./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product64.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 35987657 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product64.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 59d05b45c2855b02eb92cf6428285b3e4820a09d46d6a6d0a0748347de3adbb6 --- Real Ultimate output --- This is Ultimate 0.2.2-?-3598765 [2022-07-21 05:00:36,816 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-21 05:00:36,818 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-21 05:00:36,862 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-21 05:00:36,863 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-21 05:00:36,866 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-21 05:00:36,871 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-21 05:00:36,874 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-21 05:00:36,876 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-21 05:00:36,878 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-21 05:00:36,879 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-21 05:00:36,880 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-21 05:00:36,880 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-21 05:00:36,881 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-21 05:00:36,883 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-21 05:00:36,884 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-21 05:00:36,886 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-21 05:00:36,888 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-21 05:00:36,890 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-21 05:00:36,894 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-21 05:00:36,898 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-21 05:00:36,899 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-21 05:00:36,901 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-21 05:00:36,901 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-21 05:00:36,903 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-21 05:00:36,905 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-21 05:00:36,911 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-21 05:00:36,911 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-21 05:00:36,912 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-21 05:00:36,912 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-21 05:00:36,913 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-21 05:00:36,914 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-21 05:00:36,915 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-21 05:00:36,916 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-21 05:00:36,917 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-21 05:00:36,919 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-21 05:00:36,919 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-21 05:00:36,919 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-21 05:00:36,920 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-21 05:00:36,920 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-21 05:00:36,920 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-21 05:00:36,921 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-21 05:00:36,924 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-21 05:00:36,956 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-21 05:00:36,957 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-21 05:00:36,957 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-21 05:00:36,957 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-21 05:00:36,958 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-21 05:00:36,958 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-21 05:00:36,959 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-21 05:00:36,959 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-21 05:00:36,959 INFO L138 SettingsManager]: * Use SBE=true [2022-07-21 05:00:36,960 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-21 05:00:36,961 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-21 05:00:36,961 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-21 05:00:36,961 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-21 05:00:36,961 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-21 05:00:36,961 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-21 05:00:36,961 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-21 05:00:36,962 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-21 05:00:36,962 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-21 05:00:36,962 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-21 05:00:36,962 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-21 05:00:36,963 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-21 05:00:36,963 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-21 05:00:36,963 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-21 05:00:36,963 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-21 05:00:36,963 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-21 05:00:36,964 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-21 05:00:36,964 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-21 05:00:36,964 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-21 05:00:36,964 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-21 05:00:36,964 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-21 05:00:36,965 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-21 05:00:36,965 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-21 05:00:36,965 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-21 05:00:36,965 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 59d05b45c2855b02eb92cf6428285b3e4820a09d46d6a6d0a0748347de3adbb6 [2022-07-21 05:00:37,294 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-21 05:00:37,313 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-21 05:00:37,315 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-21 05:00:37,316 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-21 05:00:37,317 INFO L275 PluginConnector]: CDTParser initialized [2022-07-21 05:00:37,318 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product64.cil.c [2022-07-21 05:00:37,378 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/262907dc5/04579f597c3c4d3cafc77a6952c67ff4/FLAGa6178bfad [2022-07-21 05:00:37,889 INFO L306 CDTParser]: Found 1 translation units. [2022-07-21 05:00:37,890 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product64.cil.c [2022-07-21 05:00:37,899 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/262907dc5/04579f597c3c4d3cafc77a6952c67ff4/FLAGa6178bfad [2022-07-21 05:00:38,378 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/262907dc5/04579f597c3c4d3cafc77a6952c67ff4 [2022-07-21 05:00:38,380 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-21 05:00:38,381 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-21 05:00:38,382 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-21 05:00:38,382 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-21 05:00:38,385 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-21 05:00:38,385 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.07 05:00:38" (1/1) ... [2022-07-21 05:00:38,386 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7ef52ae0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:38, skipping insertion in model container [2022-07-21 05:00:38,386 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.07 05:00:38" (1/1) ... [2022-07-21 05:00:38,395 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-21 05:00:38,432 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-21 05:00:38,649 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product64.cil.c[6823,6836] [2022-07-21 05:00:38,751 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-21 05:00:38,759 INFO L203 MainTranslator]: Completed pre-run [2022-07-21 05:00:38,782 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product64.cil.c[6823,6836] [2022-07-21 05:00:38,812 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-21 05:00:38,831 INFO L208 MainTranslator]: Completed translation [2022-07-21 05:00:38,832 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:38 WrapperNode [2022-07-21 05:00:38,833 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-21 05:00:38,834 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-21 05:00:38,835 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-21 05:00:38,835 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-21 05:00:38,841 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:38" (1/1) ... [2022-07-21 05:00:38,855 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:38" (1/1) ... [2022-07-21 05:00:38,882 INFO L137 Inliner]: procedures = 60, calls = 164, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 284 [2022-07-21 05:00:38,890 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-21 05:00:38,892 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-21 05:00:38,892 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-21 05:00:38,892 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-21 05:00:38,899 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:38" (1/1) ... [2022-07-21 05:00:38,899 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:38" (1/1) ... [2022-07-21 05:00:38,901 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:38" (1/1) ... [2022-07-21 05:00:38,902 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:38" (1/1) ... [2022-07-21 05:00:38,906 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:38" (1/1) ... [2022-07-21 05:00:38,910 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:38" (1/1) ... [2022-07-21 05:00:38,912 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:38" (1/1) ... [2022-07-21 05:00:38,933 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-21 05:00:38,934 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-21 05:00:38,935 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-21 05:00:38,939 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-21 05:00:38,940 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:38" (1/1) ... [2022-07-21 05:00:38,945 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-21 05:00:38,957 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 05:00:38,973 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-21 05:00:38,976 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-21 05:00:39,012 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-21 05:00:39,012 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-21 05:00:39,012 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-21 05:00:39,013 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-21 05:00:39,013 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-21 05:00:39,013 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-07-21 05:00:39,013 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-07-21 05:00:39,013 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-21 05:00:39,014 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-21 05:00:39,014 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-21 05:00:39,014 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-21 05:00:39,014 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-21 05:00:39,015 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-21 05:00:39,015 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-07-21 05:00:39,015 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-07-21 05:00:39,015 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-07-21 05:00:39,015 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-07-21 05:00:39,015 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-07-21 05:00:39,015 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-07-21 05:00:39,016 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-21 05:00:39,016 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-21 05:00:39,016 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-21 05:00:39,016 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-21 05:00:39,016 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-21 05:00:39,093 INFO L234 CfgBuilder]: Building ICFG [2022-07-21 05:00:39,097 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-21 05:00:39,396 INFO L275 CfgBuilder]: Performing block encoding [2022-07-21 05:00:39,404 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-21 05:00:39,406 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-21 05:00:39,408 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 05:00:39 BoogieIcfgContainer [2022-07-21 05:00:39,408 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-21 05:00:39,410 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-21 05:00:39,410 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-21 05:00:39,412 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-21 05:00:39,412 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.07 05:00:38" (1/3) ... [2022-07-21 05:00:39,413 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6595c904 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.07 05:00:39, skipping insertion in model container [2022-07-21 05:00:39,413 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 05:00:38" (2/3) ... [2022-07-21 05:00:39,413 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6595c904 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.07 05:00:39, skipping insertion in model container [2022-07-21 05:00:39,414 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 05:00:39" (3/3) ... [2022-07-21 05:00:39,415 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product64.cil.c [2022-07-21 05:00:39,427 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-21 05:00:39,428 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-21 05:00:39,480 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-21 05:00:39,485 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@1c3c5d6f, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@1a781a40 [2022-07-21 05:00:39,485 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-21 05:00:39,489 INFO L276 IsEmpty]: Start isEmpty. Operand has 115 states, 84 states have (on average 1.369047619047619) internal successors, (115), 95 states have internal predecessors, (115), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2022-07-21 05:00:39,497 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-07-21 05:00:39,497 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:39,498 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:39,498 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:39,502 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:39,503 INFO L85 PathProgramCache]: Analyzing trace with hash 2099245654, now seen corresponding path program 1 times [2022-07-21 05:00:39,510 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:39,510 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [866111497] [2022-07-21 05:00:39,510 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:39,511 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:39,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:39,731 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-21 05:00:39,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:39,738 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:00:39,738 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:39,738 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [866111497] [2022-07-21 05:00:39,739 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [866111497] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:39,739 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:00:39,739 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-21 05:00:39,741 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1293156613] [2022-07-21 05:00:39,741 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:39,744 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-21 05:00:39,745 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:39,766 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-21 05:00:39,768 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-21 05:00:39,771 INFO L87 Difference]: Start difference. First operand has 115 states, 84 states have (on average 1.369047619047619) internal successors, (115), 95 states have internal predecessors, (115), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 05:00:39,823 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:39,824 INFO L93 Difference]: Finished difference Result 221 states and 300 transitions. [2022-07-21 05:00:39,825 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-21 05:00:39,826 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-07-21 05:00:39,826 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:39,836 INFO L225 Difference]: With dead ends: 221 [2022-07-21 05:00:39,836 INFO L226 Difference]: Without dead ends: 106 [2022-07-21 05:00:39,841 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-21 05:00:39,845 INFO L413 NwaCegarLoop]: 147 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 147 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:39,846 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 147 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 05:00:39,860 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 106 states. [2022-07-21 05:00:39,891 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 106 to 106. [2022-07-21 05:00:39,892 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 106 states, 77 states have (on average 1.3116883116883118) internal successors, (101), 87 states have internal predecessors, (101), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2022-07-21 05:00:39,898 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 106 states to 106 states and 138 transitions. [2022-07-21 05:00:39,899 INFO L78 Accepts]: Start accepts. Automaton has 106 states and 138 transitions. Word has length 25 [2022-07-21 05:00:39,900 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:39,900 INFO L495 AbstractCegarLoop]: Abstraction has 106 states and 138 transitions. [2022-07-21 05:00:39,901 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 05:00:39,901 INFO L276 IsEmpty]: Start isEmpty. Operand 106 states and 138 transitions. [2022-07-21 05:00:39,905 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-07-21 05:00:39,906 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:39,907 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:39,907 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-21 05:00:39,908 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:39,909 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:39,909 INFO L85 PathProgramCache]: Analyzing trace with hash -298822754, now seen corresponding path program 1 times [2022-07-21 05:00:39,909 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:39,910 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1898309080] [2022-07-21 05:00:39,910 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:39,910 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:39,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:40,015 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-21 05:00:40,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:40,024 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:00:40,026 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:40,027 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1898309080] [2022-07-21 05:00:40,027 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1898309080] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:40,027 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:00:40,028 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-21 05:00:40,028 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1211368424] [2022-07-21 05:00:40,028 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:40,029 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-21 05:00:40,030 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:40,030 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-21 05:00:40,031 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-21 05:00:40,032 INFO L87 Difference]: Start difference. First operand 106 states and 138 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 05:00:40,049 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:40,050 INFO L93 Difference]: Finished difference Result 172 states and 224 transitions. [2022-07-21 05:00:40,051 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-21 05:00:40,053 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-07-21 05:00:40,053 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:40,056 INFO L225 Difference]: With dead ends: 172 [2022-07-21 05:00:40,056 INFO L226 Difference]: Without dead ends: 97 [2022-07-21 05:00:40,065 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-21 05:00:40,067 INFO L413 NwaCegarLoop]: 125 mSDtfsCounter, 17 mSDsluCounter, 103 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 228 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:40,068 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 228 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 05:00:40,069 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2022-07-21 05:00:40,083 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 97. [2022-07-21 05:00:40,085 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 97 states, 71 states have (on average 1.323943661971831) internal successors, (94), 81 states have internal predecessors, (94), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-07-21 05:00:40,086 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97 states to 97 states and 126 transitions. [2022-07-21 05:00:40,086 INFO L78 Accepts]: Start accepts. Automaton has 97 states and 126 transitions. Word has length 26 [2022-07-21 05:00:40,086 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:40,087 INFO L495 AbstractCegarLoop]: Abstraction has 97 states and 126 transitions. [2022-07-21 05:00:40,087 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 05:00:40,087 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 126 transitions. [2022-07-21 05:00:40,091 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-07-21 05:00:40,092 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:40,092 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:40,092 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-21 05:00:40,092 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:40,093 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:40,093 INFO L85 PathProgramCache]: Analyzing trace with hash -1504880537, now seen corresponding path program 1 times [2022-07-21 05:00:40,093 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:40,093 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1368817078] [2022-07-21 05:00:40,094 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:40,094 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:40,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:40,197 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-21 05:00:40,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:40,200 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:00:40,200 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:40,201 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1368817078] [2022-07-21 05:00:40,201 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1368817078] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:40,201 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:00:40,201 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-21 05:00:40,201 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1221261282] [2022-07-21 05:00:40,202 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:40,202 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-21 05:00:40,202 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:40,203 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-21 05:00:40,203 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-21 05:00:40,203 INFO L87 Difference]: Start difference. First operand 97 states and 126 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 05:00:40,279 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:40,284 INFO L93 Difference]: Finished difference Result 229 states and 301 transitions. [2022-07-21 05:00:40,284 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-21 05:00:40,284 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-07-21 05:00:40,285 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:40,286 INFO L225 Difference]: With dead ends: 229 [2022-07-21 05:00:40,288 INFO L226 Difference]: Without dead ends: 140 [2022-07-21 05:00:40,289 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-07-21 05:00:40,290 INFO L413 NwaCegarLoop]: 138 mSDtfsCounter, 191 mSDsluCounter, 276 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 191 SdHoareTripleChecker+Valid, 414 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:40,291 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [191 Valid, 414 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 05:00:40,292 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 140 states. [2022-07-21 05:00:40,308 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 140 to 137. [2022-07-21 05:00:40,312 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 137 states, 101 states have (on average 1.3465346534653466) internal successors, (136), 114 states have internal predecessors, (136), 21 states have call successors, (21), 14 states have call predecessors, (21), 14 states have return successors, (22), 15 states have call predecessors, (22), 21 states have call successors, (22) [2022-07-21 05:00:40,314 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 137 states to 137 states and 179 transitions. [2022-07-21 05:00:40,314 INFO L78 Accepts]: Start accepts. Automaton has 137 states and 179 transitions. Word has length 31 [2022-07-21 05:00:40,314 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:40,314 INFO L495 AbstractCegarLoop]: Abstraction has 137 states and 179 transitions. [2022-07-21 05:00:40,315 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 05:00:40,315 INFO L276 IsEmpty]: Start isEmpty. Operand 137 states and 179 transitions. [2022-07-21 05:00:40,316 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-07-21 05:00:40,317 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:40,317 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:40,317 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-21 05:00:40,317 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:40,318 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:40,318 INFO L85 PathProgramCache]: Analyzing trace with hash -1902279984, now seen corresponding path program 1 times [2022-07-21 05:00:40,318 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:40,318 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [463368694] [2022-07-21 05:00:40,319 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:40,319 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:40,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:40,382 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-21 05:00:40,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:40,387 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-21 05:00:40,388 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:40,388 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [463368694] [2022-07-21 05:00:40,388 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [463368694] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:40,388 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:00:40,388 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-21 05:00:40,389 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1872502105] [2022-07-21 05:00:40,389 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:40,389 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-21 05:00:40,390 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:40,390 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-21 05:00:40,390 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-21 05:00:40,391 INFO L87 Difference]: Start difference. First operand 137 states and 179 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 05:00:40,497 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:40,497 INFO L93 Difference]: Finished difference Result 320 states and 430 transitions. [2022-07-21 05:00:40,497 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-21 05:00:40,497 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2022-07-21 05:00:40,498 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:40,499 INFO L225 Difference]: With dead ends: 320 [2022-07-21 05:00:40,499 INFO L226 Difference]: Without dead ends: 191 [2022-07-21 05:00:40,500 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-21 05:00:40,501 INFO L413 NwaCegarLoop]: 131 mSDtfsCounter, 76 mSDsluCounter, 345 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 476 SdHoareTripleChecker+Invalid, 43 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:40,501 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [76 Valid, 476 Invalid, 43 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-21 05:00:40,502 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 191 states. [2022-07-21 05:00:40,533 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 191 to 181. [2022-07-21 05:00:40,534 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 181 states, 134 states have (on average 1.2761194029850746) internal successors, (171), 146 states have internal predecessors, (171), 25 states have call successors, (25), 21 states have call predecessors, (25), 21 states have return successors, (33), 23 states have call predecessors, (33), 25 states have call successors, (33) [2022-07-21 05:00:40,535 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 181 states to 181 states and 229 transitions. [2022-07-21 05:00:40,535 INFO L78 Accepts]: Start accepts. Automaton has 181 states and 229 transitions. Word has length 34 [2022-07-21 05:00:40,551 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:40,551 INFO L495 AbstractCegarLoop]: Abstraction has 181 states and 229 transitions. [2022-07-21 05:00:40,552 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-21 05:00:40,552 INFO L276 IsEmpty]: Start isEmpty. Operand 181 states and 229 transitions. [2022-07-21 05:00:40,553 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-07-21 05:00:40,553 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:40,554 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:40,554 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-21 05:00:40,554 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:40,555 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:40,555 INFO L85 PathProgramCache]: Analyzing trace with hash -469168825, now seen corresponding path program 1 times [2022-07-21 05:00:40,555 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:40,555 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [639240175] [2022-07-21 05:00:40,555 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:40,556 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:40,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:40,603 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-21 05:00:40,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:40,620 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:00:40,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:40,651 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 05:00:40,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:40,655 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 05:00:40,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:40,656 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-07-21 05:00:40,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:40,659 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-21 05:00:40,659 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:40,659 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [639240175] [2022-07-21 05:00:40,659 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [639240175] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:40,659 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:00:40,660 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-21 05:00:40,660 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [117094983] [2022-07-21 05:00:40,660 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:40,660 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-21 05:00:40,660 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:40,661 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-21 05:00:40,661 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-21 05:00:40,661 INFO L87 Difference]: Start difference. First operand 181 states and 229 transitions. Second operand has 7 states, 7 states have (on average 7.428571428571429) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-21 05:00:40,913 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:40,913 INFO L93 Difference]: Finished difference Result 393 states and 510 transitions. [2022-07-21 05:00:40,914 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-21 05:00:40,914 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.428571428571429) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 65 [2022-07-21 05:00:40,914 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:40,916 INFO L225 Difference]: With dead ends: 393 [2022-07-21 05:00:40,916 INFO L226 Difference]: Without dead ends: 220 [2022-07-21 05:00:40,917 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=38, Invalid=94, Unknown=0, NotChecked=0, Total=132 [2022-07-21 05:00:40,918 INFO L413 NwaCegarLoop]: 136 mSDtfsCounter, 121 mSDsluCounter, 486 mSDsCounter, 0 mSdLazyCounter, 239 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 129 SdHoareTripleChecker+Valid, 622 SdHoareTripleChecker+Invalid, 273 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 239 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:40,918 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [129 Valid, 622 Invalid, 273 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 239 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-21 05:00:40,919 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 220 states. [2022-07-21 05:00:40,934 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 220 to 211. [2022-07-21 05:00:40,935 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 211 states, 157 states have (on average 1.2547770700636942) internal successors, (197), 169 states have internal predecessors, (197), 27 states have call successors, (27), 21 states have call predecessors, (27), 26 states have return successors, (38), 29 states have call predecessors, (38), 27 states have call successors, (38) [2022-07-21 05:00:40,936 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 211 states to 211 states and 262 transitions. [2022-07-21 05:00:40,936 INFO L78 Accepts]: Start accepts. Automaton has 211 states and 262 transitions. Word has length 65 [2022-07-21 05:00:40,936 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:40,937 INFO L495 AbstractCegarLoop]: Abstraction has 211 states and 262 transitions. [2022-07-21 05:00:40,937 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.428571428571429) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-21 05:00:40,937 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 262 transitions. [2022-07-21 05:00:40,938 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-07-21 05:00:40,938 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:40,938 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:40,939 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-21 05:00:40,939 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:40,939 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:40,939 INFO L85 PathProgramCache]: Analyzing trace with hash 197377234, now seen corresponding path program 1 times [2022-07-21 05:00:40,940 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:40,940 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1710739719] [2022-07-21 05:00:40,940 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:40,940 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:40,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:40,981 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-21 05:00:40,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:40,994 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:00:40,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:41,014 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 05:00:41,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:41,017 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 05:00:41,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:41,019 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-07-21 05:00:41,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:41,021 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-21 05:00:41,021 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:41,021 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1710739719] [2022-07-21 05:00:41,021 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1710739719] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:41,022 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:00:41,022 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-21 05:00:41,022 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [928012425] [2022-07-21 05:00:41,022 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:41,023 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-21 05:00:41,023 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:41,023 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-21 05:00:41,023 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-21 05:00:41,024 INFO L87 Difference]: Start difference. First operand 211 states and 262 transitions. Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-21 05:00:41,210 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:41,211 INFO L93 Difference]: Finished difference Result 424 states and 540 transitions. [2022-07-21 05:00:41,211 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-21 05:00:41,211 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 62 [2022-07-21 05:00:41,212 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:41,213 INFO L225 Difference]: With dead ends: 424 [2022-07-21 05:00:41,213 INFO L226 Difference]: Without dead ends: 221 [2022-07-21 05:00:41,214 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2022-07-21 05:00:41,215 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 124 mSDsluCounter, 359 mSDsCounter, 0 mSdLazyCounter, 199 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 130 SdHoareTripleChecker+Valid, 467 SdHoareTripleChecker+Invalid, 233 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 199 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:41,216 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [130 Valid, 467 Invalid, 233 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 199 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-21 05:00:41,216 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 221 states. [2022-07-21 05:00:41,230 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 221 to 213. [2022-07-21 05:00:41,231 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 213 states, 159 states have (on average 1.251572327044025) internal successors, (199), 171 states have internal predecessors, (199), 27 states have call successors, (27), 21 states have call predecessors, (27), 26 states have return successors, (38), 29 states have call predecessors, (38), 27 states have call successors, (38) [2022-07-21 05:00:41,232 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 213 states to 213 states and 264 transitions. [2022-07-21 05:00:41,232 INFO L78 Accepts]: Start accepts. Automaton has 213 states and 264 transitions. Word has length 62 [2022-07-21 05:00:41,232 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:41,233 INFO L495 AbstractCegarLoop]: Abstraction has 213 states and 264 transitions. [2022-07-21 05:00:41,233 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-21 05:00:41,233 INFO L276 IsEmpty]: Start isEmpty. Operand 213 states and 264 transitions. [2022-07-21 05:00:41,234 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-07-21 05:00:41,234 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:41,235 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:41,235 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-21 05:00:41,235 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:41,236 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:41,236 INFO L85 PathProgramCache]: Analyzing trace with hash -646628268, now seen corresponding path program 1 times [2022-07-21 05:00:41,236 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:41,236 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1746419177] [2022-07-21 05:00:41,236 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:41,237 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:41,250 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:41,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-21 05:00:41,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:41,306 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:00:41,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:41,320 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 05:00:41,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:41,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 05:00:41,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:41,326 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-07-21 05:00:41,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:41,329 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-21 05:00:41,329 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:41,329 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1746419177] [2022-07-21 05:00:41,329 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1746419177] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:41,329 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:00:41,329 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-21 05:00:41,330 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2047676177] [2022-07-21 05:00:41,330 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:41,330 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-21 05:00:41,331 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:41,331 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-21 05:00:41,331 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-21 05:00:41,331 INFO L87 Difference]: Start difference. First operand 213 states and 264 transitions. Second operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-07-21 05:00:41,587 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:41,587 INFO L93 Difference]: Finished difference Result 621 states and 797 transitions. [2022-07-21 05:00:41,587 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-21 05:00:41,588 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 62 [2022-07-21 05:00:41,588 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:41,591 INFO L225 Difference]: With dead ends: 621 [2022-07-21 05:00:41,591 INFO L226 Difference]: Without dead ends: 416 [2022-07-21 05:00:41,592 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 12 SyntacticMatches, 2 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-07-21 05:00:41,593 INFO L413 NwaCegarLoop]: 166 mSDtfsCounter, 247 mSDsluCounter, 207 mSDsCounter, 0 mSdLazyCounter, 186 mSolverCounterSat, 79 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 255 SdHoareTripleChecker+Valid, 373 SdHoareTripleChecker+Invalid, 265 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 79 IncrementalHoareTripleChecker+Valid, 186 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:41,593 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [255 Valid, 373 Invalid, 265 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [79 Valid, 186 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-21 05:00:41,594 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 416 states. [2022-07-21 05:00:41,624 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 416 to 414. [2022-07-21 05:00:41,625 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 414 states, 310 states have (on average 1.229032258064516) internal successors, (381), 330 states have internal predecessors, (381), 53 states have call successors, (53), 48 states have call predecessors, (53), 50 states have return successors, (80), 53 states have call predecessors, (80), 53 states have call successors, (80) [2022-07-21 05:00:41,627 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 414 states to 414 states and 514 transitions. [2022-07-21 05:00:41,627 INFO L78 Accepts]: Start accepts. Automaton has 414 states and 514 transitions. Word has length 62 [2022-07-21 05:00:41,628 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:41,628 INFO L495 AbstractCegarLoop]: Abstraction has 414 states and 514 transitions. [2022-07-21 05:00:41,628 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-07-21 05:00:41,628 INFO L276 IsEmpty]: Start isEmpty. Operand 414 states and 514 transitions. [2022-07-21 05:00:41,629 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2022-07-21 05:00:41,629 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:41,629 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:41,630 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-21 05:00:41,630 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:41,630 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:41,630 INFO L85 PathProgramCache]: Analyzing trace with hash -938683346, now seen corresponding path program 1 times [2022-07-21 05:00:41,630 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:41,630 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1470924369] [2022-07-21 05:00:41,631 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:41,631 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:41,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:41,672 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-21 05:00:41,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:41,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-21 05:00:41,682 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:41,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:00:41,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:41,728 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 05:00:41,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:41,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 05:00:41,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:41,758 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-07-21 05:00:41,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:41,762 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-21 05:00:41,762 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:41,762 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1470924369] [2022-07-21 05:00:41,762 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1470924369] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:41,762 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 05:00:41,762 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-07-21 05:00:41,762 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2066709814] [2022-07-21 05:00:41,763 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:41,763 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-07-21 05:00:41,763 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:41,763 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-07-21 05:00:41,763 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2022-07-21 05:00:41,764 INFO L87 Difference]: Start difference. First operand 414 states and 514 transitions. Second operand has 12 states, 12 states have (on average 4.25) internal successors, (51), 7 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-21 05:00:42,624 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:42,624 INFO L93 Difference]: Finished difference Result 1325 states and 1713 transitions. [2022-07-21 05:00:42,625 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-07-21 05:00:42,625 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 4.25) internal successors, (51), 7 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) Word has length 66 [2022-07-21 05:00:42,625 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:42,630 INFO L225 Difference]: With dead ends: 1325 [2022-07-21 05:00:42,630 INFO L226 Difference]: Without dead ends: 919 [2022-07-21 05:00:42,632 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 257 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=229, Invalid=961, Unknown=0, NotChecked=0, Total=1190 [2022-07-21 05:00:42,633 INFO L413 NwaCegarLoop]: 119 mSDtfsCounter, 399 mSDsluCounter, 528 mSDsCounter, 0 mSdLazyCounter, 1005 mSolverCounterSat, 213 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 408 SdHoareTripleChecker+Valid, 647 SdHoareTripleChecker+Invalid, 1218 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 213 IncrementalHoareTripleChecker+Valid, 1005 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:42,633 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [408 Valid, 647 Invalid, 1218 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [213 Valid, 1005 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-07-21 05:00:42,634 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 919 states. [2022-07-21 05:00:42,682 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 919 to 861. [2022-07-21 05:00:42,684 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 861 states, 634 states have (on average 1.1987381703470033) internal successors, (760), 682 states have internal predecessors, (760), 119 states have call successors, (119), 94 states have call predecessors, (119), 107 states have return successors, (203), 118 states have call predecessors, (203), 119 states have call successors, (203) [2022-07-21 05:00:42,688 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 861 states to 861 states and 1082 transitions. [2022-07-21 05:00:42,688 INFO L78 Accepts]: Start accepts. Automaton has 861 states and 1082 transitions. Word has length 66 [2022-07-21 05:00:42,689 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:42,689 INFO L495 AbstractCegarLoop]: Abstraction has 861 states and 1082 transitions. [2022-07-21 05:00:42,689 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 4.25) internal successors, (51), 7 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-21 05:00:42,689 INFO L276 IsEmpty]: Start isEmpty. Operand 861 states and 1082 transitions. [2022-07-21 05:00:42,692 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 130 [2022-07-21 05:00:42,692 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:42,692 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:42,692 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-21 05:00:42,693 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:42,693 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:42,693 INFO L85 PathProgramCache]: Analyzing trace with hash 37906976, now seen corresponding path program 1 times [2022-07-21 05:00:42,693 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:42,693 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1387651593] [2022-07-21 05:00:42,694 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:42,694 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:42,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:42,740 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-21 05:00:42,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:42,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-21 05:00:42,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:42,761 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-21 05:00:42,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:42,781 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-21 05:00:42,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:42,789 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:00:42,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:42,817 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 05:00:42,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:42,836 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 05:00:42,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:42,846 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-21 05:00:42,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:42,848 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2022-07-21 05:00:42,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:42,849 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-07-21 05:00:42,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:42,851 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 05:00:42,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:42,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 99 [2022-07-21 05:00:42,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:42,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-21 05:00:42,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:42,859 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:00:42,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:42,860 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2022-07-21 05:00:42,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:42,862 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 19 proven. 15 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2022-07-21 05:00:42,862 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:42,862 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1387651593] [2022-07-21 05:00:42,862 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1387651593] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-21 05:00:42,862 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [134008308] [2022-07-21 05:00:42,862 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:42,863 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 05:00:42,863 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 05:00:42,867 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-21 05:00:42,878 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-21 05:00:42,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:43,005 INFO L263 TraceCheckSpWp]: Trace formula consists of 552 conjuncts, 9 conjunts are in the unsatisfiable core [2022-07-21 05:00:43,012 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 05:00:43,258 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-07-21 05:00:43,258 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 05:00:43,258 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [134008308] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:43,258 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-21 05:00:43,258 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [16] total 21 [2022-07-21 05:00:43,259 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1107533834] [2022-07-21 05:00:43,259 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:43,259 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-21 05:00:43,259 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:43,260 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-21 05:00:43,260 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=54, Invalid=366, Unknown=0, NotChecked=0, Total=420 [2022-07-21 05:00:43,260 INFO L87 Difference]: Start difference. First operand 861 states and 1082 transitions. Second operand has 8 states, 8 states have (on average 11.125) internal successors, (89), 6 states have internal predecessors, (89), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-21 05:00:43,408 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:43,408 INFO L93 Difference]: Finished difference Result 1716 states and 2160 transitions. [2022-07-21 05:00:43,409 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-21 05:00:43,409 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 11.125) internal successors, (89), 6 states have internal predecessors, (89), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) Word has length 129 [2022-07-21 05:00:43,411 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:43,416 INFO L225 Difference]: With dead ends: 1716 [2022-07-21 05:00:43,416 INFO L226 Difference]: Without dead ends: 863 [2022-07-21 05:00:43,418 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 171 GetRequests, 152 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 46 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=54, Invalid=366, Unknown=0, NotChecked=0, Total=420 [2022-07-21 05:00:43,420 INFO L413 NwaCegarLoop]: 230 mSDtfsCounter, 87 mSDsluCounter, 504 mSDsCounter, 0 mSdLazyCounter, 199 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 91 SdHoareTripleChecker+Valid, 734 SdHoareTripleChecker+Invalid, 202 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 199 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:43,421 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [91 Valid, 734 Invalid, 202 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 199 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-21 05:00:43,422 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 863 states. [2022-07-21 05:00:43,475 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 863 to 861. [2022-07-21 05:00:43,476 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 861 states, 634 states have (on average 1.1845425867507886) internal successors, (751), 682 states have internal predecessors, (751), 119 states have call successors, (119), 94 states have call predecessors, (119), 107 states have return successors, (181), 118 states have call predecessors, (181), 119 states have call successors, (181) [2022-07-21 05:00:43,480 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 861 states to 861 states and 1051 transitions. [2022-07-21 05:00:43,481 INFO L78 Accepts]: Start accepts. Automaton has 861 states and 1051 transitions. Word has length 129 [2022-07-21 05:00:43,481 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:43,481 INFO L495 AbstractCegarLoop]: Abstraction has 861 states and 1051 transitions. [2022-07-21 05:00:43,482 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 11.125) internal successors, (89), 6 states have internal predecessors, (89), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-21 05:00:43,482 INFO L276 IsEmpty]: Start isEmpty. Operand 861 states and 1051 transitions. [2022-07-21 05:00:43,485 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 126 [2022-07-21 05:00:43,486 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 05:00:43,487 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:43,514 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-07-21 05:00:43,711 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 05:00:43,712 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 05:00:43,712 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 05:00:43,713 INFO L85 PathProgramCache]: Analyzing trace with hash 1166861276, now seen corresponding path program 1 times [2022-07-21 05:00:43,713 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 05:00:43,713 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1902065195] [2022-07-21 05:00:43,713 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:43,713 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 05:00:43,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:43,806 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-21 05:00:43,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:43,820 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-21 05:00:43,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:43,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-21 05:00:43,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:43,836 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:00:43,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:43,840 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 05:00:43,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:43,848 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 05:00:43,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:43,849 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-21 05:00:43,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:43,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-07-21 05:00:43,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:43,866 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2022-07-21 05:00:43,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:43,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-21 05:00:43,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:43,926 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2022-07-21 05:00:43,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:43,930 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-21 05:00:43,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:43,931 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 05:00:43,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:43,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2022-07-21 05:00:43,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:43,933 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2022-07-21 05:00:43,934 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 05:00:43,934 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1902065195] [2022-07-21 05:00:43,934 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1902065195] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-21 05:00:43,934 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1434410248] [2022-07-21 05:00:43,934 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 05:00:43,934 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 05:00:43,934 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 05:00:43,936 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-21 05:00:43,946 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-21 05:00:44,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 05:00:44,048 INFO L263 TraceCheckSpWp]: Trace formula consists of 542 conjuncts, 9 conjunts are in the unsatisfiable core [2022-07-21 05:00:44,052 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 05:00:44,163 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 40 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-07-21 05:00:44,164 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 05:00:44,164 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1434410248] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 05:00:44,164 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-21 05:00:44,164 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 20 [2022-07-21 05:00:44,165 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [149165572] [2022-07-21 05:00:44,165 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 05:00:44,165 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-21 05:00:44,165 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 05:00:44,166 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-21 05:00:44,166 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=50, Invalid=330, Unknown=0, NotChecked=0, Total=380 [2022-07-21 05:00:44,166 INFO L87 Difference]: Start difference. First operand 861 states and 1051 transitions. Second operand has 8 states, 8 states have (on average 11.25) internal successors, (90), 6 states have internal predecessors, (90), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-21 05:00:44,302 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 05:00:44,302 INFO L93 Difference]: Finished difference Result 1482 states and 1832 transitions. [2022-07-21 05:00:44,302 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-21 05:00:44,303 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 11.25) internal successors, (90), 6 states have internal predecessors, (90), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) Word has length 125 [2022-07-21 05:00:44,303 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 05:00:44,303 INFO L225 Difference]: With dead ends: 1482 [2022-07-21 05:00:44,304 INFO L226 Difference]: Without dead ends: 0 [2022-07-21 05:00:44,307 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 165 GetRequests, 145 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=62, Invalid=400, Unknown=0, NotChecked=0, Total=462 [2022-07-21 05:00:44,308 INFO L413 NwaCegarLoop]: 215 mSDtfsCounter, 81 mSDsluCounter, 857 mSDsCounter, 0 mSdLazyCounter, 125 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 85 SdHoareTripleChecker+Valid, 1072 SdHoareTripleChecker+Invalid, 131 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 125 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-21 05:00:44,308 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [85 Valid, 1072 Invalid, 131 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-21 05:00:44,308 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-21 05:00:44,309 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-21 05:00:44,309 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-21 05:00:44,309 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-21 05:00:44,309 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 125 [2022-07-21 05:00:44,309 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 05:00:44,309 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-21 05:00:44,309 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 11.25) internal successors, (90), 6 states have internal predecessors, (90), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-21 05:00:44,309 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-21 05:00:44,309 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-21 05:00:44,311 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-21 05:00:44,343 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-07-21 05:00:44,512 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-07-21 05:00:44,514 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-21 05:00:47,664 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 238 245) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1))) [2022-07-21 05:00:47,664 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 238 245) no Hoare annotation was computed. [2022-07-21 05:00:47,665 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 238 245) no Hoare annotation was computed. [2022-07-21 05:00:47,665 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 128 134) no Hoare annotation was computed. [2022-07-21 05:00:47,665 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 128 134) the Hoare annotation is: true [2022-07-21 05:00:47,665 INFO L895 garLoopResultBuilder]: At program point L176(line 176) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2022-07-21 05:00:47,665 INFO L895 garLoopResultBuilder]: At program point L172(line 172) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2022-07-21 05:00:47,665 INFO L899 garLoopResultBuilder]: For program point L170(lines 170 178) no Hoare annotation was computed. [2022-07-21 05:00:47,667 INFO L895 garLoopResultBuilder]: At program point L583(lines 578 586) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2022-07-21 05:00:47,668 INFO L899 garLoopResultBuilder]: For program point L166(lines 166 183) no Hoare annotation was computed. [2022-07-21 05:00:47,668 INFO L895 garLoopResultBuilder]: At program point L181(line 181) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= ~methaneLevelCritical~0 0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1))) [2022-07-21 05:00:47,668 INFO L899 garLoopResultBuilder]: For program point L181-1(lines 162 186) no Hoare annotation was computed. [2022-07-21 05:00:47,668 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 162 186) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= 1 ~methaneLevelCritical~0)) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2022-07-21 05:00:47,669 INFO L895 garLoopResultBuilder]: At program point L336(lines 321 339) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2022-07-21 05:00:47,669 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 162 186) no Hoare annotation was computed. [2022-07-21 05:00:47,669 INFO L899 garLoopResultBuilder]: For program point L330(lines 330 334) no Hoare annotation was computed. [2022-07-21 05:00:47,669 INFO L899 garLoopResultBuilder]: For program point L330-2(lines 330 334) no Hoare annotation was computed. [2022-07-21 05:00:47,669 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 511 522) the Hoare annotation is: (let ((.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (not (= ~pumpRunning~0 0)))) (and (or .cse0 .cse1 (= 0 ~systemActive~0)) (or .cse0 .cse2 .cse1) (or (<= 1 ~methaneLevelCritical~0) .cse2 (not (<= 1 |old(~methaneLevelCritical~0)|))))) [2022-07-21 05:00:47,669 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 511 522) no Hoare annotation was computed. [2022-07-21 05:00:47,669 INFO L899 garLoopResultBuilder]: For program point L515-1(lines 511 522) no Hoare annotation was computed. [2022-07-21 05:00:47,669 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 589 618) no Hoare annotation was computed. [2022-07-21 05:00:47,670 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 589 618) the Hoare annotation is: true [2022-07-21 05:00:47,670 INFO L899 garLoopResultBuilder]: For program point L603(lines 603 607) no Hoare annotation was computed. [2022-07-21 05:00:47,670 INFO L902 garLoopResultBuilder]: At program point L603-1(lines 603 607) the Hoare annotation is: true [2022-07-21 05:00:47,670 INFO L899 garLoopResultBuilder]: For program point L600(line 600) no Hoare annotation was computed. [2022-07-21 05:00:47,670 INFO L902 garLoopResultBuilder]: At program point L599-2(lines 599 613) the Hoare annotation is: true [2022-07-21 05:00:47,670 INFO L902 garLoopResultBuilder]: At program point L595(line 595) the Hoare annotation is: true [2022-07-21 05:00:47,670 INFO L899 garLoopResultBuilder]: For program point L595-1(line 595) no Hoare annotation was computed. [2022-07-21 05:00:47,670 INFO L902 garLoopResultBuilder]: At program point L614(lines 589 618) the Hoare annotation is: true [2022-07-21 05:00:47,670 INFO L899 garLoopResultBuilder]: For program point L610(line 610) no Hoare annotation was computed. [2022-07-21 05:00:47,671 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 523 531) the Hoare annotation is: true [2022-07-21 05:00:47,671 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 523 531) no Hoare annotation was computed. [2022-07-21 05:00:47,671 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 523 531) no Hoare annotation was computed. [2022-07-21 05:00:47,671 INFO L899 garLoopResultBuilder]: For program point L192(lines 192 209) no Hoare annotation was computed. [2022-07-21 05:00:47,671 INFO L899 garLoopResultBuilder]: For program point L440(line 440) no Hoare annotation was computed. [2022-07-21 05:00:47,671 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 104 127) no Hoare annotation was computed. [2022-07-21 05:00:47,671 INFO L895 garLoopResultBuilder]: At program point L441(lines 436 443) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 .cse3) (or .cse2 .cse0) (or .cse3 .cse1))) [2022-07-21 05:00:47,671 INFO L899 garLoopResultBuilder]: For program point L115-1(lines 115 121) no Hoare annotation was computed. [2022-07-21 05:00:47,671 INFO L899 garLoopResultBuilder]: For program point L466(lines 466 476) no Hoare annotation was computed. [2022-07-21 05:00:47,671 INFO L899 garLoopResultBuilder]: For program point L462(lines 462 479) no Hoare annotation was computed. [2022-07-21 05:00:47,671 INFO L895 garLoopResultBuilder]: At program point L462-1(lines 454 482) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse4 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~7#1| 0)) (.cse2 (not .cse3)) (.cse1 (= ~pumpRunning~0 0)) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (and .cse1 .cse2) .cse3) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4) .cse5 (and (<= 2 ~waterLevel~0) .cse4) (and .cse1 .cse4 .cse2) .cse3) (or .cse6 .cse5 (and .cse1 .cse4) .cse2) (or .cse6 .cse1 .cse0) (or .cse6 .cse0 .cse7) (or .cse6 .cse5 .cse7)))) [2022-07-21 05:00:47,671 INFO L899 garLoopResultBuilder]: For program point L491(lines 491 495) no Hoare annotation was computed. [2022-07-21 05:00:47,671 INFO L895 garLoopResultBuilder]: At program point L202(line 202) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 .cse3) (or .cse2 .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 .cse1))) [2022-07-21 05:00:47,671 INFO L895 garLoopResultBuilder]: At program point L491-2(lines 487 498) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 .cse3 .cse4) (or .cse0 .cse3) (or .cse2 .cse1 .cse4))) [2022-07-21 05:00:47,671 INFO L895 garLoopResultBuilder]: At program point L198(line 198) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse0 .cse2) (or .cse2 (and .cse3 (<= 1 |timeShift_processEnvironment_~tmp~2#1|)) .cse4) (or .cse3 .cse1 .cse4))) [2022-07-21 05:00:47,672 INFO L895 garLoopResultBuilder]: At program point L194(line 194) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 .cse3 .cse4) (or .cse0 .cse3) (or .cse2 .cse1 .cse4))) [2022-07-21 05:00:47,672 INFO L899 garLoopResultBuilder]: For program point L194-1(line 194) no Hoare annotation was computed. [2022-07-21 05:00:47,672 INFO L899 garLoopResultBuilder]: For program point L467(lines 467 473) no Hoare annotation was computed. [2022-07-21 05:00:47,672 INFO L895 garLoopResultBuilder]: At program point L207(line 207) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0))) (let ((.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not .cse2))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse1 .cse2) (or .cse4 .cse0 .cse5) (or .cse4 .cse3 .cse5)))) [2022-07-21 05:00:47,672 INFO L895 garLoopResultBuilder]: At program point L207-1(lines 188 212) the Hoare annotation is: (let ((.cse6 (= 0 ~systemActive~0))) (let ((.cse2 (not .cse6)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (and .cse1 .cse2) .cse3) (or .cse4 .cse5 .cse6) (or .cse0 .cse5 .cse2) (or .cse0 .cse5 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 (<= 2 ~waterLevel~0) .cse3 .cse6)))) [2022-07-21 05:00:47,672 INFO L899 garLoopResultBuilder]: For program point L108-1(lines 107 126) no Hoare annotation was computed. [2022-07-21 05:00:47,672 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 104 127) the Hoare annotation is: (let ((.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (= ~pumpRunning~0 0) .cse6)) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5) (or .cse3 .cse4 .cse0) (or .cse5 .cse1 .cse2)))) [2022-07-21 05:00:47,673 INFO L895 garLoopResultBuilder]: At program point L460(line 460) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (and .cse4 .cse6)) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (not .cse3)) (or .cse4 .cse5 .cse3) (or .cse0 .cse1 .cse5) (or .cse0 .cse2 .cse6) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 (<= 2 ~waterLevel~0) .cse2 .cse3)))) [2022-07-21 05:00:47,673 INFO L899 garLoopResultBuilder]: For program point L460-1(line 460) no Hoare annotation was computed. [2022-07-21 05:00:47,673 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 104 127) no Hoare annotation was computed. [2022-07-21 05:00:47,673 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 440) no Hoare annotation was computed. [2022-07-21 05:00:47,673 INFO L895 garLoopResultBuilder]: At program point L262(lines 257 265) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or (and .cse2 .cse3) .cse4 .cse5) (or .cse0 .cse4 (and .cse2 .cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse1 .cse5))) [2022-07-21 05:00:47,673 INFO L899 garLoopResultBuilder]: For program point L196(lines 196 204) no Hoare annotation was computed. [2022-07-21 05:00:47,673 INFO L899 garLoopResultBuilder]: For program point L671(lines 671 678) no Hoare annotation was computed. [2022-07-21 05:00:47,674 INFO L899 garLoopResultBuilder]: For program point L415(lines 415 421) no Hoare annotation was computed. [2022-07-21 05:00:47,674 INFO L895 garLoopResultBuilder]: At program point L415-2(lines 407 422) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse6 .cse2 .cse3 .cse4) (and .cse6 .cse2 .cse3 .cse4 .cse5))) [2022-07-21 05:00:47,674 INFO L899 garLoopResultBuilder]: For program point L671-2(lines 671 678) no Hoare annotation was computed. [2022-07-21 05:00:47,674 INFO L899 garLoopResultBuilder]: For program point L378(lines 377 426) no Hoare annotation was computed. [2022-07-21 05:00:47,674 INFO L899 garLoopResultBuilder]: For program point L407(lines 407 422) no Hoare annotation was computed. [2022-07-21 05:00:47,674 INFO L895 garLoopResultBuilder]: At program point L399(line 399) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3 (not (= 0 ~systemActive~0))))) [2022-07-21 05:00:47,674 INFO L895 garLoopResultBuilder]: At program point L424(lines 377 426) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3 (not (= 0 ~systemActive~0))))) [2022-07-21 05:00:47,675 INFO L902 garLoopResultBuilder]: At program point L680(lines 661 683) the Hoare annotation is: true [2022-07-21 05:00:47,675 INFO L895 garLoopResultBuilder]: At program point L647(lines 643 649) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~8#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-21 05:00:47,675 INFO L899 garLoopResultBuilder]: For program point L387(lines 387 393) no Hoare annotation was computed. [2022-07-21 05:00:47,675 INFO L899 garLoopResultBuilder]: For program point L387-1(lines 387 393) no Hoare annotation was computed. [2022-07-21 05:00:47,675 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-21 05:00:47,675 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-21 05:00:47,675 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-21 05:00:47,675 INFO L899 garLoopResultBuilder]: For program point L379(lines 379 383) no Hoare annotation was computed. [2022-07-21 05:00:47,676 INFO L895 garLoopResultBuilder]: At program point L346(line 346) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3))) [2022-07-21 05:00:47,676 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-21 05:00:47,676 INFO L895 garLoopResultBuilder]: At program point L83(lines 78 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-21 05:00:47,676 INFO L902 garLoopResultBuilder]: At program point L430(lines 367 434) the Hoare annotation is: true [2022-07-21 05:00:47,676 INFO L899 garLoopResultBuilder]: For program point L397(lines 397 403) no Hoare annotation was computed. [2022-07-21 05:00:47,676 INFO L899 garLoopResultBuilder]: For program point L397-1(lines 397 403) no Hoare annotation was computed. [2022-07-21 05:00:47,676 INFO L895 garLoopResultBuilder]: At program point L75(lines 71 77) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-21 05:00:47,677 INFO L895 garLoopResultBuilder]: At program point L360(lines 355 362) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3))) [2022-07-21 05:00:47,677 INFO L895 garLoopResultBuilder]: At program point L389(line 389) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3 (not (= 0 ~systemActive~0))))) [2022-07-21 05:00:47,677 INFO L895 garLoopResultBuilder]: At program point L451(lines 446 453) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~8#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-21 05:00:47,677 INFO L895 garLoopResultBuilder]: At program point L352(lines 340 354) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= 0 ~systemActive~0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 .cse4) (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2 .cse3 .cse4))) [2022-07-21 05:00:47,677 INFO L899 garLoopResultBuilder]: For program point L344(lines 344 350) no Hoare annotation was computed. [2022-07-21 05:00:47,677 INFO L899 garLoopResultBuilder]: For program point L344-1(lines 344 350) no Hoare annotation was computed. [2022-07-21 05:00:47,677 INFO L902 garLoopResultBuilder]: At program point L658(lines 650 660) the Hoare annotation is: true [2022-07-21 05:00:47,678 INFO L895 garLoopResultBuilder]: At program point L427(lines 376 428) the Hoare annotation is: false [2022-07-21 05:00:47,678 INFO L895 garLoopResultBuilder]: At program point L68(lines 64 70) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-21 05:00:47,678 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 136 160) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= 1 ~methaneLevelCritical~0)) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2022-07-21 05:00:47,678 INFO L895 garLoopResultBuilder]: At program point L155(line 155) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2022-07-21 05:00:47,678 INFO L899 garLoopResultBuilder]: For program point L155-1(lines 136 160) no Hoare annotation was computed. [2022-07-21 05:00:47,678 INFO L899 garLoopResultBuilder]: For program point L568(lines 568 574) no Hoare annotation was computed. [2022-07-21 05:00:47,678 INFO L899 garLoopResultBuilder]: For program point L228(lines 228 234) no Hoare annotation was computed. [2022-07-21 05:00:47,679 INFO L895 garLoopResultBuilder]: At program point L226(line 226) the Hoare annotation is: (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1))) [2022-07-21 05:00:47,679 INFO L895 garLoopResultBuilder]: At program point L228-2(lines 221 237) the Hoare annotation is: (let ((.cse1 (= 0 ~systemActive~0)) (.cse0 (<= 2 ~waterLevel~0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~methaneLevelCritical~0)) .cse1 (and (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~3#1|) (= ~pumpRunning~0 0) .cse0)))) [2022-07-21 05:00:47,679 INFO L899 garLoopResultBuilder]: For program point L226-1(line 226) no Hoare annotation was computed. [2022-07-21 05:00:47,679 INFO L895 garLoopResultBuilder]: At program point L573(lines 564 577) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~pumpRunning~0 0))) (let ((.cse0 (and .cse2 .cse3 (<= 2 ~waterLevel~0))) (.cse4 (= 0 ~systemActive~0)) (.cse1 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|))) (and (or .cse0 (and .cse1 .cse2 .cse3) (not (= ~methaneLevelCritical~0 0)) .cse4) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse4 (and .cse1 .cse3))))) [2022-07-21 05:00:47,679 INFO L895 garLoopResultBuilder]: At program point L317(lines 302 320) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~pumpRunning~0 0))) (let ((.cse0 (and .cse3 .cse4 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0))) (.cse1 (and .cse3 .cse4 (<= 2 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2)))) [2022-07-21 05:00:47,679 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 136 160) no Hoare annotation was computed. [2022-07-21 05:00:47,679 INFO L895 garLoopResultBuilder]: At program point L218(lines 213 220) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~methaneLevelCritical~0)) .cse0) (or (<= 2 ~waterLevel~0) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2022-07-21 05:00:47,680 INFO L899 garLoopResultBuilder]: For program point L311(lines 311 315) no Hoare annotation was computed. [2022-07-21 05:00:47,680 INFO L895 garLoopResultBuilder]: At program point L150(line 150) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (let ((.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0) (not .cse0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1) (or (not (= ~methaneLevelCritical~0 0)) .cse0 .cse1)))) [2022-07-21 05:00:47,680 INFO L899 garLoopResultBuilder]: For program point L311-2(lines 311 315) no Hoare annotation was computed. [2022-07-21 05:00:47,680 INFO L899 garLoopResultBuilder]: For program point L144(lines 144 152) no Hoare annotation was computed. [2022-07-21 05:00:47,680 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 157) no Hoare annotation was computed. [2022-07-21 05:00:47,680 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 499 510) no Hoare annotation was computed. [2022-07-21 05:00:47,680 INFO L899 garLoopResultBuilder]: For program point L503-1(lines 499 510) no Hoare annotation was computed. [2022-07-21 05:00:47,681 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 499 510) the Hoare annotation is: (let ((.cse2 (not (= ~pumpRunning~0 0))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 (= 0 ~systemActive~0)) (or .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse2 .cse0 .cse1))) [2022-07-21 05:00:47,681 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 246 256) the Hoare annotation is: true [2022-07-21 05:00:47,681 INFO L902 garLoopResultBuilder]: At program point L251(line 251) the Hoare annotation is: true [2022-07-21 05:00:47,681 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 246 256) no Hoare annotation was computed. [2022-07-21 05:00:47,681 INFO L899 garLoopResultBuilder]: For program point L251-1(line 251) no Hoare annotation was computed. [2022-07-21 05:00:47,681 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 246 256) no Hoare annotation was computed. [2022-07-21 05:00:47,684 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 05:00:47,686 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-21 05:00:47,719 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.07 05:00:47 BoogieIcfgContainer [2022-07-21 05:00:47,724 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-21 05:00:47,725 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-21 05:00:47,725 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-21 05:00:47,726 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-21 05:00:47,726 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 05:00:39" (3/4) ... [2022-07-21 05:00:47,730 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-21 05:00:47,736 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-07-21 05:00:47,737 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-21 05:00:47,737 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-21 05:00:47,737 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-21 05:00:47,737 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-07-21 05:00:47,737 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-21 05:00:47,737 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-21 05:00:47,738 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-21 05:00:47,738 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-07-21 05:00:47,738 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-07-21 05:00:47,752 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 52 nodes and edges [2022-07-21 05:00:47,752 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-21 05:00:47,753 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-21 05:00:47,753 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-21 05:00:47,753 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-21 05:00:47,757 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-21 05:00:47,758 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-21 05:00:47,775 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-21 05:00:47,775 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-21 05:00:47,775 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-21 05:00:47,776 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) || ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0)) || ((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) [2022-07-21 05:00:47,776 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((pumpRunning == \old(pumpRunning) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical))) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-21 05:00:47,777 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (\old(waterLevel) == waterLevel && !(0 == systemActive))) || !(methaneLevelCritical == 0)) && ((pumpRunning == 0 || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel)) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-21 05:00:47,777 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((1 <= methaneLevelCritical && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) [2022-07-21 05:00:47,777 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 <= methaneLevelCritical) || (pumpRunning == 0 && !(0 == systemActive))) || 0 == systemActive) && (((((pumpRunning == \old(pumpRunning) && tmp == 0) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && tmp == 0)) || ((pumpRunning == 0 && tmp == 0) && !(0 == systemActive))) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && tmp == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) [2022-07-21 05:00:47,778 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 0 == systemActive) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 0 == systemActive) [2022-07-21 05:00:47,778 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((pumpRunning == 0 && \result == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel))) && (!(methaneLevelCritical == 0) || 0 == systemActive) [2022-07-21 05:00:47,778 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((2 <= waterLevel || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((methaneLevelCritical == tmp && pumpRunning == 0) && 2 <= waterLevel)) [2022-07-21 05:00:47,779 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-21 05:00:47,779 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-21 05:00:47,779 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) || ((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) [2022-07-21 05:00:47,779 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= methaneLevelCritical) || 0 == systemActive) && (!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical))) && (!(methaneLevelCritical == 0) || 0 == systemActive) [2022-07-21 05:00:47,779 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-21 05:00:47,780 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && tmp___0 == 0)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && tmp___0 == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-21 05:00:47,805 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-21 05:00:47,805 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-21 05:00:47,806 INFO L158 Benchmark]: Toolchain (without parser) took 9424.98ms. Allocated memory was 65.0MB in the beginning and 123.7MB in the end (delta: 58.7MB). Free memory was 44.7MB in the beginning and 97.6MB in the end (delta: -52.9MB). Peak memory consumption was 73.8MB. Max. memory is 16.1GB. [2022-07-21 05:00:47,806 INFO L158 Benchmark]: CDTParser took 0.11ms. Allocated memory is still 65.0MB. Free memory was 47.2MB in the beginning and 47.1MB in the end (delta: 84.4kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-21 05:00:47,807 INFO L158 Benchmark]: CACSL2BoogieTranslator took 450.84ms. Allocated memory is still 65.0MB. Free memory was 44.5MB in the beginning and 39.6MB in the end (delta: 4.9MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2022-07-21 05:00:47,807 INFO L158 Benchmark]: Boogie Procedure Inliner took 57.10ms. Allocated memory is still 65.0MB. Free memory was 39.6MB in the beginning and 37.2MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-21 05:00:47,807 INFO L158 Benchmark]: Boogie Preprocessor took 41.82ms. Allocated memory is still 65.0MB. Free memory was 37.2MB in the beginning and 35.4MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-21 05:00:47,808 INFO L158 Benchmark]: RCFGBuilder took 473.96ms. Allocated memory was 65.0MB in the beginning and 81.8MB in the end (delta: 16.8MB). Free memory was 35.4MB in the beginning and 50.5MB in the end (delta: -15.1MB). Peak memory consumption was 10.6MB. Max. memory is 16.1GB. [2022-07-21 05:00:47,808 INFO L158 Benchmark]: TraceAbstraction took 8315.04ms. Allocated memory was 81.8MB in the beginning and 123.7MB in the end (delta: 41.9MB). Free memory was 49.8MB in the beginning and 32.5MB in the end (delta: 17.3MB). Peak memory consumption was 64.4MB. Max. memory is 16.1GB. [2022-07-21 05:00:47,808 INFO L158 Benchmark]: Witness Printer took 80.40ms. Allocated memory is still 123.7MB. Free memory was 32.5MB in the beginning and 97.6MB in the end (delta: -65.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-21 05:00:47,810 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.11ms. Allocated memory is still 65.0MB. Free memory was 47.2MB in the beginning and 47.1MB in the end (delta: 84.4kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 450.84ms. Allocated memory is still 65.0MB. Free memory was 44.5MB in the beginning and 39.6MB in the end (delta: 4.9MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 57.10ms. Allocated memory is still 65.0MB. Free memory was 39.6MB in the beginning and 37.2MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 41.82ms. Allocated memory is still 65.0MB. Free memory was 37.2MB in the beginning and 35.4MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 473.96ms. Allocated memory was 65.0MB in the beginning and 81.8MB in the end (delta: 16.8MB). Free memory was 35.4MB in the beginning and 50.5MB in the end (delta: -15.1MB). Peak memory consumption was 10.6MB. Max. memory is 16.1GB. * TraceAbstraction took 8315.04ms. Allocated memory was 81.8MB in the beginning and 123.7MB in the end (delta: 41.9MB). Free memory was 49.8MB in the beginning and 32.5MB in the end (delta: 17.3MB). Peak memory consumption was 64.4MB. Max. memory is 16.1GB. * Witness Printer took 80.40ms. Allocated memory is still 123.7MB. Free memory was 32.5MB in the beginning and 97.6MB in the end (delta: -65.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 440]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 115 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 8.2s, OverallIterations: 10, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.2s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1386 SdHoareTripleChecker+Valid, 1.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1343 mSDsluCounter, 5180 SdHoareTripleChecker+Invalid, 1.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3665 mSDsCounter, 402 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1997 IncrementalHoareTripleChecker+Invalid, 2399 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 402 mSolverCounterUnsat, 1515 mSDtfsCounter, 1997 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 482 GetRequests, 373 SyntacticMatches, 2 SemanticMatches, 107 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 358 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=861occurred in iteration=8, InterpolantAutomatonStates: 85, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 10 MinimizatonAttempts, 92 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 53 LocationsWithAnnotation, 1800 PreInvPairs, 2095 NumberOfFragments, 1689 HoareAnnotationTreeSize, 1800 FomulaSimplifications, 194 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 53 FomulaSimplificationsInter, 12344 FormulaSimplificationTreeSizeReductionInter, 2.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.3s InterpolantComputationTime, 879 NumberOfCodeBlocks, 879 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 867 ConstructedInterpolants, 0 QuantifiedInterpolants, 1448 SizeOfPredicates, 6 NumberOfNonLiveVariables, 1094 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 12 InterpolantComputations, 10 PerfectInterpolantSequences, 198/216 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 340]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 0 == systemActive) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 564]: Loop Invariant Derived loop invariant: (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) || ((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) - InvariantResult [Line: 213]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 377]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) || ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0)) || ((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 487]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((pumpRunning == \old(pumpRunning) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical))) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 188]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (\old(waterLevel) == waterLevel && !(0 == systemActive))) || !(methaneLevelCritical == 0)) && ((pumpRunning == 0 || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel)) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 599]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 436]: Loop Invariant Derived loop invariant: (((!(1 <= methaneLevelCritical) || 0 == systemActive) && (!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical))) && (!(methaneLevelCritical == 0) || 0 == systemActive) - InvariantResult [Line: 367]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 355]: Loop Invariant Derived loop invariant: ((((1 <= methaneLevelCritical && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 376]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 589]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 578]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 78]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 643]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 661]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 221]: Loop Invariant Derived loop invariant: ((2 <= waterLevel || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((methaneLevelCritical == tmp && pumpRunning == 0) && 2 <= waterLevel)) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 257]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((pumpRunning == 0 && \result == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel))) && (!(methaneLevelCritical == 0) || 0 == systemActive) - InvariantResult [Line: 650]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 321]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 302]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && tmp___0 == 0)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && tmp___0 == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 454]: Loop Invariant Derived loop invariant: ((((((!(1 <= methaneLevelCritical) || (pumpRunning == 0 && !(0 == systemActive))) || 0 == systemActive) && (((((pumpRunning == \old(pumpRunning) && tmp == 0) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && tmp == 0)) || ((pumpRunning == 0 && tmp == 0) && !(0 == systemActive))) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && tmp == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) - InvariantResult [Line: 446]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) RESULT: Ultimate proved your program to be correct! [2022-07-21 05:00:47,855 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE