatisfiable core [2022-07-19 17:26:21,462 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-19 17:26:21,650 INFO L134 CoverageAnalysis]: Checked inductivity of 203 backedges. 147 proven. 4 refuted. 0 times theorem prover too weak. 52 trivial. 0 not checked. [2022-07-19 17:26:21,650 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-19 17:26:22,039 INFO L134 CoverageAnalysis]: Checked inductivity of 203 backedges. 81 proven. 39 refuted. 0 times theorem prover too weak. 83 trivial. 0 not checked. [2022-07-19 17:26:22,040 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1265123415] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-19 17:26:22,040 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-19 17:26:22,040 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 10, 11] total 26 [2022-07-19 17:26:22,040 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1815101515] [2022-07-19 17:26:22,040 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-19 17:26:22,041 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-07-19 17:26:22,041 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:22,041 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-07-19 17:26:22,041 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=125, Invalid=525, Unknown=0, NotChecked=0, Total=650 [2022-07-19 17:26:22,041 INFO L87 Difference]: Start difference. First operand 1648 states and 1920 transitions. Second operand has 26 states, 26 states have (on average 8.538461538461538) internal successors, (222), 22 states have internal predecessors, (222), 10 states have call successors, (39), 9 states have call predecessors, (39), 9 states have return successors, (34), 9 states have call predecessors, (34), 10 states have call successors, (34) [2022-07-19 17:26:23,391 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:23,391 INFO L93 Difference]: Finished difference Result 3749 states and 4489 transitions. [2022-07-19 17:26:23,391 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-07-19 17:26:23,392 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 8.538461538461538) internal successors, (222), 22 states have internal predecessors, (222), 10 states have call successors, (39), 9 states have call predecessors, (39), 9 states have return successors, (34), 9 states have call predecessors, (34), 10 states have call successors, (34) Word has length 195 [2022-07-19 17:26:23,392 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:23,399 INFO L225 Difference]: With dead ends: 3749 [2022-07-19 17:26:23,399 INFO L226 Difference]: Without dead ends: 2109 [2022-07-19 17:26:23,403 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 477 GetRequests, 424 SyntacticMatches, 4 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 525 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=553, Invalid=1997, Unknown=0, NotChecked=0, Total=2550 [2022-07-19 17:26:23,403 INFO L413 NwaCegarLoop]: 171 mSDtfsCounter, 1013 mSDsluCounter, 435 mSDsCounter, 0 mSdLazyCounter, 1542 mSolverCounterSat, 474 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1019 SdHoareTripleChecker+Valid, 606 SdHoareTripleChecker+Invalid, 2016 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 474 IncrementalHoareTripleChecker+Valid, 1542 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:23,404 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1019 Valid, 606 Invalid, 2016 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [474 Valid, 1542 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-07-19 17:26:23,405 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2109 states. [2022-07-19 17:26:23,493 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2109 to 1887. [2022-07-19 17:26:23,495 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1887 states, 1414 states have (on average 1.1386138613861385) internal successors, (1610), 1504 states have internal predecessors, (1610), 258 states have call successors, (258), 221 states have call predecessors, (258), 214 states have return successors, (310), 226 states have call predecessors, (310), 258 states have call successors, (310) [2022-07-19 17:26:23,501 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1887 states to 1887 states and 2178 transitions. [2022-07-19 17:26:23,501 INFO L78 Accepts]: Start accepts. Automaton has 1887 states and 2178 transitions. Word has length 195 [2022-07-19 17:26:23,501 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:23,502 INFO L495 AbstractCegarLoop]: Abstraction has 1887 states and 2178 transitions. [2022-07-19 17:26:23,502 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 8.538461538461538) internal successors, (222), 22 states have internal predecessors, (222), 10 states have call successors, (39), 9 states have call predecessors, (39), 9 states have return successors, (34), 9 states have call predecessors, (34), 10 states have call successors, (34) [2022-07-19 17:26:23,502 INFO L276 IsEmpty]: Start isEmpty. Operand 1887 states and 2178 transitions. [2022-07-19 17:26:23,506 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 212 [2022-07-19 17:26:23,506 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:23,506 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:23,535 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-19 17:26:23,723 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-07-19 17:26:23,724 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:23,724 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:23,724 INFO L85 PathProgramCache]: Analyzing trace with hash -1780867375, now seen corresponding path program 1 times [2022-07-19 17:26:23,724 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:23,724 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2005437985] [2022-07-19 17:26:23,725 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:23,725 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:23,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:23,758 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-19 17:26:23,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:23,765 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-19 17:26:23,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:23,774 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:23,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:23,778 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-19 17:26:23,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:23,782 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:26:23,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:23,786 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-07-19 17:26:23,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:23,804 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:23,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:23,805 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-19 17:26:23,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:23,809 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-19 17:26:23,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:23,811 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:26:23,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:23,812 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2022-07-19 17:26:23,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:23,823 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 118 [2022-07-19 17:26:23,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:23,825 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 125 [2022-07-19 17:26:23,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:23,828 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:23,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:23,829 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-19 17:26:23,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:23,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-19 17:26:23,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:23,831 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 162 [2022-07-19 17:26:23,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:23,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 173 [2022-07-19 17:26:23,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:23,833 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2022-07-19 17:26:23,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:23,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:26:23,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:23,837 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 203 [2022-07-19 17:26:23,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:23,838 INFO L134 CoverageAnalysis]: Checked inductivity of 249 backedges. 98 proven. 51 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2022-07-19 17:26:23,838 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:23,838 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2005437985] [2022-07-19 17:26:23,838 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2005437985] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-19 17:26:23,838 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1807553941] [2022-07-19 17:26:23,838 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:23,839 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:26:23,839 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:26:23,860 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-19 17:26:23,895 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-07-19 17:26:23,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:24,001 INFO L263 TraceCheckSpWp]: Trace formula consists of 772 conjuncts, 12 conjunts are in the unsatisfiable core [2022-07-19 17:26:24,004 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-19 17:26:24,119 INFO L134 CoverageAnalysis]: Checked inductivity of 249 backedges. 191 proven. 11 refuted. 0 times theorem prover too weak. 47 trivial. 0 not checked. [2022-07-19 17:26:24,120 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-19 17:26:24,509 INFO L134 CoverageAnalysis]: Checked inductivity of 249 backedges. 106 proven. 61 refuted. 0 times theorem prover too weak. 82 trivial. 0 not checked. [2022-07-19 17:26:24,510 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1807553941] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-19 17:26:24,510 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-19 17:26:24,510 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 8, 8] total 22 [2022-07-19 17:26:24,510 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [234796222] [2022-07-19 17:26:24,510 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-19 17:26:24,511 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-07-19 17:26:24,511 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:24,511 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-07-19 17:26:24,512 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=394, Unknown=0, NotChecked=0, Total=462 [2022-07-19 17:26:24,512 INFO L87 Difference]: Start difference. First operand 1887 states and 2178 transitions. Second operand has 22 states, 22 states have (on average 10.954545454545455) internal successors, (241), 15 states have internal predecessors, (241), 7 states have call successors, (47), 8 states have call predecessors, (47), 11 states have return successors, (40), 9 states have call predecessors, (40), 7 states have call successors, (40) [2022-07-19 17:26:25,886 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:25,887 INFO L93 Difference]: Finished difference Result 3744 states and 4346 transitions. [2022-07-19 17:26:25,887 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2022-07-19 17:26:25,888 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 10.954545454545455) internal successors, (241), 15 states have internal predecessors, (241), 7 states have call successors, (47), 8 states have call predecessors, (47), 11 states have return successors, (40), 9 states have call predecessors, (40), 7 states have call successors, (40) Word has length 211 [2022-07-19 17:26:25,888 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:25,895 INFO L225 Difference]: With dead ends: 3744 [2022-07-19 17:26:25,895 INFO L226 Difference]: Without dead ends: 2043 [2022-07-19 17:26:25,899 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 530 GetRequests, 471 SyntacticMatches, 3 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 750 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=654, Invalid=2652, Unknown=0, NotChecked=0, Total=3306 [2022-07-19 17:26:25,900 INFO L413 NwaCegarLoop]: 164 mSDtfsCounter, 720 mSDsluCounter, 415 mSDsCounter, 0 mSdLazyCounter, 1792 mSolverCounterSat, 352 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 727 SdHoareTripleChecker+Valid, 579 SdHoareTripleChecker+Invalid, 2144 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 352 IncrementalHoareTripleChecker+Valid, 1792 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:25,901 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [727 Valid, 579 Invalid, 2144 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [352 Valid, 1792 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-07-19 17:26:25,903 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2043 states. [2022-07-19 17:26:25,974 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2043 to 1833. [2022-07-19 17:26:25,977 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1833 states, 1380 states have (on average 1.1340579710144927) internal successors, (1565), 1460 states have internal predecessors, (1565), 232 states have call successors, (232), 215 states have call predecessors, (232), 220 states have return successors, (280), 220 states have call predecessors, (280), 232 states have call successors, (280) [2022-07-19 17:26:25,981 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1833 states to 1833 states and 2077 transitions. [2022-07-19 17:26:25,982 INFO L78 Accepts]: Start accepts. Automaton has 1833 states and 2077 transitions. Word has length 211 [2022-07-19 17:26:25,982 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:25,982 INFO L495 AbstractCegarLoop]: Abstraction has 1833 states and 2077 transitions. [2022-07-19 17:26:25,982 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 10.954545454545455) internal successors, (241), 15 states have internal predecessors, (241), 7 states have call successors, (47), 8 states have call predecessors, (47), 11 states have return successors, (40), 9 states have call predecessors, (40), 7 states have call successors, (40) [2022-07-19 17:26:25,983 INFO L276 IsEmpty]: Start isEmpty. Operand 1833 states and 2077 transitions. [2022-07-19 17:26:25,986 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 213 [2022-07-19 17:26:25,986 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:25,986 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:26,006 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-07-19 17:26:26,203 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:26:26,203 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:26,204 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:26,204 INFO L85 PathProgramCache]: Analyzing trace with hash -1730288948, now seen corresponding path program 1 times [2022-07-19 17:26:26,204 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:26,204 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [719278847] [2022-07-19 17:26:26,204 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:26,204 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:26,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:26,260 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-19 17:26:26,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:26,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-19 17:26:26,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:26,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:26,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:26,289 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-19 17:26:26,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:26,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:26:26,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:26,293 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-07-19 17:26:26,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:26,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:26,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:26,318 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-19 17:26:26,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:26,321 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-19 17:26:26,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:26,322 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:26:26,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:26,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2022-07-19 17:26:26,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:26,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2022-07-19 17:26:26,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:26,330 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 126 [2022-07-19 17:26:26,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:26,338 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:26,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:26,340 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-19 17:26:26,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:26,341 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-19 17:26:26,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:26,342 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 163 [2022-07-19 17:26:26,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:26,350 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 174 [2022-07-19 17:26:26,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:26,352 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 183 [2022-07-19 17:26:26,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:26,360 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:26:26,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:26,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 204 [2022-07-19 17:26:26,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:26,366 INFO L134 CoverageAnalysis]: Checked inductivity of 250 backedges. 93 proven. 45 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2022-07-19 17:26:26,366 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:26,366 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [719278847] [2022-07-19 17:26:26,366 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [719278847] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-19 17:26:26,366 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1711560374] [2022-07-19 17:26:26,367 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:26,367 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:26:26,367 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:26:26,368 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-19 17:26:26,369 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-07-19 17:26:26,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:26,485 INFO L263 TraceCheckSpWp]: Trace formula consists of 772 conjuncts, 18 conjunts are in the unsatisfiable core [2022-07-19 17:26:26,489 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-19 17:26:26,616 INFO L134 CoverageAnalysis]: Checked inductivity of 250 backedges. 135 proven. 26 refuted. 0 times theorem prover too weak. 89 trivial. 0 not checked. [2022-07-19 17:26:26,617 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-19 17:26:26,964 INFO L134 CoverageAnalysis]: Checked inductivity of 250 backedges. 103 proven. 45 refuted. 0 times theorem prover too weak. 102 trivial. 0 not checked. [2022-07-19 17:26:26,965 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1711560374] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-19 17:26:26,965 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-19 17:26:26,965 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 8, 13] total 23 [2022-07-19 17:26:26,965 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [565707074] [2022-07-19 17:26:26,965 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-19 17:26:26,966 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-07-19 17:26:26,966 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:26,966 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-07-19 17:26:26,966 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=111, Invalid=395, Unknown=0, NotChecked=0, Total=506 [2022-07-19 17:26:26,967 INFO L87 Difference]: Start difference. First operand 1833 states and 2077 transitions. Second operand has 23 states, 23 states have (on average 10.26086956521739) internal successors, (236), 19 states have internal predecessors, (236), 13 states have call successors, (47), 11 states have call predecessors, (47), 13 states have return successors, (41), 14 states have call predecessors, (41), 13 states have call successors, (41) [2022-07-19 17:26:28,448 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:28,449 INFO L93 Difference]: Finished difference Result 3556 states and 4099 transitions. [2022-07-19 17:26:28,449 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 44 states. [2022-07-19 17:26:28,450 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 10.26086956521739) internal successors, (236), 19 states have internal predecessors, (236), 13 states have call successors, (47), 11 states have call predecessors, (47), 13 states have return successors, (41), 14 states have call predecessors, (41), 13 states have call successors, (41) Word has length 212 [2022-07-19 17:26:28,450 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:28,458 INFO L225 Difference]: With dead ends: 3556 [2022-07-19 17:26:28,458 INFO L226 Difference]: Without dead ends: 2541 [2022-07-19 17:26:28,462 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 535 GetRequests, 474 SyntacticMatches, 2 SemanticMatches, 59 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 791 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=897, Invalid=2763, Unknown=0, NotChecked=0, Total=3660 [2022-07-19 17:26:28,462 INFO L413 NwaCegarLoop]: 252 mSDtfsCounter, 1039 mSDsluCounter, 422 mSDsCounter, 0 mSdLazyCounter, 1767 mSolverCounterSat, 544 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1046 SdHoareTripleChecker+Valid, 674 SdHoareTripleChecker+Invalid, 2311 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 544 IncrementalHoareTripleChecker+Valid, 1767 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:28,462 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1046 Valid, 674 Invalid, 2311 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [544 Valid, 1767 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-07-19 17:26:28,464 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2541 states. [2022-07-19 17:26:28,581 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2541 to 2255. [2022-07-19 17:26:28,583 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2255 states, 1696 states have (on average 1.1320754716981132) internal successors, (1920), 1791 states have internal predecessors, (1920), 289 states have call successors, (289), 267 states have call predecessors, (289), 269 states have return successors, (343), 271 states have call predecessors, (343), 289 states have call successors, (343) [2022-07-19 17:26:28,587 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2255 states to 2255 states and 2552 transitions. [2022-07-19 17:26:28,588 INFO L78 Accepts]: Start accepts. Automaton has 2255 states and 2552 transitions. Word has length 212 [2022-07-19 17:26:28,588 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:28,588 INFO L495 AbstractCegarLoop]: Abstraction has 2255 states and 2552 transitions. [2022-07-19 17:26:28,589 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 10.26086956521739) internal successors, (236), 19 states have internal predecessors, (236), 13 states have call successors, (47), 11 states have call predecessors, (47), 13 states have return successors, (41), 14 states have call predecessors, (41), 13 states have call successors, (41) [2022-07-19 17:26:28,589 INFO L276 IsEmpty]: Start isEmpty. Operand 2255 states and 2552 transitions. [2022-07-19 17:26:28,593 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 251 [2022-07-19 17:26:28,594 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:26:28,594 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:26:28,613 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-07-19 17:26:28,810 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13,5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:26:28,810 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:26:28,811 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:26:28,811 INFO L85 PathProgramCache]: Analyzing trace with hash 1988033271, now seen corresponding path program 1 times [2022-07-19 17:26:28,811 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:26:28,811 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [612063918] [2022-07-19 17:26:28,811 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:28,811 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:26:28,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:28,872 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-19 17:26:28,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:28,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-19 17:26:28,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:28,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:28,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:28,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-19 17:26:28,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:28,890 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:26:28,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:28,894 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-07-19 17:26:28,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:28,928 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:28,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:28,929 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-19 17:26:28,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:28,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-19 17:26:28,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:28,959 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:26:28,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:28,960 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2022-07-19 17:26:28,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:28,964 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2022-07-19 17:26:28,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:28,965 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 126 [2022-07-19 17:26:28,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:28,968 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:28,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:28,969 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-19 17:26:28,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:28,970 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-19 17:26:28,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:28,971 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 163 [2022-07-19 17:26:28,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:28,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 175 [2022-07-19 17:26:28,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:28,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:26:28,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:28,975 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-19 17:26:28,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:28,975 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 201 [2022-07-19 17:26:28,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:28,976 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 212 [2022-07-19 17:26:28,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:28,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 221 [2022-07-19 17:26:28,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:28,981 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:26:28,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:28,983 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 242 [2022-07-19 17:26:28,983 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:28,984 INFO L134 CoverageAnalysis]: Checked inductivity of 393 backedges. 129 proven. 71 refuted. 0 times theorem prover too weak. 193 trivial. 0 not checked. [2022-07-19 17:26:28,985 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:26:28,985 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [612063918] [2022-07-19 17:26:28,985 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [612063918] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-19 17:26:28,985 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1174318289] [2022-07-19 17:26:28,985 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:26:28,985 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:26:28,985 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:26:28,986 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-19 17:26:28,999 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-07-19 17:26:29,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:26:29,122 INFO L263 TraceCheckSpWp]: Trace formula consists of 872 conjuncts, 30 conjunts are in the unsatisfiable core [2022-07-19 17:26:29,126 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-19 17:26:29,379 INFO L134 CoverageAnalysis]: Checked inductivity of 393 backedges. 140 proven. 83 refuted. 0 times theorem prover too weak. 170 trivial. 0 not checked. [2022-07-19 17:26:29,380 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-19 17:26:29,875 INFO L134 CoverageAnalysis]: Checked inductivity of 393 backedges. 91 proven. 127 refuted. 0 times theorem prover too weak. 175 trivial. 0 not checked. [2022-07-19 17:26:29,875 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1174318289] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-19 17:26:29,875 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-19 17:26:29,875 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 11, 16] total 29 [2022-07-19 17:26:29,876 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [91333755] [2022-07-19 17:26:29,876 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-19 17:26:29,876 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-07-19 17:26:29,876 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:26:29,877 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-07-19 17:26:29,877 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=153, Invalid=659, Unknown=0, NotChecked=0, Total=812 [2022-07-19 17:26:29,877 INFO L87 Difference]: Start difference. First operand 2255 states and 2552 transitions. Second operand has 29 states, 29 states have (on average 10.931034482758621) internal successors, (317), 25 states have internal predecessors, (317), 16 states have call successors, (53), 12 states have call predecessors, (53), 17 states have return successors, (55), 17 states have call predecessors, (55), 16 states have call successors, (55) [2022-07-19 17:26:32,472 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:26:32,472 INFO L93 Difference]: Finished difference Result 6994 states and 8499 transitions. [2022-07-19 17:26:32,473 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 52 states. [2022-07-19 17:26:32,473 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 29 states have (on average 10.931034482758621) internal successors, (317), 25 states have internal predecessors, (317), 16 states have call successors, (53), 12 states have call predecessors, (53), 17 states have return successors, (55), 17 states have call predecessors, (55), 16 states have call successors, (55) Word has length 250 [2022-07-19 17:26:32,473 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:26:32,475 INFO L225 Difference]: With dead ends: 6994 [2022-07-19 17:26:32,475 INFO L226 Difference]: Without dead ends: 0 [2022-07-19 17:26:32,488 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 639 GetRequests, 564 SyntacticMatches, 4 SemanticMatches, 71 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1322 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=1208, Invalid=4048, Unknown=0, NotChecked=0, Total=5256 [2022-07-19 17:26:32,489 INFO L413 NwaCegarLoop]: 310 mSDtfsCounter, 1677 mSDsluCounter, 1634 mSDsCounter, 0 mSdLazyCounter, 3973 mSolverCounterSat, 1127 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1688 SdHoareTripleChecker+Valid, 1944 SdHoareTripleChecker+Invalid, 5100 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1127 IncrementalHoareTripleChecker+Valid, 3973 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2022-07-19 17:26:32,489 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1688 Valid, 1944 Invalid, 5100 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1127 Valid, 3973 Invalid, 0 Unknown, 0 Unchecked, 1.6s Time] [2022-07-19 17:26:32,489 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-19 17:26:32,490 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-19 17:26:32,490 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-19 17:26:32,490 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-19 17:26:32,491 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 250 [2022-07-19 17:26:32,491 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:26:32,491 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-19 17:26:32,491 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 29 states have (on average 10.931034482758621) internal successors, (317), 25 states have internal predecessors, (317), 16 states have call successors, (53), 12 states have call predecessors, (53), 17 states have return successors, (55), 17 states have call predecessors, (55), 16 states have call successors, (55) [2022-07-19 17:26:32,491 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-19 17:26:32,491 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-19 17:26:32,493 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-19 17:26:32,514 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2022-07-19 17:26:32,699 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2022-07-19 17:26:32,701 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-19 17:27:05,602 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 293 300) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 .cse2 (not (<= ~waterLevel~0 2)) (< ~waterLevel~0 2)))) [2022-07-19 17:27:05,602 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 293 300) no Hoare annotation was computed. [2022-07-19 17:27:05,603 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 293 300) no Hoare annotation was computed. [2022-07-19 17:27:05,607 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 200 206) no Hoare annotation was computed. [2022-07-19 17:27:05,608 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 200 206) the Hoare annotation is: true [2022-07-19 17:27:05,608 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 84 95) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~pumpRunning~0))) (.cse4 (not (= ~pumpRunning~0 0))) (.cse1 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or (not (= |old(~methaneLevelCritical~0)| 0)) .cse0 .cse1 .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse4 .cse0 .cse1 .cse3) (or .cse0 (not (= 2 ~waterLevel~0)) .cse1 .cse2) (or .cse4 .cse1 .cse3 (not (= 0 ~systemActive~0))))) [2022-07-19 17:27:05,609 INFO L899 garLoopResultBuilder]: For program point L88-1(lines 84 95) no Hoare annotation was computed. [2022-07-19 17:27:05,609 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 84 95) no Hoare annotation was computed. [2022-07-19 17:27:05,609 INFO L902 garLoopResultBuilder]: At program point L962-2(lines 962 976) the Hoare annotation is: true [2022-07-19 17:27:05,618 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 952 981) no Hoare annotation was computed. [2022-07-19 17:27:05,618 INFO L902 garLoopResultBuilder]: At program point L958(line 958) the Hoare annotation is: true [2022-07-19 17:27:05,618 INFO L899 garLoopResultBuilder]: For program point L958-1(line 958) no Hoare annotation was computed. [2022-07-19 17:27:05,618 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 952 981) the Hoare annotation is: true [2022-07-19 17:27:05,623 INFO L902 garLoopResultBuilder]: At program point L977(lines 952 981) the Hoare annotation is: true [2022-07-19 17:27:05,623 INFO L899 garLoopResultBuilder]: For program point L973(line 973) no Hoare annotation was computed. [2022-07-19 17:27:05,623 INFO L899 garLoopResultBuilder]: For program point L966(lines 966 970) no Hoare annotation was computed. [2022-07-19 17:27:05,624 INFO L902 garLoopResultBuilder]: At program point L966-1(lines 966 970) the Hoare annotation is: true [2022-07-19 17:27:05,624 INFO L899 garLoopResultBuilder]: For program point L963(line 963) no Hoare annotation was computed. [2022-07-19 17:27:05,624 INFO L899 garLoopResultBuilder]: For program point L64(lines 64 68) no Hoare annotation was computed. [2022-07-19 17:27:05,624 INFO L895 garLoopResultBuilder]: At program point L64-2(lines 60 71) the Hoare annotation is: (let ((.cse2 (not (<= |old(~waterLevel~0)| 1))) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse2 .cse3 (and (<= ~waterLevel~0 0) .cse4) .cse5 (= ~waterLevel~0 0) .cse6) (or .cse2 (and .cse7 .cse4 .cse8) .cse3 .cse5 (and .cse7 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse8) .cse6) (or .cse3 .cse5 (not (< 1 |old(~waterLevel~0)|)) (and .cse7 (= ~waterLevel~0 1) .cse8) .cse1) (or .cse0 .cse3 .cse1))) [2022-07-19 17:27:05,625 INFO L899 garLoopResultBuilder]: For program point L568(lines 568 574) no Hoare annotation was computed. [2022-07-19 17:27:05,625 INFO L895 garLoopResultBuilder]: At program point L279(line 279) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (<= |old(~waterLevel~0)| 1)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse3 .cse2 (not (= 0 ~systemActive~0))) (or .cse3 .cse4 .cse0 (not (= |old(~waterLevel~0)| 2))) (or .cse0 .cse1 .cse2 .cse5) (or (not .cse5) .cse3 .cse4 .cse0))) [2022-07-19 17:27:05,625 INFO L895 garLoopResultBuilder]: At program point L279-1(lines 260 284) the Hoare annotation is: (let ((.cse15 (<= |old(~waterLevel~0)| 1)) (.cse20 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse21 (= ~waterLevel~0 0)) (.cse11 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse12 (= |timeShift_processEnvironment_~tmp~2#1| ~methaneLevelCritical~0)) (.cse13 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse22 (<= ~waterLevel~0 0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (<= 1 ~switchedOnBeforeTS~0)) (.cse24 (= ~pumpRunning~0 0)) (.cse23 (= 1 ~systemActive~0)) (.cse10 (= ~waterLevel~0 1))) (let ((.cse5 (and .cse24 .cse23 .cse10)) (.cse8 (not (< 1 |old(~waterLevel~0)|))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse17 (and .cse11 .cse24 .cse12 .cse13 .cse22 .cse3 .cse14)) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse18 (and .cse11 .cse24 .cse12 .cse13 .cse23 .cse20 .cse14 .cse21)) (.cse19 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse16 (not .cse15)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse24 .cse3)) (.cse2 (not .cse23))) (and (or .cse0 .cse1 .cse2 (and (<= 1 ~pumpRunning~0) .cse3) .cse4) (or .cse0 .cse4 (not (= 0 ~systemActive~0))) (or .cse5 .cse6 .cse2 .cse7 .cse8 .cse4) (or .cse5 (and .cse9 .cse10) .cse2 .cse7 .cse8 .cse4) (or .cse2 .cse7 (and .cse11 .cse12 .cse13 .cse14) .cse4 .cse15) (or .cse16 .cse17 .cse6 .cse2 .cse7 .cse18 .cse19) (or (and .cse9 .cse11 .cse12 .cse13 .cse20 .cse14 .cse21) .cse16 .cse17 .cse2 .cse7 (and .cse9 .cse11 .cse12 .cse13 .cse22 .cse3 .cse14) .cse18 .cse19) (or .cse16 .cse0 .cse1 .cse2)))) [2022-07-19 17:27:05,625 INFO L899 garLoopResultBuilder]: For program point L180(lines 180 186) no Hoare annotation was computed. [2022-07-19 17:27:05,625 INFO L895 garLoopResultBuilder]: At program point L308(lines 301 311) the Hoare annotation is: (let ((.cse3 (<= |old(~waterLevel~0)| 1)) (.cse9 (= ~waterLevel~0 0)) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse6 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse10 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5 .cse6 .cse7)) (or .cse8 .cse2 (not (= 0 ~systemActive~0))) (or (and .cse4 .cse5 .cse6 .cse7 .cse9) (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse10) (or (not .cse3) (and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse9) .cse0 .cse1 (and .cse4 .cse5 .cse6 (= |old(~waterLevel~0)| ~waterLevel~0) .cse7) .cse10) (or .cse8 .cse0 .cse2) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) (= ~waterLevel~0 1) .cse2))) [2022-07-19 17:27:05,625 INFO L899 garLoopResultBuilder]: For program point L531(line 531) no Hoare annotation was computed. [2022-07-19 17:27:05,625 INFO L899 garLoopResultBuilder]: For program point L180-2(lines 176 198) no Hoare annotation was computed. [2022-07-19 17:27:05,626 INFO L895 garLoopResultBuilder]: At program point L552(lines 545 554) the Hoare annotation is: (let ((.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse6 (<= |old(~waterLevel~0)| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 0) .cse7)) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7 (<= 1 ~switchedOnBeforeTS~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (not (= |old(~waterLevel~0)| 2))) (or .cse0 .cse1 .cse3 (not (= 0 ~systemActive~0))) (or .cse4 .cse2 .cse5 .cse3 .cse6) (or (not .cse6) .cse0 .cse1 .cse2) (or .cse4 .cse2 .cse5 .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2022-07-19 17:27:05,626 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 173 199) no Hoare annotation was computed. [2022-07-19 17:27:05,626 INFO L895 garLoopResultBuilder]: At program point L565(line 565) the Hoare annotation is: (let ((.cse23 (<= ~waterLevel~0 0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse18 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse2 (= ~pumpRunning~0 0)) (.cse19 (= |timeShift_processEnvironment_~tmp~2#1| ~methaneLevelCritical~0)) (.cse3 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse20 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse14 (= 1 ~systemActive~0)) (.cse24 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse21 (<= 1 ~switchedOnBeforeTS~0)) (.cse25 (= ~waterLevel~0 0)) (.cse5 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~6#1| ~waterLevel~0)) (.cse22 (<= |old(~waterLevel~0)| 1))) (let ((.cse9 (= ~methaneLevelCritical~0 0)) (.cse6 (not (= 0 ~systemActive~0))) (.cse16 (not (< 1 |old(~waterLevel~0)|))) (.cse15 (= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not .cse22)) (.cse8 (and .cse18 .cse2 .cse19 .cse3 .cse20 .cse14 .cse24 .cse21 .cse25 .cse5)) (.cse10 (not .cse14)) (.cse11 (not (<= 1 |old(~pumpRunning~0)|))) (.cse17 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (and .cse18 .cse2 .cse19 .cse3 .cse20 .cse23 .cse4 .cse21 .cse5)) (.cse13 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5) .cse6) (or .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (or (and .cse2 .cse14 .cse15) .cse9 .cse10 .cse11 .cse16 .cse1) (or .cse0 .cse16 .cse1 .cse6) (or .cse10 .cse11 .cse16 (and .cse17 .cse18 .cse19 .cse3 .cse20 .cse15 .cse21 .cse5) .cse1 (and .cse18 .cse2 .cse19 .cse3 .cse20 .cse14 .cse15 .cse21 .cse5)) (or .cse0 .cse10 (and .cse2 .cse3 .cse4 .cse22 .cse5) .cse1) (or .cse7 .cse8 (and .cse17 .cse18 .cse19 .cse3 .cse20 .cse23 .cse4 .cse21 .cse5) .cse10 .cse11 (and .cse17 .cse18 .cse19 .cse3 .cse20 .cse24 .cse21 .cse25 .cse5) .cse12 .cse13)))) [2022-07-19 17:27:05,626 INFO L899 garLoopResultBuilder]: For program point L565-1(line 565) no Hoare annotation was computed. [2022-07-19 17:27:05,626 INFO L895 garLoopResultBuilder]: At program point L532(lines 527 534) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse3 .cse2 (not (= 0 ~systemActive~0))) (or .cse0 .cse1 .cse2 (<= |old(~waterLevel~0)| 1)) (or .cse3 .cse0 .cse2))) [2022-07-19 17:27:05,626 INFO L899 garLoopResultBuilder]: For program point L268(lines 268 276) no Hoare annotation was computed. [2022-07-19 17:27:05,626 INFO L899 garLoopResultBuilder]: For program point L264(lines 264 281) no Hoare annotation was computed. [2022-07-19 17:27:05,627 INFO L895 garLoopResultBuilder]: At program point L550(line 550) the Hoare annotation is: (let ((.cse6 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (and (= ~pumpRunning~0 0) .cse6 .cse7)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse2 .cse4 .cse3 (and .cse5 .cse6 .cse7) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse2 .cse4 (not (< 1 |old(~waterLevel~0)|)) (and .cse5 .cse6 (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse3) (or .cse0 .cse1 .cse3 (not (= 0 ~systemActive~0)))))) [2022-07-19 17:27:05,631 INFO L899 garLoopResultBuilder]: For program point L550-1(line 550) no Hoare annotation was computed. [2022-07-19 17:27:05,631 INFO L895 garLoopResultBuilder]: At program point L133(lines 128 136) the Hoare annotation is: (let ((.cse19 (= ~waterLevel~0 1)) (.cse13 (<= ~waterLevel~0 0)) (.cse14 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse20 (= ~pumpRunning~0 0)) (.cse3 (= |timeShift_processEnvironment_~tmp~2#1| ~methaneLevelCritical~0)) (.cse4 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse5 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse26 (= 1 ~systemActive~0)) (.cse6 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (= ~waterLevel~0 0))) (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (and .cse2 .cse20 .cse3 .cse4 .cse5 .cse26 .cse6 .cse7 .cse8)) (.cse12 (and .cse2 .cse20 .cse3 .cse4 .cse5 .cse13 .cse14 .cse7)) (.cse15 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse23 (= ~methaneLevelCritical~0 0)) (.cse11 (not (<= 1 |old(~pumpRunning~0)|))) (.cse16 (not (< 1 |old(~waterLevel~0)|))) (.cse17 (and .cse2 .cse20 .cse3 .cse4 .cse5 .cse26 .cse19 .cse7)) (.cse18 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (not .cse26)) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse22 (not (= |old(~pumpRunning~0)| 0))) (.cse24 (and .cse20 .cse4 .cse14)) (.cse25 (not (= 0 ~systemActive~0)))) (and (or .cse0 (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) .cse9 .cse10 .cse11 .cse12 (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse13 .cse14 .cse7) .cse15) (or .cse9 .cse11 .cse16 .cse17 .cse18 (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse19 .cse7)) (let ((.cse21 (= 2 |timeShift_getWaterLevel_#res#1|))) (or (and .cse20 .cse21 .cse14) .cse22 .cse9 .cse16 (and (<= 1 ~pumpRunning~0) .cse21 .cse14) .cse18)) (or .cse0 .cse23 .cse9 .cse10 .cse11 .cse12 .cse15) (or .cse23 .cse9 .cse11 .cse16 .cse17 .cse18) (or .cse0 .cse22 .cse9 .cse24) (or (and .cse20 (<= |timeShift_getWaterLevel_#res#1| 2) .cse14 (<= 2 |timeShift_getWaterLevel_#res#1|)) .cse22 (not (= |old(~waterLevel~0)| 2)) .cse25) (or .cse0 .cse22 .cse24 .cse25)))) [2022-07-19 17:27:05,632 INFO L899 garLoopResultBuilder]: For program point L187-1(lines 187 193) no Hoare annotation was computed. [2022-07-19 17:27:05,632 INFO L899 garLoopResultBuilder]: For program point L567(lines 567 577) no Hoare annotation was computed. [2022-07-19 17:27:05,632 INFO L899 garLoopResultBuilder]: For program point L563(lines 563 580) no Hoare annotation was computed. [2022-07-19 17:27:05,632 INFO L895 garLoopResultBuilder]: At program point L274(line 274) the Hoare annotation is: (let ((.cse4 (= ~methaneLevelCritical~0 0)) (.cse0 (<= |old(~waterLevel~0)| 1)) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse3 (= |timeShift_processEnvironment_~tmp~2#1| ~methaneLevelCritical~0)) (.cse5 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= 1 ~systemActive~0))) (.cse10 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not .cse0) (and .cse1 .cse2 .cse3 .cse4 .cse5 (<= ~waterLevel~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) .cse6) .cse7 (and .cse1 .cse2 .cse3 .cse4 .cse5 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse6 (= ~waterLevel~0 0)) .cse8 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse9 .cse10 (not (= 0 ~systemActive~0))) (or .cse4 .cse7 .cse8 .cse10 .cse0) (or .cse7 .cse8 (not (< 1 |old(~waterLevel~0)|)) (and .cse1 .cse2 .cse3 .cse5 (= ~waterLevel~0 1) .cse6) .cse10) (or .cse9 .cse7 .cse10))) [2022-07-19 17:27:05,632 INFO L895 garLoopResultBuilder]: At program point L563-1(lines 555 583) the Hoare annotation is: (let ((.cse27 (<= ~waterLevel~0 0)) (.cse26 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse19 (= ~pumpRunning~0 0)) (.cse10 (= |timeShift_processEnvironment_~tmp~2#1| ~methaneLevelCritical~0)) (.cse11 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse13 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse20 (= 1 ~systemActive~0)) (.cse28 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse15 (<= 1 ~switchedOnBeforeTS~0)) (.cse29 (= ~waterLevel~0 0)) (.cse16 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~6#1| ~waterLevel~0))) (let ((.cse14 (= ~waterLevel~0 1)) (.cse23 (= ~methaneLevelCritical~0 0)) (.cse17 (not (< 1 |old(~waterLevel~0)|))) (.cse22 (and .cse9 .cse19 .cse10 .cse11 .cse13 .cse20 .cse28 .cse15 .cse29 .cse16)) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse24 (and .cse9 .cse19 .cse10 .cse11 .cse13 .cse27 .cse26 .cse15 .cse16)) (.cse25 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse21 (not (<= |old(~waterLevel~0)| 1))) (.cse5 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not .cse20)) (.cse12 (<= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1|)) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (<= |timeShift_getWaterLevel_#res#1| 2)) (.cse2 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~6#1| 2)) (.cse3 (<= 2 |timeShift___utac_acc__Specification5_spec__3_~tmp~6#1|)) (.cse4 (<= 2 |timeShift_getWaterLevel_#res#1|)) (.cse18 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and .cse1 .cse2 .cse3 .cse4) (not (= |old(~waterLevel~0)| 2)) .cse5) (or .cse6 .cse7 (and .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16) .cse17 .cse18 (and .cse9 .cse19 .cse10 .cse11 .cse13 .cse20 .cse14 .cse15 .cse16)) (or .cse21 .cse22 .cse23 .cse6 .cse7 .cse24 .cse25) (or (and .cse19 .cse20 .cse14) .cse23 .cse6 .cse7 .cse17 .cse18) (or .cse0 (and .cse8 .cse19 .cse26) .cse18 .cse5) (or .cse21 .cse22 (and .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse27 .cse26 .cse15 .cse16) .cse6 .cse7 .cse24 (and .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse28 .cse15 .cse29 .cse16) .cse25) (or .cse21 .cse0 (and .cse11 .cse12 .cse16) .cse5) (or .cse0 (and (<= 1 ~pumpRunning~0) .cse1 .cse2 .cse3 .cse26 .cse4 (not (<= ~waterLevel~0 1))) .cse6 (and .cse8 .cse19 .cse11 .cse12 .cse26 .cse16) (and .cse8 .cse19 .cse1 (= 2 ~waterLevel~0) .cse2 .cse3 .cse26 .cse4) .cse18)))) [2022-07-19 17:27:05,632 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 173 199) the Hoare annotation is: (let ((.cse6 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (and (= ~pumpRunning~0 0) .cse6 .cse7)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse2 .cse4 .cse3 (and .cse5 .cse6 .cse7) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse2 .cse4 (not (< 1 |old(~waterLevel~0)|)) (and .cse5 .cse6 (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse3) (or .cse0 .cse1 .cse3 (not (= 0 ~systemActive~0)))))) [2022-07-19 17:27:05,633 INFO L895 garLoopResultBuilder]: At program point L270(line 270) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse4 (= |timeShift_processEnvironment_~tmp~2#1| ~methaneLevelCritical~0)) (.cse5 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse10 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) .cse8 (<= |old(~waterLevel~0)| 1)) (or .cse9 .cse8 (not (= 0 ~systemActive~0))) (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5 (= |old(~waterLevel~0)| ~waterLevel~0) .cse7) (not (<= |old(~waterLevel~0)| 0)) .cse10) (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5 .cse7 (= ~waterLevel~0 0)) .cse10) (or .cse9 .cse0 .cse8) (or .cse0 .cse1 .cse6 .cse8 .cse10) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) (= ~waterLevel~0 1) .cse8))) [2022-07-19 17:27:05,633 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 173 199) no Hoare annotation was computed. [2022-07-19 17:27:05,633 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 531) no Hoare annotation was computed. [2022-07-19 17:27:05,633 INFO L895 garLoopResultBuilder]: At program point L101(lines 96 104) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) (and .cse2 .cse3 (= ~waterLevel~0 1) .cse4) .cse5) (or .cse6 .cse5 (not (= 0 ~systemActive~0))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 (and .cse2 .cse3 (<= ~waterLevel~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) .cse4) (and .cse2 .cse3 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse4 (= ~waterLevel~0 0)) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse6 .cse0 .cse5))) [2022-07-19 17:27:05,633 INFO L895 garLoopResultBuilder]: At program point L415(lines 410 417) the Hoare annotation is: (let ((.cse4 (<= ~waterLevel~0 2)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1) .cse3) (and .cse0 (< 1 ~waterLevel~0) .cse1 .cse2 .cse4) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse4) (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 0) .cse3))) [2022-07-19 17:27:05,633 INFO L895 garLoopResultBuilder]: At program point L477(lines 430 479) the Hoare annotation is: (let ((.cse2 (= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 (<= ~waterLevel~0 2) (= 0 ~systemActive~0)) (and .cse0 .cse2 .cse3 .cse1) (and .cse4 .cse2 .cse3 .cse1) (and .cse0 (<= ~waterLevel~0 1) .cse3 .cse1) (and .cse4 .cse5 .cse3 .cse1 (<= ~waterLevel~0 0) .cse6) (and .cse4 .cse5 .cse3 .cse1 (= ~waterLevel~0 1) .cse6))) [2022-07-19 17:27:05,633 INFO L899 garLoopResultBuilder]: For program point L440(lines 440 446) no Hoare annotation was computed. [2022-07-19 17:27:05,634 INFO L899 garLoopResultBuilder]: For program point L440-1(lines 440 446) no Hoare annotation was computed. [2022-07-19 17:27:05,634 INFO L895 garLoopResultBuilder]: At program point L407(lines 395 409) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= 0 ~systemActive~0))) (or (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2) (and .cse0 (<= ~waterLevel~0 1) .cse1 .cse2))) [2022-07-19 17:27:05,634 INFO L902 garLoopResultBuilder]: At program point L1043(lines 1024 1046) the Hoare annotation is: true [2022-07-19 17:27:05,634 INFO L895 garLoopResultBuilder]: At program point L1010(lines 1006 1012) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:27:05,634 INFO L899 garLoopResultBuilder]: For program point L432(lines 432 436) no Hoare annotation was computed. [2022-07-19 17:27:05,634 INFO L899 garLoopResultBuilder]: For program point L399(lines 399 405) no Hoare annotation was computed. [2022-07-19 17:27:05,634 INFO L899 garLoopResultBuilder]: For program point L399-1(lines 399 405) no Hoare annotation was computed. [2022-07-19 17:27:05,634 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-19 17:27:05,634 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-19 17:27:05,635 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-19 17:27:05,635 INFO L895 garLoopResultBuilder]: At program point L507(lines 503 509) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:27:05,635 INFO L902 garLoopResultBuilder]: At program point L483(lines 420 487) the Hoare annotation is: true [2022-07-19 17:27:05,635 INFO L899 garLoopResultBuilder]: For program point L450(lines 450 456) no Hoare annotation was computed. [2022-07-19 17:27:05,635 INFO L899 garLoopResultBuilder]: For program point L450-1(lines 450 456) no Hoare annotation was computed. [2022-07-19 17:27:05,635 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-19 17:27:05,635 INFO L895 garLoopResultBuilder]: At program point L442(line 442) the Hoare annotation is: (let ((.cse2 (= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 (<= ~waterLevel~0 2) (= 0 ~systemActive~0)) (and .cse0 .cse2 .cse3 .cse1) (and .cse4 .cse2 .cse3 .cse1) (and .cse0 (<= ~waterLevel~0 1) .cse3 .cse1) (and .cse4 .cse5 .cse3 .cse1 (<= ~waterLevel~0 0) .cse6) (and .cse4 .cse5 .cse3 .cse1 (= ~waterLevel~0 1) .cse6))) [2022-07-19 17:27:05,635 INFO L895 garLoopResultBuilder]: At program point L401(line 401) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= ~waterLevel~0 1) .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 (< 1 ~waterLevel~0) .cse1 .cse2 (<= ~waterLevel~0 2)))) [2022-07-19 17:27:05,636 INFO L895 garLoopResultBuilder]: At program point L480(lines 429 481) the Hoare annotation is: false [2022-07-19 17:27:05,636 INFO L895 garLoopResultBuilder]: At program point L542(lines 537 544) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:27:05,636 INFO L902 garLoopResultBuilder]: At program point L1021(lines 1013 1023) the Hoare annotation is: true [2022-07-19 17:27:05,636 INFO L899 garLoopResultBuilder]: For program point L468(lines 468 474) no Hoare annotation was computed. [2022-07-19 17:27:05,636 INFO L895 garLoopResultBuilder]: At program point L468-2(lines 460 475) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse6 (<= ~waterLevel~0 2)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2) (and .cse3 .cse4 .cse1 (= ~waterLevel~0 1) .cse5) (and .cse3 (< 1 ~waterLevel~0) .cse4 .cse1 .cse6) (and .cse0 (<= ~waterLevel~0 1) .cse1 .cse2) (and .cse0 .cse4 .cse1 .cse6) (and .cse3 .cse4 .cse1 (<= ~waterLevel~0 0) .cse5))) [2022-07-19 17:27:05,636 INFO L899 garLoopResultBuilder]: For program point L431(lines 430 479) no Hoare annotation was computed. [2022-07-19 17:27:05,636 INFO L899 garLoopResultBuilder]: For program point L460(lines 460 475) no Hoare annotation was computed. [2022-07-19 17:27:05,636 INFO L895 garLoopResultBuilder]: At program point L522(lines 517 525) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:27:05,637 INFO L899 garLoopResultBuilder]: For program point L1034(lines 1034 1041) no Hoare annotation was computed. [2022-07-19 17:27:05,637 INFO L899 garLoopResultBuilder]: For program point L1034-2(lines 1034 1041) no Hoare annotation was computed. [2022-07-19 17:27:05,637 INFO L895 garLoopResultBuilder]: At program point L452(line 452) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 (< 1 ~waterLevel~0) .cse1 .cse2 .cse3) (and .cse4 .cse2 .cse3 (= 0 ~systemActive~0)) (and .cse4 .cse1 .cse2 .cse3) (and .cse0 .cse5 .cse1 .cse2 (<= ~waterLevel~0 0) .cse6) (and .cse0 .cse5 .cse1 .cse2 (= ~waterLevel~0 1) .cse6))) [2022-07-19 17:27:05,637 INFO L895 garLoopResultBuilder]: At program point L514(lines 510 516) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:27:05,637 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 208 232) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-07-19 17:27:05,637 INFO L895 garLoopResultBuilder]: At program point L372(lines 357 375) the Hoare annotation is: (let ((.cse2 (not (<= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (and (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1| 0))) .cse2) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 (= ~pumpRunning~0 0) .cse1 (not (<= ~waterLevel~0 2))))) [2022-07-19 17:27:05,637 INFO L899 garLoopResultBuilder]: For program point L366(lines 366 370) no Hoare annotation was computed. [2022-07-19 17:27:05,637 INFO L899 garLoopResultBuilder]: For program point L141(lines 141 147) no Hoare annotation was computed. [2022-07-19 17:27:05,638 INFO L899 garLoopResultBuilder]: For program point L366-2(lines 366 370) no Hoare annotation was computed. [2022-07-19 17:27:05,638 INFO L895 garLoopResultBuilder]: At program point L290(lines 285 292) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2))))) [2022-07-19 17:27:05,638 INFO L895 garLoopResultBuilder]: At program point L222(line 222) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)) (not (<= ~waterLevel~0 2))) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 (and (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1| 0)))) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-07-19 17:27:05,638 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 208 232) no Hoare annotation was computed. [2022-07-19 17:27:05,638 INFO L899 garLoopResultBuilder]: For program point L216(lines 216 224) no Hoare annotation was computed. [2022-07-19 17:27:05,638 INFO L899 garLoopResultBuilder]: For program point L212(lines 212 229) no Hoare annotation was computed. [2022-07-19 17:27:05,638 INFO L895 garLoopResultBuilder]: At program point L146(lines 137 150) the Hoare annotation is: (let ((.cse4 (not (<= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (and (or .cse0 .cse1 (and .cse2 (not .cse3)) .cse4) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse4 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (< 1 ~waterLevel~0)) .cse0 .cse1 (and .cse2 .cse3) (not (<= ~waterLevel~0 2))))) [2022-07-19 17:27:05,638 INFO L895 garLoopResultBuilder]: At program point L227(line 227) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-07-19 17:27:05,639 INFO L899 garLoopResultBuilder]: For program point L227-1(lines 208 232) no Hoare annotation was computed. [2022-07-19 17:27:05,639 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 72 83) no Hoare annotation was computed. [2022-07-19 17:27:05,639 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 72 83) no Hoare annotation was computed. [2022-07-19 17:27:05,639 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 72 83) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~pumpRunning~0))) (.cse3 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 2)) .cse2) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse3 .cse2 .cse4 (not (= 0 ~systemActive~0))) (or .cse3 .cse0 .cse2 .cse4))) [2022-07-19 17:27:05,639 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 234 258) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-07-19 17:27:05,639 INFO L895 garLoopResultBuilder]: At program point L248(line 248) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0)))) (and (or (let ((.cse0 (= ~waterLevel~0 0))) (and (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterLevel_~tmp~4#1| 0) .cse0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterSensorDry_#res#1| 0) .cse0))) .cse1 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse1 (not (<= ~waterLevel~0 2))))) [2022-07-19 17:27:05,639 INFO L895 garLoopResultBuilder]: At program point L244(line 244) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0)))) (and (or (let ((.cse0 (= ~waterLevel~0 0))) (and (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterLevel_~tmp~4#1| 0) .cse0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterSensorDry_#res#1| 0) .cse0))) .cse1 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse1 (not (<= ~waterLevel~0 2))))) [2022-07-19 17:27:05,639 INFO L899 garLoopResultBuilder]: For program point L242(lines 242 250) no Hoare annotation was computed. [2022-07-19 17:27:05,640 INFO L899 garLoopResultBuilder]: For program point L238(lines 238 255) no Hoare annotation was computed. [2022-07-19 17:27:05,640 INFO L895 garLoopResultBuilder]: At program point L391(lines 376 394) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0)))) (and (or (let ((.cse0 (= ~waterLevel~0 0))) (and (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterLevel_~tmp~4#1| 0) .cse0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterSensorDry_#res#1| 0) .cse0))) .cse1 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse1 (not (<= ~waterLevel~0 2))))) [2022-07-19 17:27:05,640 INFO L899 garLoopResultBuilder]: For program point L385(lines 385 389) no Hoare annotation was computed. [2022-07-19 17:27:05,640 INFO L899 garLoopResultBuilder]: For program point L385-2(lines 385 389) no Hoare annotation was computed. [2022-07-19 17:27:05,640 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 234 258) no Hoare annotation was computed. [2022-07-19 17:27:05,640 INFO L895 garLoopResultBuilder]: At program point L253(line 253) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))))) [2022-07-19 17:27:05,640 INFO L895 garLoopResultBuilder]: At program point L156(lines 151 159) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterSensorDry_#res#1| 0) (= ~waterLevel~0 0))) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2022-07-19 17:27:05,640 INFO L899 garLoopResultBuilder]: For program point L253-1(lines 234 258) no Hoare annotation was computed. [2022-07-19 17:27:05,641 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 312 320) no Hoare annotation was computed. [2022-07-19 17:27:05,641 INFO L902 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 312 320) the Hoare annotation is: true [2022-07-19 17:27:05,641 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 312 320) no Hoare annotation was computed. [2022-07-19 17:27:05,643 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:27:05,644 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-19 17:27:05,704 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.07 05:27:05 BoogieIcfgContainer [2022-07-19 17:27:05,704 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-19 17:27:05,705 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-19 17:27:05,708 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-19 17:27:05,708 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-19 17:27:05,708 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.07 05:26:15" (3/4) ... [2022-07-19 17:27:05,710 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-19 17:27:05,714 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-07-19 17:27:05,714 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-19 17:27:05,714 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-19 17:27:05,714 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-19 17:27:05,714 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-19 17:27:05,715 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-19 17:27:05,715 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-19 17:27:05,715 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2022-07-19 17:27:05,715 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-07-19 17:27:05,725 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 54 nodes and edges [2022-07-19 17:27:05,726 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-19 17:27:05,726 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-19 17:27:05,726 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-19 17:27:05,726 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-19 17:27:05,727 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-19 17:27:05,727 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-19 17:27:05,746 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || \old(waterLevel) <= 1)) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2022-07-19 17:27:05,746 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || (waterLevel <= 0 && \old(waterLevel) == waterLevel)) || !(1 <= \old(pumpRunning))) || waterLevel == 0) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-07-19 17:27:05,747 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || (((\result <= 2 && tmp <= 2) && 2 <= tmp) && 2 <= \result)) || !(\old(waterLevel) == 2)) || !(0 == systemActive)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && waterLevel == \result) && pumpRunning <= tmp___0) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp == waterLevel))) && ((((((!(\old(waterLevel) <= 1) || (((((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0) && tmp == waterLevel)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((((!(\old(waterLevel) <= 1) || (((((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0) && tmp == waterLevel)) || (((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && waterLevel == \result) && pumpRunning <= tmp___0) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || (((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && waterLevel == \result) && pumpRunning <= tmp___0) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0) && tmp == waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((waterLevel == \result && pumpRunning <= tmp___0) && tmp == waterLevel)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || ((((((1 <= pumpRunning && \result <= 2) && tmp <= 2) && 2 <= tmp) && \old(waterLevel) == waterLevel) && 2 <= \result) && !(waterLevel <= 1))) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && tmp == waterLevel)) || (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result <= 2) && 2 == waterLevel) && tmp <= 2) && 2 <= tmp) && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(\old(waterLevel) <= 2)) [2022-07-19 17:27:05,747 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((((((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1) || (pumpRunning == \old(pumpRunning) && waterLevel == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((methaneLevelCritical == \result && tmp == methaneLevelCritical) && \result == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || \old(waterLevel) <= 1)) && ((((((!(\old(waterLevel) <= 1) || ((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0) || !(\old(waterLevel) <= 1)) || ((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) [2022-07-19 17:27:05,747 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || \old(waterLevel) <= 1)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-07-19 17:27:05,748 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(\old(waterLevel) <= 1) || (((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || !(1 == systemActive)) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || !(1 <= \old(pumpRunning))) || (((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || !(1 <= \old(pumpRunning))) || (((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel))) && ((((((pumpRunning == 0 && \result <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 2)) || !(0 == systemActive))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) [2022-07-19 17:27:05,748 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-07-19 17:27:05,748 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || \old(waterLevel) <= 1) || (((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && waterLevel == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || (waterLevel + 1 <= \old(waterLevel) && waterLevel == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) [2022-07-19 17:27:05,748 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == \old(pumpRunning) && (\result == 0 || waterLevel == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2022-07-19 17:27:05,749 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(waterLevel <= 1)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && ((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) [2022-07-19 17:27:05,759 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((tmp == 0 || waterLevel == 0) && pumpRunning == \old(pumpRunning)) && (\result == 0 || waterLevel == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2022-07-19 17:27:05,760 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((!(\result == 0) && \result == 0) && tmp___0 == 0) && !(tmp == 0))) || !(waterLevel <= 1)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2022-07-19 17:27:05,760 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= pumpRunning && 2 == waterLevel)) || !(waterLevel <= 2)) [2022-07-19 17:27:05,794 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-19 17:27:05,794 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-19 17:27:05,795 INFO L158 Benchmark]: Toolchain (without parser) took 51563.74ms. Allocated memory was 136.3MB in the beginning and 1.4GB in the end (delta: 1.2GB). Free memory was 77.9MB in the beginning and 1.2GB in the end (delta: -1.2GB). Peak memory consumption was 79.6MB. Max. memory is 16.1GB. [2022-07-19 17:27:05,795 INFO L158 Benchmark]: CDTParser took 0.16ms. Allocated memory is still 136.3MB. Free memory is still 94.8MB. There was no memory consumed. Max. memory is 16.1GB. [2022-07-19 17:27:05,796 INFO L158 Benchmark]: CACSL2BoogieTranslator took 454.70ms. Allocated memory is still 136.3MB. Free memory was 77.7MB in the beginning and 101.4MB in the end (delta: -23.7MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2022-07-19 17:27:05,796 INFO L158 Benchmark]: Boogie Procedure Inliner took 38.65ms. Allocated memory is still 136.3MB. Free memory was 101.4MB in the beginning and 98.5MB in the end (delta: 2.9MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-07-19 17:27:05,796 INFO L158 Benchmark]: Boogie Preprocessor took 30.88ms. Allocated memory is still 136.3MB. Free memory was 98.5MB in the beginning and 97.2MB in the end (delta: 1.3MB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-19 17:27:05,796 INFO L158 Benchmark]: RCFGBuilder took 528.28ms. Allocated memory is still 136.3MB. Free memory was 97.2MB in the beginning and 78.3MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-07-19 17:27:05,797 INFO L158 Benchmark]: TraceAbstraction took 50415.79ms. Allocated memory was 136.3MB in the beginning and 1.4GB in the end (delta: 1.2GB). Free memory was 77.5MB in the beginning and 1.2GB in the end (delta: -1.2GB). Peak memory consumption was 821.5MB. Max. memory is 16.1GB. [2022-07-19 17:27:05,797 INFO L158 Benchmark]: Witness Printer took 89.70ms. Allocated memory is still 1.4GB. Free memory was 1.2GB in the beginning and 1.2GB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-19 17:27:05,800 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16ms. Allocated memory is still 136.3MB. Free memory is still 94.8MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 454.70ms. Allocated memory is still 136.3MB. Free memory was 77.7MB in the beginning and 101.4MB in the end (delta: -23.7MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 38.65ms. Allocated memory is still 136.3MB. Free memory was 101.4MB in the beginning and 98.5MB in the end (delta: 2.9MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 30.88ms. Allocated memory is still 136.3MB. Free memory was 98.5MB in the beginning and 97.2MB in the end (delta: 1.3MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 528.28ms. Allocated memory is still 136.3MB. Free memory was 97.2MB in the beginning and 78.3MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 50415.79ms. Allocated memory was 136.3MB in the beginning and 1.4GB in the end (delta: 1.2GB). Free memory was 77.5MB in the beginning and 1.2GB in the end (delta: -1.2GB). Peak memory consumption was 821.5MB. Max. memory is 16.1GB. * Witness Printer took 89.70ms. Allocated memory is still 1.4GB. Free memory was 1.2GB in the beginning and 1.2GB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 531]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 110 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 50.3s, OverallIterations: 15, TraceHistogramMax: 9, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 10.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 32.9s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 7227 SdHoareTripleChecker+Valid, 6.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 7140 mSDsluCounter, 9744 SdHoareTripleChecker+Invalid, 4.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 7119 mSDsCounter, 3495 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 12748 IncrementalHoareTripleChecker+Invalid, 16243 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 3495 mSolverCounterUnsat, 2625 mSDtfsCounter, 12748 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 2744 GetRequests, 2325 SyntacticMatches, 16 SemanticMatches, 403 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4896 ImplicationChecksByTransitivity, 3.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=2255occurred in iteration=14, InterpolantAutomatonStates: 332, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 15 MinimizatonAttempts, 1278 StatesRemovedByMinimization, 12 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 52 LocationsWithAnnotation, 9217 PreInvPairs, 11437 NumberOfFragments, 4134 HoareAnnotationTreeSize, 9217 FomulaSimplifications, 96904 FormulaSimplificationTreeSizeReduction, 8.6s HoareSimplificationTime, 52 FomulaSimplificationsInter, 275957 FormulaSimplificationTreeSizeReductionInter, 24.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 4.0s InterpolantComputationTime, 2616 NumberOfCodeBlocks, 2616 NumberOfCodeBlocksAsserted, 20 NumberOfCheckSat, 3570 ConstructedInterpolants, 0 QuantifiedInterpolants, 8463 SizeOfPredicates, 14 NumberOfNonLiveVariables, 3661 ConjunctsInSsa, 81 ConjunctsInUnsatCore, 25 InterpolantComputations, 10 PerfectInterpolantSequences, 3029/3654 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 420]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 128]: Loop Invariant Derived loop invariant: (((((((((((((!(\old(waterLevel) <= 1) || (((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || !(1 == systemActive)) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || !(1 <= \old(pumpRunning))) || (((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || !(1 <= \old(pumpRunning))) || (((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel))) && ((((((pumpRunning == 0 && \result <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 2)) || !(0 == systemActive))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) - InvariantResult [Line: 555]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || (((\result <= 2 && tmp <= 2) && 2 <= tmp) && 2 <= \result)) || !(\old(waterLevel) == 2)) || !(0 == systemActive)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && waterLevel == \result) && pumpRunning <= tmp___0) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp == waterLevel))) && ((((((!(\old(waterLevel) <= 1) || (((((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0) && tmp == waterLevel)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((((!(\old(waterLevel) <= 1) || (((((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0) && tmp == waterLevel)) || (((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && waterLevel == \result) && pumpRunning <= tmp___0) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && waterLevel == \result) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || (((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && waterLevel == \result) && pumpRunning <= tmp___0) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0) && tmp == waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((waterLevel == \result && pumpRunning <= tmp___0) && tmp == waterLevel)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || ((((((1 <= pumpRunning && \result <= 2) && tmp <= 2) && 2 <= tmp) && \old(waterLevel) == waterLevel) && 2 <= \result) && !(waterLevel <= 1))) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && pumpRunning <= tmp___0) && \old(waterLevel) == waterLevel) && tmp == waterLevel)) || (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result <= 2) && 2 == waterLevel) && tmp <= 2) && 2 <= tmp) && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 376]: Loop Invariant Derived loop invariant: ((((((((tmp == 0 || waterLevel == 0) && pumpRunning == \old(pumpRunning)) && (\result == 0 || waterLevel == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 537]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 952]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 527]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || \old(waterLevel) <= 1)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: ((((((1 <= pumpRunning && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || ((((1 <= pumpRunning && 1 < waterLevel) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2)) || (((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2)) || ((((1 <= pumpRunning && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) - InvariantResult [Line: 301]: Loop Invariant Derived loop invariant: ((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || \old(waterLevel) <= 1) || (((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && waterLevel == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || (waterLevel + 1 <= \old(waterLevel) && waterLevel == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 510]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 395]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 2 == waterLevel) && splverifierCounter == 0) && 0 == systemActive) || (((pumpRunning == 0 && waterLevel <= 1) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 1024]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 429]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1006]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 1013]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 96]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 545]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || \old(waterLevel) <= 1)) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 503]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 260]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((((((pumpRunning == 0 && 1 == systemActive) && waterLevel == 1) || (pumpRunning == \old(pumpRunning) && waterLevel == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((methaneLevelCritical == \result && tmp == methaneLevelCritical) && \result == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || \old(waterLevel) <= 1)) && ((((((!(\old(waterLevel) <= 1) || ((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0) || !(\old(waterLevel) <= 1)) || ((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && tmp == methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((((((methaneLevelCritical == \result && pumpRunning == 0) && tmp == methaneLevelCritical) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) - InvariantResult [Line: 60]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || (waterLevel <= 0 && \old(waterLevel) == waterLevel)) || !(1 <= \old(pumpRunning))) || waterLevel == 0) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: ((((((pumpRunning == \old(pumpRunning) && (\result == 0 || waterLevel == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && splverifierCounter == 0) && waterLevel <= 2) && 0 == systemActive) || (((pumpRunning == 0 && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || (((1 <= pumpRunning && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || (((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0)) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) - InvariantResult [Line: 962]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 137]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(waterLevel <= 1)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && ((((!(1 < waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) - InvariantResult [Line: 357]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((!(\result == 0) && \result == 0) && tmp___0 == 0) && !(tmp == 0))) || !(waterLevel <= 1)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 517]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 285]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= pumpRunning && 2 == waterLevel)) || !(waterLevel <= 2)) RESULT: Ultimate proved your program to be correct! [2022-07-19 17:27:05,873 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE