./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 35987657 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0fa225959be52b1defd5d055d32ae3a8dd944c37a01adb589e2f547028e60f67 --- Real Ultimate output --- This is Ultimate 0.2.2-?-3598765 [2022-07-21 04:59:48,435 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-21 04:59:48,437 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-21 04:59:48,482 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-21 04:59:48,483 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-21 04:59:48,483 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-21 04:59:48,487 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-21 04:59:48,490 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-21 04:59:48,492 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-21 04:59:48,496 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-21 04:59:48,497 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-21 04:59:48,502 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-21 04:59:48,502 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-21 04:59:48,503 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-21 04:59:48,504 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-21 04:59:48,505 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-21 04:59:48,507 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-21 04:59:48,508 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-21 04:59:48,509 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-21 04:59:48,511 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-21 04:59:48,514 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-21 04:59:48,515 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-21 04:59:48,516 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-21 04:59:48,517 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-21 04:59:48,518 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-21 04:59:48,520 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-21 04:59:48,521 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-21 04:59:48,521 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-21 04:59:48,522 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-21 04:59:48,522 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-21 04:59:48,523 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-21 04:59:48,523 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-21 04:59:48,524 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-21 04:59:48,525 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-21 04:59:48,526 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-21 04:59:48,527 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-21 04:59:48,527 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-21 04:59:48,527 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-21 04:59:48,527 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-21 04:59:48,527 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-21 04:59:48,528 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-21 04:59:48,529 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-21 04:59:48,529 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-21 04:59:48,558 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-21 04:59:48,559 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-21 04:59:48,560 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-21 04:59:48,560 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-21 04:59:48,560 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-21 04:59:48,560 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-21 04:59:48,561 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-21 04:59:48,561 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-21 04:59:48,561 INFO L138 SettingsManager]: * Use SBE=true [2022-07-21 04:59:48,562 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-21 04:59:48,562 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-21 04:59:48,562 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-21 04:59:48,562 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-21 04:59:48,562 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-21 04:59:48,563 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-21 04:59:48,563 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-21 04:59:48,563 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-21 04:59:48,563 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-21 04:59:48,563 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-21 04:59:48,563 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-21 04:59:48,563 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-21 04:59:48,564 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-21 04:59:48,564 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-21 04:59:48,564 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-21 04:59:48,564 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-21 04:59:48,564 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-21 04:59:48,565 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-21 04:59:48,565 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-21 04:59:48,565 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-21 04:59:48,565 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-21 04:59:48,565 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-21 04:59:48,565 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-21 04:59:48,565 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-21 04:59:48,566 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0fa225959be52b1defd5d055d32ae3a8dd944c37a01adb589e2f547028e60f67 [2022-07-21 04:59:48,818 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-21 04:59:48,853 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-21 04:59:48,855 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-21 04:59:48,856 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-21 04:59:48,858 INFO L275 PluginConnector]: CDTParser initialized [2022-07-21 04:59:48,859 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c [2022-07-21 04:59:48,921 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6f9d83ab6/f607fdb96dbc44518b36a9b7c337a47f/FLAGe4a138542 [2022-07-21 04:59:49,352 INFO L306 CDTParser]: Found 1 translation units. [2022-07-21 04:59:49,363 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c [2022-07-21 04:59:49,378 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6f9d83ab6/f607fdb96dbc44518b36a9b7c337a47f/FLAGe4a138542 [2022-07-21 04:59:49,392 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6f9d83ab6/f607fdb96dbc44518b36a9b7c337a47f [2022-07-21 04:59:49,394 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-21 04:59:49,395 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-21 04:59:49,396 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-21 04:59:49,396 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-21 04:59:49,399 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-21 04:59:49,399 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.07 04:59:49" (1/1) ... [2022-07-21 04:59:49,400 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2a1c3a0e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 04:59:49, skipping insertion in model container [2022-07-21 04:59:49,400 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.07 04:59:49" (1/1) ... [2022-07-21 04:59:49,405 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-21 04:59:49,438 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-21 04:59:49,629 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c[14569,14582] [2022-07-21 04:59:49,658 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-21 04:59:49,664 INFO L203 MainTranslator]: Completed pre-run [2022-07-21 04:59:49,702 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c[14569,14582] [2022-07-21 04:59:49,710 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-21 04:59:49,721 INFO L208 MainTranslator]: Completed translation [2022-07-21 04:59:49,722 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 04:59:49 WrapperNode [2022-07-21 04:59:49,722 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-21 04:59:49,723 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-21 04:59:49,723 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-21 04:59:49,723 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-21 04:59:49,727 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 04:59:49" (1/1) ... [2022-07-21 04:59:49,753 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 04:59:49" (1/1) ... [2022-07-21 04:59:49,779 INFO L137 Inliner]: procedures = 58, calls = 159, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 274 [2022-07-21 04:59:49,783 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-21 04:59:49,783 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-21 04:59:49,784 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-21 04:59:49,784 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-21 04:59:49,790 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 04:59:49" (1/1) ... [2022-07-21 04:59:49,790 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 04:59:49" (1/1) ... [2022-07-21 04:59:49,793 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 04:59:49" (1/1) ... [2022-07-21 04:59:49,793 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 04:59:49" (1/1) ... [2022-07-21 04:59:49,802 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 04:59:49" (1/1) ... [2022-07-21 04:59:49,806 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 04:59:49" (1/1) ... [2022-07-21 04:59:49,807 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 04:59:49" (1/1) ... [2022-07-21 04:59:49,809 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-21 04:59:49,809 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-21 04:59:49,810 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-21 04:59:49,810 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-21 04:59:49,812 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 04:59:49" (1/1) ... [2022-07-21 04:59:49,816 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-21 04:59:49,825 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 04:59:49,835 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-21 04:59:49,883 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-21 04:59:49,893 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-21 04:59:49,893 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-21 04:59:49,893 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-21 04:59:49,893 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-07-21 04:59:49,893 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-07-21 04:59:49,893 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-21 04:59:49,894 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-21 04:59:49,895 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-21 04:59:49,895 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-21 04:59:49,895 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-21 04:59:49,895 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-21 04:59:49,895 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-21 04:59:49,895 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-21 04:59:49,895 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-07-21 04:59:49,896 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-07-21 04:59:49,896 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-21 04:59:49,896 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-21 04:59:49,896 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-21 04:59:49,896 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-21 04:59:49,896 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-21 04:59:49,955 INFO L234 CfgBuilder]: Building ICFG [2022-07-21 04:59:49,957 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-21 04:59:50,271 INFO L275 CfgBuilder]: Performing block encoding [2022-07-21 04:59:50,276 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-21 04:59:50,277 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-21 04:59:50,278 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 04:59:50 BoogieIcfgContainer [2022-07-21 04:59:50,278 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-21 04:59:50,280 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-21 04:59:50,280 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-21 04:59:50,282 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-21 04:59:50,282 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.07 04:59:49" (1/3) ... [2022-07-21 04:59:50,283 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6ea213b8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.07 04:59:50, skipping insertion in model container [2022-07-21 04:59:50,283 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 04:59:49" (2/3) ... [2022-07-21 04:59:50,283 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6ea213b8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.07 04:59:50, skipping insertion in model container [2022-07-21 04:59:50,283 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 04:59:50" (3/3) ... [2022-07-21 04:59:50,284 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product60.cil.c [2022-07-21 04:59:50,294 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-21 04:59:50,294 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-21 04:59:50,335 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-21 04:59:50,339 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@3772da0f, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@6a254e97 [2022-07-21 04:59:50,340 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-21 04:59:50,349 INFO L276 IsEmpty]: Start isEmpty. Operand has 99 states, 75 states have (on average 1.3733333333333333) internal successors, (103), 84 states have internal predecessors, (103), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2022-07-21 04:59:50,356 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-07-21 04:59:50,356 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 04:59:50,357 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 04:59:50,357 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 04:59:50,361 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 04:59:50,362 INFO L85 PathProgramCache]: Analyzing trace with hash 47908020, now seen corresponding path program 1 times [2022-07-21 04:59:50,368 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 04:59:50,368 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1634445598] [2022-07-21 04:59:50,369 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 04:59:50,369 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 04:59:50,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:50,557 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-21 04:59:50,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:50,563 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 04:59:50,563 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 04:59:50,564 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1634445598] [2022-07-21 04:59:50,564 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1634445598] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 04:59:50,564 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 04:59:50,565 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-21 04:59:50,566 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1414636980] [2022-07-21 04:59:50,566 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 04:59:50,569 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-21 04:59:50,569 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 04:59:50,597 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-21 04:59:50,599 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-21 04:59:50,601 INFO L87 Difference]: Start difference. First operand has 99 states, 75 states have (on average 1.3733333333333333) internal successors, (103), 84 states have internal predecessors, (103), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 04:59:50,648 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 04:59:50,648 INFO L93 Difference]: Finished difference Result 190 states and 257 transitions. [2022-07-21 04:59:50,649 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-21 04:59:50,650 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2022-07-21 04:59:50,650 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 04:59:50,657 INFO L225 Difference]: With dead ends: 190 [2022-07-21 04:59:50,658 INFO L226 Difference]: Without dead ends: 90 [2022-07-21 04:59:50,661 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-21 04:59:50,665 INFO L413 NwaCegarLoop]: 125 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 125 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 04:59:50,666 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 04:59:50,677 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90 states. [2022-07-21 04:59:50,706 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90 to 90. [2022-07-21 04:59:50,707 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 68 states have (on average 1.3088235294117647) internal successors, (89), 76 states have internal predecessors, (89), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-07-21 04:59:50,713 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 116 transitions. [2022-07-21 04:59:50,715 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 116 transitions. Word has length 23 [2022-07-21 04:59:50,715 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 04:59:50,716 INFO L495 AbstractCegarLoop]: Abstraction has 90 states and 116 transitions. [2022-07-21 04:59:50,716 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 04:59:50,716 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 116 transitions. [2022-07-21 04:59:50,718 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-07-21 04:59:50,719 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 04:59:50,719 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 04:59:50,719 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-21 04:59:50,719 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 04:59:50,722 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 04:59:50,722 INFO L85 PathProgramCache]: Analyzing trace with hash 776313737, now seen corresponding path program 1 times [2022-07-21 04:59:50,722 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 04:59:50,722 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1690286258] [2022-07-21 04:59:50,723 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 04:59:50,723 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 04:59:50,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:50,819 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-21 04:59:50,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:50,825 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 04:59:50,825 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 04:59:50,826 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1690286258] [2022-07-21 04:59:50,826 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1690286258] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 04:59:50,826 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 04:59:50,826 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-21 04:59:50,826 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [230144722] [2022-07-21 04:59:50,826 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 04:59:50,829 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-21 04:59:50,829 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 04:59:50,830 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-21 04:59:50,830 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-21 04:59:50,830 INFO L87 Difference]: Start difference. First operand 90 states and 116 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 04:59:50,854 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 04:59:50,856 INFO L93 Difference]: Finished difference Result 141 states and 181 transitions. [2022-07-21 04:59:50,858 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-21 04:59:50,859 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2022-07-21 04:59:50,859 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 04:59:50,861 INFO L225 Difference]: With dead ends: 141 [2022-07-21 04:59:50,861 INFO L226 Difference]: Without dead ends: 81 [2022-07-21 04:59:50,862 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-21 04:59:50,865 INFO L413 NwaCegarLoop]: 103 mSDtfsCounter, 17 mSDsluCounter, 81 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 184 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 04:59:50,866 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 184 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 04:59:50,867 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2022-07-21 04:59:50,873 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 81. [2022-07-21 04:59:50,875 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 62 states have (on average 1.3225806451612903) internal successors, (82), 70 states have internal predecessors, (82), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-07-21 04:59:50,876 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 104 transitions. [2022-07-21 04:59:50,877 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 104 transitions. Word has length 24 [2022-07-21 04:59:50,877 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 04:59:50,878 INFO L495 AbstractCegarLoop]: Abstraction has 81 states and 104 transitions. [2022-07-21 04:59:50,878 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 04:59:50,878 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 104 transitions. [2022-07-21 04:59:50,883 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-07-21 04:59:50,884 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 04:59:50,884 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 04:59:50,884 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-21 04:59:50,884 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 04:59:50,885 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 04:59:50,885 INFO L85 PathProgramCache]: Analyzing trace with hash -6644295, now seen corresponding path program 1 times [2022-07-21 04:59:50,885 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 04:59:50,885 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1793248317] [2022-07-21 04:59:50,885 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 04:59:50,886 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 04:59:50,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:51,025 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-21 04:59:51,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:51,027 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 04:59:51,028 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 04:59:51,028 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1793248317] [2022-07-21 04:59:51,028 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1793248317] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 04:59:51,028 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 04:59:51,028 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-21 04:59:51,029 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2056985313] [2022-07-21 04:59:51,029 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 04:59:51,029 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-21 04:59:51,029 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 04:59:51,030 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-21 04:59:51,030 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-21 04:59:51,030 INFO L87 Difference]: Start difference. First operand 81 states and 104 transitions. Second operand has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 04:59:51,092 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 04:59:51,092 INFO L93 Difference]: Finished difference Result 197 states and 256 transitions. [2022-07-21 04:59:51,092 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-21 04:59:51,093 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 29 [2022-07-21 04:59:51,093 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 04:59:51,094 INFO L225 Difference]: With dead ends: 197 [2022-07-21 04:59:51,094 INFO L226 Difference]: Without dead ends: 123 [2022-07-21 04:59:51,094 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-07-21 04:59:51,095 INFO L413 NwaCegarLoop]: 116 mSDtfsCounter, 167 mSDsluCounter, 232 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 167 SdHoareTripleChecker+Valid, 348 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 04:59:51,096 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [167 Valid, 348 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 04:59:51,096 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 123 states. [2022-07-21 04:59:51,104 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 123 to 120. [2022-07-21 04:59:51,105 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 120 states, 91 states have (on average 1.3406593406593406) internal successors, (122), 102 states have internal predecessors, (122), 16 states have call successors, (16), 12 states have call predecessors, (16), 12 states have return successors, (17), 12 states have call predecessors, (17), 16 states have call successors, (17) [2022-07-21 04:59:51,106 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 120 states to 120 states and 155 transitions. [2022-07-21 04:59:51,106 INFO L78 Accepts]: Start accepts. Automaton has 120 states and 155 transitions. Word has length 29 [2022-07-21 04:59:51,106 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 04:59:51,106 INFO L495 AbstractCegarLoop]: Abstraction has 120 states and 155 transitions. [2022-07-21 04:59:51,106 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 04:59:51,106 INFO L276 IsEmpty]: Start isEmpty. Operand 120 states and 155 transitions. [2022-07-21 04:59:51,107 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-07-21 04:59:51,107 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 04:59:51,107 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 04:59:51,108 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-21 04:59:51,108 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 04:59:51,108 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 04:59:51,108 INFO L85 PathProgramCache]: Analyzing trace with hash -999312607, now seen corresponding path program 1 times [2022-07-21 04:59:51,109 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 04:59:51,109 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1732082575] [2022-07-21 04:59:51,109 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 04:59:51,109 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 04:59:51,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:51,163 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-21 04:59:51,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:51,170 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 04:59:51,171 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 04:59:51,171 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1732082575] [2022-07-21 04:59:51,171 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1732082575] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 04:59:51,171 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 04:59:51,171 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-21 04:59:51,172 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [983611929] [2022-07-21 04:59:51,172 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 04:59:51,173 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-21 04:59:51,173 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 04:59:51,175 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-21 04:59:51,175 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-21 04:59:51,175 INFO L87 Difference]: Start difference. First operand 120 states and 155 transitions. Second operand has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 04:59:51,257 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 04:59:51,257 INFO L93 Difference]: Finished difference Result 346 states and 458 transitions. [2022-07-21 04:59:51,258 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-21 04:59:51,258 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2022-07-21 04:59:51,258 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 04:59:51,262 INFO L225 Difference]: With dead ends: 346 [2022-07-21 04:59:51,262 INFO L226 Difference]: Without dead ends: 233 [2022-07-21 04:59:51,264 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-07-21 04:59:51,266 INFO L413 NwaCegarLoop]: 112 mSDtfsCounter, 75 mSDsluCounter, 397 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 509 SdHoareTripleChecker+Invalid, 52 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-21 04:59:51,266 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [78 Valid, 509 Invalid, 52 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-21 04:59:51,267 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 233 states. [2022-07-21 04:59:51,281 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 233 to 227. [2022-07-21 04:59:51,291 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 227 states, 170 states have (on average 1.3294117647058823) internal successors, (226), 191 states have internal predecessors, (226), 32 states have call successors, (32), 24 states have call predecessors, (32), 24 states have return successors, (36), 24 states have call predecessors, (36), 32 states have call successors, (36) [2022-07-21 04:59:51,293 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 227 states to 227 states and 294 transitions. [2022-07-21 04:59:51,299 INFO L78 Accepts]: Start accepts. Automaton has 227 states and 294 transitions. Word has length 32 [2022-07-21 04:59:51,300 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 04:59:51,300 INFO L495 AbstractCegarLoop]: Abstraction has 227 states and 294 transitions. [2022-07-21 04:59:51,300 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 04:59:51,300 INFO L276 IsEmpty]: Start isEmpty. Operand 227 states and 294 transitions. [2022-07-21 04:59:51,301 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-07-21 04:59:51,301 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 04:59:51,302 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 04:59:51,302 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-21 04:59:51,302 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 04:59:51,302 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 04:59:51,302 INFO L85 PathProgramCache]: Analyzing trace with hash -756738107, now seen corresponding path program 1 times [2022-07-21 04:59:51,303 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 04:59:51,303 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [219005272] [2022-07-21 04:59:51,303 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 04:59:51,303 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 04:59:51,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:51,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-21 04:59:51,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:51,354 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-07-21 04:59:51,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:51,357 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 04:59:51,357 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 04:59:51,360 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [219005272] [2022-07-21 04:59:51,361 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [219005272] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 04:59:51,361 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 04:59:51,361 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-21 04:59:51,361 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1925496239] [2022-07-21 04:59:51,361 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 04:59:51,362 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-21 04:59:51,362 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 04:59:51,362 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-21 04:59:51,362 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-21 04:59:51,365 INFO L87 Difference]: Start difference. First operand 227 states and 294 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-21 04:59:51,609 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 04:59:51,610 INFO L93 Difference]: Finished difference Result 528 states and 702 transitions. [2022-07-21 04:59:51,610 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-21 04:59:51,610 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 36 [2022-07-21 04:59:51,611 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 04:59:51,612 INFO L225 Difference]: With dead ends: 528 [2022-07-21 04:59:51,612 INFO L226 Difference]: Without dead ends: 308 [2022-07-21 04:59:51,613 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-07-21 04:59:51,614 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 125 mSDsluCounter, 108 mSDsCounter, 0 mSdLazyCounter, 248 mSolverCounterSat, 43 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 130 SdHoareTripleChecker+Valid, 203 SdHoareTripleChecker+Invalid, 291 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 43 IncrementalHoareTripleChecker+Valid, 248 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-21 04:59:51,614 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [130 Valid, 203 Invalid, 291 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [43 Valid, 248 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-21 04:59:51,627 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 308 states. [2022-07-21 04:59:51,641 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 308 to 297. [2022-07-21 04:59:51,642 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 297 states, 224 states have (on average 1.2723214285714286) internal successors, (285), 245 states have internal predecessors, (285), 38 states have call successors, (38), 34 states have call predecessors, (38), 34 states have return successors, (53), 36 states have call predecessors, (53), 38 states have call successors, (53) [2022-07-21 04:59:51,643 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 297 states to 297 states and 376 transitions. [2022-07-21 04:59:51,644 INFO L78 Accepts]: Start accepts. Automaton has 297 states and 376 transitions. Word has length 36 [2022-07-21 04:59:51,644 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 04:59:51,644 INFO L495 AbstractCegarLoop]: Abstraction has 297 states and 376 transitions. [2022-07-21 04:59:51,644 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-21 04:59:51,644 INFO L276 IsEmpty]: Start isEmpty. Operand 297 states and 376 transitions. [2022-07-21 04:59:51,645 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-07-21 04:59:51,646 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 04:59:51,646 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 04:59:51,646 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-21 04:59:51,646 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 04:59:51,647 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 04:59:51,647 INFO L85 PathProgramCache]: Analyzing trace with hash -1441513323, now seen corresponding path program 1 times [2022-07-21 04:59:51,647 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 04:59:51,647 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [277185917] [2022-07-21 04:59:51,647 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 04:59:51,647 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 04:59:51,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:51,672 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-21 04:59:51,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:51,677 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-21 04:59:51,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:51,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 04:59:51,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:51,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-07-21 04:59:51,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:51,705 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-21 04:59:51,705 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 04:59:51,705 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [277185917] [2022-07-21 04:59:51,706 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [277185917] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 04:59:51,706 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 04:59:51,706 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-21 04:59:51,706 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [464079053] [2022-07-21 04:59:51,706 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 04:59:51,707 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-21 04:59:51,707 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 04:59:51,707 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-21 04:59:51,707 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-21 04:59:51,707 INFO L87 Difference]: Start difference. First operand 297 states and 376 transitions. Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-21 04:59:51,906 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 04:59:51,906 INFO L93 Difference]: Finished difference Result 645 states and 837 transitions. [2022-07-21 04:59:51,906 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-21 04:59:51,906 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2022-07-21 04:59:51,907 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 04:59:51,908 INFO L225 Difference]: With dead ends: 645 [2022-07-21 04:59:51,908 INFO L226 Difference]: Without dead ends: 355 [2022-07-21 04:59:51,909 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-07-21 04:59:51,910 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 133 mSDsluCounter, 133 mSDsCounter, 0 mSdLazyCounter, 297 mSolverCounterSat, 50 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 134 SdHoareTripleChecker+Valid, 220 SdHoareTripleChecker+Invalid, 347 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 50 IncrementalHoareTripleChecker+Valid, 297 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-21 04:59:51,910 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [134 Valid, 220 Invalid, 347 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [50 Valid, 297 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-21 04:59:51,911 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 355 states. [2022-07-21 04:59:51,924 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 355 to 343. [2022-07-21 04:59:51,925 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 260 states have (on average 1.2461538461538462) internal successors, (324), 281 states have internal predecessors, (324), 42 states have call successors, (42), 34 states have call predecessors, (42), 40 states have return successors, (63), 44 states have call predecessors, (63), 42 states have call successors, (63) [2022-07-21 04:59:51,926 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 429 transitions. [2022-07-21 04:59:51,926 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 429 transitions. Word has length 55 [2022-07-21 04:59:51,927 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 04:59:51,927 INFO L495 AbstractCegarLoop]: Abstraction has 343 states and 429 transitions. [2022-07-21 04:59:51,927 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-21 04:59:51,927 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 429 transitions. [2022-07-21 04:59:51,928 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-07-21 04:59:51,928 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 04:59:51,929 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 04:59:51,929 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-21 04:59:51,929 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 04:59:51,929 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 04:59:51,929 INFO L85 PathProgramCache]: Analyzing trace with hash -468214013, now seen corresponding path program 1 times [2022-07-21 04:59:51,930 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 04:59:51,930 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [452849142] [2022-07-21 04:59:51,930 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 04:59:51,930 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 04:59:51,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:51,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-21 04:59:51,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:51,966 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-07-21 04:59:51,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:51,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 04:59:51,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:51,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-07-21 04:59:51,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:51,976 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-21 04:59:51,976 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 04:59:51,976 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [452849142] [2022-07-21 04:59:51,977 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [452849142] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 04:59:51,977 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 04:59:51,977 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-21 04:59:51,977 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [344123064] [2022-07-21 04:59:51,977 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 04:59:51,978 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-21 04:59:51,978 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 04:59:51,978 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-21 04:59:51,978 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-21 04:59:51,978 INFO L87 Difference]: Start difference. First operand 343 states and 429 transitions. Second operand has 5 states, 5 states have (on average 9.4) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-21 04:59:52,127 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 04:59:52,128 INFO L93 Difference]: Finished difference Result 685 states and 856 transitions. [2022-07-21 04:59:52,128 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-21 04:59:52,128 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 58 [2022-07-21 04:59:52,129 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 04:59:52,130 INFO L225 Difference]: With dead ends: 685 [2022-07-21 04:59:52,130 INFO L226 Difference]: Without dead ends: 349 [2022-07-21 04:59:52,131 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-07-21 04:59:52,132 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 159 mSDsluCounter, 100 mSDsCounter, 0 mSdLazyCounter, 157 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 163 SdHoareTripleChecker+Valid, 214 SdHoareTripleChecker+Invalid, 206 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 157 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-21 04:59:52,132 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [163 Valid, 214 Invalid, 206 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 157 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-21 04:59:52,133 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 349 states. [2022-07-21 04:59:52,144 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 349 to 343. [2022-07-21 04:59:52,145 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 260 states have (on average 1.2384615384615385) internal successors, (322), 281 states have internal predecessors, (322), 42 states have call successors, (42), 34 states have call predecessors, (42), 40 states have return successors, (59), 44 states have call predecessors, (59), 42 states have call successors, (59) [2022-07-21 04:59:52,146 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 423 transitions. [2022-07-21 04:59:52,147 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 423 transitions. Word has length 58 [2022-07-21 04:59:52,147 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 04:59:52,147 INFO L495 AbstractCegarLoop]: Abstraction has 343 states and 423 transitions. [2022-07-21 04:59:52,147 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-21 04:59:52,148 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 423 transitions. [2022-07-21 04:59:52,148 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-07-21 04:59:52,148 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 04:59:52,149 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 04:59:52,149 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-21 04:59:52,149 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 04:59:52,149 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 04:59:52,149 INFO L85 PathProgramCache]: Analyzing trace with hash -1379473709, now seen corresponding path program 1 times [2022-07-21 04:59:52,150 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 04:59:52,150 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [420591792] [2022-07-21 04:59:52,150 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 04:59:52,150 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 04:59:52,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:52,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-21 04:59:52,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:52,211 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-21 04:59:52,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:52,226 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 04:59:52,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:52,244 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-07-21 04:59:52,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:52,246 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-21 04:59:52,246 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 04:59:52,246 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [420591792] [2022-07-21 04:59:52,246 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [420591792] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 04:59:52,246 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 04:59:52,246 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-21 04:59:52,246 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [28108219] [2022-07-21 04:59:52,247 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 04:59:52,247 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-21 04:59:52,247 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 04:59:52,247 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-21 04:59:52,247 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-21 04:59:52,247 INFO L87 Difference]: Start difference. First operand 343 states and 423 transitions. Second operand has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-21 04:59:52,441 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 04:59:52,441 INFO L93 Difference]: Finished difference Result 697 states and 878 transitions. [2022-07-21 04:59:52,441 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-21 04:59:52,441 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2022-07-21 04:59:52,441 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 04:59:52,443 INFO L225 Difference]: With dead ends: 697 [2022-07-21 04:59:52,443 INFO L226 Difference]: Without dead ends: 361 [2022-07-21 04:59:52,444 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-07-21 04:59:52,444 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 137 mSDsluCounter, 104 mSDsCounter, 0 mSdLazyCounter, 218 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 138 SdHoareTripleChecker+Valid, 192 SdHoareTripleChecker+Invalid, 263 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 218 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-21 04:59:52,445 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [138 Valid, 192 Invalid, 263 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 218 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-21 04:59:52,446 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 361 states. [2022-07-21 04:59:52,464 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 361 to 347. [2022-07-21 04:59:52,465 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 347 states, 264 states have (on average 1.2348484848484849) internal successors, (326), 285 states have internal predecessors, (326), 42 states have call successors, (42), 34 states have call predecessors, (42), 40 states have return successors, (59), 44 states have call predecessors, (59), 42 states have call successors, (59) [2022-07-21 04:59:52,468 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 347 states to 347 states and 427 transitions. [2022-07-21 04:59:52,468 INFO L78 Accepts]: Start accepts. Automaton has 347 states and 427 transitions. Word has length 55 [2022-07-21 04:59:52,468 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 04:59:52,468 INFO L495 AbstractCegarLoop]: Abstraction has 347 states and 427 transitions. [2022-07-21 04:59:52,468 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-21 04:59:52,469 INFO L276 IsEmpty]: Start isEmpty. Operand 347 states and 427 transitions. [2022-07-21 04:59:52,469 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-07-21 04:59:52,469 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 04:59:52,469 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 04:59:52,469 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-21 04:59:52,470 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 04:59:52,470 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 04:59:52,470 INFO L85 PathProgramCache]: Analyzing trace with hash -1888946799, now seen corresponding path program 1 times [2022-07-21 04:59:52,470 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 04:59:52,470 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [704661713] [2022-07-21 04:59:52,470 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 04:59:52,470 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 04:59:52,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:52,519 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-21 04:59:52,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:52,526 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-21 04:59:52,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:52,543 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 04:59:52,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:52,546 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-07-21 04:59:52,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:52,547 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-21 04:59:52,547 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 04:59:52,547 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [704661713] [2022-07-21 04:59:52,547 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [704661713] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 04:59:52,547 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 04:59:52,547 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-21 04:59:52,547 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2069346989] [2022-07-21 04:59:52,547 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 04:59:52,548 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-21 04:59:52,548 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 04:59:52,548 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-21 04:59:52,548 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-21 04:59:52,548 INFO L87 Difference]: Start difference. First operand 347 states and 427 transitions. Second operand has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-21 04:59:52,822 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 04:59:52,822 INFO L93 Difference]: Finished difference Result 1063 states and 1356 transitions. [2022-07-21 04:59:52,822 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-21 04:59:52,822 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 55 [2022-07-21 04:59:52,823 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 04:59:52,826 INFO L225 Difference]: With dead ends: 1063 [2022-07-21 04:59:52,826 INFO L226 Difference]: Without dead ends: 723 [2022-07-21 04:59:52,827 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-07-21 04:59:52,828 INFO L413 NwaCegarLoop]: 136 mSDtfsCounter, 321 mSDsluCounter, 122 mSDsCounter, 0 mSdLazyCounter, 269 mSolverCounterSat, 126 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 324 SdHoareTripleChecker+Valid, 258 SdHoareTripleChecker+Invalid, 395 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 126 IncrementalHoareTripleChecker+Valid, 269 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-21 04:59:52,829 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [324 Valid, 258 Invalid, 395 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [126 Valid, 269 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-21 04:59:52,830 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 723 states. [2022-07-21 04:59:52,853 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 723 to 721. [2022-07-21 04:59:52,854 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 721 states, 546 states have (on average 1.2106227106227105) internal successors, (661), 583 states have internal predecessors, (661), 90 states have call successors, (90), 84 states have call predecessors, (90), 84 states have return successors, (138), 88 states have call predecessors, (138), 90 states have call successors, (138) [2022-07-21 04:59:52,857 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 721 states to 721 states and 889 transitions. [2022-07-21 04:59:52,858 INFO L78 Accepts]: Start accepts. Automaton has 721 states and 889 transitions. Word has length 55 [2022-07-21 04:59:52,858 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 04:59:52,858 INFO L495 AbstractCegarLoop]: Abstraction has 721 states and 889 transitions. [2022-07-21 04:59:52,858 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-21 04:59:52,858 INFO L276 IsEmpty]: Start isEmpty. Operand 721 states and 889 transitions. [2022-07-21 04:59:52,859 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-07-21 04:59:52,860 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 04:59:52,860 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 04:59:52,860 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-21 04:59:52,860 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 04:59:52,860 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 04:59:52,860 INFO L85 PathProgramCache]: Analyzing trace with hash 625238315, now seen corresponding path program 1 times [2022-07-21 04:59:52,860 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 04:59:52,860 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [827128317] [2022-07-21 04:59:52,860 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 04:59:52,860 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 04:59:52,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:52,908 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-21 04:59:52,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:52,915 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-21 04:59:52,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:52,928 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-21 04:59:52,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:52,963 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 04:59:52,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:52,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-07-21 04:59:52,983 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:52,985 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-07-21 04:59:52,985 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 04:59:52,985 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [827128317] [2022-07-21 04:59:52,986 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [827128317] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-21 04:59:52,986 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [69816408] [2022-07-21 04:59:52,986 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 04:59:52,986 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 04:59:52,986 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 04:59:52,987 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-21 04:59:53,024 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-21 04:59:53,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:53,070 INFO L263 TraceCheckSpWp]: Trace formula consists of 378 conjuncts, 8 conjunts are in the unsatisfiable core [2022-07-21 04:59:53,075 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 04:59:53,269 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 04:59:53,270 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 04:59:53,270 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [69816408] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 04:59:53,270 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-21 04:59:53,270 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [14] total 18 [2022-07-21 04:59:53,271 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [599872499] [2022-07-21 04:59:53,271 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 04:59:53,271 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-21 04:59:53,271 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 04:59:53,271 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-21 04:59:53,272 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=42, Invalid=264, Unknown=0, NotChecked=0, Total=306 [2022-07-21 04:59:53,272 INFO L87 Difference]: Start difference. First operand 721 states and 889 transitions. Second operand has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 6 states have internal predecessors, (48), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-07-21 04:59:53,392 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 04:59:53,392 INFO L93 Difference]: Finished difference Result 1414 states and 1750 transitions. [2022-07-21 04:59:53,393 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-21 04:59:53,393 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 6 states have internal predecessors, (48), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 59 [2022-07-21 04:59:53,393 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 04:59:53,396 INFO L225 Difference]: With dead ends: 1414 [2022-07-21 04:59:53,396 INFO L226 Difference]: Without dead ends: 700 [2022-07-21 04:59:53,397 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 79 GetRequests, 62 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2022-07-21 04:59:53,398 INFO L413 NwaCegarLoop]: 189 mSDtfsCounter, 76 mSDsluCounter, 635 mSDsCounter, 0 mSdLazyCounter, 135 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 824 SdHoareTripleChecker+Invalid, 137 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 135 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-21 04:59:53,398 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [78 Valid, 824 Invalid, 137 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 135 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-21 04:59:53,399 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 700 states. [2022-07-21 04:59:53,419 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 700 to 698. [2022-07-21 04:59:53,420 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 698 states, 528 states have (on average 1.1950757575757576) internal successors, (631), 564 states have internal predecessors, (631), 88 states have call successors, (88), 82 states have call predecessors, (88), 81 states have return successors, (121), 85 states have call predecessors, (121), 88 states have call successors, (121) [2022-07-21 04:59:53,423 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 698 states to 698 states and 840 transitions. [2022-07-21 04:59:53,423 INFO L78 Accepts]: Start accepts. Automaton has 698 states and 840 transitions. Word has length 59 [2022-07-21 04:59:53,424 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 04:59:53,424 INFO L495 AbstractCegarLoop]: Abstraction has 698 states and 840 transitions. [2022-07-21 04:59:53,424 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 6 states have internal predecessors, (48), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-07-21 04:59:53,424 INFO L276 IsEmpty]: Start isEmpty. Operand 698 states and 840 transitions. [2022-07-21 04:59:53,426 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-07-21 04:59:53,426 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 04:59:53,426 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 04:59:53,454 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-21 04:59:53,639 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-07-21 04:59:53,640 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 04:59:53,640 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 04:59:53,640 INFO L85 PathProgramCache]: Analyzing trace with hash 1670948605, now seen corresponding path program 1 times [2022-07-21 04:59:53,640 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 04:59:53,641 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [922423602] [2022-07-21 04:59:53,641 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 04:59:53,641 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 04:59:53,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:53,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-21 04:59:53,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:53,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-21 04:59:53,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:53,729 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-21 04:59:53,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:53,739 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 04:59:53,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:53,741 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-21 04:59:53,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:53,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2022-07-21 04:59:53,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:53,750 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2022-07-21 04:59:53,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:53,751 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 04:59:53,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:53,752 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2022-07-21 04:59:53,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:53,754 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 17 proven. 3 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-07-21 04:59:53,754 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 04:59:53,754 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [922423602] [2022-07-21 04:59:53,754 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [922423602] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-21 04:59:53,754 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1305190636] [2022-07-21 04:59:53,754 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 04:59:53,754 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 04:59:53,755 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 04:59:53,772 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-21 04:59:53,773 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-21 04:59:53,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:53,851 INFO L263 TraceCheckSpWp]: Trace formula consists of 472 conjuncts, 11 conjunts are in the unsatisfiable core [2022-07-21 04:59:53,854 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 04:59:53,929 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-21 04:59:53,929 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 04:59:53,929 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1305190636] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 04:59:53,929 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-21 04:59:53,930 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 11 [2022-07-21 04:59:53,930 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1852498200] [2022-07-21 04:59:53,930 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 04:59:53,930 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-21 04:59:53,930 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 04:59:53,931 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-21 04:59:53,931 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=86, Unknown=0, NotChecked=0, Total=110 [2022-07-21 04:59:53,931 INFO L87 Difference]: Start difference. First operand 698 states and 840 transitions. Second operand has 6 states, 6 states have (on average 12.833333333333334) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-07-21 04:59:54,060 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 04:59:54,060 INFO L93 Difference]: Finished difference Result 1799 states and 2265 transitions. [2022-07-21 04:59:54,061 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-21 04:59:54,061 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.833333333333334) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 98 [2022-07-21 04:59:54,061 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 04:59:54,067 INFO L225 Difference]: With dead ends: 1799 [2022-07-21 04:59:54,067 INFO L226 Difference]: Without dead ends: 1264 [2022-07-21 04:59:54,069 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 128 GetRequests, 112 SyntacticMatches, 3 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=52, Invalid=158, Unknown=0, NotChecked=0, Total=210 [2022-07-21 04:59:54,070 INFO L413 NwaCegarLoop]: 203 mSDtfsCounter, 180 mSDsluCounter, 570 mSDsCounter, 0 mSdLazyCounter, 65 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 183 SdHoareTripleChecker+Valid, 773 SdHoareTripleChecker+Invalid, 96 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 65 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-21 04:59:54,070 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [183 Valid, 773 Invalid, 96 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 65 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-21 04:59:54,071 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1264 states. [2022-07-21 04:59:54,130 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1264 to 1050. [2022-07-21 04:59:54,131 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1050 states, 792 states have (on average 1.1944444444444444) internal successors, (946), 846 states have internal predecessors, (946), 134 states have call successors, (134), 116 states have call predecessors, (134), 123 states have return successors, (207), 129 states have call predecessors, (207), 134 states have call successors, (207) [2022-07-21 04:59:54,135 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1050 states to 1050 states and 1287 transitions. [2022-07-21 04:59:54,136 INFO L78 Accepts]: Start accepts. Automaton has 1050 states and 1287 transitions. Word has length 98 [2022-07-21 04:59:54,137 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 04:59:54,137 INFO L495 AbstractCegarLoop]: Abstraction has 1050 states and 1287 transitions. [2022-07-21 04:59:54,137 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 12.833333333333334) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-07-21 04:59:54,137 INFO L276 IsEmpty]: Start isEmpty. Operand 1050 states and 1287 transitions. [2022-07-21 04:59:54,139 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-07-21 04:59:54,139 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 04:59:54,140 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 04:59:54,172 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-21 04:59:54,359 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-07-21 04:59:54,360 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 04:59:54,361 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 04:59:54,361 INFO L85 PathProgramCache]: Analyzing trace with hash -134489729, now seen corresponding path program 1 times [2022-07-21 04:59:54,361 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 04:59:54,361 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2029112145] [2022-07-21 04:59:54,361 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 04:59:54,361 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 04:59:54,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:54,403 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-21 04:59:54,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:54,411 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-21 04:59:54,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:54,421 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-21 04:59:54,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:54,424 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 04:59:54,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:54,425 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-21 04:59:54,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:54,432 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2022-07-21 04:59:54,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:54,434 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2022-07-21 04:59:54,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:54,435 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 04:59:54,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:54,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2022-07-21 04:59:54,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:54,437 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 5 proven. 1 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-07-21 04:59:54,437 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 04:59:54,437 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2029112145] [2022-07-21 04:59:54,437 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2029112145] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-21 04:59:54,437 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1891841152] [2022-07-21 04:59:54,437 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 04:59:54,438 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 04:59:54,438 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 04:59:54,439 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-21 04:59:54,440 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-07-21 04:59:54,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 04:59:54,514 INFO L263 TraceCheckSpWp]: Trace formula consists of 473 conjuncts, 5 conjunts are in the unsatisfiable core [2022-07-21 04:59:54,516 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 04:59:54,566 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-21 04:59:54,566 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 04:59:54,566 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1891841152] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 04:59:54,566 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-21 04:59:54,566 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [11] total 14 [2022-07-21 04:59:54,567 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1043074551] [2022-07-21 04:59:54,567 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 04:59:54,567 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-21 04:59:54,567 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 04:59:54,567 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-21 04:59:54,568 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=30, Invalid=152, Unknown=0, NotChecked=0, Total=182 [2022-07-21 04:59:54,568 INFO L87 Difference]: Start difference. First operand 1050 states and 1287 transitions. Second operand has 5 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-07-21 04:59:54,620 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 04:59:54,641 INFO L93 Difference]: Finished difference Result 1489 states and 1814 transitions. [2022-07-21 04:59:54,641 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-21 04:59:54,641 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 98 [2022-07-21 04:59:54,642 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 04:59:54,642 INFO L225 Difference]: With dead ends: 1489 [2022-07-21 04:59:54,642 INFO L226 Difference]: Without dead ends: 0 [2022-07-21 04:59:54,645 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 126 GetRequests, 112 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=195, Unknown=0, NotChecked=0, Total=240 [2022-07-21 04:59:54,645 INFO L413 NwaCegarLoop]: 103 mSDtfsCounter, 33 mSDsluCounter, 272 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 375 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 04:59:54,646 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 375 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 04:59:54,646 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-21 04:59:54,646 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-21 04:59:54,646 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-21 04:59:54,646 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-21 04:59:54,647 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 98 [2022-07-21 04:59:54,647 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 04:59:54,647 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-21 04:59:54,647 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-07-21 04:59:54,647 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-21 04:59:54,647 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-21 04:59:54,649 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-21 04:59:54,680 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-07-21 04:59:54,866 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 04:59:54,868 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-21 04:59:58,409 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 851 858) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2))) [2022-07-21 04:59:58,409 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 851 858) no Hoare annotation was computed. [2022-07-21 04:59:58,409 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 851 858) no Hoare annotation was computed. [2022-07-21 04:59:58,410 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 766 772) no Hoare annotation was computed. [2022-07-21 04:59:58,410 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 766 772) the Hoare annotation is: true [2022-07-21 04:59:58,410 INFO L899 garLoopResultBuilder]: For program point L190-1(lines 186 197) no Hoare annotation was computed. [2022-07-21 04:59:58,410 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 186 197) the Hoare annotation is: (let ((.cse1 (not (= ~pumpRunning~0 0))) (.cse2 (not (<= 1 ~waterLevel~0))) (.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse3 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse3 (not (<= 1 |old(~methaneLevelCritical~0)|))) (or .cse0 .cse3 (not (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0)))) [2022-07-21 04:59:58,410 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 186 197) no Hoare annotation was computed. [2022-07-21 04:59:58,410 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 198 206) the Hoare annotation is: true [2022-07-21 04:59:58,410 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 198 206) no Hoare annotation was computed. [2022-07-21 04:59:58,410 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 198 206) no Hoare annotation was computed. [2022-07-21 04:59:58,410 INFO L895 garLoopResultBuilder]: At program point L271(line 271) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 0)) (.cse12 (<= 1 ~waterLevel~0))) (let ((.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse8 (= ~waterLevel~0 1)) (.cse0 (<= 2 ~waterLevel~0)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (not (<= 1 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse9 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse11 .cse12)) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse11 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) .cse12 (= |timeShift_isLowWaterLevel_~tmp~10#1| 0) (<= 1 |timeShift_processEnvironment_~tmp~7#1|))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse2 .cse4) (or .cse5 .cse0 .cse6 .cse4) (or .cse5 .cse7 .cse6 .cse8) (or .cse5 .cse7 .cse2 .cse8) (or .cse5 .cse9 .cse10 .cse6) (or .cse5 .cse9 .cse0 .cse10 .cse2) (or .cse5 .cse11 .cse10 .cse2 (not .cse3)) (or .cse9 .cse6 .cse1 .cse3 .cse4)))) [2022-07-21 04:59:58,410 INFO L899 garLoopResultBuilder]: For program point L271-1(line 271) no Hoare annotation was computed. [2022-07-21 04:59:58,410 INFO L899 garLoopResultBuilder]: For program point L746-1(lines 745 764) no Hoare annotation was computed. [2022-07-21 04:59:58,410 INFO L899 garLoopResultBuilder]: For program point L808(lines 808 816) no Hoare annotation was computed. [2022-07-21 04:59:58,410 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 742 765) no Hoare annotation was computed. [2022-07-21 04:59:58,410 INFO L899 garLoopResultBuilder]: For program point L804(lines 804 821) no Hoare annotation was computed. [2022-07-21 04:59:58,410 INFO L895 garLoopResultBuilder]: At program point L949(lines 934 952) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (= |timeShift_isLowWaterLevel_~tmp~10#1| 0))) (.cse4 (= 0 ~systemActive~0)) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 |old(~waterLevel~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse2 .cse4 .cse5) (or .cse3 .cse6 .cse4 .cse5) (or .cse0 .cse1 .cse6))) [2022-07-21 04:59:58,410 INFO L895 garLoopResultBuilder]: At program point L875(lines 870 878) the Hoare annotation is: (let ((.cse3 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= ~pumpRunning~0 0)) (.cse6 (= 0 ~systemActive~0)) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 (and .cse2 .cse3 (<= 2 ~waterLevel~0)) .cse4) (or .cse5 .cse6 .cse4) (or (and .cse2 .cse3 (= ~waterLevel~0 1)) .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1) (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse2 .cse3 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (= |timeShift_isLowWaterLevel_~tmp~10#1| 0) (<= 1 |timeShift_processEnvironment_~tmp~7#1|)) .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2) .cse6 .cse4) (or .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse5))) [2022-07-21 04:59:58,411 INFO L899 garLoopResultBuilder]: For program point L277(lines 277 283) no Hoare annotation was computed. [2022-07-21 04:59:58,411 INFO L899 garLoopResultBuilder]: For program point L661(line 661) no Hoare annotation was computed. [2022-07-21 04:59:58,411 INFO L899 garLoopResultBuilder]: For program point L273(lines 273 286) no Hoare annotation was computed. [2022-07-21 04:59:58,411 INFO L895 garLoopResultBuilder]: At program point L273-1(lines 265 289) the Hoare annotation is: (let ((.cse17 (= 0 ~systemActive~0))) (let ((.cse6 (= |timeShift___utac_acc__Specification1_spec__1_~tmp~1#1| 0)) (.cse8 (not .cse17)) (.cse19 (= ~methaneLevelCritical~0 0)) (.cse3 (= ~pumpRunning~0 0)) (.cse20 (<= 1 ~methaneLevelCritical~0)) (.cse7 (<= 2 ~waterLevel~0))) (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse11 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse12 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse13 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|)) (.cse14 (<= 1 ~waterLevel~0)) (.cse15 (= |timeShift_isLowWaterLevel_~tmp~10#1| 0)) (.cse16 (<= 1 |timeShift_processEnvironment_~tmp~7#1|)) (.cse10 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 .cse20 .cse7)) (.cse2 (not .cse20)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not .cse19)) (.cse18 (and .cse6 .cse19 .cse7 .cse8)) (.cse9 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4)) (or .cse0 .cse1 .cse5 (and .cse6 .cse3 .cse4)) (or .cse0 (and .cse6 .cse3 .cse7) .cse5 .cse8 .cse9) (or .cse10 .cse2 (and .cse11 .cse3 .cse12 .cse13 .cse14 .cse15 .cse16) .cse17 .cse9) (or (and .cse6 .cse11 .cse3 .cse12 .cse13 .cse14 .cse15 .cse16) .cse5 .cse17 .cse18 .cse9) (or .cse0 .cse10 .cse2 .cse9) (or .cse0 .cse5 .cse17 .cse18 .cse9))))) [2022-07-21 04:59:58,411 INFO L895 garLoopResultBuilder]: At program point L814(line 814) the Hoare annotation is: (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= 1 |old(~waterLevel~0)|))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5) (or .cse3 .cse4 .cse0) (or .cse5 .cse1 .cse2))) [2022-07-21 04:59:58,411 INFO L895 garLoopResultBuilder]: At program point L810(line 810) the Hoare annotation is: (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (= |timeShift_isLowWaterLevel_~tmp~10#1| 0) (<= 1 |timeShift_processEnvironment_~tmp~7#1|))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 1 |old(~waterLevel~0)|))) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse2 .cse3) (or .cse5 .cse6 .cse1) (or .cse5 .cse6 .cse4))) [2022-07-21 04:59:58,411 INFO L899 garLoopResultBuilder]: For program point L166(lines 166 170) no Hoare annotation was computed. [2022-07-21 04:59:58,411 INFO L895 garLoopResultBuilder]: At program point L166-2(lines 162 173) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse0) (or .cse6 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6))) [2022-07-21 04:59:58,411 INFO L895 garLoopResultBuilder]: At program point L662(lines 657 664) the Hoare annotation is: (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= 1 |old(~waterLevel~0)|))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5) (or .cse3 .cse4 .cse0) (or .cse5 .cse1 .cse2))) [2022-07-21 04:59:58,411 INFO L895 garLoopResultBuilder]: At program point L819(line 819) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0)) (.cse10 (= ~pumpRunning~0 0))) (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse3 (and .cse10 (= ~waterLevel~0 1))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse10 (<= 2 ~waterLevel~0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (<= 1 |old(~waterLevel~0)|))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse9 (not .cse5))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse7 .cse3) (or .cse0 .cse8 .cse2 .cse9) (or .cse4 .cse7 .cse5 .cse6) (or .cse0 .cse8 .cse7 .cse9)))) [2022-07-21 04:59:58,411 INFO L895 garLoopResultBuilder]: At program point L819-1(lines 800 824) the Hoare annotation is: (let ((.cse12 (= ~pumpRunning~0 0)) (.cse13 (<= 1 ~waterLevel~0)) (.cse3 (= 0 ~systemActive~0))) (let ((.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse10 (= ~waterLevel~0 1)) (.cse0 (<= 2 ~waterLevel~0)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 1 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not .cse3)) (.cse11 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse12 .cse13)) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse12 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) .cse13 (= |timeShift_isLowWaterLevel_~tmp~10#1| 0) (<= 1 |timeShift_processEnvironment_~tmp~7#1|))) (.cse4 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse2 .cse4) (or .cse5 .cse0 .cse6 .cse4) (or .cse5 .cse7 .cse6 .cse8) (or .cse5 .cse9 .cse6 .cse10) (or .cse5 .cse9 .cse2 .cse10) (or .cse5 .cse11 .cse7 .cse6) (or .cse5 .cse11 .cse0 .cse7 .cse2) (or .cse5 .cse7 .cse2 .cse8) (or .cse11 .cse6 .cse1 .cse3 .cse4)))) [2022-07-21 04:59:58,411 INFO L899 garLoopResultBuilder]: For program point L753-1(lines 753 759) no Hoare annotation was computed. [2022-07-21 04:59:58,411 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 742 765) the Hoare annotation is: (let ((.cse5 (<= 2 ~waterLevel~0))) (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5)) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse8 (= ~waterLevel~0 1)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (= ~pumpRunning~0 0)) (.cse10 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse1 .cse3) (or .cse4 .cse5 .cse6 .cse3) (or .cse4 .cse7 .cse6 .cse8) (or .cse4 .cse9 .cse10 .cse6) (or .cse0 .cse6 .cse2 .cse3) (or .cse4 .cse7 .cse1 .cse8) (or .cse4 .cse9 .cse10 .cse1)))) [2022-07-21 04:59:58,411 INFO L899 garLoopResultBuilder]: For program point L943(lines 943 947) no Hoare annotation was computed. [2022-07-21 04:59:58,412 INFO L899 garLoopResultBuilder]: For program point L943-2(lines 943 947) no Hoare annotation was computed. [2022-07-21 04:59:58,412 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 742 765) no Hoare annotation was computed. [2022-07-21 04:59:58,412 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 661) no Hoare annotation was computed. [2022-07-21 04:59:58,412 INFO L895 garLoopResultBuilder]: At program point L258(lines 253 261) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 |old(~waterLevel~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 ~waterLevel~0))) (.cse4 (= 0 ~systemActive~0)) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse6) (or .cse6 .cse3 .cse4 .cse5))) [2022-07-21 04:59:58,412 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2022-07-21 04:59:58,412 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2022-07-21 04:59:58,412 INFO L899 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2022-07-21 04:59:58,412 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2022-07-21 04:59:58,412 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2022-07-21 04:59:58,412 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2022-07-21 04:59:58,412 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2022-07-21 04:59:58,412 INFO L902 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2022-07-21 04:59:58,412 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2022-07-21 04:59:58,412 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-07-21 04:59:58,412 INFO L895 garLoopResultBuilder]: At program point L700(line 700) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (<= 2 ~waterLevel~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0)) (and .cse4 .cse1 .cse2 .cse5 .cse3 (not (= 0 ~systemActive~0))) (and .cse0 .cse4 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)) (and .cse0 .cse4 .cse1 .cse2 .cse5 .cse3))) [2022-07-21 04:59:58,412 INFO L895 garLoopResultBuilder]: At program point L725(lines 678 727) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (<= 2 ~waterLevel~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0)) (and .cse4 .cse1 .cse2 .cse5 .cse3 (not (= 0 ~systemActive~0))) (and .cse0 .cse4 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)) (and .cse0 .cse4 .cse1 .cse2 .cse5 .cse3))) [2022-07-21 04:59:58,412 INFO L899 garLoopResultBuilder]: For program point L688(lines 688 694) no Hoare annotation was computed. [2022-07-21 04:59:58,412 INFO L899 garLoopResultBuilder]: For program point L688-1(lines 688 694) no Hoare annotation was computed. [2022-07-21 04:59:58,413 INFO L895 garLoopResultBuilder]: At program point L973(lines 968 975) the Hoare annotation is: (let ((.cse3 (<= 2 ~waterLevel~0)) (.cse0 (<= 1 ~methaneLevelCritical~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse7 .cse0 .cse1 .cse2 .cse4 (<= 1 ~waterLevel~0) .cse5) (and .cse7 .cse6 .cse1 .cse2 .cse4 (= ~waterLevel~0 1) .cse5))) [2022-07-21 04:59:58,413 INFO L899 garLoopResultBuilder]: For program point L680(lines 680 684) no Hoare annotation was computed. [2022-07-21 04:59:58,413 INFO L895 garLoopResultBuilder]: At program point L965(lines 953 967) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 2 ~waterLevel~0) .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= ~waterLevel~0 1)) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0) .cse5))) [2022-07-21 04:59:58,413 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-21 04:59:58,413 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-21 04:59:58,413 INFO L899 garLoopResultBuilder]: For program point L957(lines 957 963) no Hoare annotation was computed. [2022-07-21 04:59:58,413 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-21 04:59:58,413 INFO L899 garLoopResultBuilder]: For program point L957-1(lines 957 963) no Hoare annotation was computed. [2022-07-21 04:59:58,413 INFO L895 garLoopResultBuilder]: At program point L1007(lines 1002 1010) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-21 04:59:58,413 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 147) no Hoare annotation was computed. [2022-07-21 04:59:58,413 INFO L899 garLoopResultBuilder]: For program point L140-2(lines 140 147) no Hoare annotation was computed. [2022-07-21 04:59:58,413 INFO L895 garLoopResultBuilder]: At program point L999(lines 995 1001) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-21 04:59:58,413 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-21 04:59:58,413 INFO L902 garLoopResultBuilder]: At program point L124(lines 117 126) the Hoare annotation is: true [2022-07-21 04:59:58,413 INFO L902 garLoopResultBuilder]: At program point L731(lines 668 735) the Hoare annotation is: true [2022-07-21 04:59:58,413 INFO L899 garLoopResultBuilder]: For program point L698(lines 698 704) no Hoare annotation was computed. [2022-07-21 04:59:58,413 INFO L899 garLoopResultBuilder]: For program point L698-1(lines 698 704) no Hoare annotation was computed. [2022-07-21 04:59:58,413 INFO L902 garLoopResultBuilder]: At program point L149(lines 130 152) the Hoare annotation is: true [2022-07-21 04:59:58,414 INFO L895 garLoopResultBuilder]: At program point L690(line 690) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (<= 2 ~waterLevel~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0)) (and .cse4 .cse1 .cse2 .cse5 .cse3 (not (= 0 ~systemActive~0))) (and .cse0 .cse4 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)) (and .cse0 .cse4 .cse1 .cse2 .cse5 .cse3))) [2022-07-21 04:59:58,414 INFO L895 garLoopResultBuilder]: At program point L992(lines 988 994) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-21 04:59:58,414 INFO L895 garLoopResultBuilder]: At program point L959(line 959) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (<= 2 ~waterLevel~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3 .cse4) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-07-21 04:59:58,414 INFO L895 garLoopResultBuilder]: At program point L728(lines 677 729) the Hoare annotation is: false [2022-07-21 04:59:58,414 INFO L895 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-21 04:59:58,414 INFO L899 garLoopResultBuilder]: For program point L716(lines 716 722) no Hoare annotation was computed. [2022-07-21 04:59:58,414 INFO L895 garLoopResultBuilder]: At program point L716-2(lines 708 723) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse6 (not (= 0 ~systemActive~0))) (.cse0 (= ~pumpRunning~0 0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (<= 2 ~waterLevel~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0)) (and .cse1 .cse2 .cse3 .cse5 .cse4 .cse6) (and .cse7 .cse2 .cse3 .cse5 .cse4 .cse6) (and .cse0 .cse7 .cse2 .cse3 .cse4 (= ~waterLevel~0 1)) (and .cse0 .cse7 .cse2 .cse3 .cse5 .cse4))) [2022-07-21 04:59:58,414 INFO L899 garLoopResultBuilder]: For program point L679(lines 678 727) no Hoare annotation was computed. [2022-07-21 04:59:58,414 INFO L899 garLoopResultBuilder]: For program point L708(lines 708 723) no Hoare annotation was computed. [2022-07-21 04:59:58,414 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 774 798) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (<= 1 ~waterLevel~0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3) (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse3))) [2022-07-21 04:59:58,414 INFO L895 garLoopResultBuilder]: At program point L830(lines 825 832) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or .cse0 .cse1 (<= 2 ~waterLevel~0) (not (= ~methaneLevelCritical~0 0)) .cse2))) [2022-07-21 04:59:58,414 INFO L895 garLoopResultBuilder]: At program point L793(line 793) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2))) [2022-07-21 04:59:58,414 INFO L895 garLoopResultBuilder]: At program point L248(lines 239 252) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 (<= 2 ~waterLevel~0))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse5))) (and (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4) (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse3 .cse4)))) [2022-07-21 04:59:58,414 INFO L899 garLoopResultBuilder]: For program point L793-1(lines 774 798) no Hoare annotation was computed. [2022-07-21 04:59:58,414 INFO L899 garLoopResultBuilder]: For program point L841(lines 841 847) no Hoare annotation was computed. [2022-07-21 04:59:58,414 INFO L895 garLoopResultBuilder]: At program point L841-2(lines 834 850) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse3 (<= 2 ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (and (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~8#1|) (= ~pumpRunning~0 0) .cse3 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|))) (or .cse0 .cse1 .cse3 (not (= ~methaneLevelCritical~0 0)) .cse2))) [2022-07-21 04:59:58,415 INFO L895 garLoopResultBuilder]: At program point L930(lines 915 933) the Hoare annotation is: (let ((.cse5 (<= 2 ~waterLevel~0)) (.cse6 (= ~pumpRunning~0 0))) (let ((.cse2 (and .cse6 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse5)) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~waterLevel~0)) .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2 .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse4 .cse2 .cse3) (or .cse0 .cse1 (not .cse5) .cse4 .cse3)))) [2022-07-21 04:59:58,415 INFO L895 garLoopResultBuilder]: At program point L866(lines 859 869) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse4 (= 0 ~systemActive~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (<= 2 ~waterLevel~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) (and .cse2 .cse3) .cse4) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse4 (and .cse2 .cse3 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|))))) [2022-07-21 04:59:58,415 INFO L895 garLoopResultBuilder]: At program point L864(line 864) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse3) (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3))) [2022-07-21 04:59:58,415 INFO L899 garLoopResultBuilder]: For program point L864-1(line 864) no Hoare annotation was computed. [2022-07-21 04:59:58,415 INFO L899 garLoopResultBuilder]: For program point L924(lines 924 928) no Hoare annotation was computed. [2022-07-21 04:59:58,415 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 774 798) no Hoare annotation was computed. [2022-07-21 04:59:58,415 INFO L899 garLoopResultBuilder]: For program point L924-2(lines 924 928) no Hoare annotation was computed. [2022-07-21 04:59:58,415 INFO L895 garLoopResultBuilder]: At program point L788(line 788) the Hoare annotation is: (let ((.cse0 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 ~waterLevel~0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3) (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse3))) [2022-07-21 04:59:58,415 INFO L899 garLoopResultBuilder]: For program point L243(lines 243 249) no Hoare annotation was computed. [2022-07-21 04:59:58,415 INFO L899 garLoopResultBuilder]: For program point L782(lines 782 790) no Hoare annotation was computed. [2022-07-21 04:59:58,415 INFO L899 garLoopResultBuilder]: For program point L778(lines 778 795) no Hoare annotation was computed. [2022-07-21 04:59:58,415 INFO L899 garLoopResultBuilder]: For program point L178-1(lines 174 185) no Hoare annotation was computed. [2022-07-21 04:59:58,415 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 174 185) no Hoare annotation was computed. [2022-07-21 04:59:58,415 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 174 185) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse3 (= ~waterLevel~0 1)) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse5 (<= 2 ~waterLevel~0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse5 .cse2 (= 0 ~systemActive~0) .cse6) (or .cse0 .cse5 .cse4 .cse6) (or .cse0 .cse5 .cse2 .cse6))) [2022-07-21 04:59:58,418 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 04:59:58,419 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-21 04:59:58,443 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.07 04:59:58 BoogieIcfgContainer [2022-07-21 04:59:58,443 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-21 04:59:58,443 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-21 04:59:58,444 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-21 04:59:58,444 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-21 04:59:58,444 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 04:59:50" (3/4) ... [2022-07-21 04:59:58,446 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-21 04:59:58,450 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-07-21 04:59:58,450 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-21 04:59:58,450 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-21 04:59:58,450 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-07-21 04:59:58,451 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-21 04:59:58,451 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-21 04:59:58,451 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-21 04:59:58,451 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-21 04:59:58,456 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2022-07-21 04:59:58,456 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-21 04:59:58,457 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-21 04:59:58,457 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-21 04:59:58,457 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-21 04:59:58,458 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-21 04:59:58,458 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-21 04:59:58,474 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-21 04:59:58,474 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-21 04:59:58,474 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) || (((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive))) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1)) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) [2022-07-21 04:59:58,474 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 <= methaneLevelCritical) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && (((!(methaneLevelCritical == 0) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) [2022-07-21 04:59:58,475 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((2 <= waterLevel || ((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= waterLevel)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= waterLevel)) || 2 <= waterLevel) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= waterLevel) || !(1 <= methaneLevelCritical)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-07-21 04:59:58,475 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || ((tmp == 0 && pumpRunning == 0) && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || ((tmp == 0 && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((((((((tmp == 0 && \result == 0) && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((tmp == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && !(0 == systemActive))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((tmp == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && !(0 == systemActive))) || !(2 <= \old(waterLevel))) [2022-07-21 04:59:58,475 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 <= methaneLevelCritical && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || (((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive)) [2022-07-21 04:59:58,476 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= \result)) [2022-07-21 04:59:58,476 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && 0 == systemActive) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 0 == systemActive) && waterLevel == 1)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive) [2022-07-21 04:59:58,476 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && 2 <= waterLevel)) || !(2 <= \old(waterLevel))) && ((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((pumpRunning == 0 && \result == 0) && waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical))) && (((((((((((\result == 0 && pumpRunning == 0) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) [2022-07-21 04:59:58,476 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && (((!(1 <= methaneLevelCritical) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(methaneLevelCritical == 0) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-07-21 04:59:58,476 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (((methaneLevelCritical <= tmp && pumpRunning == 0) && 2 <= waterLevel) && methaneLevelCritical <= \result)) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-21 04:59:58,476 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) && (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) [2022-07-21 04:59:58,477 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-21 04:59:58,477 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && ((!(1 <= methaneLevelCritical) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-07-21 04:59:58,477 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && ((((((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) [2022-07-21 04:59:58,477 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || 0 == systemActive) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) [2022-07-21 04:59:58,491 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-21 04:59:58,492 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-21 04:59:58,493 INFO L158 Benchmark]: Toolchain (without parser) took 9097.65ms. Allocated memory was 67.1MB in the beginning and 130.0MB in the end (delta: 62.9MB). Free memory was 47.7MB in the beginning and 82.5MB in the end (delta: -34.8MB). Peak memory consumption was 27.5MB. Max. memory is 16.1GB. [2022-07-21 04:59:58,493 INFO L158 Benchmark]: CDTParser took 0.21ms. Allocated memory is still 67.1MB. Free memory was 50.1MB in the beginning and 50.0MB in the end (delta: 48.7kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-21 04:59:58,493 INFO L158 Benchmark]: CACSL2BoogieTranslator took 325.84ms. Allocated memory is still 67.1MB. Free memory was 47.4MB in the beginning and 43.2MB in the end (delta: 4.2MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2022-07-21 04:59:58,494 INFO L158 Benchmark]: Boogie Procedure Inliner took 60.34ms. Allocated memory is still 67.1MB. Free memory was 43.2MB in the beginning and 40.5MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-21 04:59:58,494 INFO L158 Benchmark]: Boogie Preprocessor took 25.43ms. Allocated memory is still 67.1MB. Free memory was 40.5MB in the beginning and 39.1MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-21 04:59:58,494 INFO L158 Benchmark]: RCFGBuilder took 469.18ms. Allocated memory was 67.1MB in the beginning and 88.1MB in the end (delta: 21.0MB). Free memory was 38.9MB in the beginning and 61.1MB in the end (delta: -22.2MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2022-07-21 04:59:58,494 INFO L158 Benchmark]: TraceAbstraction took 8163.21ms. Allocated memory was 88.1MB in the beginning and 130.0MB in the end (delta: 41.9MB). Free memory was 60.7MB in the beginning and 88.7MB in the end (delta: -28.0MB). Peak memory consumption was 72.8MB. Max. memory is 16.1GB. [2022-07-21 04:59:58,495 INFO L158 Benchmark]: Witness Printer took 48.94ms. Allocated memory is still 130.0MB. Free memory was 88.7MB in the beginning and 82.5MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-21 04:59:58,496 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.21ms. Allocated memory is still 67.1MB. Free memory was 50.1MB in the beginning and 50.0MB in the end (delta: 48.7kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 325.84ms. Allocated memory is still 67.1MB. Free memory was 47.4MB in the beginning and 43.2MB in the end (delta: 4.2MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 60.34ms. Allocated memory is still 67.1MB. Free memory was 43.2MB in the beginning and 40.5MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 25.43ms. Allocated memory is still 67.1MB. Free memory was 40.5MB in the beginning and 39.1MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 469.18ms. Allocated memory was 67.1MB in the beginning and 88.1MB in the end (delta: 21.0MB). Free memory was 38.9MB in the beginning and 61.1MB in the end (delta: -22.2MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * TraceAbstraction took 8163.21ms. Allocated memory was 88.1MB in the beginning and 130.0MB in the end (delta: 41.9MB). Free memory was 60.7MB in the beginning and 88.7MB in the end (delta: -28.0MB). Peak memory consumption was 72.8MB. Max. memory is 16.1GB. * Witness Printer took 48.94ms. Allocated memory is still 130.0MB. Free memory was 88.7MB in the beginning and 82.5MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 661]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 99 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 8.1s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1449 SdHoareTripleChecker+Valid, 1.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1423 mSDsluCounter, 4225 SdHoareTripleChecker+Invalid, 0.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2754 mSDsCounter, 377 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1457 IncrementalHoareTripleChecker+Invalid, 1834 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 377 mSolverCounterUnsat, 1471 mSDtfsCounter, 1457 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 455 GetRequests, 352 SyntacticMatches, 4 SemanticMatches, 99 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 69 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1050occurred in iteration=11, InterpolantAutomatonStates: 84, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 12 MinimizatonAttempts, 270 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 46 LocationsWithAnnotation, 2151 PreInvPairs, 2357 NumberOfFragments, 2686 HoareAnnotationTreeSize, 2151 FomulaSimplifications, 336 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 46 FomulaSimplificationsInter, 8306 FormulaSimplificationTreeSizeReductionInter, 3.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 1.1s InterpolantComputationTime, 877 NumberOfCodeBlocks, 877 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 862 ConstructedInterpolants, 0 QuantifiedInterpolants, 1446 SizeOfPredicates, 11 NumberOfNonLiveVariables, 1323 ConjunctsInSsa, 24 ConjunctsInUnsatCore, 15 InterpolantComputations, 12 PerfectInterpolantSequences, 136/142 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 678]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) || (((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive))) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1)) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) - InvariantResult [Line: 859]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= \result)) - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 1002]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 953]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && 0 == systemActive) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 0 == systemActive) && waterLevel == 1)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive) - InvariantResult [Line: 995]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 870]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && 2 <= waterLevel)) || !(2 <= \old(waterLevel))) && ((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((pumpRunning == 0 && \result == 0) && waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical))) && (((((((((((\result == 0 && pumpRunning == 0) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: (((((!(1 <= methaneLevelCritical) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && (((!(methaneLevelCritical == 0) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 934]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && ((((((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 253]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && (((!(1 <= methaneLevelCritical) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(methaneLevelCritical == 0) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 915]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || 0 == systemActive) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 834]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (((methaneLevelCritical <= tmp && pumpRunning == 0) && 2 <= waterLevel) && methaneLevelCritical <= \result)) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 825]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 130]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 668]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 677]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 988]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 968]: Loop Invariant Derived loop invariant: (((((((1 <= methaneLevelCritical && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || (((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive)) - InvariantResult [Line: 657]: Loop Invariant Derived loop invariant: ((((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && ((!(1 <= methaneLevelCritical) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || ((tmp == 0 && pumpRunning == 0) && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || ((tmp == 0 && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((((((((tmp == 0 && \result == 0) && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((tmp == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && !(0 == systemActive))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((tmp == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && !(0 == systemActive))) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 239]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) && (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) - InvariantResult [Line: 800]: Loop Invariant Derived loop invariant: ((((((((((((2 <= waterLevel || ((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= waterLevel)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= waterLevel)) || 2 <= waterLevel) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= waterLevel) || !(1 <= methaneLevelCritical)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp)) || 0 == systemActive) || !(2 <= \old(waterLevel))) RESULT: Ultimate proved your program to be correct! [2022-07-21 04:59:58,547 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE