./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product40.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 35987657 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product40.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 1b223e2286b1d2d2d4710f5bd529ee4610cfb9619424734c12c9aa00d3c99444 --- Real Ultimate output --- This is Ultimate 0.2.2-?-3598765 [2022-07-21 05:00:15,732 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-21 05:00:15,735 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-21 05:00:15,786 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-21 05:00:15,787 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-21 05:00:15,788 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-21 05:00:15,792 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-21 05:00:15,795 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-21 05:00:15,797 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-21 05:00:15,798 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-21 05:00:15,799 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-21 05:00:15,800 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-21 05:00:15,800 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-21 05:00:15,801 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-21 05:00:15,802 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-21 05:00:15,803 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-21 05:00:15,804 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-21 05:00:15,804 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-21 05:00:15,806 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-21 05:00:15,807 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-21 05:00:15,809 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-21 05:00:15,809 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-21 05:00:15,810 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-21 05:00:15,811 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-21 05:00:15,812 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-21 05:00:15,814 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-21 05:00:15,815 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-21 05:00:15,815 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-21 05:00:15,816 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-21 05:00:15,816 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-21 05:00:15,817 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-21 05:00:15,817 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-21 05:00:15,818 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-21 05:00:15,819 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-21 05:00:15,819 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-21 05:00:15,820 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-21 05:00:15,821 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-21 05:00:15,821 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-21 05:00:15,821 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-21 05:00:15,822 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-21 05:00:15,823 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-21 05:00:15,828 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-21 05:00:15,829 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-21 05:00:15,850 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-21 05:00:15,851 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-21 05:00:15,851 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-21 05:00:15,852 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-21 05:00:15,852 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-21 05:00:15,853 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-21 05:00:15,853 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-21 05:00:15,853 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-21 05:00:15,854 INFO L138 SettingsManager]: * Use SBE=true [2022-07-21 05:00:15,854 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-21 05:00:15,854 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-21 05:00:15,854 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-21 05:00:15,855 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-21 05:00:15,855 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-21 05:00:15,855 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-21 05:00:15,855 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-21 05:00:15,855 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-21 05:00:15,856 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-21 05:00:15,856 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-21 05:00:15,856 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-21 05:00:15,856 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-21 05:00:15,856 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-21 05:00:15,857 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-21 05:00:15,857 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-21 05:00:15,857 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-21 05:00:15,857 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-21 05:00:15,857 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-21 05:00:15,858 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-21 05:00:15,858 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-21 05:00:15,858 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-21 05:00:15,858 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-21 05:00:15,858 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-21 05:00:15,859 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-21 05:00:15,859 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1b223e2286b1d2d2d4710f5bd529ee4610cfb9619424734c12c9aa00d3c99444 [2022-07-21 05:00:16,218 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-21 05:00:16,241 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-21 05:00:16,243 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-21 05:00:16,244 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-21 05:00:16,245 INFO L275 PluginConnector]: CDTParser initialized [2022-07-21 05:00:16,246 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product40.cil.c [2022-07-21 05:00:16,310 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/e4ca6a4c5/867058bc96a648f9b6fce1abec41c763/FLAGd187e82e3 [2022-07-21 05:00:16,874 INFO L306 CDTParser]: Found 1 translation units. [2022-07-21 05:00:16,877 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product40.cil.c [2022-07-21 05:00:16,893 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/e4ca6a4c5/867058bc96a648f9b6fce1abec41c763/FLAGd187e82e3 [2022-07-21 05:00:17,327 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/e4ca6a4c5/867058bc96a648f9b6fce1abec41c763 [2022-07-21 05:00:17,329 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-21 05:00:17,330 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-21 05:00:17,331 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-21 05:00:17,332 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-21 05:00:17,335 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-21 05:00:17,336 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.07 05:00:17" (1/1) ... [2022-07-21 05:00:17,337 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7afcac00 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:17, skipping insertion in model container [2022-07-21 05:00:17,337 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.07 05:00:17" (1/1) ... [2022-07-21 05:00:17,344 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-21 05:00:17,397 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-21 05:00:17,714 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product40.cil.c[17002,17015] [2022-07-21 05:00:17,724 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-21 05:00:17,732 INFO L203 MainTranslator]: Completed pre-run [2022-07-21 05:00:17,778 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product40.cil.c[17002,17015] [2022-07-21 05:00:17,782 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-21 05:00:17,800 INFO L208 MainTranslator]: Completed translation [2022-07-21 05:00:17,801 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:17 WrapperNode [2022-07-21 05:00:17,802 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-21 05:00:17,803 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-21 05:00:17,803 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-21 05:00:17,803 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-21 05:00:17,809 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:17" (1/1) ... [2022-07-21 05:00:17,832 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:17" (1/1) ... [2022-07-21 05:00:17,870 INFO L137 Inliner]: procedures = 56, calls = 157, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 253 [2022-07-21 05:00:17,870 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-21 05:00:17,871 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-21 05:00:17,871 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-21 05:00:17,872 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-21 05:00:17,879 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:17" (1/1) ... [2022-07-21 05:00:17,880 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:17" (1/1) ... [2022-07-21 05:00:17,892 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:17" (1/1) ... [2022-07-21 05:00:17,898 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:17" (1/1) ... [2022-07-21 05:00:17,903 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:17" (1/1) ... [2022-07-21 05:00:17,918 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:17" (1/1) ... [2022-07-21 05:00:17,920 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:17" (1/1) ... [2022-07-21 05:00:17,922 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-21 05:00:17,925 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-21 05:00:17,926 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-21 05:00:17,926 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-21 05:00:17,927 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:17" (1/1) ... [2022-07-21 05:00:17,934 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-21 05:00:17,945 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 05:00:17,965 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-21 05:00:17,987 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-21 05:00:18,007 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-21 05:00:18,008 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-21 05:00:18,008 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-21 05:00:18,008 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-21 05:00:18,008 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-21 05:00:18,008 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-21 05:00:18,009 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-21 05:00:18,009 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-07-21 05:00:18,009 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-07-21 05:00:18,009 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-21 05:00:18,009 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-21 05:00:18,009 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-21 05:00:18,010 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-21 05:00:18,010 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-07-21 05:00:18,010 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-07-21 05:00:18,010 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-21 05:00:18,010 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-21 05:00:18,010 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-21 05:00:18,010 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-21 05:00:18,011 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-21 05:00:18,097 INFO L234 CfgBuilder]: Building ICFG [2022-07-21 05:00:18,099 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-21 05:00:18,421 INFO L275 CfgBuilder]: Performing block encoding [2022-07-21 05:00:18,432 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-21 05:00:18,432 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-21 05:00:18,434 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 05:00:18 BoogieIcfgContainer [2022-07-21 05:00:18,434 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-21 05:00:18,436 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-21 05:00:18,436 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-21 05:00:18,439 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-21 05:00:18,439 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.07 05:00:17" (1/3) ... [2022-07-21 05:00:18,440 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6b26cc77 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.07 05:00:18, skipping insertion in model container [2022-07-21 05:00:18,440 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:17" (2/3) ... [2022-07-21 05:00:18,440 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6b26cc77 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.07 05:00:18, skipping insertion in model container [2022-07-21 05:00:18,441 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 05:00:18" (3/3) ... [2022-07-21 05:00:18,442 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product40.cil.c [2022-07-21 05:00:18,455 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-21 05:00:18,456 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-21 05:00:18,513 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-21 05:00:18,519 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@1a29be5f, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@311eac8 [2022-07-21 05:00:18,519 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-21 05:00:18,527 INFO L276 IsEmpty]: Start isEmpty. Operand has 95 states, 71 states have (on average 1.380281690140845) internal successors, (98), 80 states have internal predecessors, (98), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2022-07-21 05:00:18,540 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-07-21 05:00:18,540 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:18,541 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:18,542 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:18,549 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:18,550 INFO L85 PathProgramCache]: Analyzing trace with hash -1035852950, now seen corresponding path program 1 times [2022-07-21 05:00:18,557 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:18,557 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [263572184] [2022-07-21 05:00:18,557 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:18,558 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:18,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:18,768 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-21 05:00:18,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:18,775 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:00:18,779 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:18,780 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [263572184] [2022-07-21 05:00:18,781 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [263572184] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:18,781 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:00:18,781 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-21 05:00:18,783 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1410986967] [2022-07-21 05:00:18,783 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:18,789 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-21 05:00:18,790 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:18,821 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-21 05:00:18,823 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-21 05:00:18,826 INFO L87 Difference]: Start difference. First operand has 95 states, 71 states have (on average 1.380281690140845) internal successors, (98), 80 states have internal predecessors, (98), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 05:00:18,880 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:18,881 INFO L93 Difference]: Finished difference Result 181 states and 246 transitions. [2022-07-21 05:00:18,882 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-21 05:00:18,883 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-07-21 05:00:18,884 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:18,893 INFO L225 Difference]: With dead ends: 181 [2022-07-21 05:00:18,893 INFO L226 Difference]: Without dead ends: 86 [2022-07-21 05:00:18,898 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-21 05:00:18,902 INFO L413 NwaCegarLoop]: 120 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 120 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:18,903 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 120 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 05:00:18,917 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 86 states. [2022-07-21 05:00:18,946 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 86 to 86. [2022-07-21 05:00:18,948 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 86 states, 64 states have (on average 1.3125) internal successors, (84), 72 states have internal predecessors, (84), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-07-21 05:00:18,955 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 111 transitions. [2022-07-21 05:00:18,957 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 111 transitions. Word has length 25 [2022-07-21 05:00:18,957 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:18,958 INFO L495 AbstractCegarLoop]: Abstraction has 86 states and 111 transitions. [2022-07-21 05:00:18,959 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 05:00:18,959 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 111 transitions. [2022-07-21 05:00:18,961 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-07-21 05:00:18,962 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:18,962 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:18,962 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-21 05:00:18,963 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:18,965 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:18,965 INFO L85 PathProgramCache]: Analyzing trace with hash 1707158464, now seen corresponding path program 1 times [2022-07-21 05:00:18,965 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:18,966 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1243969231] [2022-07-21 05:00:18,966 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:18,966 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:18,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:19,031 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-21 05:00:19,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:19,036 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:00:19,036 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:19,036 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1243969231] [2022-07-21 05:00:19,037 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1243969231] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:19,037 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:00:19,037 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-21 05:00:19,037 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2073140250] [2022-07-21 05:00:19,037 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:19,039 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-21 05:00:19,039 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:19,040 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-21 05:00:19,040 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-21 05:00:19,040 INFO L87 Difference]: Start difference. First operand 86 states and 111 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 05:00:19,064 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:19,067 INFO L93 Difference]: Finished difference Result 132 states and 170 transitions. [2022-07-21 05:00:19,070 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-21 05:00:19,070 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-07-21 05:00:19,070 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:19,072 INFO L225 Difference]: With dead ends: 132 [2022-07-21 05:00:19,073 INFO L226 Difference]: Without dead ends: 77 [2022-07-21 05:00:19,074 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-21 05:00:19,075 INFO L413 NwaCegarLoop]: 98 mSDtfsCounter, 17 mSDsluCounter, 76 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 174 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:19,076 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 174 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 05:00:19,077 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 77 states. [2022-07-21 05:00:19,083 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 77 to 77. [2022-07-21 05:00:19,083 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 77 states, 58 states have (on average 1.3275862068965518) internal successors, (77), 66 states have internal predecessors, (77), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-07-21 05:00:19,084 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 99 transitions. [2022-07-21 05:00:19,085 INFO L78 Accepts]: Start accepts. Automaton has 77 states and 99 transitions. Word has length 26 [2022-07-21 05:00:19,085 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:19,086 INFO L495 AbstractCegarLoop]: Abstraction has 77 states and 99 transitions. [2022-07-21 05:00:19,086 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 05:00:19,086 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 99 transitions. [2022-07-21 05:00:19,089 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-07-21 05:00:19,089 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:19,089 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:19,090 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-21 05:00:19,090 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:19,090 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:19,091 INFO L85 PathProgramCache]: Analyzing trace with hash -969347747, now seen corresponding path program 1 times [2022-07-21 05:00:19,091 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:19,091 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [718101544] [2022-07-21 05:00:19,091 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:19,091 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:19,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:19,215 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-21 05:00:19,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:19,222 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:00:19,223 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:19,224 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [718101544] [2022-07-21 05:00:19,225 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [718101544] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:19,225 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:00:19,225 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-21 05:00:19,225 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1141977039] [2022-07-21 05:00:19,225 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:19,226 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-21 05:00:19,226 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:19,227 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-21 05:00:19,227 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-21 05:00:19,227 INFO L87 Difference]: Start difference. First operand 77 states and 99 transitions. Second operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 05:00:19,259 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:19,264 INFO L93 Difference]: Finished difference Result 213 states and 280 transitions. [2022-07-21 05:00:19,265 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-21 05:00:19,265 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-07-21 05:00:19,265 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:19,268 INFO L225 Difference]: With dead ends: 213 [2022-07-21 05:00:19,268 INFO L226 Difference]: Without dead ends: 144 [2022-07-21 05:00:19,269 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-21 05:00:19,270 INFO L413 NwaCegarLoop]: 122 mSDtfsCounter, 91 mSDsluCounter, 86 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 91 SdHoareTripleChecker+Valid, 208 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:19,272 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [91 Valid, 208 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 05:00:19,273 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 144 states. [2022-07-21 05:00:19,289 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 144 to 141. [2022-07-21 05:00:19,290 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 141 states, 104 states have (on average 1.3557692307692308) internal successors, (141), 119 states have internal predecessors, (141), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) [2022-07-21 05:00:19,291 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 141 states to 141 states and 185 transitions. [2022-07-21 05:00:19,292 INFO L78 Accepts]: Start accepts. Automaton has 141 states and 185 transitions. Word has length 31 [2022-07-21 05:00:19,292 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:19,292 INFO L495 AbstractCegarLoop]: Abstraction has 141 states and 185 transitions. [2022-07-21 05:00:19,292 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 05:00:19,293 INFO L276 IsEmpty]: Start isEmpty. Operand 141 states and 185 transitions. [2022-07-21 05:00:19,294 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-07-21 05:00:19,294 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:19,294 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:19,295 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-21 05:00:19,295 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:19,295 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:19,296 INFO L85 PathProgramCache]: Analyzing trace with hash -595617824, now seen corresponding path program 1 times [2022-07-21 05:00:19,296 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:19,296 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [63008141] [2022-07-21 05:00:19,296 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:19,296 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:19,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:19,361 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-21 05:00:19,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:19,379 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:00:19,380 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:19,380 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [63008141] [2022-07-21 05:00:19,380 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [63008141] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:19,380 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:00:19,380 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-21 05:00:19,380 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1006322719] [2022-07-21 05:00:19,380 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:19,381 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-21 05:00:19,381 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:19,381 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-21 05:00:19,383 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-21 05:00:19,383 INFO L87 Difference]: Start difference. First operand 141 states and 185 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 05:00:19,549 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:19,549 INFO L93 Difference]: Finished difference Result 405 states and 540 transitions. [2022-07-21 05:00:19,550 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-21 05:00:19,551 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2022-07-21 05:00:19,551 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:19,559 INFO L225 Difference]: With dead ends: 405 [2022-07-21 05:00:19,560 INFO L226 Difference]: Without dead ends: 272 [2022-07-21 05:00:19,561 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-07-21 05:00:19,564 INFO L413 NwaCegarLoop]: 107 mSDtfsCounter, 67 mSDsluCounter, 376 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 483 SdHoareTripleChecker+Invalid, 52 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:19,565 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [70 Valid, 483 Invalid, 52 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-21 05:00:19,568 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 272 states. [2022-07-21 05:00:19,613 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 272 to 266. [2022-07-21 05:00:19,615 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 266 states, 193 states have (on average 1.3419689119170986) internal successors, (259), 222 states have internal predecessors, (259), 44 states have call successors, (44), 28 states have call predecessors, (44), 28 states have return successors, (46), 30 states have call predecessors, (46), 44 states have call successors, (46) [2022-07-21 05:00:19,618 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 266 states to 266 states and 349 transitions. [2022-07-21 05:00:19,618 INFO L78 Accepts]: Start accepts. Automaton has 266 states and 349 transitions. Word has length 34 [2022-07-21 05:00:19,619 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:19,619 INFO L495 AbstractCegarLoop]: Abstraction has 266 states and 349 transitions. [2022-07-21 05:00:19,619 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 05:00:19,619 INFO L276 IsEmpty]: Start isEmpty. Operand 266 states and 349 transitions. [2022-07-21 05:00:19,625 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-07-21 05:00:19,626 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:19,626 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:19,626 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-21 05:00:19,627 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:19,627 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:19,627 INFO L85 PathProgramCache]: Analyzing trace with hash -1037298340, now seen corresponding path program 1 times [2022-07-21 05:00:19,628 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:19,628 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [908267329] [2022-07-21 05:00:19,629 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:19,629 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:19,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:19,723 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-21 05:00:19,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:19,732 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-21 05:00:19,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:19,737 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:00:19,738 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:19,740 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [908267329] [2022-07-21 05:00:19,741 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [908267329] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:19,741 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:00:19,741 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-21 05:00:19,741 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1821103091] [2022-07-21 05:00:19,741 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:19,742 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-21 05:00:19,742 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:19,743 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-21 05:00:19,743 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-21 05:00:19,748 INFO L87 Difference]: Start difference. First operand 266 states and 349 transitions. Second operand has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-21 05:00:20,056 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:20,057 INFO L93 Difference]: Finished difference Result 698 states and 934 transitions. [2022-07-21 05:00:20,057 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-21 05:00:20,057 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 38 [2022-07-21 05:00:20,059 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:20,065 INFO L225 Difference]: With dead ends: 698 [2022-07-21 05:00:20,065 INFO L226 Difference]: Without dead ends: 440 [2022-07-21 05:00:20,067 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-07-21 05:00:20,076 INFO L413 NwaCegarLoop]: 93 mSDtfsCounter, 112 mSDsluCounter, 111 mSDsCounter, 0 mSdLazyCounter, 247 mSolverCounterSat, 39 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 118 SdHoareTripleChecker+Valid, 204 SdHoareTripleChecker+Invalid, 286 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Valid, 247 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:20,077 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [118 Valid, 204 Invalid, 286 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [39 Valid, 247 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-21 05:00:20,079 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 440 states. [2022-07-21 05:00:20,124 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 440 to 426. [2022-07-21 05:00:20,125 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 426 states, 313 states have (on average 1.293929712460064) internal successors, (405), 342 states have internal predecessors, (405), 60 states have call successors, (60), 52 states have call predecessors, (60), 52 states have return successors, (80), 54 states have call predecessors, (80), 60 states have call successors, (80) [2022-07-21 05:00:20,129 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 426 states to 426 states and 545 transitions. [2022-07-21 05:00:20,130 INFO L78 Accepts]: Start accepts. Automaton has 426 states and 545 transitions. Word has length 38 [2022-07-21 05:00:20,131 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:20,131 INFO L495 AbstractCegarLoop]: Abstraction has 426 states and 545 transitions. [2022-07-21 05:00:20,132 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-21 05:00:20,132 INFO L276 IsEmpty]: Start isEmpty. Operand 426 states and 545 transitions. [2022-07-21 05:00:20,134 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-07-21 05:00:20,134 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:20,134 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:20,135 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-21 05:00:20,135 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:20,135 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:20,135 INFO L85 PathProgramCache]: Analyzing trace with hash 1524944222, now seen corresponding path program 1 times [2022-07-21 05:00:20,136 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:20,136 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1297491827] [2022-07-21 05:00:20,136 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:20,136 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:20,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:20,194 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-21 05:00:20,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:20,201 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-21 05:00:20,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:20,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-07-21 05:00:20,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:20,249 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:00:20,249 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:20,249 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1297491827] [2022-07-21 05:00:20,249 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1297491827] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:20,249 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:00:20,249 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-21 05:00:20,250 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [391902207] [2022-07-21 05:00:20,250 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:20,250 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-21 05:00:20,250 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:20,251 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-21 05:00:20,251 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-21 05:00:20,252 INFO L87 Difference]: Start difference. First operand 426 states and 545 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-21 05:00:20,541 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:20,542 INFO L93 Difference]: Finished difference Result 952 states and 1233 transitions. [2022-07-21 05:00:20,542 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-21 05:00:20,542 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 49 [2022-07-21 05:00:20,543 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:20,546 INFO L225 Difference]: With dead ends: 952 [2022-07-21 05:00:20,546 INFO L226 Difference]: Without dead ends: 534 [2022-07-21 05:00:20,548 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-07-21 05:00:20,548 INFO L413 NwaCegarLoop]: 85 mSDtfsCounter, 119 mSDsluCounter, 138 mSDsCounter, 0 mSdLazyCounter, 292 mSolverCounterSat, 48 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 120 SdHoareTripleChecker+Valid, 223 SdHoareTripleChecker+Invalid, 340 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 292 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:20,549 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [120 Valid, 223 Invalid, 340 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 292 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-21 05:00:20,550 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 534 states. [2022-07-21 05:00:20,577 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 534 to 520. [2022-07-21 05:00:20,578 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 520 states, 387 states have (on average 1.2583979328165376) internal successors, (487), 416 states have internal predecessors, (487), 68 states have call successors, (68), 52 states have call predecessors, (68), 64 states have return successors, (100), 70 states have call predecessors, (100), 68 states have call successors, (100) [2022-07-21 05:00:20,581 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 520 states to 520 states and 655 transitions. [2022-07-21 05:00:20,582 INFO L78 Accepts]: Start accepts. Automaton has 520 states and 655 transitions. Word has length 49 [2022-07-21 05:00:20,582 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:20,582 INFO L495 AbstractCegarLoop]: Abstraction has 520 states and 655 transitions. [2022-07-21 05:00:20,582 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-21 05:00:20,583 INFO L276 IsEmpty]: Start isEmpty. Operand 520 states and 655 transitions. [2022-07-21 05:00:20,584 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-07-21 05:00:20,584 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:20,584 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:20,584 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-21 05:00:20,584 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:20,585 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:20,585 INFO L85 PathProgramCache]: Analyzing trace with hash -163999520, now seen corresponding path program 1 times [2022-07-21 05:00:20,585 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:20,585 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [675356180] [2022-07-21 05:00:20,586 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:20,586 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:20,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:20,618 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-21 05:00:20,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:20,625 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-21 05:00:20,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:20,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-07-21 05:00:20,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:20,651 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:00:20,652 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:20,652 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [675356180] [2022-07-21 05:00:20,652 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [675356180] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:20,652 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:00:20,652 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-21 05:00:20,652 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [483815909] [2022-07-21 05:00:20,653 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:20,653 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-21 05:00:20,653 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:20,654 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-21 05:00:20,654 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-21 05:00:20,654 INFO L87 Difference]: Start difference. First operand 520 states and 655 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-21 05:00:21,079 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:21,080 INFO L93 Difference]: Finished difference Result 1086 states and 1405 transitions. [2022-07-21 05:00:21,080 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-07-21 05:00:21,080 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 49 [2022-07-21 05:00:21,081 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:21,084 INFO L225 Difference]: With dead ends: 1086 [2022-07-21 05:00:21,084 INFO L226 Difference]: Without dead ends: 574 [2022-07-21 05:00:21,086 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 41 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=90, Invalid=182, Unknown=0, NotChecked=0, Total=272 [2022-07-21 05:00:21,087 INFO L413 NwaCegarLoop]: 113 mSDtfsCounter, 317 mSDsluCounter, 127 mSDsCounter, 0 mSdLazyCounter, 417 mSolverCounterSat, 123 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 322 SdHoareTripleChecker+Valid, 240 SdHoareTripleChecker+Invalid, 540 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 123 IncrementalHoareTripleChecker+Valid, 417 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:21,087 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [322 Valid, 240 Invalid, 540 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [123 Valid, 417 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-21 05:00:21,088 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 574 states. [2022-07-21 05:00:21,113 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 574 to 528. [2022-07-21 05:00:21,115 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 528 states, 395 states have (on average 1.2531645569620253) internal successors, (495), 424 states have internal predecessors, (495), 68 states have call successors, (68), 52 states have call predecessors, (68), 64 states have return successors, (100), 70 states have call predecessors, (100), 68 states have call successors, (100) [2022-07-21 05:00:21,117 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 528 states to 528 states and 663 transitions. [2022-07-21 05:00:21,118 INFO L78 Accepts]: Start accepts. Automaton has 528 states and 663 transitions. Word has length 49 [2022-07-21 05:00:21,118 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:21,118 INFO L495 AbstractCegarLoop]: Abstraction has 528 states and 663 transitions. [2022-07-21 05:00:21,119 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-21 05:00:21,119 INFO L276 IsEmpty]: Start isEmpty. Operand 528 states and 663 transitions. [2022-07-21 05:00:21,120 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-07-21 05:00:21,120 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:21,120 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:21,121 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-21 05:00:21,121 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:21,121 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:21,121 INFO L85 PathProgramCache]: Analyzing trace with hash 258702306, now seen corresponding path program 1 times [2022-07-21 05:00:21,122 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:21,122 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1791206869] [2022-07-21 05:00:21,122 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:21,122 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:21,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:21,162 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-21 05:00:21,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:21,169 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-21 05:00:21,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:21,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-07-21 05:00:21,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:21,185 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:00:21,185 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:21,185 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1791206869] [2022-07-21 05:00:21,185 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1791206869] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:21,185 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:00:21,186 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-21 05:00:21,186 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [57245555] [2022-07-21 05:00:21,186 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:21,186 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-21 05:00:21,186 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:21,187 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-21 05:00:21,187 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-21 05:00:21,187 INFO L87 Difference]: Start difference. First operand 528 states and 663 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-21 05:00:21,538 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:21,539 INFO L93 Difference]: Finished difference Result 1540 states and 2013 transitions. [2022-07-21 05:00:21,539 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-21 05:00:21,539 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 49 [2022-07-21 05:00:21,541 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:21,546 INFO L225 Difference]: With dead ends: 1540 [2022-07-21 05:00:21,547 INFO L226 Difference]: Without dead ends: 1020 [2022-07-21 05:00:21,549 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 10 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-07-21 05:00:21,550 INFO L413 NwaCegarLoop]: 135 mSDtfsCounter, 316 mSDsluCounter, 125 mSDsCounter, 0 mSdLazyCounter, 270 mSolverCounterSat, 125 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 319 SdHoareTripleChecker+Valid, 260 SdHoareTripleChecker+Invalid, 395 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 125 IncrementalHoareTripleChecker+Valid, 270 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:21,550 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [319 Valid, 260 Invalid, 395 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [125 Valid, 270 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-21 05:00:21,552 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1020 states. [2022-07-21 05:00:21,628 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1020 to 1008. [2022-07-21 05:00:21,631 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1008 states, 755 states have (on average 1.2225165562913907) internal successors, (923), 802 states have internal predecessors, (923), 130 states have call successors, (130), 118 states have call predecessors, (130), 122 states have return successors, (216), 128 states have call predecessors, (216), 130 states have call successors, (216) [2022-07-21 05:00:21,637 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1008 states to 1008 states and 1269 transitions. [2022-07-21 05:00:21,638 INFO L78 Accepts]: Start accepts. Automaton has 1008 states and 1269 transitions. Word has length 49 [2022-07-21 05:00:21,638 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:21,639 INFO L495 AbstractCegarLoop]: Abstraction has 1008 states and 1269 transitions. [2022-07-21 05:00:21,639 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-21 05:00:21,639 INFO L276 IsEmpty]: Start isEmpty. Operand 1008 states and 1269 transitions. [2022-07-21 05:00:21,642 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-07-21 05:00:21,642 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:21,642 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:21,642 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-21 05:00:21,643 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:21,643 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:21,643 INFO L85 PathProgramCache]: Analyzing trace with hash 525985416, now seen corresponding path program 1 times [2022-07-21 05:00:21,643 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:21,644 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [50309151] [2022-07-21 05:00:21,644 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:21,644 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:21,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:21,695 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-21 05:00:21,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:21,705 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-21 05:00:21,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:21,713 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-07-21 05:00:21,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:21,719 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-07-21 05:00:21,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:21,724 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:00:21,725 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:21,725 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [50309151] [2022-07-21 05:00:21,725 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [50309151] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:21,725 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:00:21,725 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-21 05:00:21,726 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1302535962] [2022-07-21 05:00:21,726 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:21,726 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-21 05:00:21,727 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:21,727 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-21 05:00:21,727 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-21 05:00:21,728 INFO L87 Difference]: Start difference. First operand 1008 states and 1269 transitions. Second operand has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 3 states have internal predecessors, (44), 1 states have call successors, (5), 5 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-21 05:00:22,188 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:22,188 INFO L93 Difference]: Finished difference Result 1986 states and 2649 transitions. [2022-07-21 05:00:22,189 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-07-21 05:00:22,189 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 3 states have internal predecessors, (44), 1 states have call successors, (5), 5 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 53 [2022-07-21 05:00:22,190 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:22,203 INFO L225 Difference]: With dead ends: 1986 [2022-07-21 05:00:22,203 INFO L226 Difference]: Without dead ends: 1984 [2022-07-21 05:00:22,207 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2022-07-21 05:00:22,209 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 427 mSDsluCounter, 95 mSDsCounter, 0 mSdLazyCounter, 259 mSolverCounterSat, 230 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 429 SdHoareTripleChecker+Valid, 190 SdHoareTripleChecker+Invalid, 489 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 230 IncrementalHoareTripleChecker+Valid, 259 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:22,210 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [429 Valid, 190 Invalid, 489 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [230 Valid, 259 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-21 05:00:22,212 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1984 states. [2022-07-21 05:00:22,304 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1984 to 1545. [2022-07-21 05:00:22,307 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1545 states, 1150 states have (on average 1.2269565217391305) internal successors, (1411), 1240 states have internal predecessors, (1411), 211 states have call successors, (211), 151 states have call predecessors, (211), 183 states have return successors, (428), 204 states have call predecessors, (428), 211 states have call successors, (428) [2022-07-21 05:00:22,317 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1545 states to 1545 states and 2050 transitions. [2022-07-21 05:00:22,317 INFO L78 Accepts]: Start accepts. Automaton has 1545 states and 2050 transitions. Word has length 53 [2022-07-21 05:00:22,318 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:22,318 INFO L495 AbstractCegarLoop]: Abstraction has 1545 states and 2050 transitions. [2022-07-21 05:00:22,318 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 3 states have internal predecessors, (44), 1 states have call successors, (5), 5 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-21 05:00:22,318 INFO L276 IsEmpty]: Start isEmpty. Operand 1545 states and 2050 transitions. [2022-07-21 05:00:22,322 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2022-07-21 05:00:22,322 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:22,323 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:22,323 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-21 05:00:22,323 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:22,324 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:22,324 INFO L85 PathProgramCache]: Analyzing trace with hash -1653016264, now seen corresponding path program 1 times [2022-07-21 05:00:22,324 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:22,324 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1788385028] [2022-07-21 05:00:22,324 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:22,324 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:22,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:22,357 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-21 05:00:22,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:22,363 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-21 05:00:22,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:22,372 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-21 05:00:22,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:22,393 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-21 05:00:22,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:22,397 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-21 05:00:22,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:22,400 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-07-21 05:00:22,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:22,402 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-21 05:00:22,402 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:22,402 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1788385028] [2022-07-21 05:00:22,402 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1788385028] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:22,402 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:00:22,402 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-21 05:00:22,402 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1112412248] [2022-07-21 05:00:22,403 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:22,403 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-21 05:00:22,403 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:22,403 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-21 05:00:22,404 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-07-21 05:00:22,404 INFO L87 Difference]: Start difference. First operand 1545 states and 2050 transitions. Second operand has 8 states, 8 states have (on average 8.5) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2022-07-21 05:00:22,804 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:22,804 INFO L93 Difference]: Finished difference Result 2565 states and 3385 transitions. [2022-07-21 05:00:22,804 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-07-21 05:00:22,804 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) Word has length 83 [2022-07-21 05:00:22,805 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:22,810 INFO L225 Difference]: With dead ends: 2565 [2022-07-21 05:00:22,810 INFO L226 Difference]: Without dead ends: 1028 [2022-07-21 05:00:22,816 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 49 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=86, Invalid=220, Unknown=0, NotChecked=0, Total=306 [2022-07-21 05:00:22,817 INFO L413 NwaCegarLoop]: 124 mSDtfsCounter, 331 mSDsluCounter, 153 mSDsCounter, 0 mSdLazyCounter, 315 mSolverCounterSat, 138 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 340 SdHoareTripleChecker+Valid, 277 SdHoareTripleChecker+Invalid, 453 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 138 IncrementalHoareTripleChecker+Valid, 315 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:22,817 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [340 Valid, 277 Invalid, 453 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [138 Valid, 315 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-21 05:00:22,819 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1028 states. [2022-07-21 05:00:22,861 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1028 to 970. [2022-07-21 05:00:22,863 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 970 states, 728 states have (on average 1.2129120879120878) internal successors, (883), 783 states have internal predecessors, (883), 126 states have call successors, (126), 98 states have call predecessors, (126), 115 states have return successors, (237), 125 states have call predecessors, (237), 126 states have call successors, (237) [2022-07-21 05:00:22,867 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 970 states to 970 states and 1246 transitions. [2022-07-21 05:00:22,868 INFO L78 Accepts]: Start accepts. Automaton has 970 states and 1246 transitions. Word has length 83 [2022-07-21 05:00:22,868 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:22,868 INFO L495 AbstractCegarLoop]: Abstraction has 970 states and 1246 transitions. [2022-07-21 05:00:22,869 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2022-07-21 05:00:22,869 INFO L276 IsEmpty]: Start isEmpty. Operand 970 states and 1246 transitions. [2022-07-21 05:00:22,871 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 93 [2022-07-21 05:00:22,871 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:22,872 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:22,872 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-07-21 05:00:22,872 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:22,872 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:22,872 INFO L85 PathProgramCache]: Analyzing trace with hash -365592096, now seen corresponding path program 1 times [2022-07-21 05:00:22,873 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:22,873 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [766831497] [2022-07-21 05:00:22,873 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:22,873 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:22,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:22,914 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-21 05:00:22,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:22,926 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-21 05:00:22,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:22,939 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-21 05:00:22,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:22,959 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-21 05:00:22,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:22,966 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-21 05:00:22,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:22,968 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-07-21 05:00:22,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:22,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2022-07-21 05:00:22,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:22,974 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 19 proven. 6 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-07-21 05:00:22,974 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:22,974 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [766831497] [2022-07-21 05:00:22,974 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [766831497] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-21 05:00:22,974 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [445037151] [2022-07-21 05:00:22,975 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:22,975 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 05:00:22,975 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 05:00:22,979 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-21 05:00:23,004 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-21 05:00:23,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:23,089 INFO L263 TraceCheckSpWp]: Trace formula consists of 472 conjuncts, 4 conjunts are in the unsatisfiable core [2022-07-21 05:00:23,095 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 05:00:23,200 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 36 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:00:23,200 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 05:00:23,200 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [445037151] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:23,201 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-21 05:00:23,201 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [9] total 9 [2022-07-21 05:00:23,201 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1531800557] [2022-07-21 05:00:23,201 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:23,201 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-21 05:00:23,201 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:23,202 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-21 05:00:23,202 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-07-21 05:00:23,202 INFO L87 Difference]: Start difference. First operand 970 states and 1246 transitions. Second operand has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-07-21 05:00:23,291 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:23,291 INFO L93 Difference]: Finished difference Result 1668 states and 2181 transitions. [2022-07-21 05:00:23,292 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-21 05:00:23,292 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 92 [2022-07-21 05:00:23,292 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:23,297 INFO L225 Difference]: With dead ends: 1668 [2022-07-21 05:00:23,297 INFO L226 Difference]: Without dead ends: 870 [2022-07-21 05:00:23,301 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 112 GetRequests, 105 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-07-21 05:00:23,301 INFO L413 NwaCegarLoop]: 140 mSDtfsCounter, 41 mSDsluCounter, 68 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 41 SdHoareTripleChecker+Valid, 208 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:23,302 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [41 Valid, 208 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 05:00:23,303 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 870 states. [2022-07-21 05:00:23,362 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 870 to 870. [2022-07-21 05:00:23,364 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 870 states, 652 states have (on average 1.1901840490797546) internal successors, (776), 702 states have internal predecessors, (776), 113 states have call successors, (113), 93 states have call predecessors, (113), 104 states have return successors, (162), 111 states have call predecessors, (162), 113 states have call successors, (162) [2022-07-21 05:00:23,369 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 870 states to 870 states and 1051 transitions. [2022-07-21 05:00:23,370 INFO L78 Accepts]: Start accepts. Automaton has 870 states and 1051 transitions. Word has length 92 [2022-07-21 05:00:23,370 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:23,371 INFO L495 AbstractCegarLoop]: Abstraction has 870 states and 1051 transitions. [2022-07-21 05:00:23,371 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-07-21 05:00:23,371 INFO L276 IsEmpty]: Start isEmpty. Operand 870 states and 1051 transitions. [2022-07-21 05:00:23,373 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 98 [2022-07-21 05:00:23,373 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:23,374 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:23,403 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-21 05:00:23,587 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-07-21 05:00:23,588 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:23,588 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:23,588 INFO L85 PathProgramCache]: Analyzing trace with hash -1099123803, now seen corresponding path program 1 times [2022-07-21 05:00:23,588 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:23,588 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1726591412] [2022-07-21 05:00:23,589 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:23,589 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:23,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:23,650 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-21 05:00:23,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:23,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-21 05:00:23,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:23,674 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-21 05:00:23,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:23,689 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-21 05:00:23,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:23,695 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-21 05:00:23,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:23,697 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-07-21 05:00:23,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:23,711 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2022-07-21 05:00:23,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:23,716 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:00:23,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:23,719 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 87 [2022-07-21 05:00:23,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:23,721 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-07-21 05:00:23,721 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:23,721 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1726591412] [2022-07-21 05:00:23,721 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1726591412] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-21 05:00:23,721 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [625448150] [2022-07-21 05:00:23,722 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:23,722 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 05:00:23,722 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 05:00:23,723 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-21 05:00:23,732 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-21 05:00:23,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:23,821 INFO L263 TraceCheckSpWp]: Trace formula consists of 475 conjuncts, 8 conjunts are in the unsatisfiable core [2022-07-21 05:00:23,825 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 05:00:23,958 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-07-21 05:00:23,959 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 05:00:23,959 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [625448150] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:23,959 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-21 05:00:23,959 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [11] total 16 [2022-07-21 05:00:23,959 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [788195481] [2022-07-21 05:00:23,960 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:23,960 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-21 05:00:23,960 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:23,961 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-21 05:00:23,961 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=204, Unknown=0, NotChecked=0, Total=240 [2022-07-21 05:00:23,961 INFO L87 Difference]: Start difference. First operand 870 states and 1051 transitions. Second operand has 7 states, 7 states have (on average 10.571428571428571) internal successors, (74), 6 states have internal predecessors, (74), 3 states have call successors, (9), 3 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2022-07-21 05:00:24,110 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:24,111 INFO L93 Difference]: Finished difference Result 1622 states and 1952 transitions. [2022-07-21 05:00:24,111 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-21 05:00:24,111 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 10.571428571428571) internal successors, (74), 6 states have internal predecessors, (74), 3 states have call successors, (9), 3 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) Word has length 97 [2022-07-21 05:00:24,112 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:24,112 INFO L225 Difference]: With dead ends: 1622 [2022-07-21 05:00:24,112 INFO L226 Difference]: Without dead ends: 0 [2022-07-21 05:00:24,116 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 123 GetRequests, 105 SyntacticMatches, 1 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=50, Invalid=292, Unknown=0, NotChecked=0, Total=342 [2022-07-21 05:00:24,117 INFO L413 NwaCegarLoop]: 177 mSDtfsCounter, 53 mSDsluCounter, 655 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 832 SdHoareTripleChecker+Invalid, 66 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:24,117 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [54 Valid, 832 Invalid, 66 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 05:00:24,117 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-21 05:00:24,118 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-21 05:00:24,118 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-21 05:00:24,118 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-21 05:00:24,118 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 97 [2022-07-21 05:00:24,118 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:24,118 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-21 05:00:24,119 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 10.571428571428571) internal successors, (74), 6 states have internal predecessors, (74), 3 states have call successors, (9), 3 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2022-07-21 05:00:24,119 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-21 05:00:24,119 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-21 05:00:24,121 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-21 05:00:24,151 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-07-21 05:00:24,339 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-07-21 05:00:24,341 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-21 05:00:29,604 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 362 369) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= 2 ~waterLevel~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse6 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse2 .cse5 .cse4 .cse6) (or .cse0 .cse2 .cse5 .cse3 .cse6))) [2022-07-21 05:00:29,605 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 362 369) no Hoare annotation was computed. [2022-07-21 05:00:29,605 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 362 369) no Hoare annotation was computed. [2022-07-21 05:00:29,605 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 295 301) no Hoare annotation was computed. [2022-07-21 05:00:29,605 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 295 301) the Hoare annotation is: true [2022-07-21 05:00:29,605 INFO L899 garLoopResultBuilder]: For program point L128-1(lines 124 135) no Hoare annotation was computed. [2022-07-21 05:00:29,605 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 124 135) the Hoare annotation is: (let ((.cse7 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse4 (not (= ~methAndRunningLastTime~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse3 (not (<= 1 ~pumpRunning~0))) (.cse6 (not (<= 1 |old(~methaneLevelCritical~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse2 .cse6 .cse4) (or .cse5 .cse2 .cse6 .cse4 .cse7) (or .cse0 .cse5 .cse2 .cse4 .cse7) (or .cse0 .cse5 .cse1 .cse2 .cse4) (or .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3 .cse6))) [2022-07-21 05:00:29,606 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 124 135) no Hoare annotation was computed. [2022-07-21 05:00:29,606 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 845 874) no Hoare annotation was computed. [2022-07-21 05:00:29,606 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 845 874) the Hoare annotation is: true [2022-07-21 05:00:29,606 INFO L899 garLoopResultBuilder]: For program point L859(lines 859 863) no Hoare annotation was computed. [2022-07-21 05:00:29,606 INFO L902 garLoopResultBuilder]: At program point L859-1(lines 859 863) the Hoare annotation is: true [2022-07-21 05:00:29,606 INFO L899 garLoopResultBuilder]: For program point L856(line 856) no Hoare annotation was computed. [2022-07-21 05:00:29,606 INFO L902 garLoopResultBuilder]: At program point L855-2(lines 855 869) the Hoare annotation is: true [2022-07-21 05:00:29,606 INFO L902 garLoopResultBuilder]: At program point L851(line 851) the Hoare annotation is: true [2022-07-21 05:00:29,607 INFO L899 garLoopResultBuilder]: For program point L851-1(line 851) no Hoare annotation was computed. [2022-07-21 05:00:29,607 INFO L902 garLoopResultBuilder]: At program point L870(lines 845 874) the Hoare annotation is: true [2022-07-21 05:00:29,607 INFO L899 garLoopResultBuilder]: For program point L866(line 866) no Hoare annotation was computed. [2022-07-21 05:00:29,607 INFO L899 garLoopResultBuilder]: For program point L275-1(lines 274 293) no Hoare annotation was computed. [2022-07-21 05:00:29,607 INFO L899 garLoopResultBuilder]: For program point L337(lines 337 345) no Hoare annotation was computed. [2022-07-21 05:00:29,607 INFO L899 garLoopResultBuilder]: For program point L333(lines 333 350) no Hoare annotation was computed. [2022-07-21 05:00:29,608 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 271 294) no Hoare annotation was computed. [2022-07-21 05:00:29,608 INFO L895 garLoopResultBuilder]: At program point L375(line 375) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= 0 ~systemActive~0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse6 .cse7) (or .cse0 .cse1 .cse2 .cse6) (or .cse0 .cse3 .cse7) (or .cse1 .cse2 .cse5 (and .cse4 (= ~methAndRunningLastTime~0 0)) .cse3))) [2022-07-21 05:00:29,608 INFO L899 garLoopResultBuilder]: For program point L375-1(line 375) no Hoare annotation was computed. [2022-07-21 05:00:29,608 INFO L899 garLoopResultBuilder]: For program point L74(lines 74 84) no Hoare annotation was computed. [2022-07-21 05:00:29,608 INFO L899 garLoopResultBuilder]: For program point L70(lines 70 87) no Hoare annotation was computed. [2022-07-21 05:00:29,608 INFO L895 garLoopResultBuilder]: At program point L70-1(lines 62 90) the Hoare annotation is: (let ((.cse15 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~0#1| 0)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse10 (= ~pumpRunning~0 0)) (.cse11 (= ~methAndRunningLastTime~0 0)) (.cse12 (= 1 ~systemActive~0))) (let ((.cse13 (and .cse10 .cse11 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~3#1|) .cse12)) (.cse14 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not .cse12)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (and .cse10 .cse11 .cse15 .cse8)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse7 (<= 2 ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5 (and .cse6 .cse7 .cse8) .cse9 (and .cse10 .cse11 .cse12 .cse8)) (or .cse13 .cse5 .cse14 .cse9 (not (<= 2 |old(~waterLevel~0)|))) (or .cse13 .cse4 .cse5 .cse14 .cse9) (or .cse5 .cse14 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse11 .cse15) (and .cse10 .cse11 .cse15)) (or .cse0 (and .cse10 .cse11 .cse8) .cse9 .cse3) (or .cse0 .cse4 .cse5 .cse1 .cse2 (and .cse6 .cse11 .cse7 .cse15 .cse8))))) [2022-07-21 05:00:29,609 INFO L895 garLoopResultBuilder]: At program point L343(line 343) the Hoare annotation is: (let ((.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse3) (or .cse2 .cse4 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse4 .cse5) (or .cse0 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse5) (or .cse0 .cse3 .cse6))) [2022-07-21 05:00:29,609 INFO L895 garLoopResultBuilder]: At program point L339(line 339) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (<= 1 ~methaneLevelCritical~0)) (.cse10 (= 1 ~systemActive~0))) (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= 0 ~systemActive~0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not .cse10)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not .cse9)) (.cse8 (and (<= 1 ~pumpRunning~0) .cse4 .cse9 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~3#1|) .cse10))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse6 .cse7) (or .cse0 .cse1 .cse2 .cse6) (or .cse0 .cse3 .cse7) (or .cse1 .cse2 .cse5 .cse3 .cse8) (or .cse2 .cse5 .cse3 .cse8 (not (<= 2 |old(~waterLevel~0)|)))))) [2022-07-21 05:00:29,609 INFO L899 garLoopResultBuilder]: For program point L75(lines 75 81) no Hoare annotation was computed. [2022-07-21 05:00:29,609 INFO L899 garLoopResultBuilder]: For program point L104(lines 104 108) no Hoare annotation was computed. [2022-07-21 05:00:29,609 INFO L899 garLoopResultBuilder]: For program point L839(line 839) no Hoare annotation was computed. [2022-07-21 05:00:29,610 INFO L895 garLoopResultBuilder]: At program point L104-2(lines 100 111) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= 0 ~systemActive~0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse6 .cse7) (or .cse0 .cse1 .cse2 .cse6) (or .cse0 .cse3 .cse7) (or .cse1 .cse2 .cse5 (and .cse4 (= ~methAndRunningLastTime~0 0)) .cse3))) [2022-07-21 05:00:29,610 INFO L895 garLoopResultBuilder]: At program point L348(line 348) the Hoare annotation is: (let ((.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (= 0 ~systemActive~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse6 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4) (or .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse0 .cse1 .cse3 .cse6) (or .cse5 .cse4 .cse7) (or .cse5 .cse3 .cse7) (or .cse5 .cse0 .cse1 .cse4 .cse6))) [2022-07-21 05:00:29,610 INFO L895 garLoopResultBuilder]: At program point L348-1(lines 329 353) the Hoare annotation is: (let ((.cse13 (= 1 ~systemActive~0)) (.cse14 (<= 1 ~methaneLevelCritical~0)) (.cse12 (= ~pumpRunning~0 0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (<= 2 ~waterLevel~0)) (.cse7 (and .cse12 .cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (not (= 0 ~systemActive~0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse9 (not .cse14)) (.cse10 (and .cse12 .cse14 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~3#1|) .cse13)) (.cse2 (not .cse13)) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5) .cse6 .cse7) (or .cse2 .cse8 .cse9 .cse10 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 (and .cse3 (= ~methAndRunningLastTime~0 0) .cse4 .cse5) .cse9 .cse7) (or .cse0 .cse6 .cse11) (or .cse0 .cse9 .cse11) (or .cse1 .cse2 .cse8 .cse9 .cse10) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse12 .cse2 .cse8 .cse6)))) [2022-07-21 05:00:29,610 INFO L895 garLoopResultBuilder]: At program point L377(lines 370 380) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= 0 ~systemActive~0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (<= 1 |timeShift_isMethaneAlarm_#res#1|))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse6 .cse7) (or .cse0 .cse1 .cse2 .cse6) (or .cse0 .cse3 .cse7) (or .cse1 .cse2 .cse5 .cse3 (and .cse4 (= ~methAndRunningLastTime~0 0) .cse8)) (or .cse2 .cse5 .cse3 (and .cse4 .cse8) (not (<= 2 |old(~waterLevel~0)|))))) [2022-07-21 05:00:29,610 INFO L899 garLoopResultBuilder]: For program point L282-1(lines 282 288) no Hoare annotation was computed. [2022-07-21 05:00:29,611 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 271 294) the Hoare annotation is: (let ((.cse9 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse10 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (let ((.cse3 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (and (= ~pumpRunning~0 0) .cse9 .cse10)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse9 .cse10))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse0 .cse4 .cse5 .cse7 .cse2) (or .cse0 .cse7 .cse2 .cse3) (or .cse0 .cse4 .cse5 .cse1 .cse2) (or .cse5 .cse6 .cse8 .cse1) (or .cse5 .cse6 .cse7 .cse8 (not (<= 2 |old(~waterLevel~0)|)))))) [2022-07-21 05:00:29,611 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 271 294) no Hoare annotation was computed. [2022-07-21 05:00:29,611 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 839) no Hoare annotation was computed. [2022-07-21 05:00:29,611 INFO L895 garLoopResultBuilder]: At program point L840(lines 835 842) the Hoare annotation is: (let ((.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse3) (or .cse2 .cse4 .cse5) (or .cse2 .cse4 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse5) (or .cse0 .cse3 .cse6))) [2022-07-21 05:00:29,612 INFO L895 garLoopResultBuilder]: At program point L68(line 68) the Hoare annotation is: (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse12 (= ~pumpRunning~0 0)) (.cse13 (<= 1 ~methaneLevelCritical~0)) (.cse14 (= 1 ~systemActive~0))) (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (<= 2 ~waterLevel~0)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse11 (and .cse12 .cse13 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~3#1|) .cse14)) (.cse2 (not .cse14)) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (not .cse13)) (.cse7 (and .cse12 .cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (.cse8 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5) .cse6 .cse7) (or .cse0 .cse6 .cse7 .cse8) (or .cse2 .cse9 .cse10 .cse11 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 (and .cse3 (= ~methAndRunningLastTime~0 0) .cse4 .cse5) .cse10 .cse7) (or .cse1 .cse2 .cse9 .cse10 .cse11) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse12 .cse2 .cse9 .cse6) (or .cse0 .cse10 .cse7 .cse8)))) [2022-07-21 05:00:29,612 INFO L899 garLoopResultBuilder]: For program point L68-1(line 68) no Hoare annotation was computed. [2022-07-21 05:00:29,612 INFO L895 garLoopResultBuilder]: At program point L386(lines 381 389) the Hoare annotation is: (let ((.cse10 (= ~pumpRunning~0 0)) (.cse11 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse7 (and .cse10 .cse11 .cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (.cse9 (not (= 0 ~systemActive~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse8 (and .cse10 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse11 (<= 1 |timeShift_processEnvironment_~tmp~3#1|))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse0 (and (<= 1 ~pumpRunning~0) (= ~methAndRunningLastTime~0 0) (<= 2 ~waterLevel~0) .cse5) .cse6 .cse7) (or .cse4 .cse0 .cse8 .cse1 .cse6) (or .cse3 .cse6 .cse7 .cse9) (or .cse3 .cse2 .cse9) (or .cse3 .cse4 .cse0 .cse2) (or .cse0 .cse8 .cse1 .cse6 (not (<= 2 |old(~waterLevel~0)|)))))) [2022-07-21 05:00:29,612 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 136 144) the Hoare annotation is: true [2022-07-21 05:00:29,612 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 136 144) no Hoare annotation was computed. [2022-07-21 05:00:29,612 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 136 144) no Hoare annotation was computed. [2022-07-21 05:00:29,613 INFO L895 garLoopResultBuilder]: At program point L465(lines 460 467) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse1 .cse2 .cse3) (and .cse5 .cse4 .cse1 .cse2 .cse3) (and .cse5 .cse4 .cse6 .cse2 .cse3) (and .cse0 .cse6 .cse2 .cse3))) [2022-07-21 05:00:29,613 INFO L895 garLoopResultBuilder]: At program point L457(lines 445 459) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= 0 ~systemActive~0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2) (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2))) [2022-07-21 05:00:29,613 INFO L895 garLoopResultBuilder]: At program point L903(lines 899 905) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-21 05:00:29,613 INFO L902 garLoopResultBuilder]: At program point L259(lines 196 263) the Hoare annotation is: true [2022-07-21 05:00:29,613 INFO L899 garLoopResultBuilder]: For program point L226(lines 226 232) no Hoare annotation was computed. [2022-07-21 05:00:29,613 INFO L899 garLoopResultBuilder]: For program point L226-1(lines 226 232) no Hoare annotation was computed. [2022-07-21 05:00:29,613 INFO L899 garLoopResultBuilder]: For program point L449(lines 449 455) no Hoare annotation was computed. [2022-07-21 05:00:29,614 INFO L899 garLoopResultBuilder]: For program point L449-1(lines 449 455) no Hoare annotation was computed. [2022-07-21 05:00:29,614 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-21 05:00:29,614 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-21 05:00:29,614 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-21 05:00:29,614 INFO L895 garLoopResultBuilder]: At program point L218(line 218) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= 1 ~systemActive~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse7 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse3 .cse7) (and .cse6 .cse4 .cse1 .cse3 .cse7))) [2022-07-21 05:00:29,614 INFO L895 garLoopResultBuilder]: At program point L974(lines 969 977) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-21 05:00:29,615 INFO L895 garLoopResultBuilder]: At program point L966(lines 962 968) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-21 05:00:29,615 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-21 05:00:29,615 INFO L895 garLoopResultBuilder]: At program point L256(lines 205 257) the Hoare annotation is: false [2022-07-21 05:00:29,615 INFO L899 garLoopResultBuilder]: For program point L244(lines 244 250) no Hoare annotation was computed. [2022-07-21 05:00:29,615 INFO L895 garLoopResultBuilder]: At program point L244-2(lines 236 251) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (= 0 ~systemActive~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse1 .cse2 .cse3) (and .cse5 .cse1 .cse3 .cse6) (and .cse5 .cse4 .cse1 .cse2 .cse3) (and .cse5 .cse4 .cse7 .cse2 .cse3) (and .cse5 .cse7 .cse3 .cse6) (and .cse0 .cse7 .cse2 .cse3))) [2022-07-21 05:00:29,615 INFO L899 garLoopResultBuilder]: For program point L207(lines 206 255) no Hoare annotation was computed. [2022-07-21 05:00:29,615 INFO L899 garLoopResultBuilder]: For program point L236(lines 236 251) no Hoare annotation was computed. [2022-07-21 05:00:29,616 INFO L895 garLoopResultBuilder]: At program point L228(line 228) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= 1 ~systemActive~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse7 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse3 .cse7) (and .cse6 .cse4 .cse1 .cse3 .cse7))) [2022-07-21 05:00:29,616 INFO L895 garLoopResultBuilder]: At program point L451(line 451) the Hoare annotation is: (let ((.cse2 (<= 2 ~waterLevel~0)) (.cse4 (not (= 0 ~systemActive~0))) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (<= 1 ~methaneLevelCritical~0)) (.cse6 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse6 .cse3) (and .cse0 .cse5 .cse6 .cse3))) [2022-07-21 05:00:29,616 INFO L899 garLoopResultBuilder]: For program point L930(lines 930 937) no Hoare annotation was computed. [2022-07-21 05:00:29,616 INFO L899 garLoopResultBuilder]: For program point L930-2(lines 930 937) no Hoare annotation was computed. [2022-07-21 05:00:29,616 INFO L895 garLoopResultBuilder]: At program point L959(lines 955 961) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-21 05:00:29,616 INFO L895 garLoopResultBuilder]: At program point L253(lines 206 255) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= 1 ~systemActive~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse7 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse3 .cse7) (and .cse6 .cse4 .cse1 .cse3 .cse7))) [2022-07-21 05:00:29,617 INFO L895 garLoopResultBuilder]: At program point L59(lines 54 61) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-21 05:00:29,617 INFO L899 garLoopResultBuilder]: For program point L216(lines 216 222) no Hoare annotation was computed. [2022-07-21 05:00:29,617 INFO L899 garLoopResultBuilder]: For program point L216-1(lines 216 222) no Hoare annotation was computed. [2022-07-21 05:00:29,617 INFO L902 garLoopResultBuilder]: At program point L914(lines 906 916) the Hoare annotation is: true [2022-07-21 05:00:29,617 INFO L899 garLoopResultBuilder]: For program point L208(lines 208 212) no Hoare annotation was computed. [2022-07-21 05:00:29,617 INFO L902 garLoopResultBuilder]: At program point L939(lines 920 942) the Hoare annotation is: true [2022-07-21 05:00:29,618 INFO L899 garLoopResultBuilder]: For program point L322-1(lines 303 327) no Hoare annotation was computed. [2022-07-21 05:00:29,618 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 303 327) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))))) [2022-07-21 05:00:29,618 INFO L895 garLoopResultBuilder]: At program point L186(lines 177 190) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (and .cse5 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (and .cse5 (<= 2 ~waterLevel~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 .cse3 (not (<= 1 ~methaneLevelCritical~0)) .cse4 (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse3 .cse1 .cse4)))) [2022-07-21 05:00:29,618 INFO L895 garLoopResultBuilder]: At program point L317(line 317) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse2 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0)))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0)) .cse2) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse3) (or .cse0 .cse1 .cse3 .cse2))) [2022-07-21 05:00:29,618 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 303 327) no Hoare annotation was computed. [2022-07-21 05:00:29,618 INFO L895 garLoopResultBuilder]: At program point L441(lines 426 444) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse2 (and .cse5 (<= 2 ~waterLevel~0))) (.cse3 (and .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0)) .cse3) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse4) (or .cse0 .cse1 .cse4 .cse2 .cse3)))) [2022-07-21 05:00:29,619 INFO L899 garLoopResultBuilder]: For program point L311(lines 311 319) no Hoare annotation was computed. [2022-07-21 05:00:29,619 INFO L899 garLoopResultBuilder]: For program point L181(lines 181 187) no Hoare annotation was computed. [2022-07-21 05:00:29,619 INFO L899 garLoopResultBuilder]: For program point L307(lines 307 324) no Hoare annotation was computed. [2022-07-21 05:00:29,619 INFO L899 garLoopResultBuilder]: For program point L435(lines 435 439) no Hoare annotation was computed. [2022-07-21 05:00:29,619 INFO L899 garLoopResultBuilder]: For program point L435-2(lines 435 439) no Hoare annotation was computed. [2022-07-21 05:00:29,619 INFO L895 garLoopResultBuilder]: At program point L359(lines 354 361) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse3 .cse0 .cse1))) [2022-07-21 05:00:29,620 INFO L895 garLoopResultBuilder]: At program point L322(line 322) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse1))) [2022-07-21 05:00:29,620 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 112 123) no Hoare annotation was computed. [2022-07-21 05:00:29,620 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 112 123) the Hoare annotation is: (let ((.cse7 (not (<= 1 ~pumpRunning~0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse4 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse5 .cse6 .cse2 .cse3) (or .cse5 .cse1 .cse7 .cse2 .cse3) (or .cse0 .cse5 .cse1 .cse2 .cse3) (or .cse0 .cse6 .cse2 .cse3 .cse4))) [2022-07-21 05:00:29,620 INFO L899 garLoopResultBuilder]: For program point L116-1(lines 112 123) no Hoare annotation was computed. [2022-07-21 05:00:29,623 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:29,625 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-21 05:00:29,660 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.07 05:00:29 BoogieIcfgContainer [2022-07-21 05:00:29,660 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-21 05:00:29,661 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-21 05:00:29,661 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-21 05:00:29,661 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-21 05:00:29,661 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 05:00:18" (3/4) ... [2022-07-21 05:00:29,664 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-21 05:00:29,669 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-07-21 05:00:29,670 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-21 05:00:29,670 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-21 05:00:29,670 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-21 05:00:29,670 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-21 05:00:29,670 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-07-21 05:00:29,671 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-21 05:00:29,671 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-21 05:00:29,688 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 50 nodes and edges [2022-07-21 05:00:29,689 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-21 05:00:29,689 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-21 05:00:29,690 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-21 05:00:29,690 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-21 05:00:29,691 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-21 05:00:29,691 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-21 05:00:29,713 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical)) [2022-07-21 05:00:29,714 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && 1 == systemActive))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) [2022-07-21 05:00:29,715 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && ((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp) && 1 == systemActive) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp) && 1 == systemActive) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0) && \old(waterLevel) == waterLevel)) || ((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && tmp == 0) && \old(waterLevel) == waterLevel)) [2022-07-21 05:00:29,715 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || !(2 <= \old(waterLevel))) [2022-07-21 05:00:29,715 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && 1 <= \result) && \result == 0) && 1 <= tmp)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(1 == systemActive) || (((pumpRunning == 0 && 1 <= \result) && \result == 0) && 1 <= tmp)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) [2022-07-21 05:00:29,716 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) [2022-07-21 05:00:29,716 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) [2022-07-21 05:00:29,716 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) || (((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || (((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) [2022-07-21 05:00:29,717 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2022-07-21 05:00:29,761 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-21 05:00:29,762 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-21 05:00:29,762 INFO L158 Benchmark]: Toolchain (without parser) took 12432.18ms. Allocated memory was 62.9MB in the beginning and 163.6MB in the end (delta: 100.7MB). Free memory was 41.9MB in the beginning and 139.2MB in the end (delta: -97.4MB). Peak memory consumption was 94.9MB. Max. memory is 16.1GB. [2022-07-21 05:00:29,763 INFO L158 Benchmark]: CDTParser took 0.25ms. Allocated memory is still 62.9MB. Free memory was 45.1MB in the beginning and 45.0MB in the end (delta: 50.1kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-21 05:00:29,763 INFO L158 Benchmark]: CACSL2BoogieTranslator took 470.59ms. Allocated memory is still 62.9MB. Free memory was 41.6MB in the beginning and 37.9MB in the end (delta: 3.7MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2022-07-21 05:00:29,763 INFO L158 Benchmark]: Boogie Procedure Inliner took 67.54ms. Allocated memory is still 62.9MB. Free memory was 37.9MB in the beginning and 35.4MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-21 05:00:29,764 INFO L158 Benchmark]: Boogie Preprocessor took 53.34ms. Allocated memory is still 62.9MB. Free memory was 35.4MB in the beginning and 33.9MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-21 05:00:29,764 INFO L158 Benchmark]: RCFGBuilder took 508.81ms. Allocated memory was 62.9MB in the beginning and 77.6MB in the end (delta: 14.7MB). Free memory was 33.7MB in the beginning and 48.9MB in the end (delta: -15.2MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-07-21 05:00:29,765 INFO L158 Benchmark]: TraceAbstraction took 11224.00ms. Allocated memory was 77.6MB in the beginning and 163.6MB in the end (delta: 86.0MB). Free memory was 48.2MB in the beginning and 53.2MB in the end (delta: -5.0MB). Peak memory consumption was 85.6MB. Max. memory is 16.1GB. [2022-07-21 05:00:29,765 INFO L158 Benchmark]: Witness Printer took 101.36ms. Allocated memory is still 163.6MB. Free memory was 52.2MB in the beginning and 139.2MB in the end (delta: -87.1MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-21 05:00:29,767 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.25ms. Allocated memory is still 62.9MB. Free memory was 45.1MB in the beginning and 45.0MB in the end (delta: 50.1kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 470.59ms. Allocated memory is still 62.9MB. Free memory was 41.6MB in the beginning and 37.9MB in the end (delta: 3.7MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 67.54ms. Allocated memory is still 62.9MB. Free memory was 37.9MB in the beginning and 35.4MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 53.34ms. Allocated memory is still 62.9MB. Free memory was 35.4MB in the beginning and 33.9MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 508.81ms. Allocated memory was 62.9MB in the beginning and 77.6MB in the end (delta: 14.7MB). Free memory was 33.7MB in the beginning and 48.9MB in the end (delta: -15.2MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * TraceAbstraction took 11224.00ms. Allocated memory was 77.6MB in the beginning and 163.6MB in the end (delta: 86.0MB). Free memory was 48.2MB in the beginning and 53.2MB in the end (delta: -5.0MB). Peak memory consumption was 85.6MB. Max. memory is 16.1GB. * Witness Printer took 101.36ms. Allocated memory is still 163.6MB. Free memory was 52.2MB in the beginning and 139.2MB in the end (delta: -87.1MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 839]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 95 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 11.1s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 3.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.3s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1925 SdHoareTripleChecker+Valid, 1.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1891 mSDsluCounter, 3419 SdHoareTripleChecker+Invalid, 1.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2010 mSDsCounter, 718 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1924 IncrementalHoareTripleChecker+Invalid, 2642 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 718 mSolverCounterUnsat, 1409 mSDtfsCounter, 1924 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 398 GetRequests, 291 SyntacticMatches, 2 SemanticMatches, 105 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 180 ImplicationChecksByTransitivity, 0.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1545occurred in iteration=9, InterpolantAutomatonStates: 97, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 12 MinimizatonAttempts, 592 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 44 LocationsWithAnnotation, 2624 PreInvPairs, 2872 NumberOfFragments, 3191 HoareAnnotationTreeSize, 2624 FomulaSimplifications, 1004 FormulaSimplificationTreeSizeReduction, 0.5s HoareSimplificationTime, 44 FomulaSimplificationsInter, 17657 FormulaSimplificationTreeSizeReductionInter, 4.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 1.1s InterpolantComputationTime, 815 NumberOfCodeBlocks, 815 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 801 ConstructedInterpolants, 0 QuantifiedInterpolants, 1468 SizeOfPredicates, 5 NumberOfNonLiveVariables, 947 ConjunctsInSsa, 12 ConjunctsInUnsatCore, 14 InterpolantComputations, 12 PerfectInterpolantSequences, 153/162 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 899]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 206]: Loop Invariant Derived loop invariant: ((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) || ((((1 <= pumpRunning && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && splverifierCounter == 0) && 0 == systemActive)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 205]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 196]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 962]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 381]: Loop Invariant Derived loop invariant: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && 1 <= \result) && \result == 0) && 1 <= tmp)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(1 == systemActive) || (((pumpRunning == 0 && 1 <= \result) && \result == 0) && 1 <= tmp)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 845]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 177]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) - InvariantResult [Line: 329]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && 1 == systemActive))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 969]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 370]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 906]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 100]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical)) - InvariantResult [Line: 426]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) || (((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || (((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) - InvariantResult [Line: 835]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) - InvariantResult [Line: 460]: Loop Invariant Derived loop invariant: (((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) || ((((1 <= pumpRunning && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0)) || (((1 <= pumpRunning && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 855]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && ((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp) && 1 == systemActive) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp) && 1 == systemActive) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0))) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0) && \old(waterLevel) == waterLevel)) || ((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && tmp == 0) && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 354]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 955]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 920]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 445]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 <= methaneLevelCritical) && splverifierCounter == 0) && 0 == systemActive) || (((pumpRunning == 0 && methaneLevelCritical == 0) && splverifierCounter == 0) && 0 == systemActive) RESULT: Ultimate proved your program to be correct! [2022-07-21 05:00:29,840 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE