./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 6c24879c Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 1f55fffdfb523946c08e4798dfd7a981dcf70594f408e958cce4b1b6e97bd924 --- Real Ultimate output --- This is Ultimate 0.2.2-?-6c24879 [2022-07-12 06:18:39,254 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-12 06:18:39,256 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-12 06:18:39,293 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-12 06:18:39,294 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-12 06:18:39,295 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-12 06:18:39,299 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-12 06:18:39,305 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-12 06:18:39,307 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-12 06:18:39,313 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-12 06:18:39,314 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-12 06:18:39,316 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-12 06:18:39,316 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-12 06:18:39,318 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-12 06:18:39,335 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-12 06:18:39,337 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-12 06:18:39,338 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-12 06:18:39,340 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-12 06:18:39,343 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-12 06:18:39,348 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-12 06:18:39,350 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-12 06:18:39,352 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-12 06:18:39,352 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-12 06:18:39,353 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-12 06:18:39,354 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-12 06:18:39,359 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-12 06:18:39,359 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-12 06:18:39,359 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-12 06:18:39,361 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-12 06:18:39,361 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-12 06:18:39,362 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-12 06:18:39,362 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-12 06:18:39,364 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-12 06:18:39,364 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-12 06:18:39,365 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-12 06:18:39,366 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-12 06:18:39,366 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-12 06:18:39,366 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-12 06:18:39,366 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-12 06:18:39,367 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-12 06:18:39,367 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-12 06:18:39,369 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-12 06:18:39,370 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-12 06:18:39,405 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-12 06:18:39,406 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-12 06:18:39,406 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-12 06:18:39,406 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-12 06:18:39,407 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-12 06:18:39,407 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-12 06:18:39,408 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-12 06:18:39,408 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-12 06:18:39,408 INFO L138 SettingsManager]: * Use SBE=true [2022-07-12 06:18:39,409 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-12 06:18:39,409 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-12 06:18:39,409 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-12 06:18:39,410 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-12 06:18:39,410 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-12 06:18:39,410 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-12 06:18:39,410 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-12 06:18:39,410 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-12 06:18:39,410 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-12 06:18:39,411 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-12 06:18:39,412 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-12 06:18:39,412 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-12 06:18:39,413 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-12 06:18:39,413 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-12 06:18:39,413 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-12 06:18:39,413 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-12 06:18:39,413 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-12 06:18:39,414 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-12 06:18:39,414 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-12 06:18:39,414 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-12 06:18:39,414 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-12 06:18:39,414 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-12 06:18:39,415 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-12 06:18:39,415 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-12 06:18:39,415 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1f55fffdfb523946c08e4798dfd7a981dcf70594f408e958cce4b1b6e97bd924 [2022-07-12 06:18:39,626 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-12 06:18:39,643 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-12 06:18:39,648 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-12 06:18:39,649 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-12 06:18:39,663 INFO L275 PluginConnector]: CDTParser initialized [2022-07-12 06:18:39,665 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c [2022-07-12 06:18:39,748 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/607c5b6e7/615549fd2a8b439baa5fd21d9fa7c6a2/FLAG2f2ce1d15 [2022-07-12 06:18:40,242 INFO L306 CDTParser]: Found 1 translation units. [2022-07-12 06:18:40,243 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c [2022-07-12 06:18:40,255 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/607c5b6e7/615549fd2a8b439baa5fd21d9fa7c6a2/FLAG2f2ce1d15 [2022-07-12 06:18:40,568 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/607c5b6e7/615549fd2a8b439baa5fd21d9fa7c6a2 [2022-07-12 06:18:40,570 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-12 06:18:40,571 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-12 06:18:40,573 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-12 06:18:40,573 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-12 06:18:40,576 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-12 06:18:40,576 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.07 06:18:40" (1/1) ... [2022-07-12 06:18:40,577 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3767c369 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:40, skipping insertion in model container [2022-07-12 06:18:40,577 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.07 06:18:40" (1/1) ... [2022-07-12 06:18:40,583 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-12 06:18:40,618 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-12 06:18:40,749 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c[1605,1618] [2022-07-12 06:18:40,850 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-12 06:18:40,877 INFO L203 MainTranslator]: Completed pre-run [2022-07-12 06:18:40,903 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c[1605,1618] [2022-07-12 06:18:40,964 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-12 06:18:40,979 INFO L208 MainTranslator]: Completed translation [2022-07-12 06:18:40,979 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:40 WrapperNode [2022-07-12 06:18:40,980 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-12 06:18:40,981 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-12 06:18:40,981 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-12 06:18:40,981 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-12 06:18:40,987 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:40" (1/1) ... [2022-07-12 06:18:41,003 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:40" (1/1) ... [2022-07-12 06:18:41,032 INFO L137 Inliner]: procedures = 57, calls = 159, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 277 [2022-07-12 06:18:41,033 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-12 06:18:41,033 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-12 06:18:41,033 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-12 06:18:41,034 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-12 06:18:41,041 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:40" (1/1) ... [2022-07-12 06:18:41,041 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:40" (1/1) ... [2022-07-12 06:18:41,066 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:40" (1/1) ... [2022-07-12 06:18:41,066 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:40" (1/1) ... [2022-07-12 06:18:41,090 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:40" (1/1) ... [2022-07-12 06:18:41,106 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:40" (1/1) ... [2022-07-12 06:18:41,108 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:40" (1/1) ... [2022-07-12 06:18:41,110 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-12 06:18:41,111 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-12 06:18:41,111 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-12 06:18:41,111 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-12 06:18:41,120 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:40" (1/1) ... [2022-07-12 06:18:41,127 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-12 06:18:41,138 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 06:18:41,151 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-12 06:18:41,160 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-12 06:18:41,189 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-12 06:18:41,190 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-12 06:18:41,190 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-12 06:18:41,190 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-07-12 06:18:41,190 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-07-12 06:18:41,190 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-12 06:18:41,190 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-12 06:18:41,190 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-12 06:18:41,190 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-12 06:18:41,191 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-12 06:18:41,191 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-12 06:18:41,191 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-12 06:18:41,191 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-12 06:18:41,191 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2022-07-12 06:18:41,191 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2022-07-12 06:18:41,192 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-07-12 06:18:41,192 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-07-12 06:18:41,192 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-12 06:18:41,192 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-12 06:18:41,192 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-12 06:18:41,192 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-12 06:18:41,193 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-12 06:18:41,269 INFO L234 CfgBuilder]: Building ICFG [2022-07-12 06:18:41,273 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-12 06:18:41,555 INFO L275 CfgBuilder]: Performing block encoding [2022-07-12 06:18:41,564 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-12 06:18:41,565 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-12 06:18:41,567 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 06:18:41 BoogieIcfgContainer [2022-07-12 06:18:41,567 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-12 06:18:41,569 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-12 06:18:41,569 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-12 06:18:41,572 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-12 06:18:41,573 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 12.07 06:18:40" (1/3) ... [2022-07-12 06:18:41,573 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@12f2b74f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.07 06:18:41, skipping insertion in model container [2022-07-12 06:18:41,573 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:40" (2/3) ... [2022-07-12 06:18:41,574 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@12f2b74f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.07 06:18:41, skipping insertion in model container [2022-07-12 06:18:41,574 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 06:18:41" (3/3) ... [2022-07-12 06:18:41,575 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product53.cil.c [2022-07-12 06:18:41,592 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-12 06:18:41,596 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-12 06:18:41,642 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-12 06:18:41,648 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@26ccc573, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@4e8f60d2 [2022-07-12 06:18:41,649 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-12 06:18:41,664 INFO L276 IsEmpty]: Start isEmpty. Operand has 102 states, 75 states have (on average 1.3866666666666667) internal successors, (104), 85 states have internal predecessors, (104), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-07-12 06:18:41,678 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-07-12 06:18:41,678 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:41,679 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:41,680 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:41,685 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:41,685 INFO L85 PathProgramCache]: Analyzing trace with hash 270425168, now seen corresponding path program 1 times [2022-07-12 06:18:41,693 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:41,694 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [188196214] [2022-07-12 06:18:41,694 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:41,695 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:41,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:41,973 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-12 06:18:41,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:41,996 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:41,997 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:41,997 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [188196214] [2022-07-12 06:18:41,997 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [188196214] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:41,998 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:41,998 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-12 06:18:42,000 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1489171954] [2022-07-12 06:18:42,001 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:42,006 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-12 06:18:42,006 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:42,035 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-12 06:18:42,036 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-12 06:18:42,040 INFO L87 Difference]: Start difference. First operand has 102 states, 75 states have (on average 1.3866666666666667) internal successors, (104), 85 states have internal predecessors, (104), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-12 06:18:42,098 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:42,099 INFO L93 Difference]: Finished difference Result 195 states and 266 transitions. [2022-07-12 06:18:42,100 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-12 06:18:42,101 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-07-12 06:18:42,124 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:42,137 INFO L225 Difference]: With dead ends: 195 [2022-07-12 06:18:42,138 INFO L226 Difference]: Without dead ends: 93 [2022-07-12 06:18:42,144 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-12 06:18:42,148 INFO L413 NwaCegarLoop]: 130 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 130 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:42,149 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 130 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 06:18:42,164 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2022-07-12 06:18:42,188 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 93. [2022-07-12 06:18:42,189 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 93 states, 68 states have (on average 1.3235294117647058) internal successors, (90), 77 states have internal predecessors, (90), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-07-12 06:18:42,191 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 121 transitions. [2022-07-12 06:18:42,192 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 121 transitions. Word has length 25 [2022-07-12 06:18:42,193 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:42,193 INFO L495 AbstractCegarLoop]: Abstraction has 93 states and 121 transitions. [2022-07-12 06:18:42,193 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-12 06:18:42,193 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 121 transitions. [2022-07-12 06:18:42,195 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-07-12 06:18:42,196 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:42,196 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:42,196 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-12 06:18:42,197 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:42,197 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:42,198 INFO L85 PathProgramCache]: Analyzing trace with hash -1281530714, now seen corresponding path program 1 times [2022-07-12 06:18:42,198 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:42,198 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [278147716] [2022-07-12 06:18:42,198 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:42,198 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:42,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:42,278 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-12 06:18:42,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:42,286 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:42,286 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:42,286 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [278147716] [2022-07-12 06:18:42,286 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [278147716] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:42,287 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:42,287 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-12 06:18:42,287 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1666998060] [2022-07-12 06:18:42,287 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:42,298 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-12 06:18:42,298 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:42,298 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-12 06:18:42,299 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-12 06:18:42,299 INFO L87 Difference]: Start difference. First operand 93 states and 121 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-12 06:18:42,318 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:42,318 INFO L93 Difference]: Finished difference Result 151 states and 197 transitions. [2022-07-12 06:18:42,321 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-12 06:18:42,321 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-07-12 06:18:42,322 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:42,325 INFO L225 Difference]: With dead ends: 151 [2022-07-12 06:18:42,325 INFO L226 Difference]: Without dead ends: 84 [2022-07-12 06:18:42,326 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-12 06:18:42,328 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 12 mSDsluCounter, 92 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 200 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:42,328 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 200 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 06:18:42,330 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2022-07-12 06:18:42,342 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 84. [2022-07-12 06:18:42,344 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84 states, 62 states have (on average 1.3387096774193548) internal successors, (83), 71 states have internal predecessors, (83), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-07-12 06:18:42,348 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 109 transitions. [2022-07-12 06:18:42,349 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 109 transitions. Word has length 26 [2022-07-12 06:18:42,349 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:42,350 INFO L495 AbstractCegarLoop]: Abstraction has 84 states and 109 transitions. [2022-07-12 06:18:42,351 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-12 06:18:42,351 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 109 transitions. [2022-07-12 06:18:42,352 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-07-12 06:18:42,354 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:42,354 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:42,354 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-12 06:18:42,355 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:42,356 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:42,356 INFO L85 PathProgramCache]: Analyzing trace with hash -1565936952, now seen corresponding path program 1 times [2022-07-12 06:18:42,356 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:42,357 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1645684303] [2022-07-12 06:18:42,357 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:42,357 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:42,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:42,461 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-12 06:18:42,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:42,467 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:42,468 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:42,469 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1645684303] [2022-07-12 06:18:42,470 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1645684303] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:42,470 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:42,470 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-12 06:18:42,470 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [414356243] [2022-07-12 06:18:42,471 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:42,471 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-12 06:18:42,471 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:42,472 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-12 06:18:42,472 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-07-12 06:18:42,473 INFO L87 Difference]: Start difference. First operand 84 states and 109 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-12 06:18:42,634 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:42,634 INFO L93 Difference]: Finished difference Result 160 states and 211 transitions. [2022-07-12 06:18:42,635 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-12 06:18:42,635 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-07-12 06:18:42,635 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:42,636 INFO L225 Difference]: With dead ends: 160 [2022-07-12 06:18:42,636 INFO L226 Difference]: Without dead ends: 84 [2022-07-12 06:18:42,639 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-07-12 06:18:42,640 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 204 mSDsluCounter, 124 mSDsCounter, 0 mSdLazyCounter, 57 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 204 SdHoareTripleChecker+Valid, 226 SdHoareTripleChecker+Invalid, 92 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 57 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:42,641 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [204 Valid, 226 Invalid, 92 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 57 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-12 06:18:42,641 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2022-07-12 06:18:42,648 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 84. [2022-07-12 06:18:42,648 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84 states, 62 states have (on average 1.3225806451612903) internal successors, (82), 71 states have internal predecessors, (82), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-07-12 06:18:42,649 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 108 transitions. [2022-07-12 06:18:42,649 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 108 transitions. Word has length 30 [2022-07-12 06:18:42,650 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:42,650 INFO L495 AbstractCegarLoop]: Abstraction has 84 states and 108 transitions. [2022-07-12 06:18:42,650 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-12 06:18:42,650 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 108 transitions. [2022-07-12 06:18:42,651 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-07-12 06:18:42,652 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:42,652 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:42,652 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-12 06:18:42,652 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:42,653 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:42,653 INFO L85 PathProgramCache]: Analyzing trace with hash -2059110199, now seen corresponding path program 1 times [2022-07-12 06:18:42,653 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:42,653 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1715842933] [2022-07-12 06:18:42,653 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:42,654 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:42,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:42,695 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-12 06:18:42,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:42,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-07-12 06:18:42,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:42,705 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-07-12 06:18:42,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:42,719 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-12 06:18:42,720 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:42,720 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1715842933] [2022-07-12 06:18:42,720 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1715842933] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:42,721 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:42,721 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-12 06:18:42,721 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [146873748] [2022-07-12 06:18:42,721 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:42,722 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-07-12 06:18:42,722 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:42,722 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-12 06:18:42,722 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-12 06:18:42,723 INFO L87 Difference]: Start difference. First operand 84 states and 108 transitions. Second operand has 4 states, 4 states have (on average 8.5) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-07-12 06:18:42,879 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:42,879 INFO L93 Difference]: Finished difference Result 239 states and 313 transitions. [2022-07-12 06:18:42,880 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-12 06:18:42,881 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.5) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 43 [2022-07-12 06:18:42,881 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:42,887 INFO L225 Difference]: With dead ends: 239 [2022-07-12 06:18:42,888 INFO L226 Difference]: Without dead ends: 163 [2022-07-12 06:18:42,891 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-07-12 06:18:42,892 INFO L413 NwaCegarLoop]: 115 mSDtfsCounter, 150 mSDsluCounter, 116 mSDsCounter, 0 mSdLazyCounter, 78 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 156 SdHoareTripleChecker+Valid, 231 SdHoareTripleChecker+Invalid, 119 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 78 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:42,892 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [156 Valid, 231 Invalid, 119 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 78 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-12 06:18:42,893 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 163 states. [2022-07-12 06:18:42,907 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 163 to 157. [2022-07-12 06:18:42,908 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 117 states have (on average 1.2991452991452992) internal successors, (152), 125 states have internal predecessors, (152), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2022-07-12 06:18:42,909 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 201 transitions. [2022-07-12 06:18:42,909 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 201 transitions. Word has length 43 [2022-07-12 06:18:42,909 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:42,909 INFO L495 AbstractCegarLoop]: Abstraction has 157 states and 201 transitions. [2022-07-12 06:18:42,910 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.5) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-07-12 06:18:42,910 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 201 transitions. [2022-07-12 06:18:42,911 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-07-12 06:18:42,913 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:42,913 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:42,913 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-12 06:18:42,914 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:42,914 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:42,914 INFO L85 PathProgramCache]: Analyzing trace with hash 1486842068, now seen corresponding path program 1 times [2022-07-12 06:18:42,914 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:42,915 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [654360753] [2022-07-12 06:18:42,915 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:42,915 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:42,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:42,948 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-12 06:18:42,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:42,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:42,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:42,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-07-12 06:18:42,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:42,980 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:42,981 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:42,981 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [654360753] [2022-07-12 06:18:42,981 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [654360753] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:42,981 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:42,981 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-12 06:18:42,982 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1916558248] [2022-07-12 06:18:42,982 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:42,982 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-12 06:18:42,982 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:42,983 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-12 06:18:42,983 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-12 06:18:42,983 INFO L87 Difference]: Start difference. First operand 157 states and 201 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-12 06:18:43,129 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:43,129 INFO L93 Difference]: Finished difference Result 314 states and 410 transitions. [2022-07-12 06:18:43,130 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-12 06:18:43,130 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 49 [2022-07-12 06:18:43,131 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:43,134 INFO L225 Difference]: With dead ends: 314 [2022-07-12 06:18:43,134 INFO L226 Difference]: Without dead ends: 165 [2022-07-12 06:18:43,136 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-07-12 06:18:43,141 INFO L413 NwaCegarLoop]: 109 mSDtfsCounter, 70 mSDsluCounter, 324 mSDsCounter, 0 mSdLazyCounter, 137 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 73 SdHoareTripleChecker+Valid, 433 SdHoareTripleChecker+Invalid, 160 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 137 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:43,141 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [73 Valid, 433 Invalid, 160 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 137 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-12 06:18:43,142 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 165 states. [2022-07-12 06:18:43,154 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 165 to 160. [2022-07-12 06:18:43,155 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 160 states, 120 states have (on average 1.2916666666666667) internal successors, (155), 128 states have internal predecessors, (155), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2022-07-12 06:18:43,156 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 160 states to 160 states and 204 transitions. [2022-07-12 06:18:43,156 INFO L78 Accepts]: Start accepts. Automaton has 160 states and 204 transitions. Word has length 49 [2022-07-12 06:18:43,156 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:43,156 INFO L495 AbstractCegarLoop]: Abstraction has 160 states and 204 transitions. [2022-07-12 06:18:43,157 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-12 06:18:43,157 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 204 transitions. [2022-07-12 06:18:43,160 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-07-12 06:18:43,160 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:43,161 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:43,161 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-12 06:18:43,161 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:43,162 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:43,163 INFO L85 PathProgramCache]: Analyzing trace with hash 1909543894, now seen corresponding path program 1 times [2022-07-12 06:18:43,164 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:43,164 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2119907555] [2022-07-12 06:18:43,164 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:43,164 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:43,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:43,218 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-12 06:18:43,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:43,225 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:43,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:43,240 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-07-12 06:18:43,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:43,243 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:43,244 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:43,244 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2119907555] [2022-07-12 06:18:43,244 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2119907555] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:43,244 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:43,244 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-12 06:18:43,245 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1387765518] [2022-07-12 06:18:43,245 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:43,245 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-12 06:18:43,245 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:43,246 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-12 06:18:43,246 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-12 06:18:43,246 INFO L87 Difference]: Start difference. First operand 160 states and 204 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-12 06:18:43,349 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:43,349 INFO L93 Difference]: Finished difference Result 322 states and 424 transitions. [2022-07-12 06:18:43,350 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-12 06:18:43,350 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 49 [2022-07-12 06:18:43,351 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:43,352 INFO L225 Difference]: With dead ends: 322 [2022-07-12 06:18:43,352 INFO L226 Difference]: Without dead ends: 170 [2022-07-12 06:18:43,353 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-12 06:18:43,354 INFO L413 NwaCegarLoop]: 109 mSDtfsCounter, 74 mSDsluCounter, 229 mSDsCounter, 0 mSdLazyCounter, 100 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 338 SdHoareTripleChecker+Invalid, 120 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 100 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:43,354 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [78 Valid, 338 Invalid, 120 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 100 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-12 06:18:43,355 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 170 states. [2022-07-12 06:18:43,366 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 170 to 162. [2022-07-12 06:18:43,366 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 162 states, 122 states have (on average 1.2868852459016393) internal successors, (157), 130 states have internal predecessors, (157), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2022-07-12 06:18:43,367 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 162 states to 162 states and 206 transitions. [2022-07-12 06:18:43,368 INFO L78 Accepts]: Start accepts. Automaton has 162 states and 206 transitions. Word has length 49 [2022-07-12 06:18:43,368 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:43,368 INFO L495 AbstractCegarLoop]: Abstraction has 162 states and 206 transitions. [2022-07-12 06:18:43,368 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-12 06:18:43,369 INFO L276 IsEmpty]: Start isEmpty. Operand 162 states and 206 transitions. [2022-07-12 06:18:43,369 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-07-12 06:18:43,369 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:43,370 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:43,370 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-12 06:18:43,370 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:43,370 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:43,371 INFO L85 PathProgramCache]: Analyzing trace with hash 104105560, now seen corresponding path program 1 times [2022-07-12 06:18:43,371 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:43,371 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1522124912] [2022-07-12 06:18:43,371 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:43,371 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:43,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:43,405 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-12 06:18:43,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:43,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:43,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:43,441 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-07-12 06:18:43,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:43,448 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:43,449 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:43,449 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1522124912] [2022-07-12 06:18:43,449 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1522124912] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:43,449 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:43,449 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-12 06:18:43,449 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1669815861] [2022-07-12 06:18:43,449 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:43,451 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-12 06:18:43,451 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:43,451 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-12 06:18:43,452 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-12 06:18:43,452 INFO L87 Difference]: Start difference. First operand 162 states and 206 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-07-12 06:18:43,668 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:43,668 INFO L93 Difference]: Finished difference Result 451 states and 595 transitions. [2022-07-12 06:18:43,669 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-12 06:18:43,669 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 49 [2022-07-12 06:18:43,670 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:43,672 INFO L225 Difference]: With dead ends: 451 [2022-07-12 06:18:43,672 INFO L226 Difference]: Without dead ends: 297 [2022-07-12 06:18:43,673 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 8 SyntacticMatches, 2 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-07-12 06:18:43,674 INFO L413 NwaCegarLoop]: 161 mSDtfsCounter, 220 mSDsluCounter, 193 mSDsCounter, 0 mSdLazyCounter, 171 mSolverCounterSat, 65 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 227 SdHoareTripleChecker+Valid, 354 SdHoareTripleChecker+Invalid, 236 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 65 IncrementalHoareTripleChecker+Valid, 171 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:43,674 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [227 Valid, 354 Invalid, 236 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [65 Valid, 171 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-12 06:18:43,675 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 297 states. [2022-07-12 06:18:43,693 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 297 to 289. [2022-07-12 06:18:43,694 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 289 states, 216 states have (on average 1.2638888888888888) internal successors, (273), 228 states have internal predecessors, (273), 36 states have call successors, (36), 33 states have call predecessors, (36), 36 states have return successors, (62), 37 states have call predecessors, (62), 36 states have call successors, (62) [2022-07-12 06:18:43,695 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 289 states to 289 states and 371 transitions. [2022-07-12 06:18:43,696 INFO L78 Accepts]: Start accepts. Automaton has 289 states and 371 transitions. Word has length 49 [2022-07-12 06:18:43,696 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:43,696 INFO L495 AbstractCegarLoop]: Abstraction has 289 states and 371 transitions. [2022-07-12 06:18:43,696 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-07-12 06:18:43,697 INFO L276 IsEmpty]: Start isEmpty. Operand 289 states and 371 transitions. [2022-07-12 06:18:43,697 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-07-12 06:18:43,697 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:43,698 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:43,698 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-12 06:18:43,698 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:43,699 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:43,699 INFO L85 PathProgramCache]: Analyzing trace with hash 528797415, now seen corresponding path program 1 times [2022-07-12 06:18:43,699 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:43,699 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1849366102] [2022-07-12 06:18:43,699 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:43,700 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:43,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:43,743 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-12 06:18:43,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:43,750 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:43,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:43,755 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:18:43,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:43,757 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-07-12 06:18:43,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:43,767 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:43,767 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:43,767 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1849366102] [2022-07-12 06:18:43,768 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1849366102] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:43,768 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:43,768 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-12 06:18:43,768 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [555771594] [2022-07-12 06:18:43,768 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:43,769 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-12 06:18:43,769 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:43,769 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-12 06:18:43,769 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-12 06:18:43,770 INFO L87 Difference]: Start difference. First operand 289 states and 371 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-12 06:18:44,020 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:44,020 INFO L93 Difference]: Finished difference Result 851 states and 1121 transitions. [2022-07-12 06:18:44,021 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-07-12 06:18:44,021 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2022-07-12 06:18:44,021 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:44,025 INFO L225 Difference]: With dead ends: 851 [2022-07-12 06:18:44,028 INFO L226 Difference]: Without dead ends: 570 [2022-07-12 06:18:44,030 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-07-12 06:18:44,031 INFO L413 NwaCegarLoop]: 93 mSDtfsCounter, 179 mSDsluCounter, 326 mSDsCounter, 0 mSdLazyCounter, 233 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 187 SdHoareTripleChecker+Valid, 419 SdHoareTripleChecker+Invalid, 296 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 233 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:44,031 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [187 Valid, 419 Invalid, 296 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 233 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-12 06:18:44,032 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 570 states. [2022-07-12 06:18:44,067 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 570 to 550. [2022-07-12 06:18:44,069 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 550 states, 405 states have (on average 1.2246913580246914) internal successors, (496), 428 states have internal predecessors, (496), 72 states have call successors, (72), 66 states have call predecessors, (72), 72 states have return successors, (129), 74 states have call predecessors, (129), 72 states have call successors, (129) [2022-07-12 06:18:44,073 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 550 states to 550 states and 697 transitions. [2022-07-12 06:18:44,073 INFO L78 Accepts]: Start accepts. Automaton has 550 states and 697 transitions. Word has length 51 [2022-07-12 06:18:44,074 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:44,074 INFO L495 AbstractCegarLoop]: Abstraction has 550 states and 697 transitions. [2022-07-12 06:18:44,074 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-12 06:18:44,075 INFO L276 IsEmpty]: Start isEmpty. Operand 550 states and 697 transitions. [2022-07-12 06:18:44,076 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-07-12 06:18:44,076 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:44,076 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:44,076 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-12 06:18:44,076 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:44,077 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:44,077 INFO L85 PathProgramCache]: Analyzing trace with hash 412611307, now seen corresponding path program 1 times [2022-07-12 06:18:44,085 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:44,085 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [521302610] [2022-07-12 06:18:44,086 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:44,086 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:44,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:44,128 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-12 06:18:44,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:44,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-12 06:18:44,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:44,144 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:44,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:44,151 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:18:44,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:44,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-07-12 06:18:44,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:44,156 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:44,156 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:44,156 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [521302610] [2022-07-12 06:18:44,156 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [521302610] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:44,157 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:44,157 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-12 06:18:44,157 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [857152573] [2022-07-12 06:18:44,157 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:44,157 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-12 06:18:44,157 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:44,158 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-12 06:18:44,158 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-12 06:18:44,158 INFO L87 Difference]: Start difference. First operand 550 states and 697 transitions. Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 1 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-12 06:18:44,501 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:44,501 INFO L93 Difference]: Finished difference Result 1108 states and 1417 transitions. [2022-07-12 06:18:44,501 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-07-12 06:18:44,502 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 1 states have call predecessors, (5), 2 states have call successors, (5) Word has length 55 [2022-07-12 06:18:44,502 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:44,505 INFO L225 Difference]: With dead ends: 1108 [2022-07-12 06:18:44,505 INFO L226 Difference]: Without dead ends: 566 [2022-07-12 06:18:44,506 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=84, Invalid=188, Unknown=0, NotChecked=0, Total=272 [2022-07-12 06:18:44,507 INFO L413 NwaCegarLoop]: 94 mSDtfsCounter, 205 mSDsluCounter, 104 mSDsCounter, 0 mSdLazyCounter, 393 mSolverCounterSat, 82 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 207 SdHoareTripleChecker+Valid, 198 SdHoareTripleChecker+Invalid, 475 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 82 IncrementalHoareTripleChecker+Valid, 393 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:44,507 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [207 Valid, 198 Invalid, 475 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [82 Valid, 393 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-12 06:18:44,508 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 566 states. [2022-07-12 06:18:44,526 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 566 to 546. [2022-07-12 06:18:44,527 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 546 states, 401 states have (on average 1.2069825436408979) internal successors, (484), 424 states have internal predecessors, (484), 72 states have call successors, (72), 66 states have call predecessors, (72), 72 states have return successors, (129), 74 states have call predecessors, (129), 72 states have call successors, (129) [2022-07-12 06:18:44,549 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 546 states to 546 states and 685 transitions. [2022-07-12 06:18:44,549 INFO L78 Accepts]: Start accepts. Automaton has 546 states and 685 transitions. Word has length 55 [2022-07-12 06:18:44,550 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:44,550 INFO L495 AbstractCegarLoop]: Abstraction has 546 states and 685 transitions. [2022-07-12 06:18:44,550 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 1 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-12 06:18:44,550 INFO L276 IsEmpty]: Start isEmpty. Operand 546 states and 685 transitions. [2022-07-12 06:18:44,551 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-07-12 06:18:44,551 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:44,551 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:44,551 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-12 06:18:44,552 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:44,552 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:44,552 INFO L85 PathProgramCache]: Analyzing trace with hash 1762581378, now seen corresponding path program 1 times [2022-07-12 06:18:44,552 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:44,552 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [348884166] [2022-07-12 06:18:44,552 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:44,553 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:44,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:44,578 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:18:44,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:44,585 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-12 06:18:44,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:44,592 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-12 06:18:44,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:44,597 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:44,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:44,600 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-07-12 06:18:44,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:44,602 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:44,603 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:44,603 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [348884166] [2022-07-12 06:18:44,603 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [348884166] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:44,603 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:44,603 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-12 06:18:44,603 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1353757960] [2022-07-12 06:18:44,604 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:44,604 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-12 06:18:44,604 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:44,605 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-12 06:18:44,605 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-12 06:18:44,605 INFO L87 Difference]: Start difference. First operand 546 states and 685 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-12 06:18:45,022 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:45,023 INFO L93 Difference]: Finished difference Result 1070 states and 1414 transitions. [2022-07-12 06:18:45,023 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-07-12 06:18:45,024 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 57 [2022-07-12 06:18:45,024 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:45,030 INFO L225 Difference]: With dead ends: 1070 [2022-07-12 06:18:45,031 INFO L226 Difference]: Without dead ends: 1068 [2022-07-12 06:18:45,032 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2022-07-12 06:18:45,033 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 455 mSDsluCounter, 76 mSDsCounter, 0 mSdLazyCounter, 308 mSolverCounterSat, 245 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 456 SdHoareTripleChecker+Valid, 176 SdHoareTripleChecker+Invalid, 553 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 245 IncrementalHoareTripleChecker+Valid, 308 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:45,033 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [456 Valid, 176 Invalid, 553 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [245 Valid, 308 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-12 06:18:45,034 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1068 states. [2022-07-12 06:18:45,104 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1068 to 830. [2022-07-12 06:18:45,106 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 830 states, 608 states have (on average 1.2105263157894737) internal successors, (736), 652 states have internal predecessors, (736), 114 states have call successors, (114), 84 states have call predecessors, (114), 107 states have return successors, (244), 116 states have call predecessors, (244), 114 states have call successors, (244) [2022-07-12 06:18:45,111 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 830 states to 830 states and 1094 transitions. [2022-07-12 06:18:45,112 INFO L78 Accepts]: Start accepts. Automaton has 830 states and 1094 transitions. Word has length 57 [2022-07-12 06:18:45,112 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:45,112 INFO L495 AbstractCegarLoop]: Abstraction has 830 states and 1094 transitions. [2022-07-12 06:18:45,113 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-12 06:18:45,113 INFO L276 IsEmpty]: Start isEmpty. Operand 830 states and 1094 transitions. [2022-07-12 06:18:45,116 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 101 [2022-07-12 06:18:45,116 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:45,116 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:45,117 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-07-12 06:18:45,117 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:45,117 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:45,118 INFO L85 PathProgramCache]: Analyzing trace with hash -664407980, now seen corresponding path program 1 times [2022-07-12 06:18:45,118 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:45,118 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1688072272] [2022-07-12 06:18:45,118 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:45,118 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:45,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:18:45,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,171 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-12 06:18:45,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,181 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-12 06:18:45,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,202 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-12 06:18:45,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,209 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:45,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,218 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-12 06:18:45,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,221 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-07-12 06:18:45,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,224 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:45,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,226 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2022-07-12 06:18:45,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,228 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 20 proven. 6 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-07-12 06:18:45,228 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:45,228 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1688072272] [2022-07-12 06:18:45,229 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1688072272] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-12 06:18:45,229 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1262072367] [2022-07-12 06:18:45,229 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:45,229 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-12 06:18:45,229 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 06:18:45,231 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-12 06:18:45,265 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-12 06:18:45,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,326 INFO L263 TraceCheckSpWp]: Trace formula consists of 486 conjuncts, 4 conjunts are in the unsatisfiable core [2022-07-12 06:18:45,331 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 06:18:45,403 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 40 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:45,404 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-12 06:18:45,404 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1262072367] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:45,404 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-12 06:18:45,404 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [10] total 10 [2022-07-12 06:18:45,404 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [854666930] [2022-07-12 06:18:45,404 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:45,405 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-12 06:18:45,405 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:45,405 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-12 06:18:45,405 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2022-07-12 06:18:45,405 INFO L87 Difference]: Start difference. First operand 830 states and 1094 transitions. Second operand has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-07-12 06:18:45,476 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:45,476 INFO L93 Difference]: Finished difference Result 1436 states and 1934 transitions. [2022-07-12 06:18:45,477 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-12 06:18:45,477 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 100 [2022-07-12 06:18:45,477 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:45,480 INFO L225 Difference]: With dead ends: 1436 [2022-07-12 06:18:45,480 INFO L226 Difference]: Without dead ends: 718 [2022-07-12 06:18:45,482 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 127 GetRequests, 119 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2022-07-12 06:18:45,483 INFO L413 NwaCegarLoop]: 150 mSDtfsCounter, 51 mSDsluCounter, 69 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 219 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:45,483 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 219 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 06:18:45,484 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 718 states. [2022-07-12 06:18:45,506 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 718 to 718. [2022-07-12 06:18:45,507 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 718 states, 525 states have (on average 1.1866666666666668) internal successors, (623), 564 states have internal predecessors, (623), 99 states have call successors, (99), 77 states have call predecessors, (99), 93 states have return successors, (155), 99 states have call predecessors, (155), 99 states have call successors, (155) [2022-07-12 06:18:45,528 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 718 states to 718 states and 877 transitions. [2022-07-12 06:18:45,529 INFO L78 Accepts]: Start accepts. Automaton has 718 states and 877 transitions. Word has length 100 [2022-07-12 06:18:45,529 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:45,529 INFO L495 AbstractCegarLoop]: Abstraction has 718 states and 877 transitions. [2022-07-12 06:18:45,529 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-07-12 06:18:45,529 INFO L276 IsEmpty]: Start isEmpty. Operand 718 states and 877 transitions. [2022-07-12 06:18:45,531 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2022-07-12 06:18:45,531 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:45,547 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:45,570 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-12 06:18:45,765 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-07-12 06:18:45,766 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:45,766 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:45,766 INFO L85 PathProgramCache]: Analyzing trace with hash -2099189228, now seen corresponding path program 1 times [2022-07-12 06:18:45,766 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:45,767 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [816923768] [2022-07-12 06:18:45,767 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:45,767 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:45,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,854 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:18:45,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-12 06:18:45,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,896 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-12 06:18:45,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,908 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-12 06:18:45,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,911 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:45,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-12 06:18:45,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,914 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-07-12 06:18:45,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-07-12 06:18:45,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-12 06:18:45,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:45,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2022-07-12 06:18:45,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,941 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-12 06:18:45,942 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:45,942 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [816923768] [2022-07-12 06:18:45,942 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [816923768] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-12 06:18:45,942 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1076497456] [2022-07-12 06:18:45,942 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:45,942 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-12 06:18:45,942 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 06:18:45,956 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-12 06:18:46,033 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-12 06:18:46,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:46,132 INFO L263 TraceCheckSpWp]: Trace formula consists of 509 conjuncts, 8 conjunts are in the unsatisfiable core [2022-07-12 06:18:46,136 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 06:18:46,283 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-07-12 06:18:46,283 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-12 06:18:46,283 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1076497456] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:46,284 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-12 06:18:46,284 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [14] total 18 [2022-07-12 06:18:46,284 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1669021679] [2022-07-12 06:18:46,284 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:46,285 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-12 06:18:46,285 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:46,286 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-12 06:18:46,286 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=41, Invalid=265, Unknown=0, NotChecked=0, Total=306 [2022-07-12 06:18:46,286 INFO L87 Difference]: Start difference. First operand 718 states and 877 transitions. Second operand has 7 states, 7 states have (on average 12.0) internal successors, (84), 6 states have internal predecessors, (84), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2022-07-12 06:18:46,398 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:46,399 INFO L93 Difference]: Finished difference Result 1292 states and 1573 transitions. [2022-07-12 06:18:46,399 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-12 06:18:46,399 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.0) internal successors, (84), 6 states have internal predecessors, (84), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) Word has length 110 [2022-07-12 06:18:46,400 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:46,401 INFO L225 Difference]: With dead ends: 1292 [2022-07-12 06:18:46,401 INFO L226 Difference]: Without dead ends: 0 [2022-07-12 06:18:46,404 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 143 GetRequests, 124 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 33 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=62, Invalid=358, Unknown=0, NotChecked=0, Total=420 [2022-07-12 06:18:46,405 INFO L413 NwaCegarLoop]: 183 mSDtfsCounter, 46 mSDsluCounter, 679 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 862 SdHoareTripleChecker+Invalid, 66 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:46,405 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [47 Valid, 862 Invalid, 66 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 06:18:46,406 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-12 06:18:46,406 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-12 06:18:46,406 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-12 06:18:46,406 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-12 06:18:46,406 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 110 [2022-07-12 06:18:46,407 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:46,407 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-12 06:18:46,407 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.0) internal successors, (84), 6 states have internal predecessors, (84), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2022-07-12 06:18:46,407 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-12 06:18:46,407 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-12 06:18:46,410 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-12 06:18:46,454 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-12 06:18:46,623 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-07-12 06:18:46,626 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-12 06:18:50,824 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 624 631) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0))) (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0))))) [2022-07-12 06:18:50,825 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 624 631) no Hoare annotation was computed. [2022-07-12 06:18:50,825 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 624 631) no Hoare annotation was computed. [2022-07-12 06:18:50,825 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 531 537) no Hoare annotation was computed. [2022-07-12 06:18:50,825 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 531 537) the Hoare annotation is: true [2022-07-12 06:18:50,825 INFO L899 garLoopResultBuilder]: For program point L897-1(lines 893 904) no Hoare annotation was computed. [2022-07-12 06:18:50,826 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 893 904) the Hoare annotation is: (let ((.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse4 (not (= ~methAndRunningLastTime~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse3 (not (<= 1 ~pumpRunning~0))) (.cse6 (not (<= 1 |old(~methaneLevelCritical~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse2 .cse6 .cse4) (or .cse0 .cse5 .cse1 .cse2 .cse4) (or .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3 .cse6))) [2022-07-12 06:18:50,826 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 893 904) no Hoare annotation was computed. [2022-07-12 06:18:50,826 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 905 913) the Hoare annotation is: true [2022-07-12 06:18:50,826 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 905 913) no Hoare annotation was computed. [2022-07-12 06:18:50,826 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 905 913) no Hoare annotation was computed. [2022-07-12 06:18:50,827 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 767 796) no Hoare annotation was computed. [2022-07-12 06:18:50,827 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 767 796) the Hoare annotation is: true [2022-07-12 06:18:50,827 INFO L902 garLoopResultBuilder]: At program point L792(lines 767 796) the Hoare annotation is: true [2022-07-12 06:18:50,827 INFO L899 garLoopResultBuilder]: For program point L788(line 788) no Hoare annotation was computed. [2022-07-12 06:18:50,827 INFO L899 garLoopResultBuilder]: For program point L781(lines 781 785) no Hoare annotation was computed. [2022-07-12 06:18:50,827 INFO L902 garLoopResultBuilder]: At program point L781-1(lines 781 785) the Hoare annotation is: true [2022-07-12 06:18:50,827 INFO L899 garLoopResultBuilder]: For program point L778(line 778) no Hoare annotation was computed. [2022-07-12 06:18:50,827 INFO L902 garLoopResultBuilder]: At program point L777-2(lines 777 791) the Hoare annotation is: true [2022-07-12 06:18:50,827 INFO L902 garLoopResultBuilder]: At program point L773(line 773) the Hoare annotation is: true [2022-07-12 06:18:50,827 INFO L899 garLoopResultBuilder]: For program point L773-1(line 773) no Hoare annotation was computed. [2022-07-12 06:18:50,828 INFO L895 garLoopResultBuilder]: At program point L605(line 605) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse3) (or .cse2 .cse4 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse5))) [2022-07-12 06:18:50,828 INFO L895 garLoopResultBuilder]: At program point L601(line 601) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse7 (<= 1 |timeShift_processEnvironment_~tmp~6#1|))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 (and .cse5 (= ~methAndRunningLastTime~0 0) .cse6 .cse7) .cse3) (or .cse5 .cse2 .cse4 .cse8) (or .cse0 .cse1 .cse2 .cse8) (or .cse2 .cse4 .cse3 (and .cse5 .cse6 .cse7) (not (<= 2 |old(~waterLevel~0)|))))) [2022-07-12 06:18:50,828 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 507 530) no Hoare annotation was computed. [2022-07-12 06:18:50,828 INFO L895 garLoopResultBuilder]: At program point L742(line 742) the Hoare annotation is: (let ((.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse13 (= ~pumpRunning~0 0)) (.cse15 (<= 1 ~methaneLevelCritical~0)) (.cse14 (= 1 ~systemActive~0))) (let ((.cse8 (and .cse13 .cse15 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) .cse14)) (.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse7 (not .cse15)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse9 (and .cse13 .cse12)) (.cse4 (not .cse14)) (.cse10 (<= 1 ~pumpRunning~0)) (.cse11 (<= 2 ~waterLevel~0)) (.cse5 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse4 .cse6 .cse7 (not (<= 2 |old(~waterLevel~0)|)) .cse8) (or .cse1 .cse4 .cse6 .cse7 .cse8) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse7) (or .cse0 .cse1 .cse9 .cse4 (and .cse10 .cse2 .cse11 .cse12) .cse7) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse13 .cse4 .cse6 .cse5) (or .cse0 .cse1 .cse9 .cse4 (and .cse10 .cse11 .cse12) .cse5)))) [2022-07-12 06:18:50,828 INFO L899 garLoopResultBuilder]: For program point L742-1(line 742) no Hoare annotation was computed. [2022-07-12 06:18:50,828 INFO L895 garLoopResultBuilder]: At program point L610(line 610) the Hoare annotation is: (let ((.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (= ~pumpRunning~0 0)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 (not (= |old(~waterLevel~0)| 1)) .cse3 .cse4) (or .cse1 .cse3 .cse5 .cse6) (or .cse3 .cse5 .cse4) (or .cse3 .cse5 .cse6 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse3 (and .cse7 .cse2 .cse8) .cse6) (or .cse0 .cse1 (and .cse7 .cse8) .cse3 .cse4))) [2022-07-12 06:18:50,829 INFO L895 garLoopResultBuilder]: At program point L610-1(lines 591 615) the Hoare annotation is: (let ((.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse13 (= ~pumpRunning~0 0)) (.cse15 (<= 1 ~methaneLevelCritical~0)) (.cse14 (= 1 ~systemActive~0))) (let ((.cse8 (and .cse13 .cse15 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) .cse14)) (.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse7 (not .cse15)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse9 (and .cse13 .cse12)) (.cse4 (not .cse14)) (.cse10 (<= 1 ~pumpRunning~0)) (.cse11 (<= 2 ~waterLevel~0)) (.cse5 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse4 .cse6 .cse7 (not (<= 2 |old(~waterLevel~0)|)) .cse8) (or .cse1 .cse4 .cse6 .cse7 .cse8) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse7) (or .cse0 .cse1 .cse9 .cse4 (and .cse10 .cse2 .cse11 .cse12) .cse7) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse13 .cse4 .cse6 .cse5) (or .cse0 .cse1 .cse9 .cse4 (and .cse10 .cse11 .cse12) .cse5)))) [2022-07-12 06:18:50,829 INFO L895 garLoopResultBuilder]: At program point L639(lines 632 642) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (<= 1 |timeShift_isMethaneAlarm_#res#1|))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse6) (or .cse1 .cse2 .cse5 .cse3 (and .cse4 (= ~methAndRunningLastTime~0 0) .cse7)) (or .cse2 .cse5 .cse3 (and .cse4 .cse7) (not (<= 2 |old(~waterLevel~0)|))))) [2022-07-12 06:18:50,829 INFO L899 garLoopResultBuilder]: For program point L511-1(lines 510 529) no Hoare annotation was computed. [2022-07-12 06:18:50,829 INFO L895 garLoopResultBuilder]: At program point L648(lines 643 651) the Hoare annotation is: (let ((.cse9 (= ~pumpRunning~0 0)) (.cse10 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse11 (= 1 ~systemActive~0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse7 (and .cse9 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse10 (<= 1 |timeShift_processEnvironment_~tmp~6#1|) .cse11)) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not .cse11)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse0 .cse2) (or .cse3 .cse4 .cse5 (not (= |old(~waterLevel~0)| 1)) .cse0 .cse6) (or .cse7 .cse0 .cse1 .cse6 (not (<= 2 |old(~waterLevel~0)|))) (let ((.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse3 .cse4 .cse0 (and (<= 1 ~pumpRunning~0) .cse5 (<= 2 ~waterLevel~0) .cse8) .cse6 (and .cse9 .cse10 .cse8))) (or .cse7 .cse4 .cse0 .cse1 .cse6)))) [2022-07-12 06:18:50,829 INFO L899 garLoopResultBuilder]: For program point L599(lines 599 607) no Hoare annotation was computed. [2022-07-12 06:18:50,829 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2022-07-12 06:18:50,829 INFO L899 garLoopResultBuilder]: For program point L595(lines 595 612) no Hoare annotation was computed. [2022-07-12 06:18:50,829 INFO L899 garLoopResultBuilder]: For program point L748(lines 748 758) no Hoare annotation was computed. [2022-07-12 06:18:50,829 INFO L899 garLoopResultBuilder]: For program point L744(lines 744 761) no Hoare annotation was computed. [2022-07-12 06:18:50,830 INFO L895 garLoopResultBuilder]: At program point L744-1(lines 736 764) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0))) (let ((.cse0 (and .cse6 .cse7 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse9 (<= 1 ~pumpRunning~0)) (.cse10 (<= 2 ~waterLevel~0)) (.cse11 (not (= ~methaneLevelCritical~0 0))) (.cse12 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1| 0)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse5 .cse1 (and .cse6 .cse7 .cse8) (and .cse9 .cse10 .cse8) .cse3) (or .cse5 .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse11 (and .cse6 .cse7 .cse12) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7 .cse12)) (or .cse4 .cse5 .cse1 (and .cse9 .cse7 .cse10 .cse12 .cse8) .cse11 (and .cse6 .cse7 .cse12 .cse8))))) [2022-07-12 06:18:50,830 INFO L895 garLoopResultBuilder]: At program point L637(line 637) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse6) (or .cse1 .cse2 .cse5 (and .cse4 (= ~methAndRunningLastTime~0 0)) .cse3))) [2022-07-12 06:18:50,830 INFO L899 garLoopResultBuilder]: For program point L637-1(line 637) no Hoare annotation was computed. [2022-07-12 06:18:50,830 INFO L895 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: (let ((.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse3) (or .cse2 .cse4 .cse5) (or .cse2 .cse4 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 .cse5))) [2022-07-12 06:18:50,830 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 507 530) the Hoare annotation is: (let ((.cse9 (= ~methAndRunningLastTime~0 0)) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (and .cse8 .cse10)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (and (= ~pumpRunning~0 0) .cse9 .cse10)) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse0 .cse6 .cse2) (or .cse0 .cse1 .cse7 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse5 .cse0 .cse6 .cse7) (or (and .cse8 .cse9 .cse10) .cse5 .cse0 .cse1 .cse7)))) [2022-07-12 06:18:50,830 INFO L899 garLoopResultBuilder]: For program point L749(lines 749 755) no Hoare annotation was computed. [2022-07-12 06:18:50,831 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 507 530) no Hoare annotation was computed. [2022-07-12 06:18:50,831 INFO L899 garLoopResultBuilder]: For program point L873(lines 873 877) no Hoare annotation was computed. [2022-07-12 06:18:50,831 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-07-12 06:18:50,831 INFO L895 garLoopResultBuilder]: At program point L873-2(lines 869 880) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse6) (or .cse1 .cse2 .cse5 (and .cse4 (= ~methAndRunningLastTime~0 0)) .cse3))) [2022-07-12 06:18:50,832 INFO L899 garLoopResultBuilder]: For program point L518-1(lines 518 524) no Hoare annotation was computed. [2022-07-12 06:18:50,832 INFO L895 garLoopResultBuilder]: At program point L733(lines 728 735) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-12 06:18:50,832 INFO L899 garLoopResultBuilder]: For program point L93(lines 93 99) no Hoare annotation was computed. [2022-07-12 06:18:50,832 INFO L902 garLoopResultBuilder]: At program point L861(lines 842 864) the Hoare annotation is: true [2022-07-12 06:18:50,832 INFO L899 garLoopResultBuilder]: For program point L93-1(lines 93 99) no Hoare annotation was computed. [2022-07-12 06:18:50,832 INFO L902 garLoopResultBuilder]: At program point L122(lines 63 126) the Hoare annotation is: true [2022-07-12 06:18:50,833 INFO L895 garLoopResultBuilder]: At program point L985(lines 981 987) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-12 06:18:50,833 INFO L895 garLoopResultBuilder]: At program point L85(line 85) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-07-12 06:18:50,833 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-12 06:18:50,833 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-12 06:18:50,833 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-12 06:18:50,833 INFO L895 garLoopResultBuilder]: At program point L825(lines 821 827) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-12 06:18:50,834 INFO L895 garLoopResultBuilder]: At program point L119(lines 72 120) the Hoare annotation is: false [2022-07-12 06:18:50,835 INFO L899 garLoopResultBuilder]: For program point L74(lines 73 118) no Hoare annotation was computed. [2022-07-12 06:18:50,835 INFO L899 garLoopResultBuilder]: For program point L103(lines 103 114) no Hoare annotation was computed. [2022-07-12 06:18:50,835 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-12 06:18:50,835 INFO L895 garLoopResultBuilder]: At program point L95(line 95) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-07-12 06:18:50,835 INFO L895 garLoopResultBuilder]: At program point L116(lines 73 118) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-07-12 06:18:50,836 INFO L899 garLoopResultBuilder]: For program point L83(lines 83 89) no Hoare annotation was computed. [2022-07-12 06:18:50,836 INFO L899 garLoopResultBuilder]: For program point L83-1(lines 83 89) no Hoare annotation was computed. [2022-07-12 06:18:50,836 INFO L899 garLoopResultBuilder]: For program point L75(lines 75 79) no Hoare annotation was computed. [2022-07-12 06:18:50,836 INFO L895 garLoopResultBuilder]: At program point L1000(lines 995 1003) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-12 06:18:50,837 INFO L895 garLoopResultBuilder]: At program point L992(lines 988 994) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-12 06:18:50,837 INFO L899 garLoopResultBuilder]: For program point L852(lines 852 859) no Hoare annotation was computed. [2022-07-12 06:18:50,837 INFO L899 garLoopResultBuilder]: For program point L852-2(lines 852 859) no Hoare annotation was computed. [2022-07-12 06:18:50,837 INFO L899 garLoopResultBuilder]: For program point L109(lines 109 113) no Hoare annotation was computed. [2022-07-12 06:18:50,838 INFO L895 garLoopResultBuilder]: At program point L109-2(lines 103 114) the Hoare annotation is: (let ((.cse6 (= ~methaneLevelCritical~0 0)) (.cse7 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse6 .cse2 .cse3 .cse4 .cse5) (and .cse7 .cse8 .cse6 .cse2 .cse3 .cse4 .cse5) (and .cse7 .cse8 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse8 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-07-12 06:18:50,838 INFO L902 garLoopResultBuilder]: At program point L836(lines 828 838) the Hoare annotation is: true [2022-07-12 06:18:50,839 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 539 563) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))))) [2022-07-12 06:18:50,839 INFO L899 garLoopResultBuilder]: For program point L543(lines 543 560) no Hoare annotation was computed. [2022-07-12 06:18:50,839 INFO L899 garLoopResultBuilder]: For program point L950(lines 950 956) no Hoare annotation was computed. [2022-07-12 06:18:50,839 INFO L895 garLoopResultBuilder]: At program point L558(line 558) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse1))) [2022-07-12 06:18:50,839 INFO L899 garLoopResultBuilder]: For program point L558-1(lines 539 563) no Hoare annotation was computed. [2022-07-12 06:18:50,839 INFO L895 garLoopResultBuilder]: At program point L703(lines 688 706) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse6 (= 1 ~systemActive~0))) (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse6)) (.cse3 (and .cse5 (<= 2 ~waterLevel~0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) .cse6 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 .cse1 .cse3 .cse4) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4 (not (= ~methAndRunningLastTime~0 0)))))) [2022-07-12 06:18:50,839 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 539 563) no Hoare annotation was computed. [2022-07-12 06:18:50,840 INFO L895 garLoopResultBuilder]: At program point L955(lines 946 959) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (and .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1))) (.cse4 (and .cse5 (<= 2 ~waterLevel~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 .cse3 .cse1 .cse4) (or .cse2 .cse0 .cse3 (not (<= 1 ~methaneLevelCritical~0)) .cse4 (not (= ~methAndRunningLastTime~0 0)))))) [2022-07-12 06:18:50,840 INFO L899 garLoopResultBuilder]: For program point L697(lines 697 701) no Hoare annotation was computed. [2022-07-12 06:18:50,840 INFO L899 garLoopResultBuilder]: For program point L697-2(lines 697 701) no Hoare annotation was computed. [2022-07-12 06:18:50,840 INFO L895 garLoopResultBuilder]: At program point L621(lines 616 623) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse3 .cse0 .cse1))) [2022-07-12 06:18:50,840 INFO L895 garLoopResultBuilder]: At program point L553(line 553) the Hoare annotation is: (let ((.cse4 (= 1 ~systemActive~0))) (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse4)) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| 0) .cse4))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 .cse1 .cse3) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse3 (not (= ~methAndRunningLastTime~0 0)))))) [2022-07-12 06:18:50,840 INFO L899 garLoopResultBuilder]: For program point L547(lines 547 555) no Hoare annotation was computed. [2022-07-12 06:18:50,840 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 881 892) no Hoare annotation was computed. [2022-07-12 06:18:50,841 INFO L899 garLoopResultBuilder]: For program point L885-1(lines 881 892) no Hoare annotation was computed. [2022-07-12 06:18:50,841 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 881 892) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (<= 1 ~pumpRunning~0))) (.cse4 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse0 .cse1 .cse3 .cse5) (or .cse0 .cse6 .cse2 .cse3 .cse5) (or .cse4 .cse0 .cse6 .cse3 .cse5))) [2022-07-12 06:18:50,842 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 565 589) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))))) [2022-07-12 06:18:50,842 INFO L895 garLoopResultBuilder]: At program point L965(lines 960 968) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse1))) [2022-07-12 06:18:50,842 INFO L895 garLoopResultBuilder]: At program point L579(line 579) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse1))) [2022-07-12 06:18:50,843 INFO L895 garLoopResultBuilder]: At program point L575(line 575) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse1))) [2022-07-12 06:18:50,843 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 565 589) no Hoare annotation was computed. [2022-07-12 06:18:50,843 INFO L899 garLoopResultBuilder]: For program point L573(lines 573 581) no Hoare annotation was computed. [2022-07-12 06:18:50,843 INFO L899 garLoopResultBuilder]: For program point L569(lines 569 586) no Hoare annotation was computed. [2022-07-12 06:18:50,843 INFO L895 garLoopResultBuilder]: At program point L722(lines 707 725) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse1))) [2022-07-12 06:18:50,843 INFO L899 garLoopResultBuilder]: For program point L716(lines 716 720) no Hoare annotation was computed. [2022-07-12 06:18:50,843 INFO L899 garLoopResultBuilder]: For program point L716-2(lines 716 720) no Hoare annotation was computed. [2022-07-12 06:18:50,844 INFO L895 garLoopResultBuilder]: At program point L584(line 584) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))))) [2022-07-12 06:18:50,844 INFO L899 garLoopResultBuilder]: For program point L584-1(lines 565 589) no Hoare annotation was computed. [2022-07-12 06:18:50,847 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:50,850 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-12 06:18:50,893 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 12.07 06:18:50 BoogieIcfgContainer [2022-07-12 06:18:50,893 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-12 06:18:50,894 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-12 06:18:50,894 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-12 06:18:50,894 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-12 06:18:50,895 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 06:18:41" (3/4) ... [2022-07-12 06:18:50,898 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-12 06:18:50,903 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-07-12 06:18:50,903 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-12 06:18:50,903 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-12 06:18:50,903 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-07-12 06:18:50,903 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-12 06:18:50,903 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-12 06:18:50,904 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-12 06:18:50,904 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-12 06:18:50,904 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2022-07-12 06:18:50,916 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2022-07-12 06:18:50,917 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-12 06:18:50,917 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-12 06:18:50,917 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-12 06:18:50,918 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-12 06:18:50,918 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-12 06:18:50,918 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-12 06:18:50,942 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-07-12 06:18:50,943 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-07-12 06:18:50,943 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-07-12 06:18:50,943 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0)) || ((((((1 <= pumpRunning && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) [2022-07-12 06:18:50,944 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical)) [2022-07-12 06:18:50,945 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && 1 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && 1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) [2022-07-12 06:18:50,946 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical))) && ((((!(\old(methAndRunningLastTime) == 0) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0) && \old(waterLevel) == waterLevel)) [2022-07-12 06:18:50,947 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || !(2 <= \old(waterLevel))) [2022-07-12 06:18:50,947 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((((((pumpRunning == 0 && 1 <= \result) && \result == 0) && 1 <= tmp) && 1 == systemActive) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel))) && ((((((((pumpRunning == 0 && 1 <= \result) && \result == 0) && 1 <= tmp) && 1 == systemActive) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) [2022-07-12 06:18:50,947 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2022-07-12 06:18:50,947 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) [2022-07-12 06:18:50,948 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2022-07-12 06:18:50,948 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2022-07-12 06:18:50,948 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && 1 == systemActive) && \result == 0))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && 1 == systemActive) && \result == 0)) || !(methAndRunningLastTime == 0)) [2022-07-12 06:18:50,952 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2022-07-12 06:18:50,989 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-12 06:18:50,989 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-12 06:18:50,990 INFO L158 Benchmark]: Toolchain (without parser) took 10418.29ms. Allocated memory was 96.5MB in the beginning and 146.8MB in the end (delta: 50.3MB). Free memory was 63.9MB in the beginning and 38.2MB in the end (delta: 25.7MB). Peak memory consumption was 77.7MB. Max. memory is 16.1GB. [2022-07-12 06:18:50,990 INFO L158 Benchmark]: CDTParser took 0.34ms. Allocated memory is still 79.7MB. Free memory was 46.9MB in the beginning and 46.9MB in the end (delta: 48.3kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-12 06:18:50,990 INFO L158 Benchmark]: CACSL2BoogieTranslator took 407.22ms. Allocated memory is still 96.5MB. Free memory was 63.7MB in the beginning and 44.5MB in the end (delta: 19.2MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-07-12 06:18:50,990 INFO L158 Benchmark]: Boogie Procedure Inliner took 52.11ms. Allocated memory is still 96.5MB. Free memory was 44.5MB in the beginning and 41.9MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-12 06:18:50,991 INFO L158 Benchmark]: Boogie Preprocessor took 76.76ms. Allocated memory is still 96.5MB. Free memory was 41.9MB in the beginning and 73.9MB in the end (delta: -32.0MB). Peak memory consumption was 3.8MB. Max. memory is 16.1GB. [2022-07-12 06:18:50,991 INFO L158 Benchmark]: RCFGBuilder took 456.45ms. Allocated memory is still 96.5MB. Free memory was 73.9MB in the beginning and 56.7MB in the end (delta: 17.1MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2022-07-12 06:18:50,991 INFO L158 Benchmark]: TraceAbstraction took 9324.10ms. Allocated memory was 96.5MB in the beginning and 146.8MB in the end (delta: 50.3MB). Free memory was 56.1MB in the beginning and 44.5MB in the end (delta: 11.6MB). Peak memory consumption was 80.5MB. Max. memory is 16.1GB. [2022-07-12 06:18:50,992 INFO L158 Benchmark]: Witness Printer took 95.47ms. Allocated memory is still 146.8MB. Free memory was 44.5MB in the beginning and 38.2MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-12 06:18:50,995 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.34ms. Allocated memory is still 79.7MB. Free memory was 46.9MB in the beginning and 46.9MB in the end (delta: 48.3kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 407.22ms. Allocated memory is still 96.5MB. Free memory was 63.7MB in the beginning and 44.5MB in the end (delta: 19.2MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 52.11ms. Allocated memory is still 96.5MB. Free memory was 44.5MB in the beginning and 41.9MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 76.76ms. Allocated memory is still 96.5MB. Free memory was 41.9MB in the beginning and 73.9MB in the end (delta: -32.0MB). Peak memory consumption was 3.8MB. Max. memory is 16.1GB. * RCFGBuilder took 456.45ms. Allocated memory is still 96.5MB. Free memory was 73.9MB in the beginning and 56.7MB in the end (delta: 17.1MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * TraceAbstraction took 9324.10ms. Allocated memory was 96.5MB in the beginning and 146.8MB in the end (delta: 50.3MB). Free memory was 56.1MB in the beginning and 44.5MB in the end (delta: 11.6MB). Peak memory consumption was 80.5MB. Max. memory is 16.1GB. * Witness Printer took 95.47ms. Allocated memory is still 146.8MB. Free memory was 44.5MB in the beginning and 38.2MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 102 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 9.2s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 2.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.2s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1701 SdHoareTripleChecker+Valid, 1.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1666 mSDsluCounter, 3786 SdHoareTripleChecker+Invalid, 1.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2332 mSDsCounter, 584 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1549 IncrementalHoareTripleChecker+Invalid, 2133 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 584 mSolverCounterUnsat, 1454 mSDtfsCounter, 1549 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 428 GetRequests, 330 SyntacticMatches, 2 SemanticMatches, 96 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 139 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=830occurred in iteration=10, InterpolantAutomatonStates: 85, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 12 MinimizatonAttempts, 305 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 47 LocationsWithAnnotation, 1749 PreInvPairs, 1937 NumberOfFragments, 2921 HoareAnnotationTreeSize, 1749 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 47 FomulaSimplificationsInter, 12114 FormulaSimplificationTreeSizeReductionInter, 3.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.1s InterpolantComputationTime, 854 NumberOfCodeBlocks, 854 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 840 ConstructedInterpolants, 0 QuantifiedInterpolants, 1584 SizeOfPredicates, 5 NumberOfNonLiveVariables, 995 ConjunctsInSsa, 12 ConjunctsInUnsatCore, 14 InterpolantComputations, 12 PerfectInterpolantSequences, 148/157 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 632]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 72]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 707]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 688]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && 1 == systemActive) && \result == 0))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && 1 == systemActive) && \result == 0)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 777]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 767]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 869]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical)) - InvariantResult [Line: 821]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 643]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((((((pumpRunning == 0 && 1 <= \result) && \result == 0) && 1 <= tmp) && 1 == systemActive) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel))) && ((((((((pumpRunning == 0 && 1 <= \result) && \result == 0) && 1 <= tmp) && 1 == systemActive) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) - InvariantResult [Line: 591]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && 1 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && 1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 736]: Loop Invariant Derived loop invariant: ((((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical))) && ((((!(\old(methAndRunningLastTime) == 0) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0) && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 960]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 616]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 728]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 946]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 73]: Loop Invariant Derived loop invariant: ((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0)) || ((((((1 <= pumpRunning && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 828]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 988]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 981]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 995]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 842]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 63]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-07-12 06:18:51,070 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE